last executing test programs: 3.819512248s ago: executing program 2 (id=3186): bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@generic={0x0, 0x2000000, 0x18}, 0x18) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 3.480981346s ago: executing program 2 (id=3189): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r2, r0, 0x0, 0x0, 0x0}, 0x30) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) 3.274192171s ago: executing program 3 (id=3191): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r3 = socket$kcm(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.163159984s ago: executing program 2 (id=3192): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x9, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x49, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x480020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x81}, 0x0, 0xffffffffffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg(r2, &(0x7f0000001a00)={&(0x7f0000001380)=@vsock, 0x80, &(0x7f0000001880)=[{&(0x7f0000001480)=""/241, 0xffe3}], 0x1, &(0x7f0000001900)=""/241, 0xf1}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x10, &(0x7f0000000800), 0x0, 0x0, 0xf9, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 3.003970438s ago: executing program 0 (id=3194): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) 2.950616839s ago: executing program 2 (id=3195): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000400)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f0000000480)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', r4, @cgroup_skb=0x1, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x800, 0xe, 0x5, 0x5b}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000a80)=[{0x5, 0x5, 0xb}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x1}, 0x94) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xd) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 2.713036915s ago: executing program 0 (id=3196): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60a64160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000", 0x31}, {&(0x7f0000000440)="0647f33e7966fad8036f03d3f27eb37deeab3fe4846f8df0166cfffe352aef1ff50f8f5815e19a3f8037dd433f3777caf3c2708bb9b4f95e521a1ba8c9395c5977aad78b5b11658fc7f77392251c2a0507691a3b4fd494e0b45aacdaaa76606d4d65404b493a65a0310cbb3fcbf7bc956cc1ef4a596a52954841fa6673d1", 0x7e}, {&(0x7f00000004c0)="f529e1acc504efa28522a89596ac54823291b323978347944575725ea8f523a0520d75cc2e0aec8b05cf29f9c285e00643398b6b5b03ec6636b86e433e2187dbe0325789c5b6d77d76905652db1011ead7a573f8a792d51bdd", 0x59}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x24000845) socket$kcm(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$kcm(0x10, 0x2, 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000f00)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a00b8001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba170ee3b24277c652274c2777211a0d4cf32f5f2652ce56085bbc54d2a19", 0x79}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000040) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {0x0}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}], 0x7}, 0x40012100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, 0x0, &(0x7f0000000540)}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000003c0)=0x7) 2.489377601s ago: executing program 1 (id=3197): bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@generic={0x0, 0x2000000, 0x18}, 0x18) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 2.369292563s ago: executing program 3 (id=3198): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r3 = socket$kcm(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.331196764s ago: executing program 0 (id=3199): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r4 = socket$kcm(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.160929038s ago: executing program 2 (id=3200): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r4 = socket$kcm(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.061323941s ago: executing program 1 (id=3201): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) mkdir(0x0, 0x40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.709926779s ago: executing program 3 (id=3202): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60a64160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000", 0x31}, {&(0x7f0000000440)="0647f33e7966fad8036f03d3f27eb37deeab3fe4846f8df0166cfffe352aef1ff50f8f5815e19a3f8037dd433f3777caf3c2708bb9b4f95e521a1ba8c9395c5977aad78b5b11658fc7f77392251c2a0507691a3b4fd494e0b45aacdaaa76606d4d65404b493a65a0310cbb3fcbf7bc956cc1ef4a596a52954841fa6673d1", 0x7e}, {&(0x7f00000004c0)="f529e1acc504efa28522a89596ac54823291b323978347944575725ea8f523a0520d75cc2e0aec8b05cf29f9c285e00643398b6b5b03ec6636b86e433e2187dbe0325789c5b6d77d76905652db1011ead7a573f8a792d51bdd", 0x59}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x24000845) socket$kcm(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$kcm(0x10, 0x2, 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000f00)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a00b8001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba170ee3b24277c652274c2777211a0d4cf32f5f2652ce56085bbc54d2a19", 0x79}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000040) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {0x0}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}], 0x7}, 0x40012100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, 0x0, &(0x7f0000000540)}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000003c0)=0x7) 1.704859539s ago: executing program 1 (id=3210): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) mkdir(0x0, 0x40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.516633274s ago: executing program 3 (id=3203): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r3 = socket$kcm(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.403865176s ago: executing program 0 (id=3204): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) 1.312601949s ago: executing program 1 (id=3205): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae, 0x2, @perf_config_ext={0x0, 0x8}, 0x10d51d, 0x8, 0x0, 0x9, 0x4, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df070000884f28cc8ee60888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.053361225s ago: executing program 1 (id=3206): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000400)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f0000000480)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', r4, @cgroup_skb=0x1, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x800, 0xe, 0x5, 0x5b}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000a80)=[{0x5, 0x5, 0xb}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x1}, 0x94) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xd) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.053066245s ago: executing program 2 (id=3207): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r3 = socket$kcm(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 687.323184ms ago: executing program 3 (id=3208): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60a64160af36504001a0038001d00", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d550300280000000000000000", 0x31}, {&(0x7f0000000440)="0647f33e7966fad8036f03d3f27eb37deeab3fe4846f8df0166cfffe352aef1ff50f8f5815e19a3f8037dd433f3777caf3c2708bb9b4f95e521a1ba8c9395c5977aad78b5b11658fc7f77392251c2a0507691a3b4fd494e0b45aacdaaa76606d4d65404b493a65a0310cbb3fcbf7bc956cc1ef4a596a52954841fa6673d1", 0x7e}, {&(0x7f00000004c0)="f529e1acc504efa28522a89596ac54823291b323978347944575725ea8f523a0520d75cc2e0aec8b05cf29f9c285e00643398b6b5b03ec6636b86e433e2187dbe0325789c5b6d77d76905652db1011ead7a573f8a792d51bdd", 0x59}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x24000845) socket$kcm(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$kcm(0x10, 0x2, 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000f00)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a00b8001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba170ee3b24277c652274c2777211a0d4cf32f5f2652ce56085bbc54d2a19", 0x79}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000040) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {0x0}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}], 0x7}, 0x40012100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, 0x0, &(0x7f0000000540)}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000003c0)=0x7) 683.456094ms ago: executing program 0 (id=3217): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) 367.266461ms ago: executing program 0 (id=3209): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 272.195204ms ago: executing program 3 (id=3211): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000400)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f0000000480)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', r4, @cgroup_skb=0x1, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x800, 0xe, 0x5, 0x5b}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000a80)=[{0x5, 0x5, 0xb}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x1}, 0x94) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xd) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 0s ago: executing program 1 (id=3212): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x9, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x49, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x480020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x81}, 0x0, 0xffffffffffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg(r2, &(0x7f0000001a00)={&(0x7f0000001380)=@vsock, 0x80, &(0x7f0000001880)=[{&(0x7f0000001480)=""/241, 0xffe3}], 0x1, &(0x7f0000001900)=""/241, 0xf1}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x10, &(0x7f0000000800), 0x0, 0x0, 0xf9, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) kernel console output (not intermixed with test programs): port 2(bridge_slave_1) entered disabled state [ 712.820364][T10838] bridge_slave_0: left allmulticast mode [ 712.831237][T10838] bridge_slave_0: left promiscuous mode [ 712.851723][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.399203][T10858] syzkaller0: entered promiscuous mode [ 713.448419][T10858] syzkaller0: entered allmulticast mode [ 716.503790][T10875] syzkaller0: entered promiscuous mode [ 716.521624][T10875] syzkaller0: entered allmulticast mode [ 716.773220][T10882] syzkaller0: entered promiscuous mode [ 716.778727][T10882] syzkaller0: entered allmulticast mode [ 719.787086][T10905] syzkaller0: entered promiscuous mode [ 719.802116][T10905] syzkaller0: entered allmulticast mode [ 721.197476][T10914] syzkaller0: entered promiscuous mode [ 721.203068][T10914] syzkaller0: entered allmulticast mode [ 723.042962][T10941] syzkaller0: entered promiscuous mode [ 723.048457][T10941] syzkaller0: entered allmulticast mode [ 723.319028][T10947] delete_channel: no stack [ 724.881751][T10959] delete_channel: no stack [ 724.910667][T10961] delete_channel: no stack [ 725.162995][T10970] delete_channel: no stack [ 725.210598][T10972] delete_channel: no stack [ 725.421359][T10978] syzkaller0: entered promiscuous mode [ 725.427016][T10978] syzkaller0: entered allmulticast mode [ 725.928259][T10992] delete_channel: no stack [ 