last executing test programs: 15.810726447s ago: executing program 4 (id=1369): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)}, 0x0) 15.593036469s ago: executing program 4 (id=1371): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x7, 0x0, &(0x7f0000000080)="04000000df0000", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) sendmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r6}) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000340)=""/193, 0xc1}, 0x40010103) r7 = perf_event_open(0x0, 0x0, 0xb, r5, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) 10.553066124s ago: executing program 4 (id=1382): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 10.527552205s ago: executing program 0 (id=1385): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="919116ca5294e781e19ae69c6b2199b2374ccb7d6e", 0x15}], 0x1}, 0xf080) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x9c) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r6}) 10.306357977s ago: executing program 4 (id=1386): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000081005d11", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.852641392s ago: executing program 1 (id=1390): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff, 0x0, 0x0, 0x800000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910209875f37538e486dd6317ce8102033b00fe08000e40000200875a65969ff57b00000000"], 0xfdef) 9.613981345s ago: executing program 1 (id=1391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x8, &(0x7f00000006c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r1}, &(0x7f0000001340), &(0x7f0000001380)='%pI4 \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r3}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x94, 0x1, 0x80}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1a00000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="000000000000000000010000000000000000009f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/27], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000027000b12d25a805bb98222f90324fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x377d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.507939571s ago: executing program 3 (id=1392): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) sendmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r6}) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000340)=""/193, 0xc1}, 0x40010103) r7 = perf_event_open(0x0, 0x0, 0xb, r5, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) 8.179098033s ago: executing program 1 (id=1393): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x80, 0x2, 0x80, 0x4, 0xe, 0x0, 0x8, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xf67, 0x80000001}, 0x100000, 0x2, 0x9, 0x5, 0x800, 0x2, 0x400, 0x0, 0x8, 0x0, 0x9}, r1, 0x2, r0, 0x2) perf_event_open(0x0, 0x0, 0x0, r2, 0x1) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x541b, &(0x7f00000013c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cabe9cb37abb"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="2703025701f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0x44}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf8000000, 0x4}, 0x0, 0x200000, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0xa, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x11, &(0x7f0000000000)=r5, 0x4) 8.150285935s ago: executing program 4 (id=1394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x3001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486"], 0x2c) 8.06631457s ago: executing program 0 (id=1396): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="919116ca5294e781e19ae69c6b2199b2374ccb7d6e", 0x15}], 0x1}, 0xf080) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x9c) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r6}) 8.031607892s ago: executing program 3 (id=1397): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 7.039684085s ago: executing program 0 (id=1399): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002", 0x29}], 0x1}, 0x0) 7.011290227s ago: executing program 3 (id=1400): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d8030000000000", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 6.96839186s ago: executing program 1 (id=1401): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff, 0x0, 0x0, 0x800000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910209875f37538e486dd6317ce8102033b00fe08000e40000200875a65969ff57b00"/48], 0xfdef) 6.797397949s ago: executing program 3 (id=1402): socket$kcm(0xa, 0x6, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deda8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1b2ef4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f53d709959d7bd2f5cc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36fb0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4a7bce853249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8012392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccaca8154b8601213ee2296d2a27798c8ce2a305c0c8d1acf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c04701563816514f868a2b95319abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdff7f0000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977e37df17a321d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2c6aea1d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb89243a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a01040000a35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92de6b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250054f84b0fccd4f810bce02322b489b79aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d4b8123de6516737be55c06d9cdcfb1e20280e14700eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b19128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dceedb2ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b2f53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9f56cd47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6e44b2f414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b1e6860c305d1faca4d6e4680ab6a6d491ecc97a904cc9c643e489d1a5f7d8a359bea93ba2d95bd3341d98d4918118e5f7b6fa6f603274c561f63ee337ad8d0017bbd1e17b5ce71a18c8572810029fe5d0ac2a661d8b346240c46f0223981cd53c067b65b579c144a4c918504888132a19a6a1702afb8646cf8fbcc5a4f5fbc072388f7bd7955138fc4919d78cfc5f2fd7dccf3a20896045698d2b6770773412029db69c099fda38be5f37adc5bd48f7f11b5632bb63fa18718c1a24e0bad8d21f51f6bf3fbd3786a00c4e8f8536f6af28c9b8cd210bc0e82112f9943fc0fa81c08e456983cbdd8d08053c128e122da8b7583cb1"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x18}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x75, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x0, 0x700}, 0x50) close(r2) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x5, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}, 0x10020, 0x100, 0x0, 0x2, 0xffffffff, 0x10000, 0x400, 0x0, 0xfffffffe}, 0x0, 0x5, 0xffffffffffffffff, 0x0) 6.7713489s ago: executing program 0 (id=1403): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) 6.770583911s ago: executing program 1 (id=1404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex, 0x22, 0x0, 0x3, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@cgroup=r4, r0, 0x2f, 0x24, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r3}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x215, 0x3ff, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x6ebd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, r6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0401, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x20000000000, r6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x3b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 6.511775944s ago: executing program 3 (id=1406): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex, 0x22, 0x0, 0x3, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@cgroup=r4, r0, 0x2f, 0x24, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r3}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x215, 0x3ff, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x6ebd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, r6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0401, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x20000000000, r6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x3b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 3.47772903s ago: executing program 2 (id=1407): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="919116ca5294e781e19ae69c6b2199b2374ccb7d6e", 0x15}], 0x1}, 0xf080) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x9c) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf633"], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r6}) 3.465431151s ago: executing program 0 (id=1417): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x7, 0x0, &(0x7f0000000080)="04000000df0000", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) sendmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r6}) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000340)=""/193, 0xc1}, 0x40010103) r7 = perf_event_open(0x0, 0x0, 0xb, r5, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) 2.330181213s ago: executing program 2 (id=1408): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) sendmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r6}) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000340)=""/193, 0xc1}, 0x40010103) r7 = perf_event_open(0x0, 0x0, 0xb, r5, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) 968.517107ms ago: executing program 4 (id=1409): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="919116ca5294e781e19ae69c6b2199b2374ccb7d6e", 0x15}], 0x1}, 0xf080) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x9c) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r6}) 955.176318ms ago: executing program 0 (id=1410): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0x200000, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 954.066158ms ago: executing program 1 (id=1411): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x80, 0x2, 0x80, 0x4, 0xe, 0x0, 0x8, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xf67, 0x80000001}, 0x100000, 0x2, 0x9, 0x5, 0x800, 0x2, 0x400, 0x0, 0x8, 0x0, 0x9}, r1, 0x2, r0, 0x2) perf_event_open(0x0, 0x0, 0x0, r2, 0x1) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x541b, &(0x7f00000013c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cabe9cb37abbe40a00864eab77"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="2703025701f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0x44}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf8000000, 0x4}, 0x0, 0x200000, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0xa, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x11, &(0x7f0000000000)=r5, 0x4) 926.351729ms ago: executing program 2 (id=1412): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d8030000000000", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 886.987581ms ago: executing program 3 (id=1413): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb, 0x0, &(0x7f0000000080)="04000000df000000428b4c", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) sendmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r6}) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000340)=""/193, 0xc1}, 0x40010103) r7 = perf_event_open(0x0, 0x0, 0xb, r5, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) 606.228067ms ago: executing program 2 (id=1414): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff, 0x0, 0x0, 0x800000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910209875f37538e486dd6317ce8102033b00fe08000e40000200875a65969ff57b00"/48], 0xfdef) 249.826916ms ago: executing program 2 (id=1415): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008050) 0s ago: executing program 2 (id=1416): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002", 0x29}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.242278][ T4269] device veth1_macvtap entered promiscuous mode [ 82.252548][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.261784][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.270057][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.278097][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.287045][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.295393][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.304592][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.313743][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.324368][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.334930][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.344240][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.364520][ T4276] device veth0_vlan entered promiscuous mode [ 82.395810][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.406959][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.427672][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.436869][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.437901][ T4282] device veth1_vlan entered promiscuous mode [ 82.453029][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.474727][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.483482][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.493976][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.506908][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.521721][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.536765][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.568413][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.578021][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.590039][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.599194][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.610496][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.620734][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.630223][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.639237][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.658430][ T4279] device veth0_vlan entered promiscuous mode [ 82.676332][ T4276] device veth1_vlan entered promiscuous mode [ 82.689804][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.701590][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.709593][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.718171][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.758016][ T4282] device veth0_macvtap entered promiscuous mode [ 82.809078][ T4279] device veth1_vlan entered promiscuous mode [ 82.834050][ T4282] device veth1_macvtap entered promiscuous mode [ 82.872998][ T4352] Zero length message leads to an empty skb [ 82.888231][ T4276] device veth0_macvtap entered promiscuous mode [ 82.911706][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.931960][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.944421][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.956303][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.971227][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.985039][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.994943][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.015814][ T4276] device veth1_macvtap entered promiscuous mode [ 83.035982][ T4352] netlink: 'syz.1.2': attribute type 13 has an invalid length. [ 83.050048][ T4352] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2'. [ 83.071209][ T4352] syz_tun: refused to change device tx_queue_len [ 83.077901][ T4352] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 83.095807][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.113307][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.127150][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.138559][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.153004][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.166355][ T4354] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2'. [ 