727.355945][T10998] delete_channel: no stack [ 728.037576][T11005] syzkaller0: entered promiscuous mode [ 728.051817][T11005] syzkaller0: entered allmulticast mode [ 729.590712][T11026] delete_channel: no stack [ 730.831751][T11038] syzkaller0: entered promiscuous mode [ 730.843748][T11038] syzkaller0: entered allmulticast mode [ 731.599903][T11049] delete_channel: no stack [ 733.061169][T11063] syzkaller0: entered promiscuous mode [ 733.067174][T11063] syzkaller0: entered allmulticast mode [ 734.590537][T11077] syzkaller0: entered promiscuous mode [ 734.602699][T11077] syzkaller0: entered allmulticast mode [ 736.620307][T11116] syzkaller0: entered promiscuous mode [ 736.629772][T11116] syzkaller0: entered allmulticast mode [ 737.114599][T11126] netlink: 'syz.1.1518': attribute type 29 has an invalid length. [ 738.968762][T11125] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1518'. [ 738.991714][T11126] netlink: 'syz.1.1518': attribute type 29 has an invalid length. [ 739.011877][T11131] netlink: 'syz.1.1518': attribute type 39 has an invalid length. [ 739.219028][T11135] syzkaller0: entered promiscuous mode [ 739.224808][T11135] syzkaller0: entered allmulticast mode [ 741.837817][T11167] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1532'. [ 741.986440][T11167] netlink: 'syz.3.1532': attribute type 29 has an invalid length. [ 742.030965][T11167] netlink: 'syz.3.1532': attribute type 29 has an invalid length. [ 742.284422][T11177] netlink: 'syz.3.1532': attribute type 39 has an invalid length. [ 742.742413][T11182] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1546'. [ 742.953881][T11182] netlink: 'syz.0.1546': attribute type 29 has an invalid length. [ 743.011030][T11182] netlink: 'syz.0.1546': attribute type 29 has an invalid length. [ 743.248283][T11195] syzkaller0: entered promiscuous mode [ 743.255561][T11195] syzkaller0: entered allmulticast mode [ 743.262719][T11182] netlink: 'syz.0.1546': attribute type 39 has an invalid length. [ 743.440648][T11197] syzkaller0: entered promiscuous mode [ 743.448081][T11197] syzkaller0: entered allmulticast mode [ 746.489251][T11220] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1555'. [ 746.554911][T11220] netlink: 'syz.0.1555': attribute type 29 has an invalid length. [ 746.590037][T11220] netlink: 'syz.0.1555': attribute type 29 has an invalid length. [ 746.821341][T11231] netlink: 'syz.0.1555': attribute type 39 has an invalid length. [ 747.403099][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.411527][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.466390][T11243] syzkaller0: entered promiscuous mode [ 748.481526][T11243] syzkaller0: entered allmulticast mode [ 750.834270][T11271] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1573'. [ 750.980847][T11271] netlink: 'syz.3.1573': attribute type 29 has an invalid length. [ 751.056983][T11271] netlink: 'syz.3.1573': attribute type 29 has an invalid length. [ 751.173229][T11271] netlink: 'syz.3.1573': attribute type 39 has an invalid length. [ 751.817611][T11287] syzkaller0: entered promiscuous mode [ 751.824169][T11287] syzkaller0: entered allmulticast mode [ 753.491296][T11304] syzkaller0: entered promiscuous mode [ 753.521755][T11304] syzkaller0: entered allmulticast mode [ 753.939936][T11322] netlink: 'syz.3.1591': attribute type 29 has an invalid length. [ 755.341242][T11321] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1591'. [ 755.353680][T11322] netlink: 'syz.3.1591': attribute type 29 has an invalid length. [ 755.362205][T11325] netlink: 'syz.3.1591': attribute type 39 has an invalid length. [ 755.774858][T11336] syzkaller0: entered promiscuous mode [ 755.780848][T11336] syzkaller0: entered allmulticast mode [ 760.173630][T11361] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1604'. [ 760.253444][T11361] netlink: 'syz.2.1604': attribute type 29 has an invalid length. [ 760.282482][T11361] netlink: 'syz.2.1604': attribute type 29 has an invalid length. [ 760.471594][T11372] netlink: 'syz.2.1604': attribute type 39 has an invalid length. [ 761.048857][T11385] syzkaller0: entered promiscuous mode [ 761.058497][T11385] syzkaller0: entered allmulticast mode [ 763.111040][T11409] syzkaller0: entered promiscuous mode [ 763.117478][T11409] syzkaller0: entered allmulticast mode [ 763.271407][T11419] netlink: 'syz.0.1626': attribute type 29 has an invalid length. [ 764.968944][T11416] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1626'. [ 764.978825][T11419] netlink: 'syz.0.1626': attribute type 29 has an invalid length. [ 764.987486][T11430] netlink: 'syz.0.1626': attribute type 39 has an invalid length. [ 765.221840][T11441] syzkaller0: entered promiscuous mode [ 765.251547][T11441] syzkaller0: entered allmulticast mode [ 767.016205][T11468] netlink: 'syz.3.1647': attribute type 29 has an invalid length. [ 768.160946][T11467] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1647'. [ 768.173269][T11468] netlink: 'syz.3.1647': attribute type 29 has an invalid length. [ 768.186932][T11471] netlink: 'syz.3.1647': attribute type 39 has an invalid length. [ 769.158666][T11494] syzkaller0: entered promiscuous mode [ 769.175422][T11494] syzkaller0: entered allmulticast mode [ 769.182589][T11499] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1662'. [ 769.268528][T11499] netlink: 'syz.3.1662': attribute type 29 has an invalid length. [ 771.630957][T11499] netlink: 'syz.3.1662': attribute type 29 has an invalid length. [ 771.640754][T11511] netlink: 'syz.3.1662': attribute type 39 has an invalid length. [ 772.443699][T11538] syzkaller0: entered promiscuous mode [ 772.449247][T11538] syzkaller0: entered allmulticast mode [ 774.505498][T11543] syzkaller0: entered promiscuous mode [ 774.511013][T11543] syzkaller0: entered allmulticast mode [ 774.586297][T11545] syzkaller0: entered promiscuous mode [ 774.591868][T11545] syzkaller0: entered allmulticast mode [ 774.698101][T11548] syzkaller0: entered promiscuous mode [ 774.703785][T11548] syzkaller0: entered allmulticast mode [ 775.984445][T11558] netlink: 'syz.3.1682': attribute type 29 has an invalid length. [ 780.404299][T11557] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1682'. [ 780.413736][T11558] netlink: 'syz.3.1682': attribute type 29 has an invalid length. [ 780.424738][T11561] netlink: 'syz.3.1682': attribute type 39 has an invalid length. [ 780.496694][T11574] syzkaller0: entered promiscuous mode [ 780.509352][T11574] syzkaller0: entered allmulticast mode [ 782.690337][T11587] ipvlan1: entered promiscuous mode [ 782.695830][T11587] ipvlan1: entered allmulticast mode [ 782.701162][T11587] veth0_vlan: entered allmulticast mode [ 782.768377][T11589] syzkaller0: entered promiscuous mode [ 782.775644][T11589] syzkaller0: entered allmulticast mode [ 785.256039][T11617] syzkaller0: entered promiscuous mode [ 785.261649][T11617] syzkaller0: entered allmulticast mode [ 785.269552][T11619] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1700'. [ 785.379879][T11619] netlink: 'syz.1.1700': attribute type 29 has an invalid length. [ 788.214157][T11619] netlink: 'syz.1.1700': attribute type 29 has an invalid length. [ 788.222809][T11627] netlink: 'syz.1.1700': attribute type 39 has an invalid length. [ 788.231615][T11629] ipvlan1: entered promiscuous mode [ 788.241894][T11629] ipvlan1: entered allmulticast mode [ 788.250788][T11629] veth0_vlan: entered allmulticast mode [ 788.803287][T11646] syzkaller0: entered promiscuous mode [ 788.841345][T11646] syzkaller0: entered allmulticast mode [ 789.068552][T11653] syzkaller0: entered promiscuous mode [ 789.090376][T11653] syzkaller0: entered allmulticast mode [ 790.473759][T11670] netlink: 'syz.2.1717': attribute type 29 has an invalid length. [ 791.678298][T11667] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1717'. [ 791.688418][T11669] ipvlan1: entered promiscuous mode [ 791.694555][T11669] ipvlan1: entered allmulticast mode [ 791.708883][T11669] veth0_vlan: entered allmulticast mode [ 791.718948][T11670] netlink: 'syz.2.1717': attribute type 29 has an invalid length. [ 791.739304][T11673] netlink: 'syz.2.1717': attribute type 39 has an invalid length. [ 793.820336][T11698] netlink: 46603 bytes leftover after parsing attributes in process `syz.1.1731'. [ 793.905115][T11701] syzkaller0: entered promiscuous mode [ 793.910825][T11701] syzkaller0: entered allmulticast mode [ 793.935656][T11698] netlink: 'syz.1.1731': attribute type 29 has an invalid length. [ 793.994370][T11698] netlink: 'syz.1.1731': attribute type 29 has an invalid length. [ 795.589466][T11712] netlink: 'syz.1.1731': attribute type 39 has an invalid length. [ 795.726784][T11720] netlink: 46603 bytes leftover after parsing attributes in process `syz.0.1744'. [ 795.798204][T11720] netlink: 'syz.0.1744': attribute type 29 has an invalid length. [ 795.826305][T11719] syzkaller0: entered promiscuous mode [ 795.832461][T11719] syzkaller0: entered allmulticast mode [ 795.845291][T11720] netlink: 'syz.0.1744': attribute type 29 has an invalid length. [ 795.971939][T11723] netlink: 'syz.0.1744': attribute type 39 has an invalid length. [ 798.090900][T11753] netlink: 46603 bytes leftover after parsing attributes in process `syz.2.1749'. [ 798.150980][T11753] netlink: 'syz.2.1749': attribute type 29 has an invalid length. [ 798.170190][T11753] netlink: 'syz.2.1749': attribute type 29 has an invalid length. [ 798.404314][T11759] netlink: 'syz.2.1749': attribute type 39 has an invalid length. [ 799.403128][T11781] netlink: 46603 bytes leftover after parsing attributes in process `syz.1.1770'. [ 799.503736][T11781] netlink: 'syz.1.1770': attribute type 29 has an invalid length. [ 799.517113][T11781] netlink: 'syz.1.1770': attribute type 29 has an invalid length. [ 799.648337][T11787] netlink: 'syz.1.1770': attribute type 39 has an invalid length. [ 800.319310][T11806] netlink: 46603 bytes leftover after parsing attributes in process `syz.0.1781'. [ 800.947345][T11821] syzkaller0: entered promiscuous mode [ 800.956677][T11821] syzkaller0: entered allmulticast mode [ 803.165666][T11835] syzkaller0: entered promiscuous mode [ 803.191633][T11835] syzkaller0: entered allmulticast mode [ 805.458308][T11871] syzkaller0: entered promiscuous mode [ 805.464147][T11871] syzkaller0: entered allmulticast mode [ 807.418442][T11885] syzkaller0: entered promiscuous mode [ 807.464020][T11885] syzkaller0: entered allmulticast mode [ 808.840785][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.847483][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.232842][T11898] syzkaller0: entered promiscuous mode [ 809.238393][T11898] syzkaller0: entered allmulticast mode [ 811.349037][T11923] syzkaller0: entered promiscuous mode [ 811.356057][T11923] syzkaller0: entered allmulticast mode [ 813.263278][T11942] syzkaller0: entered promiscuous mode [ 813.272136][T11942] syzkaller0: entered allmulticast mode [ 820.579813][T12132] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1912'. [ 820.628806][T12132] validate_nla: 3 callbacks suppressed [ 820.628857][T12132] netlink: 'syz.2.1912': attribute type 29 has an invalid length. [ 820.709275][T12132] netlink: 'syz.2.1912': attribute type 29 has an invalid length. [ 820.823903][T12132] netlink: 'syz.2.1912': attribute type 39 has an invalid length. [ 822.350214][T12180] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1933'. [ 822.436558][T12180] netlink: 'syz.1.1933': attribute type 29 has an invalid length. [ 822.468621][T12180] netlink: 'syz.1.1933': attribute type 29 has an invalid length. [ 822.632950][T12190] netlink: 'syz.1.1933': attribute type 39 has an invalid length. [ 824.054884][T12238] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1956'. [ 824.126468][T12238] netlink: 'syz.2.1956': attribute type 29 has an invalid length. [ 824.164902][T12238] netlink: 'syz.2.1956': attribute type 29 has an invalid length. [ 824.374685][T12248] netlink: 'syz.2.1956': attribute type 39 has an invalid length. [ 825.673464][T12288] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1979'. [ 825.767318][T12288] netlink: 'syz.1.1979': attribute type 29 has an invalid length. [ 825.804397][T12288] netlink: 'syz.1.1979': attribute type 29 has an invalid length. [ 825.947069][T12302] netlink: 'syz.1.1979': attribute type 39 has an invalid length. [ 826.107897][T12304] syzkaller0: entered promiscuous mode [ 826.117238][T12304] syzkaller0: entered allmulticast mode [ 828.415602][T12324] syzkaller0: entered promiscuous mode [ 828.457917][T12324] syzkaller0: entered allmulticast mode [ 829.003365][T12340] netlink: 'syz.1.1996': attribute type 29 has an invalid length. [ 830.423502][T12339] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1996'. [ 830.440670][T12340] netlink: 'syz.1.1996': attribute type 29 has an invalid length. [ 830.449154][T12345] netlink: 'syz.1.1996': attribute type 39 has an invalid length. [ 830.692750][T12350] syzkaller0: entered promiscuous mode [ 830.716872][T12350] syzkaller0: entered allmulticast mode [ 832.925421][T12376] syzkaller0: entered promiscuous mode [ 832.953903][T12376] syzkaller0: entered allmulticast mode [ 834.665837][T12384] syzkaller0: entered promiscuous mode [ 834.697291][T12384] syzkaller0: entered allmulticast mode [ 836.671898][T12411] syzkaller0: entered promiscuous mode [ 836.679162][T12411] syzkaller0: entered allmulticast mode [ 837.575282][T12437] netlink: 'syz.0.2039': attribute type 29 has an invalid length. [ 838.961304][T12437] netlink: 'syz.0.2039': attribute type 29 has an invalid length. [ 838.980498][T12442] netlink: 'syz.0.2039': attribute type 39 has an invalid length. [ 839.528989][T12456] syzkaller0: entered promiscuous mode [ 839.561570][T12456] syzkaller0: entered allmulticast mode [ 841.369099][T12468] syzkaller0: entered promiscuous mode [ 841.377824][T12468] syzkaller0: entered allmulticast mode [ 841.502705][T12478] netlink: 'syz.2.2054': attribute type 29 has an invalid length. [ 843.449863][T12478] netlink: 'syz.2.2054': attribute type 29 has an invalid length. [ 843.458604][T12486] netlink: 'syz.2.2054': attribute type 39 has an invalid length. [ 843.852513][T12499] syzkaller0: entered promiscuous mode [ 843.861528][T12499] syzkaller0: entered allmulticast mode [ 845.435537][T12512] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2067'. [ 845.450980][T12512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 845.892176][T12529] netlink: 'syz.0.2074': attribute type 29 has an invalid length. [ 845.910049][T12529] netlink: 'syz.0.2074': attribute type 29 has an invalid length. [ 846.073078][T12533] netlink: 'syz.0.2074': attribute type 39 has an invalid length. [ 846.310877][T12537] syzkaller0: entered promiscuous mode [ 846.318232][T12537] syzkaller0: entered allmulticast mode [ 848.165800][T12545] netlink: 'syz.1.2080': attribute type 27 has an invalid length. [ 848.207474][T12545] bond0: (slave bond_slave_0): Releasing backup interface [ 849.069271][T12577] netlink: 'syz.0.2096': attribute type 27 has an invalid length. [ 849.174883][T12577] bond0: (slave bond_slave_0): Releasing backup interface [ 850.537906][T12612] netlink: 'syz.3.2109': attribute type 27 has an invalid length. [ 850.631323][T12614] netlink: 'syz.1.2112': attribute type 27 has an invalid length. [ 850.642901][T12614] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2112'. [ 850.666861][T12612] bond0: (slave bond_slave_0): Releasing backup interface [ 850.767218][T12618] netlink: 'syz.0.2114': attribute type 33 has an invalid length. [ 850.776818][T12618] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2114'. [ 850.845963][T12620] netlink: 'syz.1.2116': attribute type 4 has an invalid length. [ 850.873012][T12620] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2116'. [ 850.895842][T12620] .`: renamed from bond0 (while UP) [ 850.958855][T12622] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2117'. [ 850.974193][T12624] netlink: 'syz.3.2118': attribute type 2 has an invalid length. [ 850.986420][T12624] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2118'. [ 851.065586][T12626] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2120'. [ 851.103910][T12626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 851.170057][T12628] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2121'. [ 851.225117][T12628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 851.507524][T12645] netlink: 'syz.3.2126': attribute type 10 has an invalid length. [ 851.516538][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.524071][T12645] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.548524][T12645] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.556039][T12645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.564449][T12645] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.571723][T12645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.599417][T12645] team0: Port device bridge0 added [ 851.723456][T12648] netlink: 'syz.1.2128': attribute type 29 has an invalid length. [ 851.734704][T12648] netlink: 'syz.1.2128': attribute type 29 has an invalid length. [ 851.787437][T12650] netlink: 'syz.0.2129': attribute type 4 has an invalid length. [ 851.795612][T12650] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2129'. [ 851.806281][T12650] .`: renamed from bond0 (while UP) [ 852.005949][T12656] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2130'. [ 852.015851][T12654] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2131'. [ 852.428632][T12667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.048871][T12673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.177379][T12670] syzkaller0: entered promiscuous mode [ 853.193269][T12670] syzkaller0: entered allmulticast mode [ 854.805595][T12691] validate_nla: 3 callbacks suppressed [ 854.805638][T12691] netlink: 'syz.2.2142': attribute type 2 has an invalid length. [ 854.985151][T12704] netlink: 'syz.2.2147': attribute type 4 has an invalid length. [ 855.002715][T12704] .`: renamed from bond0 (while UP) [ 855.166320][T12709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 855.742196][T12714] __nla_validate_parse: 7 callbacks suppressed [ 855.742244][T12714] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2150'. [ 855.759256][T12714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 855.861152][T12716] netlink: 'syz.1.2153': attribute type 33 has an invalid length. [ 855.871534][T12716] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2153'. [ 856.008821][T12720] netlink: 'syz.2.2155': attribute type 27 has an invalid length. [ 856.027514][T12720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2155'. [ 856.147840][T12723] netlink: 'syz.1.2166': attribute type 29 has an invalid length. [ 856.196660][T12723] netlink: 'syz.1.2166': attribute type 29 has an invalid length. [ 856.310363][T12727] netlink: 'syz.1.2166': attribute type 39 has an invalid length. [ 856.473695][T12731] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2159'. [ 856.503728][T12731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 857.339810][T12747] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2164'. [ 857.356048][T12747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 857.554500][T12749] netlink: 'syz.3.2165': attribute type 27 has an invalid length. [ 857.868364][T12761] netlink: 'syz.0.2172': attribute type 27 has an invalid length. [ 857.877925][T12761] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2172'. [ 858.058615][T12764] netlink: 'syz.3.2173': attribute type 29 has an invalid length. [ 858.343598][T12776] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2176'. [ 858.386351][T12776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 859.839301][T12799] syzkaller0: entered promiscuous mode [ 859.845218][T12799] syzkaller0: entered allmulticast mode [ 859.931132][T12808] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2184'. [ 859.958447][T12808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.520883][T12827] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2193'. [ 861.537911][T12827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.730245][T12835] validate_nla: 6 callbacks suppressed [ 861.730274][T12835] netlink: 'syz.0.2196': attribute type 29 has an invalid length. [ 861.748124][T12835] netlink: 'syz.0.2196': attribute type 29 has an invalid length. [ 861.882277][T12838] netlink: 'syz.0.2196': attribute type 39 has an invalid length. [ 862.723551][T12854] syzkaller0: entered promiscuous mode [ 862.734544][T12854] syzkaller0: entered allmulticast mode [ 862.742606][T12858] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2205'. [ 862.762172][T12858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.454318][T12869] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 864.475493][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.835494][T12888] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 864.866459][T12882] netlink: 'syz.2.2213': attribute type 29 has an invalid length. [ 864.873686][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.901633][T12888] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 864.917039][T12888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.929581][T12882] netlink: 'syz.2.2213': attribute type 29 has an invalid length. [ 864.957037][T12890] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 864.976054][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.993319][T12890] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 865.008488][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.026727][T12890] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 865.069014][T12890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.107626][T12894] netlink: 'syz.2.2213': attribute type 39 has an invalid length. [ 865.478820][T12900] syzkaller0: entered promiscuous mode [ 865.484778][T12900] syzkaller0: entered allmulticast mode [ 867.511299][T12923] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 867.524052][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.536204][T12923] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 867.548553][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.558548][T12923] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 867.569479][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.761345][T12935] netlink: 'syz.1.2235': attribute type 29 has an invalid length. [ 867.786109][T12935] netlink: 'syz.1.2235': attribute type 29 has an invalid length. [ 867.909479][T12940] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 