83.189257][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.197138][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.204894][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.219598][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.239034][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.248302][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.266843][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.278962][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.289625][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.305701][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.315841][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.332382][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.344538][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.362477][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.382415][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.395760][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.413462][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.426693][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.454188][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.458400][ C1] hrtimer: interrupt took 82439 ns [ 83.495425][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.514514][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.527804][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.547732][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.565463][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.581973][ T4279] device veth0_macvtap entered promiscuous mode [ 83.597003][ T4279] device veth1_macvtap entered promiscuous mode [ 83.611154][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.627337][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.639939][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.651499][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.662278][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.673151][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.685236][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.822525][ T4282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.832851][ T4282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.848720][ T4282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.857504][ T4282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.898263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.907401][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.915877][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.924747][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.943550][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.956484][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.967409][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.978770][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.018927][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 84.025017][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 84.031283][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 84.043089][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.054105][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.065147][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.075910][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.085818][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.096778][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.107725][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 84.113830][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 84.120846][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.131523][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.143247][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.153090][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.168242][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.176496][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.191197][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.204860][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.236892][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.258883][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.274558][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.285364][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.301255][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.314190][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.327348][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.337955][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.351318][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.369406][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.385270][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.421313][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.436765][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.446318][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.455567][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.652539][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.688427][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.740280][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.748186][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.756661][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.795935][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.832327][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.864080][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.894299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.929100][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.936994][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.976319][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.034113][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.055454][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.061234][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.088482][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.109667][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.117331][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.256711][ T4371] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8'. [ 85.722367][ T4375] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.746815][ T952] cfg80211: failed to load regulatory.db [ 88.531261][ T4388] netlink: 'syz.4.5': attribute type 11 has an invalid length. [ 88.676483][ T4388] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5'. [ 90.003616][ T4403] syz.3.12 (4403) used greatest stack depth: 20816 bytes left [ 90.357287][ T4411] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 90.556512][ T4416] netlink: 'syz.4.16': attribute type 16 has an invalid length. [ 90.598179][ T4416] netlink: 156 bytes leftover after parsing attributes in process `syz.4.16'. [ 90.919167][ T4421] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 91.059779][ T4421] team0: Port device wlan1 added [ 91.071719][ T4432] netlink: 'syz.3.20': attribute type 16 has an invalid length. [ 91.091334][ T4432] netlink: 156 bytes leftover after parsing attributes in process `syz.3.20'. [ 91.152709][ T4426] syz.1.18 (4426) used greatest stack depth: 20784 bytes left [ 92.155839][ T4444] netlink: 'syz.2.24': attribute type 16 has an invalid length. [ 92.179278][ T4444] netlink: 156 bytes leftover after parsing attributes in process `syz.2.24'. [ 92.605817][ T4455] netlink: 'syz.0.26': attribute type 16 has an invalid length. [ 92.645714][ T4455] netlink: 156 bytes leftover after parsing attributes in process `syz.0.26'. [ 92.911350][ T46] wlan1: Trigger new scan to find an IBSS to join [ 93.672979][ T4457] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 93.917540][ T4470] netlink: 'syz.0.30': attribute type 16 has an invalid length. [ 93.959581][ T4470] netlink: 156 bytes leftover after parsing attributes in process `syz.0.30'. [ 94.902676][ T4485] netlink: 'syz.0.35': attribute type 16 has an invalid length. [ 94.930637][ T4485] netlink: 156 bytes leftover after parsing attributes in process `syz.0.35'. [ 94.952143][ T4487] netlink: 'syz.2.37': attribute type 13 has an invalid length. [ 94.963772][ T4487] netlink: 152 bytes leftover after parsing attributes in process `syz.2.37'. [ 94.996055][ T4487] syz_tun: refused to change device tx_queue_len [ 95.043128][ T4487] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 95.859811][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 97.574264][ T4509] netlink: 'syz.4.39': attribute type 16 has an invalid length. [ 97.666247][ T4509] netlink: 156 bytes leftover after parsing attributes in process `syz.4.39'. [ 97.870194][ T56] wlan1: Trigger new scan to find an IBSS to join [ 99.038771][ T9] wlan1: Creating new IBSS network, BSSID b2:66:db:c1:09:cb [ 99.089965][ T4532] netlink: 830 bytes leftover after parsing attributes in process `syz.3.45'. [ 99.495926][ T4543] netlink: 'syz.0.50': attribute type 13 has an invalid length. [ 99.504234][ T4543] netlink: 152 bytes leftover after parsing attributes in process `syz.0.50'. [ 99.542908][ T4543] syz_tun: refused to change device tx_queue_len [ 99.580345][ T4543] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 99.735683][ T4552] netlink: 'syz.3.51': attribute type 15 has an invalid length. [ 99.788569][ T4552] netlink: 'syz.3.51': attribute type 5 has an invalid length. [ 99.849411][ T4552] netlink: 144 bytes leftover after parsing attributes in process `syz.3.51'. [ 99.860462][ T32] wlan1: Trigger new scan to find an IBSS to join [ 99.910605][ T4540] syz.2.49 (4540) used greatest stack depth: 20312 bytes left [ 99.924579][ T4546] netlink: 830 bytes leftover after parsing attributes in process `syz.0.50'. [ 100.262345][ T4558] netlink: 'syz.4.54': attribute type 3 has an invalid length. [ 100.291461][ T4558] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.54'. [ 100.626308][ T4569] netlink: 'syz.0.57': attribute type 10 has an invalid length. [ 100.653357][ T4569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'. [ 100.681303][ T4569] device veth0_vlan left promiscuous mode [ 100.696231][ T4569] device veth0_vlan entered promiscuous mode [ 100.794386][ T4569] batman_adv: batadv0: Adding interface: veth0_vlan [ 100.804705][ T46] wlan1: Creating new IBSS network, BSSID 0e:f0:4b:5b:2b:db [ 100.858369][ T4569] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.960084][ T4569] batman_adv: batadv0: Interface activated: veth0_vlan [ 101.048861][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.067676][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.104067][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.129951][ T4579] netlink: 'syz.1.60': attribute type 11 has an invalid length. [ 101.142964][ T4576] netlink: 'syz.3.59': attribute type 10 has an invalid length. [ 101.158202][ T4579] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.60'. [ 101.183049][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.191351][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.236495][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.243898][ T4576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.252324][ T4576] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.259550][ T4576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.301793][ T4576] team0: Port device bridge0 added [ 101.801479][ T4586] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 101.973192][ T4578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.521457][ T4592] netlink: 'syz.3.64': attribute type 13 has an invalid length. [ 102.539183][ T4592] netlink: 152 bytes leftover after parsing attributes in process `syz.3.64'. [ 102.682860][ T4592] syz_tun: refused to change device tx_queue_len [ 102.697853][ T4592] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 102.741488][ T4593] netlink: 830 bytes leftover after parsing attributes in process `syz.3.64'. [ 102.957111][ T4605] netlink: 2 bytes leftover after parsing attributes in process `syz.0.68'. [ 103.032873][ T4605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.086690][ T4608] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 103.107314][ T4605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.155657][ T4608] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 103.185150][ T4605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.217493][ T4605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.250484][ T4608] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 103.270044][ T4605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.311847][ T4608] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 103.328272][ T4605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.367513][ T4608] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 103.383590][ T4605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.434118][ T4608] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 103.454425][ T4605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.475733][ T4608] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 103.519699][ T4605] device batadv_slave_1 entered promiscuous mode [ 103.573200][ T4608] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 103.590121][ T4608] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 104.346124][ T4624] netlink: 177648 bytes leftover after parsing attributes in process `syz.0.70'. [ 110.863844][ T4673] netlink: 26 bytes leftover after parsing attributes in process `syz.3.81'. [ 110.882117][ T4670] netlink: 'syz.2.82': attribute type 13 has an invalid length. [ 110.900593][ T4670] netlink: 152 bytes leftover after parsing attributes in process `syz.2.82'. [ 110.976327][ T4670] syz_tun: refused to change device tx_queue_len [ 111.072849][ T4670] net_ratelimit: 15905 callbacks suppressed [ 111.072887][ T4670] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 111.218779][ T4685] netlink: 830 bytes leftover after parsing attributes in process `syz.2.82'. [ 111.741722][ T4699] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 111.997388][ T4695] netlink: 'syz.2.89': attribute type 16 has an invalid length. [ 112.068802][ T4695] netlink: 156 bytes leftover after parsing attributes in process `syz.2.89'. [ 112.102173][ T4699] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 112.131382][ T4697] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 116.688858][ T4702] netlink: 'syz.3.88': attribute type 29 has an invalid length. [ 116.885369][ T4732] netlink: 'syz.1.94': attribute type 13 has an invalid length. [ 116.901849][ T4732] netlink: 152 bytes leftover after parsing attributes in process `syz.1.94'. [ 116.966424][ T4732] syz_tun: refused to change device tx_queue_len [ 117.024227][ T4732] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 117.129718][ T4746] netlink: 'syz.2.95': attribute type 15 has an invalid length. [ 117.137468][ T4746] netlink: 'syz.2.95': attribute type 5 has an invalid length. [ 117.197813][ T4746] netlink: 144 bytes leftover after parsing attributes in process `syz.2.95'. [ 117.242743][ T4744] netlink: 'syz.0.98': attribute type 3 has an invalid length. [ 117.274487][ T4744] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.98'. [ 117.303320][ T4732] netlink: 830 bytes leftover after parsing attributes in process `syz.1.94'. [ 117.544683][ T4753] netlink: 'syz.2.101': attribute type 10 has an invalid length. [ 117.605999][ T4753] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.613664][ T4753] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.691702][ T4753] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.699441][ T4753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.707714][ T4753] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.714952][ T4753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.762659][ T4755] netlink: 'syz.0.102': attribute type 11 has an invalid length. [ 117.771017][ T4755] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.102'. [ 117.789766][ T4753] team0: Port device bridge0 added [ 118.695482][ T4754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.313879][ T4779] netlink: 'syz.1.107': attribute type 16 has an invalid length. [ 119.355734][ T4779] netlink: 156 bytes leftover after parsing attributes in process `syz.1.107'. [ 119.872945][ T4790] netlink: 'syz.3.124': attribute type 16 has an invalid length. [ 119.920706][ T4790] netlink: 156 bytes leftover after parsing attributes in process `syz.3.124'. [ 120.093047][ T4803] netlink: 'syz.0.111': attribute type 15 has an invalid length. [ 120.128713][ T4803] netlink: 'syz.0.111': attribute type 5 has an invalid length. [ 120.168487][ T4803] netlink: 144 bytes leftover after parsing attributes in process `syz.0.111'. [ 120.191680][ T4802] netlink: 152 bytes leftover after parsing attributes in process `syz.2.115'. [ 120.236691][ T4802] syz_tun: refused to change device tx_queue_len [ 120.253115][ T4802] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 120.400017][ T4802] netlink: 830 bytes leftover after parsing attributes in process `syz.2.115'. [ 120.679956][ T4817] device veth0_vlan left promiscuous mode [ 120.798490][ T4817] device veth0_vlan entered promiscuous mode [ 120.855365][ T4815] netlink: 'syz.4.118': attribute type 11 has an invalid length. [ 120.912543][ T4817] batman_adv: batadv0: Adding interface: veth0_vlan [ 120.939151][ T4817] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.988896][ T4817] batman_adv: batadv0: Interface activated: veth0_vlan [ 121.028898][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.062404][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.081045][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.312492][ T4817] syz.1.117 (4817) used greatest stack depth: 19376 bytes left [ 121.432847][ T4814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.075785][ T4842] __nla_validate_parse: 4 callbacks suppressed [ 122.075817][ T4842] netlink: 2 bytes leftover after parsing attributes in process `syz.2.125'. [ 122.158330][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.231288][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.275594][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.337073][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.392985][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.444585][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.473000][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.495190][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.518186][ T4842] device batadv_slave_1 entered promiscuous mode [ 122.842724][ T4855] validate_nla: 3 callbacks suppressed [ 122.842760][ T4855] netlink: 'syz.3.127': attribute type 13 has an invalid length. [ 122.888726][ T4855] netlink: 152 bytes leftover after parsing attributes in process `syz.3.127'. [ 122.916422][ T4855] syz_tun: refused to change device tx_queue_len [ 122.979799][ T4855] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 123.039166][ T4861] netlink: 'syz.4.129': attribute type 15 has an invalid length. [ 123.046972][ T4861] netlink: 'syz.4.129': attribute type 5 has an invalid length. [ 123.082377][ T4861] netlink: 144 bytes leftover after parsing attributes in process `syz.4.129'. [ 123.166467][ T4855] netlink: 830 bytes leftover after parsing attributes in process `syz.3.127'. [ 123.303426][ T4864] netlink: 'syz.1.131': attribute type 13 has an invalid length. [ 123.346392][ T4864] netlink: 152 bytes leftover after parsing attributes in process `syz.1.131'. [ 123.412854][ T4864] syz_tun: refused to change device tx_queue_len [ 123.487439][ T4864] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 123.625383][ T4867] netlink: 'syz.4.132': attribute type 16 has an invalid length. [ 123.683966][ T4867] netlink: 156 bytes leftover after parsing attributes in process `syz.4.132'. [ 123.757576][ T4864] netlink: 830 bytes leftover after parsing attributes in process `syz.1.131'. [ 123.789629][ T4877] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 123.820124][ T4877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.134'. [ 123.842050][ T4877] device veth0_vlan left promiscuous mode [ 123.866110][ T4877] device veth0_vlan entered promiscuous mode [ 123.965463][ T4877] batman_adv: batadv0: Adding interface: veth0_vlan [ 123.987781][ T4877] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.089097][ T4877] batman_adv: batadv0: Interface activated: veth0_vlan [ 124.139193][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.168500][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.198703][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.525524][ T4905] netlink: 177648 bytes leftover after parsing attributes in process `syz.4.142'. [ 127.835096][ T4909] netlink: 2 bytes leftover after parsing attributes in process `syz.3.143'. [ 127.849195][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.940495][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.029080][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.075691][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.130456][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.175213][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.237224][ T4909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.363116][ T4909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.403614][ T4909] device batadv_slave_1 entered promiscuous mode [ 129.098371][ T4924] netlink: 'syz.1.146': attribute type 16 has an invalid length. [ 129.123781][ T2961] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 129.164542][ T4924] netlink: 156 bytes leftover after parsing attributes in process `syz.1.146'. [ 130.012298][ T4930] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 130.890470][ T2961] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 132.821846][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.828498][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.622928][ T4964] netlink: 26 bytes leftover after parsing attributes in process `syz.4.158'. [ 135.508129][ T4986] netlink: 'syz.1.162': attribute type 16 has an invalid length. [ 135.580431][ T4986] netlink: 156 bytes leftover after parsing attributes in process `syz.1.162'. [ 141.344784][ T5020] netlink: 26 bytes leftover after parsing attributes in process `syz.0.175'. [ 142.878735][ T5024] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 142.910926][ T5027] netlink: 'syz.2.177': attribute type 16 has an invalid length. [ 142.947877][ T5027] netlink: 156 bytes leftover after parsing attributes in process `syz.2.177'. [ 143.437072][ T5045] netlink: 830 bytes leftover after parsing attributes in process `syz.4.178'. [ 143.996805][ T5053] netlink: 'syz.4.185': attribute type 13 has an invalid length. [ 144.043083][ T5053] netlink: 152 bytes leftover after parsing attributes in process `syz.4.185'. [ 144.107115][ T5053] syz_tun: refused to change device tx_queue_len [ 144.155444][ T5053] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 144.631498][ T5054] netlink: 830 bytes leftover after parsing attributes in process `syz.4.185'. [ 148.573111][ T5069] netlink: 'syz.2.192': attribute type 16 has an invalid length. [ 148.672204][ T5069] netlink: 156 bytes leftover after parsing attributes in process `syz.2.192'. [ 151.743316][ T5089] netlink: 'syz.3.196': attribute type 16 has an invalid length. [ 151.765382][ T5089] netlink: 156 bytes leftover after parsing attributes in process `syz.3.196'. [ 155.076607][ T5100] netlink: 'syz.2.199': attribute type 16 has an invalid length. [ 155.084858][ T5100] netlink: 156 bytes leftover after parsing attributes in process `syz.2.199'. [ 156.292232][ T5131] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 157.221180][ T5161] netlink: 'syz.4.223': attribute type 16 has an invalid length. [ 157.261360][ T5161] netlink: 156 bytes leftover after parsing attributes in process `syz.4.223'. [ 158.937692][ T11] wlan1: Trigger new scan to find an IBSS to join [ 160.013284][ T5176] netlink: 'syz.3.229': attribute type 16 has an invalid length. [ 160.030304][ T5176] netlink: 156 bytes leftover after parsing attributes in process `syz.3.229'. [ 160.433884][ T5180] netlink: 'syz.2.232': attribute type 16 has an invalid length. [ 160.464943][ T5180] netlink: 156 bytes leftover after parsing attributes in process `syz.2.232'. [ 161.347571][ T46] tipc: Subscription rejected, illegal request [ 162.711458][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 162.892543][ T46] wlan1: Trigger new scan to find an IBSS to join [ 162.900652][ T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 163.854181][ T4483] wlan1: Creating new IBSS network, BSSID 4e:0c:17:08:b1:2a [ 163.896661][ T5206] netlink: 'syz.0.239': attribute type 13 has an invalid length. [ 163.980549][ T5206] netlink: 152 bytes leftover after parsing attributes in process `syz.0.239'. [ 164.014283][ T5206] syz_tun: refused to change device tx_queue_len [ 164.054446][ T5206] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 164.142796][ T5208] netlink: 'syz.2.240': attribute type 13 has an invalid length. [ 164.222427][ T5208] netlink: 152 bytes leftover after parsing attributes in process `syz.2.240'. [ 164.375978][ T5208] syz_tun: refused to change device tx_queue_len [ 164.434593][ T5208] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 164.478694][ T5217] netlink: 830 bytes leftover after parsing attributes in process `syz.2.240'. [ 164.529345][ T5206] netlink: 830 bytes leftover after parsing attributes in process `syz.0.239'. [ 164.574306][ T5216] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 165.011403][ T5231] netlink: 'syz.3.247': attribute type 13 has an invalid length. [ 165.047234][ T5231] netlink: 152 bytes leftover after parsing attributes in process `syz.3.247'. [ 165.200949][ T5231] syz_tun: refused to change device tx_queue_len [ 165.328963][ T5231] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 165.371557][ T5226] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 165.391533][ T5234] netlink: 830 bytes leftover after parsing attributes in process `syz.3.247'. [ 165.743471][ T5248] netlink: 'syz.0.250': attribute type 16 has an invalid length. [ 165.784044][ T5248] netlink: 156 bytes leftover after parsing attributes in process `syz.0.250'. [ 166.107797][ T5262] netlink: 'syz.4.254': attribute type 16 has an invalid length. [ 166.135591][ T5262] netlink: 156 bytes leftover after parsing attributes in process `syz.4.254'. [ 166.825431][ T32] wlan1: Trigger new scan to find an IBSS to join [ 167.858880][ T32] wlan1: Trigger new scan to find an IBSS to join [ 168.086103][ T5253] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.128186][ T5254] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.636168][ T5276] netlink: 'syz.1.258': attribute type 13 has an invalid length. [ 168.771724][ T5276] netlink: 152 bytes leftover after parsing attributes in process `syz.1.258'. [ 169.024281][ T5276] syz_tun: refused to change device tx_queue_len [ 169.060059][ T5276] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 169.165104][ T5273] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 169.186399][ T5281] netlink: 830 bytes leftover after parsing attributes in process `syz.1.258'. [ 169.425685][ T5289] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 169.907091][ T5307] netlink: 'syz.0.266': attribute type 16 has an invalid length. [ 169.940669][ T5307] netlink: 156 bytes leftover after parsing attributes in process `syz.0.266'. [ 170.494024][ T5314] netlink: 'syz.4.270': attribute type 13 has an invalid length. [ 170.528834][ T5314] netlink: 152 bytes leftover after parsing attributes in process `syz.4.270'. [ 170.565850][ T5314] syz_tun: refused to change device tx_queue_len [ 170.618834][ T5314] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 170.784648][ T5310] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.818890][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 170.908810][ T5314] netlink: 830 bytes leftover after parsing attributes in process `syz.4.270'. [ 171.699456][ T5344] netlink: 'syz.0.278': attribute type 13 has an invalid length. [ 171.718830][ T5344] netlink: 152 bytes leftover after parsing attributes in process `syz.0.278'. [ 171.770498][ T5344] syz_tun: refused to change device tx_queue_len [ 171.813536][ T11] wlan1: Creating new IBSS network, BSSID 5e:cc:b3:c2:e2:b6 [ 171.864442][ T11] wlan1: Trigger new scan to find an IBSS to join [ 171.871099][ T46] wlan1: Trigger new scan to find an IBSS to join [ 171.890841][ T5344] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 172.041758][ T5347] netlink: 830 bytes leftover after parsing attributes in process `syz.0.278'. [ 172.152527][ T5342] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 172.437490][ T5355] netlink: 'syz.3.281': attribute type 16 has an invalid length. [ 172.526476][ T5355] netlink: 156 bytes leftover after parsing attributes in process `syz.3.281'. [ 172.918003][ T46] wlan1: Trigger new scan to find an IBSS to join [ 173.304239][ T5356] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 174.901226][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 174.907932][ T32] wlan1: Trigger new scan to find an IBSS to join [ 175.415569][ T5370] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 175.445261][ T5380] netlink: 'syz.1.287': attribute type 13 has an invalid length. [ 175.453994][ T5380] netlink: 152 bytes leftover after parsing attributes in process `syz.1.287'. [ 175.464733][ T5380] syz_tun: refused to change device tx_queue_len [ 175.473040][ T5380] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 175.489537][ T5381] netlink: 830 bytes leftover after parsing attributes in process `syz.1.287'. [ 176.288893][ T5400] netlink: 'syz.3.293': attribute type 13 has an invalid length. [ 176.323230][ T5400] netlink: 152 bytes leftover after parsing attributes in process `syz.3.293'. [ 176.463941][ T5400] syz_tun: refused to change device tx_queue_len [ 176.698457][ T5400] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 176.985757][ T5412] netlink: 'syz.2.296': attribute type 16 has an invalid length. [ 176.999631][ T5412] netlink: 156 bytes leftover after parsing attributes in process `syz.2.296'. [ 177.083260][ T5413] netlink: 830 bytes leftover after parsing attributes in process `syz.3.293'. [ 177.561813][ T5423] netlink: 'syz.4.298': attribute type 16 has an invalid length. [ 177.639913][ T5423] netlink: 156 bytes leftover after parsing attributes in process `syz.4.298'. [ 177.859515][ T32] wlan1: Creating new IBSS network, BSSID e6:c0:ef:a9:16:fc [ 177.865083][ T9] wlan1: Trigger new scan to find an IBSS to join [ 177.874144][ T46] wlan1: Trigger new scan to find an IBSS to join [ 177.880793][ T11] wlan1: Creating new IBSS network, BSSID 32:7e:a9:0b:83:94 [ 177.903218][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.403022][ T5430] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 178.762753][ T5447] netlink: 'syz.2.306': attribute type 13 has an invalid length. [ 178.816078][ T5447] netlink: 152 bytes leftover after parsing attributes in process `syz.2.306'. [ 179.007608][ T5447] syz_tun: refused to change device tx_queue_len [ 179.096214][ T5447] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 179.258714][ T5453] netlink: 830 bytes leftover after parsing attributes in process `syz.2.306'. [ 180.274480][ T5457] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.252305][ T5476] netlink: 'syz.4.311': attribute type 16 has an invalid length. [ 181.270192][ T5476] netlink: 156 bytes leftover after parsing attributes in process `syz.4.311'. [ 182.065376][ T5487] netlink: 'syz.3.315': attribute type 16 has an invalid length. [ 182.360852][ T5487] netlink: 156 bytes leftover after parsing attributes in process `syz.3.315'. [ 182.819173][ T32] wlan1: Trigger new scan to find an IBSS to join [ 182.898824][ T9] wlan1: Trigger new scan to find an IBSS to join [ 183.027073][ T5500] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.284940][ T5502] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.417398][ T5511] netlink: 'syz.4.323': attribute type 13 has an invalid length. [ 183.459206][ T5511] netlink: 152 bytes leftover after parsing attributes in process `syz.4.323'. [ 183.519385][ T5511] syz_tun: refused to change device tx_queue_len [ 183.578146][ T5511] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 183.860608][ T5524] netlink: 'syz.3.328': attribute type 16 has an invalid length. [ 183.893906][ T5524] netlink: 156 bytes leftover after parsing attributes in process `syz.3.328'. [ 183.925006][ T5511] netlink: 830 bytes leftover after parsing attributes in process `syz.4.323'. [ 184.401567][ T5533] netlink: 'syz.3.331': attribute type 16 has an invalid length. [ 184.470652][ T5533] netlink: 156 bytes leftover after parsing attributes in process `syz.3.331'. [ 185.858838][ T11] wlan1: Trigger new scan to find an IBSS to join [ 185.865531][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 185.946231][ T5529] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 186.565465][ T5542] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.093787][ T5548] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.347924][ T5565] netlink: 'syz.1.339': attribute type 13 has an invalid length. [ 187.373059][ T5565] netlink: 152 bytes leftover after parsing attributes in process `syz.1.339'. [ 187.555244][ T5565] syz_tun: refused to change device tx_queue_len [ 187.663048][ T5565] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 187.758732][ T5569] netlink: 830 bytes leftover after parsing attributes in process `syz.1.339'. [ 188.079639][ T5580] netlink: 'syz.4.345': attribute type 13 has an invalid length. [ 188.087665][ T5580] netlink: 152 bytes leftover after parsing attributes in process `syz.4.345'. [ 188.262584][ T5580] syz_tun: refused to change device tx_queue_len [ 188.364773][ T5580] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 189.101467][ T5584] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.142256][ T5580] netlink: 830 bytes leftover after parsing attributes in process `syz.4.345'. [ 189.858809][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 189.865423][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 190.071881][ T5597] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 190.169776][ T5611] netlink: 'syz.0.356': attribute type 13 has an invalid length. [ 190.239423][ T5611] netlink: 152 bytes leftover after parsing attributes in process `syz.0.356'. [ 190.421717][ T5611] syz_tun: refused to change device tx_queue_len [ 190.460211][ T5611] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 191.009907][ T5606] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.022398][ T5612] netlink: 830 bytes leftover after parsing attributes in process `syz.0.356'. [ 191.060561][ T5609] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.870230][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 191.912783][ T5639] netlink: 'syz.1.362': attribute type 13 has an invalid length. [ 191.954598][ T5639] netlink: 152 bytes leftover after parsing attributes in process `syz.1.362'. [ 192.023224][ T5639] syz_tun: refused to change device tx_queue_len [ 192.079082][ T5639] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 192.169232][ T5641] netlink: 'syz.2.364': attribute type 16 has an invalid length. [ 192.177489][ T5641] netlink: 156 bytes leftover after parsing attributes in process `syz.2.364'. [ 192.289427][ T5639] netlink: 830 bytes leftover after parsing attributes in process `syz.1.362'. [ 192.734877][ T5661] netlink: 'syz.1.369': attribute type 13 has an invalid length. [ 192.806915][ T5661] netlink: 152 bytes leftover after parsing attributes in process `syz.1.369'. [ 192.888358][ T5661] syz_tun: refused to change device tx_queue_len [ 192.951228][ T5661] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 193.567258][ T5659] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 193.616601][ T5661] netlink: 830 bytes leftover after parsing attributes in process `syz.1.369'. [ 193.868714][ T11] wlan1: Trigger new scan to find an IBSS to join [ 193.875362][ T11] wlan1: Trigger new scan to find an IBSS to join [ 194.331446][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338959][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.536407][ T5688] netlink: 'syz.2.378': attribute type 16 has an invalid length. [ 194.576395][ T5688] netlink: 156 bytes leftover after parsing attributes in process `syz.2.378'. [ 194.899776][ T46] wlan1: Trigger new scan to find an IBSS to join [ 195.469721][ T5697] netlink: 'syz.3.382': attribute type 16 has an invalid length. [ 195.477792][ T5697] netlink: 156 bytes leftover after parsing attributes in process `syz.3.382'. [ 195.534633][ T5691] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 195.879229][ T46] wlan1: Trigger new scan to find an IBSS to join [ 195.885849][ T46] wlan1: Trigger new scan to find an IBSS to join [ 195.886825][ T5706] netlink: 'syz.0.384': attribute type 13 has an invalid length. [ 195.958181][ T5706] netlink: 152 bytes leftover after parsing attributes in process `syz.0.384'. [ 195.977040][ T5706] syz_tun: refused to change device tx_queue_len [ 195.987377][ T5706] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 196.180353][ T5706] netlink: 830 bytes leftover after parsing attributes in process `syz.0.384'. [ 196.938868][ T5722] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 198.131622][ T5726] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 198.820112][ T11] wlan1: Trigger new scan to find an IBSS to join [ 198.826736][ T11] wlan1: Trigger new scan to find an IBSS to join [ 198.902816][ T46] wlan1: Trigger new scan to find an IBSS to join [ 199.060948][ T5758] netlink: 'syz.1.400': attribute type 16 has an invalid length. [ 199.130315][ T5758] netlink: 156 bytes leftover after parsing attributes in process `syz.1.400'. [ 200.693743][ T2961] wlan1: Creating new IBSS network, BSSID aa:3d:2b:21:8e:8c [ 200.703769][ T9] wlan1: Creating new IBSS network, BSSID 1a:d6:c0:1d:1b:ea [ 200.819740][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 200.819740][ T9] wlan1: Trigger new scan to find an IBSS to join [ 201.460737][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 201.466884][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 201.473188][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 201.479436][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 201.485533][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 201.580825][ T32] tipc: Subscription rejected, illegal request [ 202.656344][ T5787] netlink: 'syz.2.408': attribute type 16 has an invalid length. [ 202.702175][ T5787] netlink: 156 bytes leftover after parsing attributes in process `syz.2.408'. [ 202.819503][ T9] wlan1: Trigger new scan to find an IBSS to join [ 204.310766][ T9] wlan1: Creating new IBSS network, BSSID 02:16:46:82:09:e2 [ 204.319979][ T56] wlan1: Creating new IBSS network, BSSID 36:94:9f:17:a6:84 [ 206.866621][ T9] wlan1: Trigger new scan to find an IBSS to join [ 208.823186][ T32] wlan1: Creating new IBSS network, BSSID 5a:cd:5a:78:d7:40 [ 209.046066][ T5815] netlink: 'syz.2.416': attribute type 16 has an invalid length. [ 209.100331][ T5815] netlink: 156 bytes leftover after parsing attributes in process `syz.2.416'. [ 215.351788][ T5864] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 217.875594][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 220.723414][ T5911] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 220.830490][ T32] wlan1: Trigger new scan to find an IBSS to join [ 222.899301][ T32] wlan1: Trigger new scan to find an IBSS to join [ 225.548792][ T56] wlan1: Creating new IBSS network, BSSID f6:01:be:04:8a:d0 [ 225.557347][ T5921] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 226.185477][ T5951] netlink: 'syz.0.453': attribute type 13 has an invalid length. [ 226.339500][ T5951] netlink: 152 bytes leftover after parsing attributes in process `syz.0.453'. [ 226.433900][ T5951] syz_tun: refused to change device tx_queue_len [ 226.541221][ T5951] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 227.614954][ T5941] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 227.678793][ T5954] netlink: 830 bytes leftover after parsing attributes in process `syz.0.453'. [ 227.858971][ T9] wlan1: Trigger new scan to find an IBSS to join [ 228.245110][ T5964] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 228.476265][ T5968] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 228.895241][ T32] wlan1: Creating new IBSS network, BSSID 02:f1:de:3b:15:a7 [ 230.818858][ T9] wlan1: Trigger new scan to find an IBSS to join [ 230.825502][ T9] wlan1: Trigger new scan to find an IBSS to join [ 231.900328][ T5993] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.160973][ T5997] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 234.085058][ T6004] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 234.374204][ T6022] netlink: 'syz.2.472': attribute type 13 has an invalid length. [ 234.430386][ T6022] netlink: 152 bytes leftover after parsing attributes in process `syz.2.472'. [ 234.513172][ T6022] syz_tun: refused to change device tx_queue_len [ 234.569268][ T6022] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 234.928080][ T46] wlan1: Trigger new scan to find an IBSS to join [ 235.184248][ T6020] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 235.214774][ T6022] netlink: 830 bytes leftover after parsing attributes in process `syz.2.472'. [ 235.479316][ T6038] netlink: 'syz.3.477': attribute type 16 has an invalid length. [ 235.487781][ T6038] netlink: 156 bytes leftover after parsing attributes in process `syz.3.477'. [ 235.504786][ T6034] netlink: 'syz.4.488': attribute type 16 has an invalid length. [ 235.547828][ T6034] netlink: 156 bytes leftover after parsing attributes in process `syz.4.488'. [ 235.869067][ T46] wlan1: Trigger new scan to find an IBSS to join [ 235.875676][ T46] wlan1: Trigger new scan to find an IBSS to join [ 236.821011][ T46] wlan1: Trigger new scan to find an IBSS to join [ 237.859298][ T9] wlan1: Trigger new scan to find an IBSS to join [ 238.908607][ T46] wlan1: Creating new IBSS network, BSSID a2:bb:e3:2a:95:cb [ 238.914296][ T32] wlan1: Creating new IBSS network, BSSID 16:8c:be:d0:29:a3 [ 238.921200][ T6056] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 239.277537][ T6061] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 239.701186][ T6065] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 239.783670][ T6075] netlink: 'syz.2.492': attribute type 13 has an invalid length. [ 239.843574][ T6075] netlink: 152 bytes leftover after parsing attributes in process `syz.2.492'. [ 240.106634][ T6075] syz_tun: refused to change device tx_queue_len [ 240.201539][ T6075] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 241.316985][ T6078] netlink: 830 bytes leftover after parsing attributes in process `syz.2.492'. [ 241.368133][ T6089] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 241.858837][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 241.865928][ T9] wlan1: Trigger new scan to find an IBSS to join [ 242.818900][ T46] wlan1: Trigger new scan to find an IBSS to join [ 243.432720][ T6122] netlink: 'syz.0.503': attribute type 16 has an invalid length. [ 243.480112][ T6122] netlink: 156 bytes leftover after parsing attributes in process `syz.0.503'. [ 243.859298][ T32] wlan1: Trigger new scan to find an IBSS to join [ 244.901806][ T9] wlan1: Trigger new scan to find an IBSS to join [ 244.908578][ T32] wlan1: Trigger new scan to find an IBSS to join [ 246.175993][ T6130] netlink: 'syz.2.506': attribute type 16 has an invalid length. [ 246.260871][ T6130] netlink: 156 bytes leftover after parsing attributes in process `syz.2.506'. [ 247.859379][ T32] wlan1: Trigger new scan to find an IBSS to join [ 247.866171][ T4483] wlan1: Creating new IBSS network, BSSID 22:05:10:b6:c9:d8 [ 247.866245][ T56] wlan1: Trigger new scan to find an IBSS to join [ 248.531790][ T6144] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 248.912003][ T46] wlan1: Creating new IBSS network, BSSID 82:a9:3f:51:ea:5c [ 248.925028][ T56] wlan1: Creating new IBSS network, BSSID 12:fb:b3:91:22:fe [ 248.932990][ T6161] netlink: 'syz.3.518': attribute type 16 has an invalid length. [ 248.989268][ T6161] netlink: 156 bytes leftover after parsing attributes in process `syz.3.518'. [ 249.032174][ T6160] netlink: 'syz.0.517': attribute type 16 has an invalid length. [ 249.088954][ T6160] netlink: 156 bytes leftover after parsing attributes in process `syz.0.517'. [ 249.295979][ T6157] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 249.398044][ T6174] netlink: 'syz.3.520': attribute type 16 has an invalid length. [ 249.425255][ T6174] netlink: 156 bytes leftover after parsing attributes in process `syz.3.520'. [ 249.466403][ T6176] netlink: 'syz.0.521': attribute type 13 has an invalid length. [ 249.482540][ T6176] netlink: 152 bytes leftover after parsing attributes in process `syz.0.521'. [ 249.607119][ T6176] syz_tun: refused to change device tx_queue_len [ 249.629399][ T6176] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 249.794679][ T6183] netlink: 'syz.2.522': attribute type 16 has an invalid length. [ 249.840346][ T6183] netlink: 156 bytes leftover after parsing attributes in process `syz.2.522'. [ 249.968925][ T6176] netlink: 830 bytes leftover after parsing attributes in process `syz.0.521'. [ 250.831251][ T46] wlan1: Trigger new scan to find an IBSS to join [ 251.885007][ T32] wlan1: Trigger new scan to find an IBSS to join [ 253.617853][ T6205] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 253.911426][ T6213] netlink: 'syz.0.532': attribute type 16 has an invalid length. [ 253.958954][ T6213] netlink: 156 bytes leftover after parsing attributes in process `syz.0.532'. [ 255.703529][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.709966][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.858964][ T56] wlan1: Trigger new scan to find an IBSS to join [ 255.865616][ T32] wlan1: Trigger new scan to find an IBSS to join [ 255.872205][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 256.846504][ T2961] wlan1: Creating new IBSS network, BSSID 4a:6b:da:c0:a6:d8 [ 256.854271][ T56] wlan1: Creating new IBSS network, BSSID c6:4b:96:96:55:d2 [ 257.374243][ T6233] netlink: 'syz.2.537': attribute type 16 has an invalid length. [ 257.411200][ T6233] netlink: 156 bytes leftover after parsing attributes in process `syz.2.537'. [ 257.483225][ T6234] netlink: 'syz.3.538': attribute type 16 has an invalid length. [ 257.529962][ T6234] netlink: 156 bytes leftover after parsing attributes in process `syz.3.538'. [ 258.899263][ T9] wlan1: Trigger new scan to find an IBSS to join [ 261.121120][ T6258] tap0: tun_chr_ioctl cmd 2147767517 [ 261.165016][ T6260] netlink: 'syz.2.549': attribute type 16 has an invalid length. [ 261.222288][ T6260] netlink: 156 bytes leftover after parsing attributes in process `syz.2.549'. [ 261.486956][ T6258] netlink: 'syz.3.547': attribute type 1 has an invalid length. [ 261.593445][ T6258] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.547'. [ 262.754051][ T6288] netlink: 'syz.2.557': attribute type 16 has an invalid length. [ 262.776273][ T6288] netlink: 156 bytes leftover after parsing attributes in process `syz.2.557'. [ 262.903163][ T32] wlan1: Trigger new scan to find an IBSS to join [ 265.549766][ T46] wlan1: Creating new IBSS network, BSSID 9e:98:40:7c:65:41 [ 267.927760][ T6306] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 270.935694][ T6344] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 