867.926337][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.937148][T12940] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 867.954302][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.970191][T12940] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 867.985306][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.017710][T12946] netlink: 'syz.1.2235': attribute type 39 has an invalid length. [ 868.223140][T12949] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2239'. [ 868.241241][T12949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 868.448480][T12951] syzkaller0: entered promiscuous mode [ 868.454268][T12951] syzkaller0: entered allmulticast mode [ 870.170681][T12955] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 870.181557][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.191775][T12955] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 870.203525][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.213475][T12955] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 870.223974][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.235108][T12961] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2244'. [ 870.252447][T12961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 870.283270][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.289768][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.410262][T12968] netlink: 'syz.3.2247': attribute type 10 has an invalid length. [ 870.425247][T12968] team0: Port device virt_wifi0 added [ 870.647117][T12974] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 870.657960][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.666330][T12973] netlink: 'syz.2.2250': attribute type 29 has an invalid length. [ 870.686796][T12974] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 870.706383][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.741022][T12974] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 870.752520][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.766091][T12973] netlink: 'syz.2.2250': attribute type 29 has an invalid length. [ 870.889172][T12973] netlink: 'syz.2.2250': attribute type 39 has an invalid length. [ 870.992146][T12987] syzkaller0: entered promiscuous mode [ 870.997839][T12987] syzkaller0: entered allmulticast mode [ 872.860861][T12990] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 872.875040][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.885067][T12990] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 872.895680][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.905572][T12990] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 872.916051][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.927064][T12994] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2255'. [ 872.948974][T12994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 873.060536][T12999] netlink: 'syz.0.2258': attribute type 10 has an invalid length. [ 873.086133][T12999] team0: Port device virt_wifi0 added [ 873.256041][T13003] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 873.275149][T13003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.293660][T13003] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 873.314378][T13003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.329682][T13003] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 873.349075][T13003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.487316][T13015] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2263'. [ 873.519877][T13015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 873.600864][T13014] netlink: 'syz.2.2264': attribute type 29 has an invalid length. [ 873.609370][T13016] syzkaller0: entered promiscuous mode [ 873.609397][T13016] syzkaller0: entered allmulticast mode [ 873.639924][T13014] netlink: 'syz.2.2264': attribute type 29 has an invalid length. [ 875.544404][T13024] netlink: 'syz.2.2264': attribute type 39 has an invalid length. [ 875.554143][T13026] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 875.568225][T13026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.579822][T13026] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 875.592527][T13026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.602441][T13026] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 875.615056][T13026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.912385][T13038] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2270'. [ 875.930489][T13038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 876.038579][T13037] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 876.086919][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'. [ 876.342707][T13041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 876.363311][T13041] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 876.372844][T13041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 876.381235][T13041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 876.396394][T13041] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 876.408896][T13041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 876.635927][T13040] chnl_net:caif_netlink_parms(): no params data found [ 876.779981][T13040] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.813034][T13040] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.820393][T13040] bridge_slave_0: entered allmulticast mode [ 876.833438][T13040] bridge_slave_0: entered promiscuous mode [ 876.859414][T13040] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.866916][T13040] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.891054][T13040] bridge_slave_1: entered allmulticast mode [ 876.906670][T13040] bridge_slave_1: entered promiscuous mode [ 877.008506][T13059] syzkaller0: entered promiscuous mode [ 877.016330][T13059] syzkaller0: entered allmulticast mode [ 877.080251][T13040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.124585][T13063] netlink: 'syz.2.2279': attribute type 29 has an invalid length. [ 878.044271][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 878.514103][ T51] Bluetooth: hci0: command tx timeout [ 878.864698][T13040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.885644][T13063] netlink: 'syz.2.2279': attribute type 29 has an invalid length. [ 878.904785][T13069] netlink: 'syz.2.2279': attribute type 39 has an invalid length. [ 878.975248][T13040] team0: Port device team_slave_0 added [ 878.999719][T13040] team0: Port device team_slave_1 added [ 879.050076][T13040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.060473][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.095515][T13040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.188239][T13040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.234587][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.261991][T13040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.380633][T13040] hsr_slave_0: entered promiscuous mode [ 879.399765][T13040] hsr_slave_1: entered promiscuous mode [ 879.406609][T13040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 879.414367][T13040] Cannot create hsr debugfs directory [ 879.456077][T13085] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2285'. [ 879.471264][T13085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 879.505544][T13084] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 879.541079][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2284'. [ 879.680088][T13040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.806947][T13040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.937284][T13040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.021138][T13040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.280113][T13094] bridge_slave_1: left allmulticast mode [ 880.294623][T13094] bridge_slave_1: left promiscuous mode [ 880.360677][T13094] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.599692][T13094] bridge_slave_0: left allmulticast mode [ 880.601707][ T51] Bluetooth: hci0: command tx timeout [ 880.614648][T13094] bridge_slave_0: left promiscuous mode [ 880.636683][T13094] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.237898][T13040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 881.260410][T13040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 881.273457][T13040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 881.297252][T13040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 881.605406][T13040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.627247][T13040] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.640734][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.648567][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.687387][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.694605][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.968676][T13119] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2297'. [ 881.987327][T13119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 882.035754][ T12] wlan1: Trigger new scan to find an IBSS to join [ 882.062398][T13040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.110524][T13040] veth0_vlan: entered promiscuous mode [ 882.124839][T13040] veth1_vlan: entered promiscuous mode [ 882.158061][T13040] veth0_macvtap: entered promiscuous mode [ 882.169081][T13040] veth1_macvtap: entered promiscuous mode [ 882.190763][T13040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.206752][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.218296][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.228510][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.239344][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.249252][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.259842][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.269951][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.280641][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.292958][T13040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.305933][T13040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.315155][T13040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.324114][T13040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.333851][T13040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.415898][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.424106][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.460690][ T5845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.469703][ T5845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.577654][T13125] netlink: 'syz.0.2269': attribute type 10 has an invalid length. [ 882.587511][T13125] syz_tun: entered promiscuous mode [ 882.622622][T13125] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 882.671804][ T51] Bluetooth: hci0: command tx timeout [ 883.072339][ T49] wlan1: Trigger new scan to find an IBSS to join [ 883.280508][T13141] bridge_slave_1: left allmulticast mode [ 883.298515][T13141] bridge_slave_1: left promiscuous mode [ 883.338836][T13141] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.438804][T13141] bridge_slave_0: left allmulticast mode [ 883.446689][T13141] bridge_slave_0: left promiscuous mode [ 883.469372][T13141] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.595160][T13141] team0: Port device bridge0 removed [ 883.898797][T13151] netlink: 'syz.2.2308': attribute type 10 has an invalid length. [ 883.907565][T13151] syz_tun: entered promiscuous mode [ 883.932385][T13151] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 883.990988][T13149] bridge_slave_1: left allmulticast mode [ 884.011824][T13149] bridge_slave_1: left promiscuous mode [ 884.046850][T13149] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.196867][ T79] wlan1: Creating new IBSS network, BSSID c2:00:12:12:b9:8d [ 884.284817][T13149] bridge_slave_0: left allmulticast mode [ 884.302595][T13149] bridge_slave_0: left promiscuous mode [ 884.315775][T13149] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.470556][T13156] netlink: 'syz.1.2310': attribute type 10 has an invalid length. [ 884.479288][T13156] syz_tun: entered promiscuous mode [ 884.500038][T13156] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 884.751584][ T51] Bluetooth: hci0: command tx timeout [ 885.074022][ T12] wlan1: Trigger new scan to find an IBSS to join [ 885.143587][T13164] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 885.548083][T13174] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 886.138587][T13190] netlink: 'syz.2.2324': attribute type 10 has an invalid length. [ 887.462999][T13207] ¥: port 1(team0) entered blocking state [ 887.508829][T13207] ¥: port 1(team0) entered disabled state [ 887.537444][T13207] team0: entered allmulticast mode [ 887.561515][T13207] team_slave_0: entered allmulticast mode [ 887.568360][T13207] team_slave_1: entered allmulticast mode [ 887.584018][T13207] team0: entered promiscuous mode [ 887.589128][T13207] team_slave_0: entered promiscuous mode [ 887.603526][T13207] team_slave_1: entered promiscuous mode [ 887.842433][T13219] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2339'. [ 887.888824][T13219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 888.048883][T13222] ¥: port 1(team0) entered blocking state [ 888.055249][T13222] ¥: port 1(team0) entered disabled state [ 888.063755][T13222] team0: entered allmulticast mode [ 888.069394][T13222] team_slave_0: entered allmulticast mode [ 888.077768][T13222] team_slave_1: entered allmulticast mode [ 888.087256][T13222] team0: entered promiscuous mode [ 888.092626][T13222] team_slave_0: entered promiscuous mode [ 888.098843][T13222] team_slave_1: entered promiscuous mode [ 888.108663][T13226] ¥: port 1(team0) entered blocking state [ 888.129128][T13226] ¥: port 1(team0) entered disabled state [ 888.155844][T13226] team0: entered allmulticast mode [ 888.170208][T13226] team_slave_0: entered allmulticast mode [ 888.186763][T13226] team_slave_1: entered allmulticast mode [ 888.213227][T13226] team0: entered promiscuous mode [ 888.230683][T13226] team_slave_0: entered promiscuous mode [ 888.250182][T13226] team_slave_1: entered promiscuous mode [ 888.562688][T13241] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2346'. [ 888.579304][T13241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 889.058247][T13251] ¥: port 1(team0) entered blocking state [ 889.075446][T13251] ¥: port 1(team0) entered disabled state [ 889.083256][T13251] team0: entered allmulticast mode [ 889.094321][T13251] team_slave_0: entered allmulticast mode [ 889.100502][T13251] team_slave_1: entered allmulticast mode [ 889.110336][T13251] virt_wifi0: entered allmulticast mode [ 889.122506][T13251] team0: entered promiscuous mode [ 889.127751][T13251] team_slave_0: entered promiscuous mode [ 889.134305][T13251] team_slave_1: entered promiscuous mode [ 889.141067][T13251] virt_wifi0: entered promiscuous mode [ 889.441881][T13257] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 889.467684][T13262] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2357'. [ 889.491240][T13262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 889.850414][T13272] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 890.295084][T13286] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2366'. [ 890.336297][T13286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 890.526684][T13293] netlink: 'syz.2.2370': attribute type 29 has an invalid length. [ 890.537295][T13293] netlink: 'syz.2.2370': attribute type 29 has an invalid length. [ 890.763156][T13299] netlink: 'syz.2.2370': attribute type 39 has an invalid length. [ 891.067336][T13303] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 891.614778][T13315] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2380'. [ 891.639596][T13315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.033086][ T42] wlan1: Trigger new scan to find an IBSS to join [ 892.095461][T13327] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2384'. [ 892.163456][T13327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.275783][T13329] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 892.407518][T13041] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 892.418988][T13041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 892.430711][T13041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 892.444614][T13041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 892.464433][T13041] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 892.473448][T13041] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 892.898930][T13344] netlink: 'syz.1.2391': attribute type 29 has an invalid length. [ 892.948892][T13344] netlink: 'syz.1.2391': attribute type 29 has an invalid length. [ 893.072174][T13332] chnl_net:caif_netlink_parms(): no params data found [ 893.113841][T13351] netlink: 'syz.1.2391': attribute type 39 has an invalid length. [ 893.266999][T13332] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.282137][T13332] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.289761][T13332] bridge_slave_0: entered allmulticast mode [ 893.302968][T13332] bridge_slave_0: entered promiscuous mode [ 893.319660][T13332] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.326986][T13332] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.334795][T13332] bridge_slave_1: entered allmulticast mode [ 893.345198][T13332] bridge_slave_1: entered promiscuous mode [ 893.384006][T13332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.397276][T13332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.439396][T13332] team0: Port device team_slave_0 added [ 893.451055][T13332] team0: Port device team_slave_1 added [ 893.480368][T13332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.489243][T13332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.516096][T13332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.529988][T13332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.537397][T13332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.565685][T13332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.635315][T13332] hsr_slave_0: entered promiscuous mode [ 893.646510][T13332] hsr_slave_1: entered promiscuous mode [ 893.653408][T13332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.661032][T13332] Cannot create hsr debugfs directory [ 893.897624][T13332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.023120][T13332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.064894][T13361] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2395'. [ 894.092910][T13361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 894.192185][T13332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.339912][T13332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.512726][T13041] Bluetooth: hci4: command tx timeout [ 894.541696][T13372] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 894.575194][T13332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 894.590013][T13332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 894.605844][T13332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 894.633168][T13332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 894.775197][T13332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.834920][T13332] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.870444][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.877686][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.942996][T13378] netlink: 'syz.2.2402': attribute type 29 has an invalid length. [ 894.973157][T13378] netlink: 'syz.2.2402': attribute type 29 has an invalid length. [ 895.037826][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.045056][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.073266][ T12] wlan1: Trigger new scan to find an IBSS to join [ 895.081419][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 895.245573][T13384] netlink: 'syz.2.2402': attribute type 39 has an invalid length. [ 895.328692][T13332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 895.498975][T13390] netlink: 'syz.0.2408': attribute type 10 has an invalid length. [ 895.522293][T13390] geneve0: entered promiscuous mode [ 895.580663][T13390] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 896.591617][T13041] Bluetooth: hci4: command tx timeout [ 896.924123][T13402] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 897.014220][T13332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.065077][T13332] veth0_vlan: entered promiscuous mode [ 897.073676][ T11] wlan1: Trigger new scan to find an IBSS to join [ 897.103258][T13332] veth1_vlan: entered promiscuous mode [ 897.149922][T13332] veth0_macvtap: entered promiscuous mode [ 897.166919][T13332] veth1_macvtap: entered promiscuous mode [ 897.189210][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.201877][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.213733][T13332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.230226][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.240979][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.251147][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.262403][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.272556][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.285585][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.295913][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.306387][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.317252][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.328022][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.340291][T13332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.352557][T13332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.362446][T13332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.371868][T13332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.380624][T13332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.458072][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.473091][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.495464][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.503491][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.658229][T13407] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 897.700983][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 898.262432][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 898.286927][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 898.295934][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 898.305552][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 898.316121][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 898.325110][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 898.545713][ T5776] .