271.858806][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 274.330965][ T6384] netlink: 'syz.4.590': attribute type 15 has an invalid length. [ 274.364778][ T6384] netlink: 'syz.4.590': attribute type 5 has an invalid length. [ 274.372598][ T6384] netlink: 144 bytes leftover after parsing attributes in process `syz.4.590'. [ 274.384548][ T6385] netlink: 'syz.2.592': attribute type 13 has an invalid length. [ 274.398849][ T6385] netlink: 152 bytes leftover after parsing attributes in process `syz.2.592'. [ 274.457550][ T6385] syz_tun: refused to change device tx_queue_len [ 274.466460][ T6385] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 274.525855][ T6383] netlink: 5579 bytes leftover after parsing attributes in process `syz.1.591'. [ 274.590435][ T6385] netlink: 830 bytes leftover after parsing attributes in process `syz.2.592'. [ 274.819427][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 274.819527][ T5792] wlan1: Trigger new scan to find an IBSS to join [ 274.978115][ T6400] netlink: 'syz.1.606': attribute type 13 has an invalid length. [ 275.047048][ T6400] netlink: 152 bytes leftover after parsing attributes in process `syz.1.606'. [ 275.126423][ T6400] syz_tun: refused to change device tx_queue_len [ 275.179113][ T6400] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 275.286595][ T6396] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 275.495245][ T6400] netlink: 830 bytes leftover after parsing attributes in process `syz.1.606'. [ 275.815892][ T2961] wlan1: Creating new IBSS network, BSSID 2a:45:f1:91:dc:29 [ 277.296684][ T6444] FAULT_INJECTION: forcing a failure. [ 277.296684][ T6444] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 277.310102][ T6444] CPU: 1 PID: 6444 Comm: syz.4.610 Not tainted syzkaller #0 [ 277.317442][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.327552][ T6444] Call Trace: [ 277.330885][ T6444] [ 277.333863][ T6444] dump_stack_lvl+0x188/0x24e [ 277.338612][ T6444] ? show_regs_print_info+0x12/0x12 [ 277.343877][ T6444] ? load_image+0x400/0x400 [ 277.348470][ T6444] ? __lock_acquire+0x7d10/0x7d10 [ 277.353562][ T6444] should_fail_ex+0x399/0x4d0 [ 277.358292][ T6444] _copy_from_user+0x2c/0x170 [ 277.363024][ T6444] __copy_msghdr+0x3b7/0x580 [ 277.367657][ T6444] ___sys_sendmsg+0x210/0x360 [ 277.372381][ T6444] ? __sys_sendmsg+0x290/0x290 [ 277.377219][ T6444] ? __lock_acquire+0x7d10/0x7d10 [ 277.382314][ T6444] __se_sys_sendmsg+0x1bb/0x2a0 [ 277.387207][ T6444] ? __x64_sys_sendmsg+0x80/0x80 [ 277.392198][ T6444] ? lockdep_hardirqs_on+0x94/0x140 [ 277.397444][ T6444] do_syscall_64+0x4c/0xa0 [ 277.401901][ T6444] ? clear_bhb_loop+0x60/0xb0 [ 277.406606][ T6444] ? clear_bhb_loop+0x60/0xb0 [ 277.411340][ T6444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.417278][ T6444] RIP: 0033:0x7fcf0db9cdd9 [ 277.421730][ T6444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.441392][ T6444] RSP: 002b:00007fcf0e97b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.449860][ T6444] RAX: ffffffffffffffda RBX: 00007fcf0de15fa0 RCX: 00007fcf0db9cdd9 [ 277.457853][ T6444] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000003 [ 277.465844][ T6444] RBP: 00007fcf0e97b090 R08: 0000000000000000 R09: 0000000000000000 [ 277.473842][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.481843][ T6444] R13: 00007fcf0de16038 R14: 00007fcf0de15fa0 R15: 00007ffd9d7140e8 [ 277.489853][ T6444] [ 277.860039][ T9] wlan1: Trigger new scan to find an IBSS to join [ 278.936288][ T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 279.739354][ T6448] netlink: 'syz.2.612': attribute type 13 has an invalid length. [ 279.758834][ T6448] netlink: 152 bytes leftover after parsing attributes in process `syz.2.612'. [ 279.778810][ T6448] syz_tun: refused to change device tx_queue_len [ 279.785407][ T6448] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 279.823104][ T6449] netlink: 830 bytes leftover after parsing attributes in process `syz.2.612'. [ 280.175148][ T6461] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 282.819761][ T9] wlan1: Trigger new scan to find an IBSS to join [ 282.837106][ T5792] wlan1: Trigger new scan to find an IBSS to join [ 283.513521][ T6476] netlink: 'syz.3.621': attribute type 16 has an invalid length. [ 283.579810][ T6476] netlink: 156 bytes leftover after parsing attributes in process `syz.3.621'. [ 283.814958][ T56] wlan1: Creating new IBSS network, BSSID 0e:86:58:a8:f2:25 [ 284.174014][ T6493] netlink: 'syz.1.626': attribute type 16 has an invalid length. [ 284.189011][ T6493] netlink: 156 bytes leftover after parsing attributes in process `syz.1.626'. [ 284.296538][ T6482] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 285.860023][ T46] wlan1: Trigger new scan to find an IBSS to join [ 286.145903][ T6495] netlink: 'syz.4.627': attribute type 13 has an invalid length. [ 286.153844][ T6495] netlink: 152 bytes leftover after parsing attributes in process `syz.4.627'. [ 286.164049][ T6495] syz_tun: refused to change device tx_queue_len [ 286.177944][ T6495] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 286.201362][ T6500] netlink: 830 bytes leftover after parsing attributes in process `syz.4.627'. [ 286.819559][ T5792] wlan1: Trigger new scan to find an IBSS to join [ 286.922087][ T4328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 287.243725][ T6529] netlink: 'syz.1.638': attribute type 16 has an invalid length. [ 287.282395][ T6529] netlink: 156 bytes leftover after parsing attributes in process `syz.1.638'. [ 289.621169][ T5792] wlan1: Creating new IBSS network, BSSID 96:a8:39:c7:ac:a6 [ 291.863602][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 292.686665][ T6545] netlink: 'syz.4.644': attribute type 13 has an invalid length. [ 292.697596][ T6545] netlink: 152 bytes leftover after parsing attributes in process `syz.4.644'. [ 292.708772][ T6545] syz_tun: refused to change device tx_queue_len [ 292.715355][ T6545] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 292.732786][ T6548] netlink: 'syz.3.645': attribute type 16 has an invalid length. [ 292.745985][ T6548] netlink: 156 bytes leftover after parsing attributes in process `syz.3.645'. [ 292.757041][ T56] wlan1: Creating new IBSS network, BSSID ca:c7:02:de:78:85 [ 292.757723][ T6547] netlink: 830 bytes leftover after parsing attributes in process `syz.4.644'. [ 292.790393][ T6563] netlink: 'syz.0.650': attribute type 16 has an invalid length. [ 292.813323][ T6563] netlink: 156 bytes leftover after parsing attributes in process `syz.0.650'. [ 293.003866][ T6569] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 293.048470][ T6574] netlink: 'syz.1.654': attribute type 16 has an invalid length. [ 293.128308][ T6574] netlink: 156 bytes leftover after parsing attributes in process `syz.1.654'. [ 294.453105][ T6575] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 294.471219][ T6593] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 294.756860][ T6602] netlink: 'syz.0.662': attribute type 13 has an invalid length. [ 294.773672][ T6602] netlink: 152 bytes leftover after parsing attributes in process `syz.0.662'. [ 294.790792][ T6602] syz_tun: refused to change device tx_queue_len [ 294.810893][ T6602] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 294.911922][ T6603] netlink: 'syz.4.661': attribute type 10 has an invalid length. [ 294.951436][ T6603] device hsr0 entered promiscuous mode [ 295.008372][ T6603] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 295.031599][ T6602] netlink: 830 bytes leftover after parsing attributes in process `syz.0.662'. [ 296.828888][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 296.901855][ T9] wlan1: Trigger new scan to find an IBSS to join [ 296.908409][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 297.798684][ T6617] netlink: 'syz.0.666': attribute type 16 has an invalid length. [ 297.806687][ T6617] netlink: 156 bytes leftover after parsing attributes in process `syz.0.666'. [ 297.818786][ T6629] netlink: 'syz.2.670': attribute type 16 has an invalid length. [ 297.826570][ T6629] netlink: 156 bytes leftover after parsing attributes in process `syz.2.670'. [ 297.888834][ T6630] netlink: 'syz.1.669': attribute type 16 has an invalid length. [ 297.896630][ T6630] netlink: 156 bytes leftover after parsing attributes in process `syz.1.669'. [ 299.185641][ T6640] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.197814][ T6652] netlink: 'syz.3.676': attribute type 13 has an invalid length. [ 299.229824][ T6652] netlink: 152 bytes leftover after parsing attributes in process `syz.3.676'. [ 299.255057][ T6652] syz_tun: refused to change device tx_queue_len [ 299.299347][ T6652] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 299.384817][ T6653] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.412114][ T6655] netlink: 830 bytes leftover after parsing attributes in process `syz.3.676'. [ 299.447034][ T6659] netlink: 'syz.0.678': attribute type 16 has an invalid length. [ 299.483469][ T6659] netlink: 156 bytes leftover after parsing attributes in process `syz.0.678'. [ 299.866571][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 299.866794][ T46] wlan1: Trigger new scan to find an IBSS to join [ 300.318466][ T6680] netlink: 'syz.2.685': attribute type 16 has an invalid length. [ 300.386116][ T6680] netlink: 156 bytes leftover after parsing attributes in process `syz.2.685'. [ 300.845198][ T2961] wlan1: Creating new IBSS network, BSSID a2:08:89:5a:5f:1a [ 301.861013][ T9] wlan1: Trigger new scan to find an IBSS to join [ 302.355993][ T9] wlan1: Trigger new scan to find an IBSS to join [ 303.347664][ T32] wlan1: Creating new IBSS network, BSSID 3e:3b:32:8a:ee:a9 [ 305.288966][ T6690] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 305.298168][ T6697] netlink: 'syz.1.689': attribute type 16 has an invalid length. [ 305.309198][ T6697] netlink: 156 bytes leftover after parsing attributes in process `syz.1.689'. [ 305.325217][ T6708] netlink: 'syz.3.692': attribute type 13 has an invalid length. [ 305.334245][ T6708] netlink: 152 bytes leftover after parsing attributes in process `syz.3.692'. [ 305.353676][ T6708] syz_tun: refused to change device tx_queue_len [ 305.363857][ T6708] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 305.386052][ T6709] netlink: 830 bytes leftover after parsing attributes in process `syz.3.692'. [ 305.777748][ T6728] netlink: 'syz.3.698': attribute type 16 has an invalid length. [ 305.841097][ T6728] netlink: 156 bytes leftover after parsing attributes in process `syz.3.698'. [ 305.858734][ T9] wlan1: Trigger new scan to find an IBSS to join [ 305.974260][ T6735] netlink: 'syz.1.700': attribute type 10 has an invalid length. [ 305.984891][ T6735] device hsr0 entered promiscuous mode [ 306.003857][ T6735] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 306.031452][ T6723] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 307.868724][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 308.393507][ T6745] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 309.861802][ T32] wlan1: Trigger new scan to find an IBSS to join [ 310.829326][ T32] wlan1: Trigger new scan to find an IBSS to join [ 311.369266][ T6769] netlink: 'syz.0.708': attribute type 13 has an invalid length. [ 311.377100][ T6769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.708'. [ 311.387255][ T6769] syz_tun: refused to change device tx_queue_len [ 311.393788][ T6769] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 311.455493][ T6773] team0: Port device team_slave_0 removed [ 311.465425][ T6776] netlink: 830 bytes leftover after parsing attributes in process `syz.0.708'. [ 311.475963][ T6778] netlink: 'syz.1.709': attribute type 10 has an invalid length. [ 311.659275][ T6778] team0 (unregistering): Port device team_slave_1 removed [ 311.669525][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.712'. [ 311.717791][ T6789] netlink: 'syz.4.713': attribute type 16 has an invalid length. [ 311.733750][ T6789] netlink: 156 bytes leftover after parsing attributes in process `syz.4.713'. [ 311.759390][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.712'. [ 311.770637][ T6793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.712'. [ 311.863675][ T6793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.712'. [ 312.819184][ T46] wlan1: Trigger new scan to find an IBSS to join [ 312.910911][ T9] wlan1: Trigger new scan to find an IBSS to join [ 313.482660][ T6810] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 313.739566][ T6818] netlink: 56 bytes leftover after parsing attributes in process `syz.1.721'. [ 313.755117][ T9] wlan1: Creating new IBSS network, BSSID aa:96:e2:8e:35:94 [ 313.855541][ T4483] wlan1: Creating new IBSS network, BSSID 1e:e6:08:bc:f2:31 [ 313.865299][ T9] wlan1: Trigger new scan to find an IBSS to join [ 315.838571][ T6836] netlink: 'syz.2.728': attribute type 16 has an invalid length. [ 315.846395][ T6836] netlink: 156 bytes leftover after parsing attributes in process `syz.2.728'. [ 315.858774][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 316.901778][ T32] wlan1: Trigger new scan to find an IBSS to join [ 317.009761][ T6851] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 317.196591][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.203006][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.586828][ T6875] netlink: 'syz.1.741': attribute type 22 has an invalid length. [ 317.625305][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 317.709818][ T6878] netlink: 'syz.3.743': attribute type 16 has an invalid length. [ 317.739006][ T6878] netlink: 156 bytes leftover after parsing attributes in process `syz.3.743'. [ 318.415347][ T2961] wlan1: Creating new IBSS network, BSSID 6a:53:db:d2:59:1a [ 320.821065][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 320.827830][ T32] wlan1: Trigger new scan to find an IBSS to join [ 321.714105][ T6888] netlink: 'syz.0.746': attribute type 16 has an invalid length. [ 321.723230][ T46] wlan1: Creating new IBSS network, BSSID 32:93:6c:b7:c8:f1 [ 321.731213][ T6888] netlink: 156 bytes leftover after parsing attributes in process `syz.0.746'. [ 321.742884][ T6903] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 321.901717][ T6917] netlink: 'syz.3.757': attribute type 16 has an invalid length. [ 321.913018][ T6917] netlink: 156 bytes leftover after parsing attributes in process `syz.3.757'. [ 321.985842][ T6922] netlink: 'syz.1.756': attribute type 2 has an invalid length. [ 322.056473][ T6922] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.756'. [ 323.255315][ T6942] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 323.862958][ T56] wlan1: Trigger new scan to find an IBSS to join [ 325.171621][ T6951] netlink: 'syz.0.767': attribute type 16 has an invalid length. [ 325.179675][ T6951] netlink: 156 bytes leftover after parsing attributes in process `syz.0.767'. [ 325.869179][ T46] wlan1: Trigger new scan to find an IBSS to join [ 326.463462][ T6987] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 326.899054][ T5792] wlan1: Trigger new scan to find an IBSS to join [ 327.437898][ T7017] netlink: 'syz.1.787': attribute type 16 has an invalid length. [ 327.458244][ T7017] netlink: 156 bytes leftover after parsing attributes in process `syz.1.787'. [ 329.858782][ T56] wlan1: Trigger new scan to find an IBSS to join [ 330.765782][ T9] wlan1: Creating new IBSS network, BSSID 8e:82:26:db:4a:05 [ 330.904737][ T56] wlan1: Trigger new scan to find an IBSS to join [ 331.402445][ T7045] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 332.111951][ T7068] netlink: 830 bytes leftover after parsing attributes in process `syz.4.804'. [ 333.858992][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 334.169621][ T7086] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 334.256580][ T7089] netlink: 'syz.3.809': attribute type 13 has an invalid