`: (slave syz_tun): Releasing backup interface [ 898.671809][T13041] Bluetooth: hci4: command tx timeout [ 898.688308][T13418] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2414'. [ 898.719651][T13418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 898.818711][T13416] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 898.859986][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 898.994025][ T49] wlan1: Trigger new scan to find an IBSS to join [ 899.011147][ T49] wlan1: Trigger new scan to find an IBSS to join [ 899.035453][T13413] chnl_net:caif_netlink_parms(): no params data found [ 899.197576][T13433] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 899.225160][T13430] ¥: port 1(team0) entered blocking state [ 899.238916][T13430] ¥: port 1(team0) entered disabled state [ 899.251088][T13430] team0: entered allmulticast mode [ 899.256916][T13430] team_slave_0: entered allmulticast mode [ 899.264946][T13430] team_slave_1: entered allmulticast mode [ 899.289650][T13430] team0: entered promiscuous mode [ 899.296403][T13430] team_slave_0: entered promiscuous mode [ 899.307068][T13430] team_slave_1: entered promiscuous mode [ 899.390910][T13413] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.400249][T13413] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.407990][T13413] bridge_slave_0: entered allmulticast mode [ 899.416251][T13413] bridge_slave_0: entered promiscuous mode [ 899.434593][T13433] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 899.446189][T13439] netlink: 'syz.0.2418': attribute type 39 has an invalid length. [ 899.573142][T13413] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.596768][T13413] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.615631][T13413] bridge_slave_1: entered allmulticast mode [ 899.629116][T13413] bridge_slave_1: entered promiscuous mode [ 899.759770][T13413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.783894][T13441] netlink: 'syz.3.2419': attribute type 10 has an invalid length. [ 899.814913][T13441] geneve0: entered promiscuous mode [ 899.909596][T13441] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 899.919476][ T49] wlan1: Creating new IBSS network, BSSID 76:59:01:29:05:08 [ 899.942200][T13413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.974428][ T49] wlan1: Creating new IBSS network, BSSID c2:1a:53:b5:3a:1c [ 900.032616][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 900.051191][T13413] team0: Port device team_slave_0 added [ 900.062016][T13413] team0: Port device team_slave_1 added [ 900.094157][T13413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.104173][T13413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.189281][T13413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.218629][T13413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.229513][T13413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.281863][T13413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.341770][T13413] hsr_slave_0: entered promiscuous mode [ 900.349321][T13413] hsr_slave_1: entered promiscuous mode [ 900.356221][T13413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 900.366614][T13413] Cannot create hsr debugfs directory [ 900.375601][T13445] bridge_slave_1: left allmulticast mode [ 900.387038][T13445] bridge_slave_1: left promiscuous mode [ 900.396232][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.428743][T13445] bridge_slave_0: left allmulticast mode [ 900.436516][T13041] Bluetooth: hci2: command tx timeout [ 900.442593][T13445] bridge_slave_0: left promiscuous mode [ 900.452248][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.765849][T13041] Bluetooth: hci4: command tx timeout [ 900.775211][T13413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.867859][T13413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.958314][T13413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.081914][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 901.144383][T13413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.217645][T13451] netlink: 'syz.0.2433': attribute type 29 has an invalid length. [ 901.247224][T13451] netlink: 'syz.0.2433': attribute type 29 has an invalid length. [ 902.463692][T13455] netlink: 'syz.0.2433': attribute type 39 has an invalid length. [ 902.473667][T13458] netlink: 'syz.2.2427': attribute type 10 has an invalid length. [ 902.493813][T13458] geneve0: entered promiscuous mode [ 902.514194][T13041] Bluetooth: hci2: command tx timeout [ 902.553462][T13458] .`: (slave geneve0): Enslaving as an active interface with an up link [ 902.781445][T13413] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 902.807154][T13413] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 902.824541][T13413] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 902.838090][T13413] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 902.930869][T13464] netlink: 'syz.2.2430': attribute type 10 has an invalid length. [ 903.048013][T13413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.073976][ T11] wlan1: Trigger new scan to find an IBSS to join [ 903.098208][T13413] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.123329][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.130663][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.168645][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.180169][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.529383][T13413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.578834][T13413] veth0_vlan: entered promiscuous mode [ 903.596064][T13413] veth1_vlan: entered promiscuous mode [ 903.630617][T13413] veth0_macvtap: entered promiscuous mode [ 903.641651][T13413] veth1_macvtap: entered promiscuous mode [ 903.663556][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.675126][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.685805][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.702436][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.717795][T13413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.736673][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.747722][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.757625][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.769107][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.779339][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.790050][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.800212][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.820714][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.841596][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.868060][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.886585][T13413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.898536][T13413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.910590][T13413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.934489][T13413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.950989][T13413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.960882][T13413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.982618][T13413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.010447][T13484] netlink: 'syz.2.2438': attribute type 29 has an invalid length. [ 904.591816][T13041] Bluetooth: hci2: command tx timeout [ 904.883074][ T5845] wlan1: Creating new IBSS network, BSSID ea:5d:c4:25:b8:d8 [ 904.913091][T13484] netlink: 'syz.2.2438': attribute type 29 has an invalid length. [ 904.946134][T13487] netlink: 'syz.2.2438': attribute type 39 has an invalid length. [ 905.164404][T11202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.216814][T11202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.289534][ T5845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.310536][ T5845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.395376][T13495] netlink: 'syz.3.2442': attribute type 10 has an invalid length. [ 905.889983][T13499] bridge_slave_1: left allmulticast mode [ 905.920082][T13499] bridge_slave_1: left promiscuous mode [ 906.006512][T13499] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.033414][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 906.219486][T13499] bridge_slave_0: left allmulticast mode [ 906.226785][T13499] bridge_slave_0: left promiscuous mode [ 906.238598][T13499] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.405773][T13506] netlink: 'syz.2.2446': attribute type 10 has an invalid length. [ 906.599740][T13511] netlink: 'syz.2.2449': attribute type 10 has an invalid length. [ 906.671796][T13041] Bluetooth: hci2: command tx timeout [ 906.871138][T13517] netlink: 'syz.0.2452': attribute type 29 has an invalid length. [ 906.902029][T13517] netlink: 'syz.0.2452': attribute type 29 has an invalid length. [ 907.058092][ T11] wlan1: Creating new IBSS network, BSSID 2a:33:94:50:7d:11 [ 907.106404][T13522] syzkaller0: entered promiscuous mode [ 907.114023][T13522] syzkaller0: entered allmulticast mode [ 907.121841][T13523] netlink: 'syz.0.2452': attribute type 39 has an invalid length. [ 907.228765][T13526] netlink: 'syz.2.2455': attribute type 10 has an invalid length. [ 909.324781][T13532] netlink: 'syz.0.2458': attribute type 10 has an invalid length. [ 909.669537][T13540] syzkaller0: entered promiscuous mode [ 909.676112][T13540] syzkaller0: entered allmulticast mode [ 910.745519][T13561] validate_nla: 1 callbacks suppressed [ 910.745612][T13561] netlink: 'syz.0.2466': attribute type 29 has an invalid length. [ 911.997017][T13557] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 912.009768][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 912.041396][T13561] netlink: 'syz.0.2466': attribute type 29 has an invalid length. [ 912.049355][T13564] netlink: 'syz.0.2466': attribute type 39 has an invalid length. [ 912.071867][T13553] ¥: port 1(team0) entered blocking state [ 912.077736][T13553] ¥: port 1(team0) entered disabled state [ 912.091821][T13553] team0: entered allmulticast mode [ 912.097010][T13553] team_slave_0: entered allmulticast mode [ 912.138449][T13553] team_slave_1: entered allmulticast mode [ 912.159447][T13553] team0: entered promiscuous mode [ 912.182337][T13553] team_slave_0: entered promiscuous mode [ 912.198524][T13553] team_slave_1: entered promiscuous mode [ 912.382336][T13568] netlink: 'syz.2.2468': attribute type 10 has an invalid length. [ 912.505786][T13573] netlink: 'syz.0.2472': attribute type 10 has an invalid length. [ 913.194829][T13588] syzkaller0: entered promiscuous mode [ 913.204377][T13588] syzkaller0: entered allmulticast mode [ 913.377363][T13596] netlink: 'syz.1.2480': attribute type 29 has an invalid length. [ 914.033061][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 915.557452][T13596] netlink: 'syz.1.2480': attribute type 29 has an invalid length. [ 915.569097][T13600] netlink: 'syz.1.2480': attribute type 39 has an invalid length. [ 915.647922][T13609] netlink: 'syz.3.2484': attribute type 10 has an invalid length. [ 915.658239][T13612] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 915.680492][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'. [ 915.801241][T13616] netlink: 'syz.3.2485': attribute type 10 has an invalid length. [ 915.947312][T13618] syzkaller0: entered promiscuous mode [ 915.961009][T13618] syzkaller0: entered allmulticast mode [ 916.527538][T13626] netlink: 'syz.3.2488': attribute type 10 has an invalid length. [ 916.819162][T13639] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2491'. [ 917.090127][ T49] wlan1: Trigger new scan to find an IBSS to join [ 918.031910][T11202] wlan1: Trigger new scan to find an IBSS to join [ 918.473222][T13632] syzkaller0: entered promiscuous mode [ 918.480367][T13632] syzkaller0: entered allmulticast mode [ 920.036198][ T11] wlan1: Trigger new scan to find an IBSS to join [ 920.493307][T13651] netlink: 'syz.1.2496': attribute type 10 has an invalid length. [ 920.503082][T13651] geneve0: entered promiscuous mode [ 920.519334][T13651] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 920.539072][T13650] netlink: 'syz.3.2495': attribute type 10 has an invalid length. [ 920.827215][T13657] netlink: 'syz.3.2499': attribute type 10 has an invalid length. [ 920.867742][T13660] netlink: 'syz.1.2500': attribute type 10 has an invalid length. [ 920.980230][ T49] wlan1: Creating new IBSS network, BSSID 2a:eb:d0:c5:f0:46 [ 921.073361][T11202] wlan1: Trigger new scan to find an IBSS to join [ 921.133873][T13665] syzkaller0: entered promiscuous mode [ 921.165852][T13665] syzkaller0: entered allmulticast mode [ 921.379103][T13671] netlink: 'syz.2.2505': attribute type 29 has an invalid length. [ 923.270724][T13671] netlink: 'syz.2.2505': attribute type 29 has an invalid length. [ 923.281422][T13677] netlink: 'syz.2.2505': attribute type 39 has an invalid length. [ 924.034510][T11202] wlan1: Trigger new scan to find an IBSS to join [ 924.534259][T13695] netlink: 'syz.2.2514': attribute type 10 has an invalid length. [ 924.880054][T13701] syzkaller0: entered promiscuous mode [ 924.908841][T13701] syzkaller0: entered allmulticast mode [ 924.962622][ T12] wlan1: Creating new IBSS network, BSSID b6:1f:1f:e4:9b:15 [ 925.392494][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 925.410652][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 925.420468][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 925.447710][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 925.465734][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 925.473634][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 926.852553][T10614] .`: (slave syz_tun): Releasing backup interface [ 927.102919][T13716] netlink: 'syz.1.2520': attribute type 29 has an invalid length. [ 927.103531][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.170236][T13718] netlink: 'syz.0.2521': attribute type 10 has an invalid length. [ 927.179971][T13716] netlink: 'syz.1.2520': attribute type 29 has an invalid length. [ 927.213651][T13720] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 927.229098][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'. [ 927.363389][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.438858][T13716] netlink: 'syz.1.2520': attribute type 39 has an invalid length. [ 927.504225][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.551736][T13041] Bluetooth: hci1: command tx timeout [ 927.669785][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.811226][T13710] chnl_net:caif_netlink_parms(): no params data found [ 928.051229][T13710] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.059413][T13710] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.068137][T13710] bridge_slave_0: entered allmulticast mode [ 928.075616][T13710] bridge_slave_0: entered promiscuous mode [ 928.084577][T13710] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.092027][T13710] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.099320][T13710] bridge_slave_1: entered allmulticast mode [ 928.106870][T13710] bridge_slave_1: entered promiscuous mode [ 928.159820][T13710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.175090][T13710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.328960][T13710] team0: Port device team_slave_0 added [ 928.355056][T13710] team0: Port device team_slave_1 added [ 928.431956][T13710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.438960][T13710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.521515][T13710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.563609][T13710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.582885][T13710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.651037][T13710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.067564][T13710] hsr_slave_0: entered promiscuous mode [ 929.112004][T13710] hsr_slave_1: entered promiscuous mode [ 929.120518][T13710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 929.137606][T13710] Cannot create hsr debugfs directory [ 929.456070][T13773] netlink: 'syz.0.2537': attribute type 29 has an invalid length. [ 929.522430][T13773] netlink: 'syz.0.2537': attribute type 29 has an invalid length. [ 929.631533][T13041] Bluetooth: hci1: command tx timeout [ 929.771381][T13776] netlink: 'syz.0.2537': attribute type 39 has an invalid length. [ 930.005757][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 930.168727][T13781] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 930.195630][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2539'. [ 930.499030][T13786] syzkaller0: entered promiscuous mode [ 930.505333][T13786] syzkaller0: entered allmulticast mode [ 930.672592][T13791] netlink: 'syz.0.2549': attribute type 29 has an invalid length. [ 931.073091][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 931.716492][T13041] Bluetooth: hci1: command tx timeout [ 931.724250][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.736414][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.455445][T13790] netlink: 'syz.1.2542': attribute type 10 has an invalid length. [ 932.469655][T13791] netlink: 'syz.0.2549': attribute type 29 has an invalid length. [ 932.480290][T13794] netlink: 'syz.0.2549': attribute type 39 has an invalid length. [ 932.804009][T13710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 932.843209][T13710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 932.855003][ T12] team0: left allmulticast mode [ 932.860154][ T12] team_slave_0: left allmulticast mode [ 932.881740][ T12] team_slave_1: left allmulticast mode [ 932.889914][ T12] team0: left promiscuous mode [ 932.895695][ T12] team_slave_0: left promiscuous mode [ 932.902035][ T12] team_slave_1: left promiscuous mode [ 932.909377][ T12] ¥: port 1(team0) entered disabled state [ 932.930900][ T12] hsr_slave_0: left promiscuous mode [ 932.947663][ T12] hsr_slave_1: left promiscuous mode [ 932.970803][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.980654][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.995420][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.006072][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.031268][ T12] veth1_macvtap: left promiscuous mode [ 933.040753][ T12] veth0_macvtap: left promiscuous mode [ 933.320789][ T12] .` (unregistering): (slave geneve0): Releasing backup interface [ 933.795252][T13041] Bluetooth: hci1: command tx timeout [ 933.831051][ T12] team0 (unregistering): Port device team_slave_1 removed [ 933.880731][ T12] team0 (unregistering): Port device team_slave_0 removed [ 933.921200][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.965576][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.035413][ T79] wlan1: Trigger new scan to find an IBSS to join [ 934.052582][ T49] wlan1: Trigger new scan to find an IBSS to join [ 934.280468][ T12] .` (unregistering): Released all slaves [ 934.317331][T13710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 934.335814][T13710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 934.622013][T13814] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 934.679707][T13710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.715838][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'. [ 934.779528][T13710] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.854358][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.861630][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.909267][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.916518][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.933149][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 934.985667][ T79] wlan1: Creating new IBSS network, BSSID 4e:0e:69:d7:41:60 [ 935.335856][T13832] syzkaller0: entered promiscuous mode [ 935.356335][T13832] syzkaller0: entered allmulticast mode [ 937.002239][ T12] wlan1: Trigger new scan to find an IBSS to join [ 937.009348][T11202] wlan1: Trigger new scan to find an IBSS to join [ 937.264125][T13710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.417386][T13710] veth0_vlan: entered promiscuous mode [ 937.439581][T13710] veth1_vlan: entered promiscuous mode [ 937.527809][T13710] veth0_macvtap: entered promiscuous mode [ 937.573599][T13710] veth1_macvtap: entered promiscuous mode [ 937.623975][T13710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.655509][T13710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.686622][T13710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.718745][T13710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.729373][T13710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 937.740587][T13710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.753785][T13710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.770764][T13710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.792075][T13710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.809984][T13710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.821186][T13710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.839790][T13710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.850919][T13710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.861741][T13710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.872647][T13710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.882877][T13710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.895052][T13710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.905400][T13710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.916271][T13710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.930355][T13710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.948227][T13710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.960226][T13710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.970142][T13710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.981279][T13710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.000425][ T49] wlan1: Creating new IBSS network, BSSID ce:dd:49:97:34:a2 [ 938.254815][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.303403][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.469494][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.520058][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.113517][T13891] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 939.127412][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2563'. [ 939.414232][T13900] syzkaller0: entered promiscuous mode [ 939.427944][T13900] syzkaller0: entered allmulticast mode [ 940.038365][T11202] wlan1: Trigger new scan to find an IBSS to join [ 941.702761][T13919] netlink: 