length. [ 334.305501][ T7089] netlink: 152 bytes leftover after parsing attributes in process `syz.3.809'. [ 334.345320][ T7089] syz_tun: refused to change device tx_queue_len [ 334.401940][ T7089] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 334.498306][ T7093] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 334.649180][ T7089] netlink: 830 bytes leftover after parsing attributes in process `syz.3.809'. [ 334.705286][ T7098] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 334.811837][ T7108] netlink: 'syz.4.815': attribute type 4 has an invalid length. [ 334.899436][ T46] wlan1: Trigger new scan to find an IBSS to join [ 335.083146][ T7111] netlink: 'syz.3.816': attribute type 13 has an invalid length. [ 335.105027][ T7111] netlink: 152 bytes leftover after parsing attributes in process `syz.3.816'. [ 335.124709][ T7111] syz_tun: refused to change device tx_queue_len [ 335.132575][ T7111] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 335.752052][ T7131] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.822'. [ 335.890492][ T7131] netlink: zone id is out of range [ 335.958357][ T7131] netlink: zone id is out of range [ 335.971741][ T7131] netlink: zone id is out of range [ 335.983812][ T7131] netlink: zone id is out of range [ 335.995915][ T7131] netlink: zone id is out of range [ 336.009595][ T7131] netlink: zone id is out of range [ 336.021934][ T7131] netlink: zone id is out of range [ 336.034761][ T7131] netlink: zone id is out of range [ 336.904763][ T9] wlan1: Trigger new scan to find an IBSS to join [ 336.911766][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 337.296123][ T56] wlan1: Creating new IBSS network, BSSID 7a:4b:e9:bb:88:9a [ 337.297481][ T7141] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.484854][ T7143] netlink: 'syz.1.828': attribute type 13 has an invalid length. [ 338.530163][ T7143] netlink: 152 bytes leftover after parsing attributes in process `syz.1.828'. [ 338.584336][ T7143] syz_tun: refused to change device tx_queue_len [ 338.646985][ T7148] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.743447][ T7149] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.838968][ T9] wlan1: Trigger new scan to find an IBSS to join [ 338.862365][ T7143] netlink: 830 bytes leftover after parsing attributes in process `syz.1.828'. [ 339.077298][ T7160] netlink: 'syz.2.833': attribute type 4 has an invalid length. [ 339.873438][ T32] wlan1: Trigger new scan to find an IBSS to join [ 340.403081][ T7180] netlink: 'syz.4.839': attribute type 13 has an invalid length. [ 340.461858][ T7180] netlink: 152 bytes leftover after parsing attributes in process `syz.4.839'. [ 340.526540][ T7180] syz_tun: refused to change device tx_queue_len [ 340.571961][ T7180] net_ratelimit: 3663 callbacks suppressed [ 340.571998][ T7180] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 340.818626][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 340.919446][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 341.002578][ T46] wlan1: Creating new IBSS network, BSSID 1a:b8:f0:01:02:d6 [ 343.461634][ T7201] netlink: 'syz.4.847': attribute type 13 has an invalid length. [ 343.515106][ T7201] netlink: 152 bytes leftover after parsing attributes in process `syz.4.847'. [ 343.622539][ T7201] syz_tun: refused to change device tx_queue_len [ 343.693788][ T7201] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 343.893361][ T7202] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 343.929817][ T7196] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 344.008633][ T7207] netlink: 830 bytes leftover after parsing attributes in process `syz.4.847'. [ 344.200149][ T7219] netlink: 'syz.3.850': attribute type 4 has an invalid length. [ 344.833087][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 344.904787][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 344.911493][ T56] wlan1: Trigger new scan to find an IBSS to join [ 345.819334][ T4483] wlan1: Creating new IBSS network, BSSID be:f2:d0:0b:28:45 [ 345.889296][ T4483] wlan1: Creating new IBSS network, BSSID e2:aa:17:c8:e5:e1 [ 345.966242][ T4328] wlan1: Creating new IBSS network, BSSID ea:1f:a4:04:d2:5d [ 347.862270][ T32] wlan1: Trigger new scan to find an IBSS to join [ 347.870536][ T32] wlan1: Trigger new scan to find an IBSS to join [ 349.399027][ T7253] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 349.421224][ T7262] netlink: 'syz.0.865': attribute type 17 has an invalid length. [ 349.442693][ T7262] netlink: 152 bytes leftover after parsing attributes in process `syz.0.865'. [ 349.456995][ T7262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.819226][ T32] wlan1: Trigger new scan to find an IBSS to join [ 350.825849][ T32] wlan1: Trigger new scan to find an IBSS to join [ 351.073893][ T7290] netlink: 'syz.4.874': attribute type 28 has an invalid length. [ 351.113870][ T7290] netlink: 'syz.4.874': attribute type 3 has an invalid length. [ 351.151290][ T7290] netlink: 132 bytes leftover after parsing attributes in process `syz.4.874'. [ 351.876482][ T32] wlan1: Trigger new scan to find an IBSS to join [ 352.023126][ T4483] wlan1: Creating new IBSS network, BSSID 6a:e9:f5:a3:dd:b9 [ 352.030880][ T4328] wlan1: Creating new IBSS network, BSSID fe:29:ee:0d:c0:3c [ 352.368153][ T7309] netlink: 'syz.0.878': attribute type 16 has an invalid length. [ 352.406361][ T7309] netlink: 156 bytes leftover after parsing attributes in process `syz.0.878'. [ 353.985509][ T7331] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 354.045621][ T7333] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 355.959010][ T7346] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 356.224178][ T7355] netlink: 'syz.2.897': attribute type 16 has an invalid length. [ 356.287727][ T7355] netlink: 156 bytes leftover after parsing attributes in process `syz.2.897'. [ 357.858773][ T56] wlan1: Trigger new scan to find an IBSS to join [ 357.997736][ T7358] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 358.278574][ T7382] FAULT_INJECTION: forcing a failure. [ 358.278574][ T7382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.334853][ T7382] CPU: 0 PID: 7382 Comm: syz.4.905 Not tainted syzkaller #0 [ 358.342232][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.352350][ T7382] Call Trace: [ 358.355703][ T7382] [ 358.358722][ T7382] dump_stack_lvl+0x188/0x24e [ 358.363468][ T7382] ? show_regs_print_info+0x12/0x12 [ 358.368730][ T7382] ? load_image+0x400/0x400 [ 358.373287][ T7382] ? __lock_acquire+0x7d10/0x7d10 [ 358.378376][ T7382] ? snprintf+0xe5/0x140 [ 358.382687][ T7382] should_fail_ex+0x399/0x4d0 [ 358.387422][ T7382] _copy_to_user+0x2c/0x130 [ 358.391997][ T7382] simple_read_from_buffer+0xe3/0x150 [ 358.397423][ T7382] proc_fail_nth_read+0x1a6/0x220 [ 358.402508][ T7382] ? proc_fault_inject_write+0x310/0x310 [ 358.408189][ T7382] ? fsnotify_perm+0x248/0x550 [ 358.413006][ T7382] ? proc_fault_inject_write+0x310/0x310 [ 358.418703][ T7382] vfs_read+0x2de/0xa00 [ 358.422924][ T7382] ? kernel_read+0x1e0/0x1e0 [ 358.427580][ T7382] ? __fget_files+0x28/0x4b0 [ 358.432231][ T7382] ? __fget_files+0x28/0x4b0 [ 358.436885][ T7382] ? __fget_files+0x43d/0x4b0 [ 358.441640][ T7382] ? __fdget_pos+0x2ae/0x360 [ 358.446301][ T7382] ? ksys_read+0x71/0x250 [ 358.450700][ T7382] ksys_read+0x14c/0x250 [ 358.455009][ T7382] ? vfs_write+0xa30/0xa30 [ 358.459495][ T7382] ? lockdep_hardirqs_on+0x94/0x140 [ 358.464754][ T7382] do_syscall_64+0x4c/0xa0 [ 358.469242][ T7382] ? clear_bhb_loop+0x60/0xb0 [ 358.473989][ T7382] ? clear_bhb_loop+0x60/0xb0 [ 358.478733][ T7382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.484676][ T7382] RIP: 0033:0x7fcf0db5d60e [ 358.489143][ T7382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 358.508810][ T7382] RSP: 002b:00007fcf0e97afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.517275][ T7382] RAX: ffffffffffffffda RBX: 00007fcf0e97b6c0 RCX: 00007fcf0db5d60e [ 358.525298][ T7382] RDX: 000000000000000f RSI: 00007fcf0e97b0a0 RDI: 0000000000000005 [ 358.533326][ T7382] RBP: 00007fcf0e97b090 R08: 0000000000000000 R09: 0000000000000000 [ 358.541354][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.549375][ T7382] R13: 00007fcf0de16038 R14: 00007fcf0de15fa0 R15: 00007ffd9d7140e8 [ 358.557415][ T7382] [ 358.619171][ T7380] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 359.111094][ T7396] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 359.535678][ T7409] netlink: 'syz.1.916': attribute type 16 has an invalid length. [ 359.549558][ T7409] netlink: 156 bytes leftover after parsing attributes in process `syz.1.916'. [ 359.626834][ T7400] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 359.872812][ T32] wlan1: Trigger new scan to find an IBSS to join [ 359.986994][ T7423] netlink: 'syz.1.919': attribute type 3 has an invalid length. [ 359.995115][ T7423] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.919'. [ 360.929252][ T7435] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 361.818122][ T7461] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 361.865352][ T9] wlan1: Trigger new scan to find an IBSS to join [ 361.865656][ T32] wlan1: Trigger new scan to find an IBSS to join [ 362.818847][ T56] wlan1: Trigger new scan to find an IBSS to join [ 362.826264][ T7474] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 362.906587][ T56] wlan1: Trigger new scan to find an IBSS to join [ 363.805066][ T32] wlan1: Creating new IBSS network, BSSID 8a:da:77:1c:b4:14 [ 363.993984][ T56] wlan1: Creating new IBSS network, BSSID f2:12:b9:32:aa:29 [ 364.199623][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 364.549971][ T7511] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 364.916972][ T32] wlan1: Trigger new scan to find an IBSS to join [ 365.934897][ T2961] wlan1: Creating new IBSS network, BSSID ae:dd:36:e9:3b:1e [ 366.031207][ T7544] FAULT_INJECTION: forcing a failure. [ 366.031207][ T7544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.051463][ T7544] CPU: 1 PID: 7544 Comm: syz.1.962 Not tainted syzkaller #0 [ 366.058826][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.068941][ T7544] Call Trace: [ 366.072260][ T7544] [ 366.075237][ T7544] dump_stack_lvl+0x188/0x24e [ 366.079992][ T7544] ? show_regs_print_info+0x12/0x12 [ 366.085249][ T7544] ? load_image+0x400/0x400 [ 366.089819][ T7544] ? __lock_acquire+0x7d10/0x7d10 [ 366.094904][ T7544] should_fail_ex+0x399/0x4d0 [ 366.099636][ T7544] _copy_to_user+0x2c/0x130 [ 366.104204][ T7544] bpf_verifier_vlog+0x172/0x390 [ 366.109205][ T7544] __btf_verifier_log+0xdf/0x130 [ 366.114214][ T7544] ? btf_check_sec_info+0x350/0x350 [ 366.119494][ T7544] ? __virt_addr_valid+0x188/0x540 [ 366.124664][ T7544] ? btf_parse_hdr+0x1e0/0x7e0 [ 366.129486][ T7544] btf_parse_hdr+0x406/0x7e0 [ 366.134153][ T7544] btf_new_fd+0x3c6/0x780 [ 366.138627][ T7544] __sys_bpf+0x612/0x780 [ 366.142952][ T7544] ? bpf_link_show_fdinfo+0x380/0x380 [ 366.148414][ T7544] ? lock_chain_count+0x20/0x20 [ 366.153358][ T7544] __x64_sys_bpf+0x78/0x90 [ 366.157830][ T7544] do_syscall_64+0x4c/0xa0 [ 366.162316][ T7544] ? clear_bhb_loop+0x60/0xb0 [ 366.167044][ T7544] ? clear_bhb_loop+0x60/0xb0 [ 366.171774][ T7544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.177723][ T7544] RIP: 0033:0x7f7c28f9cdd9 [ 366.182194][ T7544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.201850][ T7544] RSP: 002b:00007f7c29de5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.210319][ T7544] RAX: ffffffffffffffda RBX: 00007f7c29215fa0 RCX: 00007f7c28f9cdd9 [ 366.218342][ T7544] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 366.226365][ T7544] RBP: 00007f7c29de5090 R08: 0000000000000000 R09: 0000000000000000 [ 366.234399][ T7544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.242421][ T7544] R13: 00007f7c29216038 R14: 00007f7c29215fa0 R15: 00007ffe175da198 [ 366.250458][ T7544] [ 366.374770][ T7546] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 366.699392][ T7542] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 366.819405][ T32] wlan1: Trigger new scan to find an IBSS to join [ 366.828375][ T56] wlan1: Trigger new scan to find an IBSS to join [ 367.129681][ T7557] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 368.837054][ T5792] wlan1: Trigger new scan to find an IBSS to join [ 368.844201][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 371.574657][ T4275] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 371.859676][ T56] wlan1: Trigger new scan to find an IBSS to join [ 371.861275][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 371.866451][ T56] wlan1: Trigger new scan to find an IBSS to join [ 371.874504][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 371.997399][ T7609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.982'. [ 373.112775][ T7628] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.983'. [ 373.623620][ T7628] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.983'. [ 373.870155][ T2961] wlan1: Creating new IBSS network, BSSID ca:a3:f7:74:66:61 [ 373.996021][ T4483] wlan1: Creating new IBSS network, BSSID fe:14:3d:2f:18:0b [ 374.818908][ T32] wlan1: Creating new IBSS network, BSSID 5a:88:84:14:b5:39 [ 374.826533][ T32] wlan1: Creating new IBSS network, BSSID c6:56:64:16:a4:7a [ 374.878064][ T7650] netlink: 'syz.2.992': attribute type 10 has an invalid length. [ 374.929226][ T7651] netlink: 'syz.2.992': attribute type 3 has an invalid length. [ 374.936950][ T7651] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.992'. [ 375.519348][ T7641] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 375.844443][ T7660] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.995'. [ 376.072634][ T7666] netlink: 'syz.0.999': attribute type 6 has an invalid length. [ 376.098927][ T7666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.999'. [ 376.140131][ T7668] netlink: 40 bytes leftover after parsing attributes in process `syz.1.997'. [ 376.212456][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 376.288177][ T7672] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.997'. [ 377.063601][ T7669] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 377.107522][ T7679] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1001'. [ 377.128662][ T7679] netlink: 6328 bytes leftover after parsing attributes in process `syz.0.1001'. [ 377.420343][ T7685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1003'. [ 377.659071][ T7689] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1005'. [ 377.871359][ T56] wlan1: Trigger new scan to find an IBSS to join [ 378.582715][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.589156][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.360565][ T7705] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1010'. [ 380.829711][ T46] wlan1: Trigger new scan to find an IBSS to join [ 381.991430][ T7698] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 382.341871][ T7724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1017'. [ 382.387810][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 383.025418][ T7722] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 383.048816][ T7724] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1017'. [ 383.524515][ T7741] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1021'. [ 383.686956][ T4275] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 383.742713][ T7749] netlink: 'syz.0.1024': attribute type 6 has an invalid length. [ 383.756306][ T7749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1024'. [ 383.858769][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 384.305014][ T7757] device sit0 entered promiscuous mode [ 384.604108][ T7753] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 384.800151][ T2961] wlan1: Creating new IBSS network, BSSID da:5a:d3:70:e0:6f [ 385.858705][ T46] wlan1: Trigger new scan to find an IBSS to join [ 386.819467][ T32] wlan1: Trigger new scan to find an IBSS to join [ 386.826258][ T5792] wlan1: Trigger new scan to find an IBSS to join [ 389.739002][ T7779] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 389.858670][ T5792] wlan1: Creating new IBSS network, BSSID 5e:8f:75:51:88:7e [ 389.954206][ T7791] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1037'. [ 390.020557][ T7798] netlink: 'syz.3.1036': attribute type 16 has an invalid length. [ 390.099497][ T7798] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1036'. [ 391.416694][ T7803] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 391.492074][ T7817] netlink: 'syz.4.1044': attribute type 10 has an invalid length. [ 391.744590][ T7817] team0: Port device macvlan1 added [ 391.858832][ T5792] wlan1: Trigger new scan to find an IBSS to join [ 391.865440][ T56] wlan1: Trigger new scan to find an IBSS to join [ 393.861208][ T32] wlan1: Trigger new scan to find an IBSS to join [ 395.375054][ T4328] wlan1: Creating new IBSS network, BSSID c2:c7:fa:91:e1:67 [ 395.978028][ T4328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 397.862934][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 397.869646][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 398.066472][ T7841] netlink: 'syz.0.1053': attribute type 16 has an invalid length. [ 398.074681][ T7841] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1053'. [ 398.102619][ T7868] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 398.763873][ T46] wlan1: Creating new IBSS network, BSSID 6e:38:ad:2b:1a:e3 [ 398.771578][ T7883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1066'. [ 398.792956][ T4483] wlan1: Creating new IBSS network, BSSID 4a:5c:c9:d4:52:0a [ 398.821907][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 398.890298][ T7883] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1066'. [ 399.542728][ T7891] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1068'. [ 400.828691][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 401.955309][ T7910] netlink: 'syz.4.1072': attribute type 16 has an invalid length. [ 401.978847][ T7910] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1072'. [ 402.138810][ T7913] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 404.499452][ T7929] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1080'. [ 404.898649][ T4337] wlan1: Trigger new scan to find an IBSS to join [ 405.311397][ T7936] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 405.858862][ T4337] wlan1: Trigger new scan to find an IBSS to join [ 406.898093][ T4337] wlan1: Creating new IBSS network, BSSID 2e:ad:35:69:1c:ff [ 407.143896][ T7972] netlink: 'syz.2.1090': attribute type 3 has an invalid length. [ 407.188941][ T7972] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1090'. [ 410.181081][ T7961] netlink: 'syz.3.1088': attribute type 16 has an invalid length. [ 410.189188][ T7961] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1088'. [ 410.198872][ T7967] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 410.468746][ T7984] netlink: 'syz.2.1093': attribute type 10 has an invalid length. [ 410.716974][ T7987] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1097'. [ 410.819020][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 412.828332][ T56] wlan1: Creating new IBSS network, BSSID ce:8e:30:37:80:8e [ 412.907388][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 413.596270][ T8012] raw_sendmsg: syz.4.1103 forgot to set AF_INET. Fix it! [ 415.707540][ T7988] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 415.732739][ T8015] netlink: 'syz.2.1104': attribute type 13 has an invalid length. [ 415.747385][ T8015] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1104'. [ 415.784765][ T8015] syz_tun: refused to change device tx_queue_len [ 415.800115][ T8015] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 415.826315][ T8024] netlink: 'syz.1.1106': attribute type 16 has an invalid length. [ 415.856622][ T8024] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1106'. [ 415.907938][ T8030] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 416.317308][ T8044] netlink: 'syz.3.1112': attribute type 3 has an invalid length. [ 416.419842][ T8044] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.1112'. [ 417.255222][ T8053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1115'. [ 417.283401][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 417.322863][ T8054] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1115'. [ 417.870881][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 418.832691][ T4483] wlan1: Creating new IBSS network, BSSID d2:f0:e6:50:6c:55 [ 419.858774][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 421.923264][ T8066] netlink: 'syz.0.1120': attribute type 13 has an invalid length. [ 421.932330][ T8066] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1120'. [ 421.942794][ T8066] syz_tun: refused to change device tx_queue_len [ 421.949298][ T8066] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 421.966287][ T8077] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 421.992103][ T8076] netlink: 'syz.3.1123': attribute type 16 has an invalid length. [ 422.008601][ T8076] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1123'. [ 422.041189][ T8084] netlink: 'syz.4.1125': attribute type 10 has an invalid length. [ 422.186997][ T8087] netlink: 'syz.1.1127': attribute type 3 has an invalid length. [ 422.258643][ T8087] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1127'. [ 422.272947][ T8093] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1128'. [ 422.832198][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 423.906493][ T4483] wlan1: Creating new IBSS network, BSSID 6e:db:42:76:3a:e7 [ 423.974826][ T8112] netlink: 'syz.2.1136': attribute type 13 has an invalid length. [ 424.048213][ T8112] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1136'. [ 424.125892][ T8112] syz_tun: refused to change device tx_queue_len [ 424.256476][ T8112] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 424.368918][ T8119] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 424.380982][ T8110] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 425.868972][ T56] wlan1: Trigger new scan to find an IBSS to join [ 426.392025][ T8127] netlink: 'syz.3.1139': attribute type 10 has an invalid length. [ 426.414039][ T8130] netlink: 'syz.4.1140': attribute type 16 has an invalid length. [ 426.423532][ T8130] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1140'. [ 426.447432][ T8128] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 426.838677][ T56] wlan1: Trigger new scan to find an IBSS to join [ 427.034647][ T4483] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 427.194236][ T8164] netlink: 'syz.2.1150': attribute type 10 has an invalid length. [ 427.575296][ T8164] device veth1_macvtap left promiscuous mode [ 427.620881][ T8164] bridge0: port 3(macsec0) entered blocking state [ 427.656717][ T8164] bridge0: port 3(macsec0) entered disabled state [ 427.684251][ T8164] device macsec0 entered promiscuous mode [ 427.727529][ T8168] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 427.771127][ T8162] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 427.826827][ T8170] netlink: 'syz.3.1152': attribute type 13 has an invalid length. [ 427.845772][ T8170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1152'. [ 427.873094][ T8170] syz_tun: refused to change device tx_queue_len [ 427.887121][ T8170] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 428.209589][ T8183] netlink: 'syz.0.1156': attribute type 10 has an invalid length. [ 429.858771][ T46] wlan1: Trigger new scan to find an IBSS to join [ 429.865499][ T56] wlan1: Trigger new scan to find an IBSS to join [ 429.872605][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 429.881673][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 430.785318][ T56] wlan1: Creating new IBSS network, BSSID c2:2f:76:74:eb:ac [ 431.705557][ T8187] netlink: 'syz.2.1157': attribute type 16 has an invalid length. [ 431.717140][ T8187] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1157'. [ 431.748651][ T8191] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 431.768720][ T8217] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 432.031388][ T8223] netlink: 'syz.3.1166': attribute type 3 has an invalid length. [ 432.076561][ T8223] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1166'. [ 432.102878][ T8227] netlink: 'syz.4.1169': attribute type 10 has an invalid length. [ 432.166471][ T8229] netlink: 'syz.3.1166': attribute type 21 has an invalid length. [ 432.177047][ T8229] netlink: 'syz.3.1166': attribute type 11 has an invalid length. [ 432.196831][ T8231] netlink: 'syz.3.1166': attribute type 10 has an invalid length. [ 432.210483][ T8231] device veth1_macvtap left promiscuous mode [ 432.917972][ T46] wlan1: Trigger new scan to find an IBSS to join [ 433.446502][ T8219] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 433.859523][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 433.860358][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 435.673587][ T8272] netlink: 'syz.4.1180': attribute type 16 has an invalid length. [ 435.681885][ T8272] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1180'. [ 435.691221][ T8274] netlink: 'syz.0.1182': attribute type 10 has an invalid length. [ 435.700030][ T8270] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 435.713773][ T8262] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 435.859464][ T4483] wlan1: Creating new IBSS network, BSSID e6:4a:24:64:25:73 [ 436.165150][ T8289] device hsr0 left promiscuous mode [ 436.264350][ T8283] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 436.574644][ T8295] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1189'. [ 436.834530][ T46] wlan1: Trigger new scan to find an IBSS to join [ 437.859289][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 438.204555][ T8305] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1190'. [ 438.213830][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 438.223176][ T8307] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1190'. [ 438.445197][ T8310] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 438.479143][ T8315] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 438.531760][ T8318] netlink: 'syz.4.1196': attribute type 16 has an invalid length. [ 438.545071][ T8318] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1196'. [ 438.819891][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 438.899146][ T4337] wlan1: Trigger new scan to find an IBSS to join [ 439.105891][ T8335] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1203'. [ 439.964239][ T2961] wlan1: Creating new IBSS network, BSSID 46:38:69:bc:e9:b1 [ 440.031577][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.037991][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.829135][ T56] wlan1: Trigger new scan to find an IBSS to join [ 440.835859][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 440.842534][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 441.751848][ T2961] wlan1: Creating new IBSS network, BSSID ba:9f:43:03:26:c9 [ 441.807671][ T8331] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 441.837765][ T8349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1206'. [ 441.853192][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 441.880373][ T8352] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1206'. [ 441.905843][ T8358] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 442.047445][ T8362] netlink: 'syz.3.1210': attribute type 10 has an invalid length. [ 442.124041][ T8364] netlink: 'syz.2.1212': attribute type 16 has an invalid length. [ 442.175990][ T8364] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1212'. [ 442.661331][ T8379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1219'. [ 442.704315][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 442.758758][ T8382] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1219'. [ 443.864490][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 443.881921][ T56] wlan1: Trigger new scan to find an IBSS to join [ 444.355051][ T8393] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 444.602527][ T8402] netlink: 'syz.3.1227': attribute type 10 has an invalid length. [ 444.807541][ T4328] wlan1: Creating new IBSS network, BSSID 92:b2:6e:44:ae:82 [ 444.994757][ T8417] netlink: 'syz.4.1233': attribute type 3 has an invalid length. [ 445.047699][ T8417] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1233'. [ 446.898910][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 446.905520][ T56] wlan1: Trigger new scan to find an IBSS to join [ 447.314530][ T8409] netlink: 'syz.2.1230': attribute type 16 has an invalid length. [ 447.322569][ T8409] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1230'. [ 447.337659][ T8421] netlink: 'syz.4.1233': attribute type 21 has an invalid length. [ 447.348927][ T8421] netlink: 'syz.4.1233': attribute type 11 has an invalid length. [ 447.378770][ T8417] netlink: 'syz.4.1233': attribute type 10 has an invalid length. [ 447.399775][ T8417] device veth1_macvtap left promiscuous mode [ 447.944713][ T8440] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 448.067859][ T8444] netlink: 'syz.2.1242': attribute type 10 has an invalid length. [ 448.302991][ T8442] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 448.826598][ T8459] netlink: 'syz.3.1248': attribute type 16 has an invalid length. [ 448.873389][ T8459] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1248'. [ 449.858916][ T4483] wlan1: Creating new IBSS network, BSSID 82:0d:c5:8c:94:90 [ 450.820925][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 451.480295][ T8477] netlink: 'syz.0.1255': attribute type 10 has an invalid length. [ 451.496780][ T8481] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 451.506586][ T8483] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 451.677167][ T8487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1259'. [ 451.704612][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'. [ 451.764393][ T8487] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1259'. [ 452.171379][ T8506] netlink: 'syz.3.1265': attribute type 16 has an invalid length. [ 452.244030][ T8506] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1265'. [ 453.858860][ T46] wlan1: Trigger new scan to find an IBSS to join [ 453.859583][ T56] wlan1: Trigger new scan to find an IBSS to join [ 453.865739][ T46] wlan1: Trigger new scan to find an IBSS to join [ 454.055436][ T8527] netlink: 'syz.0.1273': attribute type 10 has an invalid length. [ 456.576297][ T8523] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 456.591276][ T8534] netlink: 'syz.2.1276': attribute type 13 has an invalid length. [ 456.606336][ T8534] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1276'. [ 456.639608][ T8551] netlink: 'syz.1.1283': attribute type 4 has an invalid length. [ 456.648143][ T8551] FAULT_INJECTION: forcing a failure. [ 456.648143][ T8551] name failslab, interval 1, probability 0, space 0, times 1 [ 456.688763][ T8551] CPU: 0 PID: 8551 Comm: syz.1.1283 Not tainted syzkaller #0 [ 456.696257][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.706389][ T8551] Call Trace: [ 456.709739][ T8551] [ 456.712732][ T8551] dump_stack_lvl+0x188/0x24e [ 456.717497][ T8551] ? show_regs_print_info+0x12/0x12 [ 456.722777][ T8551] ? load_image+0x400/0x400 [ 456.727370][ T8551] ? __lock_acquire+0x7d10/0x7d10 [ 456.732493][ T8551] should_fail_ex+0x399/0x4d0 [ 456.737260][ T8551] should_failslab+0x5/0x20 [ 456.741824][ T8551] slab_pre_alloc_hook+0x59/0x310 [ 456.746920][ T8551] ? percpu_ref_put+0x12/0x100 [ 456.751759][ T8551] kmem_cache_alloc+0x56/0x2f0 [ 456.756565][ T8551] ? fib_insert_alias+0x309/0x1280 [ 456.761738][ T8551] fib_insert_alias+0x309/0x1280 [ 456.766729][ T8551] ? rcu_is_watching+0x11/0xa0 [ 456.771541][ T8551] ? kmem_cache_alloc+0x151/0x2f0 [ 456.776606][ T8551] ? fib_table_insert+0x4b4/0x1b20 [ 456.781783][ T8551] fib_table_insert+0x687/0x1b20 [ 456.786790][ T8551] ? fib_trie_table+0x134/0x1c0 [ 456.791690][ T8551] ? fib_new_table+0x27b/0x2d0 [ 456.796516][ T8551] inet_rtm_newroute+0x147/0x230 [ 456.801490][ T8551] ? __mutex_lock+0x3b2/0xaf0 [ 456.806226][ T8551] ? rcu_read_unlock+0xa0/0xa0 [ 456.811071][ T8551] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 456.816260][ T8551] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 456.821418][ T8551] ? rcu_read_unlock+0xa0/0xa0 [ 456.826226][ T8551] rtnetlink_rcv_msg+0x87c/0xfc0 [ 456.831264][ T8551] ? rtnetlink_bind+0x80/0x80 [ 456.835981][ T8551] ? mark_lock+0x94/0x320 [ 456.840366][ T8551] ? __lock_acquire+0x12f4/0x7d10 [ 456.845470][ T8551] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 456.851250][ T8551] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 456.857034][ T8551] ? verify_lock_unused+0x140/0x140 [ 456.862275][ T8551] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 456.867968][ T8551] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 456.874640][ T8551] netlink_rcv_skb+0x1fb/0x450 [ 456.879452][ T8551] ? rtnetlink_bind+0x80/0x80 [ 456.884193][ T8551] ? netlink_ack+0x1170/0x1170 [ 456.889020][ T8551] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.894276][ T8551] netlink_unicast+0x74d/0x8d0 [ 456.899115][ T8551] netlink_sendmsg+0x8ad/0xbd0 [ 456.903945][ T8551] ? netlink_getsockopt+0x550/0x550 [ 456.909195][ T8551] ? aa_sock_msg_perm+0x94/0x150 [ 456.914176][ T8551] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 456.919504][ T8551] ? security_socket_sendmsg+0x7c/0xa0 [ 456.925025][ T8551] ? netlink_getsockopt+0x550/0x550 [ 456.930299][ T8551] ____sys_sendmsg+0x5be/0x970 [ 456.935131][ T8551] ? __sys_sendmsg_sock+0x30/0x30 [ 456.940204][ T8551] ? __import_iovec+0x315/0x500 [ 456.945116][ T8551] ? import_iovec+0x6f/0xa0 [ 456.949667][ T8551] ___sys_sendmsg+0x2a2/0x360 [ 456.954406][ T8551] ? __sys_sendmsg+0x290/0x290 [ 456.959258][ T8551] ? __lock_acquire+0x7d10/0x7d10 [ 456.964381][ T8551] __se_sys_sendmsg+0x1bb/0x2a0 [ 456.969293][ T8551] ? __x64_sys_sendmsg+0x80/0x80 [ 456.974309][ T8551] ? lockdep_hardirqs_on+0x94/0x140 [ 456.979565][ T8551] do_syscall_64+0x4c/0xa0 [ 456.984020][ T8551] ? clear_bhb_loop+0x60/0xb0 [ 456.988739][ T8551] ? clear_bhb_loop+0x60/0xb0 [ 456.993463][ T8551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.999399][ T8551] RIP: 0033:0x7f7c28f9cdd9 [ 457.003852][ T8551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.023489][ T8551] RSP: 002b:00007f7c29de5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.031947][ T8551] RAX: ffffffffffffffda RBX: 00007f7c29215fa0 RCX: 00007f7c28f9cdd9 [ 457.039950][ T8551] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 457.047957][ T8551] RBP: 00007f7c29de5090 R08: 0000000000000000 R09: 0000000000000000 [ 457.055959][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.063963][ T8551] R13: 00007f7c29216038 R14: 00007f7c29215fa0 R15: 00007ffe175da198 [ 457.072014][ T8551] [ 457.079555][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 457.086145][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 457.245905][ T8555] netlink: 'syz.2.1284': attribute type 16 has an invalid length. [ 457.282221][ T8555] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1284'. [ 458.829816][ T46] wlan1: Trigger new scan to find an IBSS to join [ 460.905162][ T46] wlan1: Trigger new scan to find an IBSS to join [ 460.998066][ T2961] wlan1: Trigger new scan to find an IBSS to join [ 461.308162][ T8627] FAULT_INJECTION: forcing a failure. [ 461.308162][ T8627] name failslab, interval 1, probability 0, space 0, times 0 [ 461.368682][ T8627] CPU: 1 PID: 8627 Comm: syz.0.1310 Not tainted syzkaller #0 [ 461.376149][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 461.386244][ T8627] Call Trace: [ 461.389551][ T8627] [ 461.392507][ T8627] dump_stack_lvl+0x188/0x24e [ 461.397224][ T8627] ? show_regs_print_info+0x12/0x12 [ 461.402484][ T8627] ? load_image+0x400/0x400 [ 461.407035][ T8627] ? __lock_acquire+0x7d10/0x7d10 [ 461.412112][ T8627] should_fail_ex+0x399/0x4d0 [ 461.416842][ T8627] should_failslab+0x5/0x20 [ 461.421391][ T8627] slab_pre_alloc_hook+0x59/0x310 [ 461.426470][ T8627] ? verify_lock_unused+0x140/0x140 [ 461.431712][ T8627] ? bpf_test_init+0x9f/0x140 [ 461.436433][ T8627] __kmem_cache_alloc_node+0x4f/0x260 [ 461.441847][ T8627] ? bpf_test_init+0x9f/0x140 [ 461.446561][ T8627] __kmalloc+0xa0/0x240 [ 461.450767][ T8627] bpf_test_init+0x9f/0x140 [ 461.455319][ T8627] bpf_prog_test_run_xdp+0x484/0xf10 [ 461.460653][ T8627] ? dev_put+0x80/0x80 [ 461.464772][ T8627] ? dev_put+0x80/0x80 [ 461.468893][ T8627] bpf_prog_test_run+0x31e/0x390 [ 461.473874][ T8627] __sys_bpf+0x62b/0x780 [ 461.478166][ T8627] ? bpf_link_show_fdinfo+0x380/0x380 [ 461.483687][ T8627] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 461.489918][ T8627] __x64_sys_bpf+0x78/0x90 [ 461.494373][ T8627] do_syscall_64+0x4c/0xa0 [ 461.498840][ T8627] ? clear_bhb_loop+0x60/0xb0 [ 461.503546][ T8627] ? clear_bhb_loop+0x60/0xb0 [ 461.508259][ T8627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.514199][ T8627] RIP: 0033:0x7f602799cdd9 [ 461.518667][ T8627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.538311][ T8627] RSP: 002b:00007f6028935028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.546873][ T8627] RAX: ffffffffffffffda RBX: 00007f6027c15fa0 RCX: 00007f602799cdd9 [ 461.554873][ T8627] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000000a [ 461.562875][ T8627] RBP: 00007f6028935090 R08: 0000000000000000 R09: 0000000000000000 [ 461.570894][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.578889][ T8627] R13: 00007f6027c16038 R14: 00007f6027c15fa0 R15: 00007ffd9f7ac408 [ 461.586923][ T8627] [ 461.858729][ T4337] wlan1: Trigger new scan to find an IBSS to join [ 461.997951][ T46] wlan1: Creating new IBSS network, BSSID d6:50:8d:27:13:d1 [ 462.085297][ T4337] wlan1: Creating new IBSS network, BSSID fa:f6:83:5a:bc:60 [ 464.903272][ T4337] wlan1: Trigger new scan to find an IBSS to join [ 465.304520][ T8590] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 465.318566][ T8610] netlink: 'syz.3.1305': attribute type 16 has an invalid length. [ 465.326473][ T8610] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1305'. [ 465.389897][ T8637] netlink: 'syz.4.1314': attribute type 16 has an invalid length. [ 465.418551][ T8637] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1314'. [ 465.586577][ T8661] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1321'. [ 465.630046][ T8660] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1322'. [ 465.823952][ T4337] wlan1: Creating new IBSS network, BSSID 16:cc:d7:ef:fe:37 [ 467.479107][ T8681] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 467.495908][ T8696] netlink: 'syz.2.1334': attribute type 16 has an invalid length. [ 467.528772][ T8696] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1334'. [ 469.870549][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 473.048959][ T8733] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 473.066386][ T8739] netlink: 'syz.2.1349': attribute type 16 has an invalid length. [ 473.078520][ T8739] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1349'. [ 473.638699][ T8761] netlink: 'syz.4.1357': attribute type 3 has an invalid length. [ 473.646521][ T8761] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1357'. [ 473.859423][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 474.826177][ T4337] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 475.858969][ T4337] wlan1: Trigger new scan to find an IBSS to join [ 476.554407][ T8771] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 478.821028][ T56] wlan1: Trigger new scan to find an IBSS to join [ 480.835234][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 481.096941][ T8808] netlink: 'syz.1.1374': attribute type 3 has an invalid length. [ 481.105028][ T8808] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1374'. [ 481.742137][ T4328] wlan1: Creating new IBSS network, BSSID ba:31:12:c2:94:2b [ 482.660297][ T8777] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 482.669939][ T8814] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 482.899463][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 482.969583][ T8829] netlink: 'syz.2.1384': attribute type 16 has an invalid length. [ 483.021192][ T8829] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1384'. [ 483.244745][ T8838] netlink: 'syz.1.1387': attribute type 3 has an invalid length. [ 483.265514][ T8838] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1387'. [ 484.826294][ T56] wlan1: Trigger new scan to find an IBSS to join [ 484.832905][ T5792] wlan1: Trigger new scan to find an IBSS to join [ 485.072050][ T4337] wlan1: Creating new IBSS network, BSSID 8a:f8:0a:7d:85:59 [ 486.183635][ T8863] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 486.211859][ T8855] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 486.646065][ T8884] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1403'. [ 488.826338][ T4483] wlan1: Trigger new scan to find an IBSS to join [ 488.833038][ T4337] wlan1: Trigger new scan to find an IBSS to join [ 488.839787][ T46] wlan1: Trigger new scan to find an IBSS to join [ 489.752994][ T4328] wlan1: Creating new IBSS network, BSSID 52:74:06:50:93:0f [ 491.865207][ T4337] wlan1: Trigger new scan to find an IBSS to join [ 491.872872][ T46] wlan1: Trigger new scan to find an IBSS to join [ 492.235803][ T8882] netlink: 'syz.1.1404': attribute type 16 has an invalid length. [ 492.243947][ T8882] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1404'. [ 492.255074][ T8889] netlink: 'syz.3.1406': attribute type 16 has an invalid length. [ 492.264103][ T8889] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1406'. [ 493.337131][ T2961] wlan1: Creating new IBSS network, BSSID de:e0:c2:f9:ea:90 [ 493.347687][ T4337] wlan1: Creating new IBSS network, BSSID 42:f9:91:64:51:92 [ 493.376270][ T8909] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 493.415832][ T4328] ------------[ cut here ]------------ [ 493.421750][ T4328] WARNING: CPU: 1 PID: 4328 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 493.431808][ T4328] Modules linked in: [ 493.435761][ T4328] CPU: 1 PID: 4328 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 493.443406][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 493.453596][ T4328] Workqueue: cfg80211 cfg80211_event_work [ 493.459568][ T4328] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 493.466061][ T4328] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 7b ed f7 0f 0b eb bb e8 d8 7b ed f7 <0f> 0b eb b2 e8 cf 7b ed f7 0f 0b e9 77 fd ff ff e8 c3 7b ed f7 0f [ 493.485854][ T4328] RSP: 0018:ffffc900040a7aa0 EFLAGS: 00010293 [ 493.492033][ T4328] RAX: ffffffff8994f978 RBX: dffffc0000000000 RCX: ffff888026bc1dc0 [ 493.500110][ T4328] RDX: 0000000000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0 [ 493.508134][ T4328] RBP: ffffc900040a7b70 R08: ffffffff90af92a7 R09: 1ffffffff215f254 [ 493.516217][ T4328] R10: dffffc0000000000 R11: fffffbfff215f255 R12: ffff888076c535b8 [ 493.524288][ T4328] R13: 1ffff92000814f5c R14: 000000000000001f R15: ffff88802982cc90 [ 493.532786][ T4328] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 493.541813][ T4328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.548487][ T4328] CR2: 00007f0f2c34da08 CR3: 000000005b99c000 CR4: 00000000003506e0 [ 493.556582][ T4328] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 493.564666][ T4328] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 493.572723][ T4328] Call Trace: [ 493.576046][ T4328] [ 493.579106][ T4328] ? mutex_lock_nested+0x10/0x10 [ 493.584118][ T4328] ? trace_rdev_return_void+0x240/0x240 [ 493.589810][ T4328] cfg80211_process_wdev_events+0x3ad/0x550 [ 493.595796][ T4328] cfg80211_process_rdev_events+0x9d/0x110 [ 493.601702][ T4328] ? process_one_work+0x7b0/0x1160 [ 493.606874][ T4328] cfg80211_event_work+0x2b/0x40 [ 493.611923][ T4328] process_one_work+0x8a2/0x1160 [ 493.616940][ T4328] ? worker_detach_from_pool+0x240/0x240 [ 493.622708][ T4328] ? _raw_spin_lock_irq+0x86/0xf0 [ 493.627808][ T4328] ? _raw_spin_lock_irq+0xb7/0xf0 [ 493.632932][ T4328] ? _raw_spin_lock_irqsave+0x100/0x100 [ 493.638560][ T4328] ? kthread_data+0x4b/0xc0 [ 493.643134][ T4328] worker_thread+0xaa2/0x1270 [ 493.647889][ T4328] ? __kthread_parkme+0x162/0x1c0 [ 493.653032][ T4328] kthread+0x29d/0x330 [ 493.657150][ T4328] ? worker_clr_flags+0x1a0/0x1a0 [ 493.662285][ T4328] ? kthread_blkcg+0xd0/0xd0 [ 493.666934][ T4328] ret_from_fork+0x1f/0x30 [ 493.671468][ T4328] [ 493.674531][ T4328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 493.681838][ T4328] CPU: 1 PID: 4328 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 493.689447][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 493.699571][ T4328] Workqueue: cfg80211 cfg80211_event_work [ 493.705356][ T4328] Call Trace: [ 493.708677][ T4328] [ 493.711651][ T4328] dump_stack_lvl+0x188/0x24e [ 493.716377][ T4328] ? memcpy+0x3c/0x60 [ 493.720420][ T4328] ? show_regs_print_info+0x12/0x12 [ 493.725669][ T4328] ? load_image+0x400/0x400 [ 493.730230][ T4328] panic+0x2e5/0x730 [ 493.734176][ T4328] ? bpf_jit_dump+0xd0/0xd0 [ 493.738730][ T4328] ? ret_from_fork+0x1f/0x30 [ 493.743370][ T4328] __warn+0x2f8/0x4f0 [ 493.747376][ T4328] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 493.752996][ T4328] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 493.758576][ T4328] report_bug+0x2ba/0x4f0 [ 493.762938][ T4328] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 493.768610][ T4328] handle_bug+0x3a/0x70 [ 493.772820][ T4328] exc_invalid_op+0x16/0x40 [ 493.777357][ T4328] asm_exc_invalid_op+0x16/0x20 [ 493.782236][ T4328] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 493.788427][ T4328] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 7b ed f7 0f 0b eb bb e8 d8 7b ed f7 <0f> 0b eb b2 e8 cf 7b ed f7 0f 0b e9 77 fd ff ff e8 c3 7b ed f7 0f [ 493.808069][ T4328] RSP: 0018:ffffc900040a7aa0 EFLAGS: 00010293 [ 493.814183][ T4328] RAX: ffffffff8994f978 RBX: dffffc0000000000 RCX: ffff888026bc1dc0 [ 493.822189][ T4328] RDX: 0000000000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0 [ 493.830191][ T4328] RBP: ffffc900040a7b70 R08: ffffffff90af92a7 R09: 1ffffffff215f254 [ 493.838213][ T4328] R10: dffffc0000000000 R11: fffffbfff215f255 R12: ffff888076c535b8 [ 493.846222][ T4328] R13: 1ffff92000814f5c R14: 000000000000001f R15: ffff88802982cc90 [ 493.854234][ T4328] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 493.859821][ T4328] ? mutex_lock_nested+0x10/0x10 [ 493.864794][ T4328] ? trace_rdev_return_void+0x240/0x240 [ 493.870375][ T4328] cfg80211_process_wdev_events+0x3ad/0x550 [ 493.876313][ T4328] cfg80211_process_rdev_events+0x9d/0x110 [ 493.882147][ T4328] ? process_one_work+0x7b0/0x1160 [ 493.887319][ T4328] cfg80211_event_work+0x2b/0x40 [ 493.892304][ T4328] process_one_work+0x8a2/0x1160 [ 493.897308][ T4328] ? worker_detach_from_pool+0x240/0x240 [ 493.902974][ T4328] ? _raw_spin_lock_irq+0x86/0xf0 [ 493.908031][ T4328] ? _raw_spin_lock_irq+0xb7/0xf0 [ 493.913082][ T4328] ? _raw_spin_lock_irqsave+0x100/0x100 [ 493.918648][ T4328] ? kthread_data+0x4b/0xc0 [ 493.923178][ T4328] worker_thread+0xaa2/0x1270 [ 493.927903][ T4328] ? __kthread_parkme+0x162/0x1c0 [ 493.932965][ T4328] kthread+0x29d/0x330 [ 493.937060][ T4328] ? worker_clr_flags+0x1a0/0x1a0 [ 493.942113][ T4328] ? kthread_blkcg+0xd0/0xd0 [ 493.946742][ T4328] ret_from_fork+0x1f/0x30 [ 493.951200][ T4328] [ 493.954850][ T4328] Kernel Offset: disabled [ 493.959244][ T4328] Rebooting in 86400 seconds..