'syz.1.2572': attribute type 10 has an invalid length. [ 941.857428][T13924] netlink: 'syz.2.2574': attribute type 29 has an invalid length. [ 941.877297][T13924] netlink: 'syz.2.2574': attribute type 29 has an invalid length. [ 942.069943][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'. [ 942.159689][T13938] netlink: 'syz.2.2574': attribute type 39 has an invalid length. [ 943.113869][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 943.340176][T13949] syzkaller0: entered promiscuous mode [ 943.373190][T13949] syzkaller0: entered allmulticast mode [ 944.064956][T11202] wlan1: Creating new IBSS network, BSSID 6a:5b:6d:24:ab:55 [ 945.067890][T13988] netlink: 'syz.3.2593': attribute type 29 has an invalid length. [ 945.599284][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2588'. [ 945.620144][T13988] netlink: 'syz.3.2593': attribute type 29 has an invalid length. [ 945.641584][T13989] netlink: 'syz.3.2593': attribute type 39 has an invalid length. [ 946.503735][T14008] syzkaller0: entered promiscuous mode [ 946.510107][T14008] syzkaller0: entered allmulticast mode [ 946.603522][T14013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2604'. [ 948.391882][T14015] syzkaller0: entered promiscuous mode [ 948.397484][T14015] syzkaller0: entered allmulticast mode [ 948.470876][T14022] netlink: 'syz.0.2606': attribute type 10 has an invalid length. [ 948.632273][T14024] netlink: 'syz.3.2607': attribute type 29 has an invalid length. [ 950.861246][T14024] netlink: 'syz.3.2607': attribute type 29 has an invalid length. [ 950.869452][T14033] netlink: 'syz.3.2607': attribute type 39 has an invalid length. [ 951.211736][T14042] syzkaller0: entered promiscuous mode [ 951.217873][T14042] syzkaller0: entered allmulticast mode [ 951.235509][T14046] netlink: 'syz.1.2614': attribute type 10 has an invalid length. [ 953.427805][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2617'. [ 953.835696][T14075] syzkaller0: entered promiscuous mode [ 953.852939][T14075] syzkaller0: entered allmulticast mode [ 953.926980][T14081] netlink: 'syz.0.2624': attribute type 10 has an invalid length. [ 955.755017][T14076] ¥: port 1(team0) entered blocking state [ 955.763573][T14076] ¥: port 1(team0) entered disabled state [ 955.776948][T14076] team0: entered allmulticast mode [ 955.783311][T14076] team_slave_0: entered allmulticast mode [ 955.793368][T14076] team_slave_1: entered allmulticast mode [ 955.801922][T14076] team0: entered promiscuous mode [ 955.808153][T14076] team_slave_0: entered promiscuous mode [ 955.821628][T14076] team_slave_1: entered promiscuous mode [ 956.083148][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'. [ 956.284894][T14101] syzkaller0: entered promiscuous mode [ 956.290436][T14101] syzkaller0: entered allmulticast mode [ 958.424848][T14113] syzkaller0: entered promiscuous mode [ 958.445312][T14115] netlink: 'syz.0.2636': attribute type 29 has an invalid length. [ 958.458201][T14113] syzkaller0: entered allmulticast mode [ 958.502541][T14115] netlink: 'syz.0.2636': attribute type 29 has an invalid length. [ 958.560849][T14121] netlink: 'syz.3.2638': attribute type 10 has an invalid length. [ 958.607489][T14122] netlink: 'syz.0.2636': attribute type 39 has an invalid length. [ 960.665474][T14124] netlink: 'syz.1.2639': attribute type 10 has an invalid length. [ 960.681558][T14126] netlink: 'syz.3.2641': attribute type 10 has an invalid length. [ 960.815587][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2642'. [ 960.945041][T14134] netlink: 'syz.0.2652': attribute type 29 has an invalid length. [ 960.966068][T14134] netlink: 'syz.0.2652': attribute type 29 has an invalid length. [ 961.031462][T11202] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 961.181514][T14142] netlink: 'syz.0.2652': attribute type 39 has an invalid length. [ 961.286478][T14140] syzkaller0: entered promiscuous mode [ 961.296359][T14140] syzkaller0: entered allmulticast mode [ 963.465883][T14149] netlink: 'syz.3.2649': attribute type 10 has an invalid length. [ 963.610343][T14158] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 963.630173][T14158] syzkaller0: entered promiscuous mode [ 963.636729][T14158] syzkaller0: entered allmulticast mode [ 963.646647][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2654'. [ 965.928943][T14188] netlink: 'syz.0.2662': attribute type 29 has an invalid length. [ 965.947849][ T5845] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 966.096800][T14188] netlink: 'syz.0.2662': attribute type 29 has an invalid length. [ 966.138157][T14192] netlink: 'syz.2.2664': attribute type 10 has an invalid length. [ 966.366735][T14192] geneve0: entered promiscuous mode [ 966.455339][T14192] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 966.477474][T14188] netlink: 'syz.0.2662': attribute type 39 has an invalid length. [ 967.490155][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 967.985682][T11202] team0: left allmulticast mode [ 968.001525][ T1071] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 968.011977][T11202] team_slave_0: left allmulticast mode [ 968.017507][T11202] team_slave_1: left allmulticast mode [ 968.035835][T11202] team0: left promiscuous mode [ 968.040800][T11202] team_slave_0: left promiscuous mode [ 968.056242][T11202] team_slave_1: left promiscuous mode [ 968.071348][T11202] ¥: port 1(team0) entered disabled state [ 968.134103][T11202] hsr_slave_0: left promiscuous mode [ 968.159236][T11202] hsr_slave_1: left promiscuous mode [ 968.171000][T11202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.182913][T11202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.192972][T11202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.201627][T11202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.219010][T11202] veth1_macvtap: left promiscuous mode [ 968.224929][T11202] veth0_macvtap: left promiscuous mode [ 968.795053][T11202] team0 (unregistering): Port device team_slave_1 removed [ 968.839571][T11202] team0 (unregistering): Port device team_slave_0 removed [ 968.883445][T11202] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.196427][T11202] .` (unregistering): Released all slaves [ 969.526459][T14239] netlink: 'syz.1.2679': attribute type 10 has an invalid length. [ 969.550319][T14241] netlink: 'syz.0.2678': attribute type 10 has an invalid length. [ 969.977410][T14249] netlink: 'syz.2.2687': attribute type 10 has an invalid length. [ 970.000901][T14254] netlink: 'syz.0.2688': attribute type 10 has an invalid length. [ 970.272145][T14258] netlink: 'syz.2.2689': attribute type 10 has an invalid length. [ 970.286783][T14263] netlink: 'syz.1.2691': attribute type 10 has an invalid length. [ 970.954998][T14273] syzkaller0: entered promiscuous mode [ 970.961054][T14273] syzkaller0: entered allmulticast mode [ 971.110884][T14276] validate_nla: 1 callbacks suppressed [ 971.110952][T14276] netlink: 'syz.3.2698': attribute type 10 has an invalid length. [ 972.797813][T14281] netlink: 'syz.3.2699': attribute type 10 has an invalid length. [ 972.829062][T14282] netlink: 'syz.0.2707': attribute type 10 has an invalid length. [ 973.200820][T14290] netlink: 'syz.0.2701': attribute type 10 has an invalid length. [ 973.628089][T14298] netlink: 'syz.2.2703': attribute type 10 has an invalid length. [ 973.637405][T14303] netlink: 'syz.1.2708': attribute type 10 has an invalid length. [ 973.807533][T14310] netlink: 'syz.2.2712': attribute type 10 has an invalid length. [ 973.862423][T11202] team0: left allmulticast mode [ 973.867365][T11202] team_slave_0: left allmulticast mode [ 973.887191][T11202] team_slave_1: left allmulticast mode [ 973.895725][T11202] virt_wifi0: left allmulticast mode [ 973.915453][T11202] team0: left promiscuous mode [ 973.920294][T11202] team_slave_0: left promiscuous mode [ 973.940289][T11202] team_slave_1: left promiscuous mode [ 973.950141][T11202] virt_wifi0: left promiscuous mode [ 973.960611][T11202] ¥: port 1(team0) entered disabled state [ 973.985768][T11202] hsr_slave_0: left promiscuous mode [ 973.993642][T11202] hsr_slave_1: left promiscuous mode [ 974.008529][T11202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.032121][T11202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.051576][T11202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.062960][T11202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.088051][T11202] hsr_slave_0: left promiscuous mode [ 974.128330][T11202] hsr_slave_1: left promiscuous mode [ 974.142366][T11202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.175409][T11202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.184992][T11202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.193219][T11202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.202837][T11202] bridge_slave_1: left allmulticast mode [ 974.208713][T11202] bridge_slave_1: left promiscuous mode [ 974.216005][T11202] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.232573][T11202] bridge_slave_0: left allmulticast mode [ 974.238714][T11202] bridge_slave_0: left promiscuous mode [ 974.245420][T11202] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.291827][T11202] veth1_macvtap: left promiscuous mode [ 974.298073][T11202] veth0_macvtap: left promiscuous mode [ 974.307814][T11202] veth1_vlan: left promiscuous mode [ 974.313427][T11202] veth0_vlan: left promiscuous mode [ 974.320835][T11202] veth1_macvtap: left promiscuous mode [ 974.329943][T11202] veth0_macvtap: left promiscuous mode [ 974.335633][T11202] veth1_vlan: left promiscuous mode [ 974.342332][T11202] veth0_vlan: left promiscuous mode [ 974.869376][T11202] team0 (unregistering): Port device virt_wifi0 removed [ 975.109616][T11202] team0 (unregistering): Port device team_slave_1 removed [ 975.215577][T11202] team0 (unregistering): Port device team_slave_0 removed [ 975.269468][T11202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.558691][T11202] bond0 (unregistering): Released all slaves [ 975.799400][T11202] team0 (unregistering): Port device virt_wifi0 removed [ 976.019342][T11202] team0 (unregistering): Port device team_slave_1 removed [ 976.059522][T11202] team0 (unregistering): Port device team_slave_0 removed [ 976.106027][T11202] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.377998][T11202] .` (unregistering): Released all slaves [ 976.485422][T14318] netlink: 'syz.2.2715': attribute type 10 has an invalid length. [ 976.494052][T14328] netlink: 'syz.1.2717': attribute type 10 has an invalid length. [ 976.518457][T14327] netlink: 'syz.3.2718': attribute type 10 has an invalid length. [ 976.725384][T14334] netlink: 'syz.3.2721': attribute type 10 has an invalid length. [ 976.997788][T14340] netlink: 'syz.3.2724': attribute type 10 has an invalid length. [ 977.120920][T14342] syzkaller0: entered promiscuous mode [ 977.146911][T14342] syzkaller0: entered allmulticast mode [ 978.814147][T14351] syzkaller0: entered promiscuous mode [ 978.819650][T14351] syzkaller0: entered allmulticast mode [ 980.624737][T14371] syzkaller0: entered promiscuous mode [ 980.630272][T14371] syzkaller0: entered allmulticast mode [ 982.605330][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2735'. [ 983.067498][T14403] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2743'. [ 983.177766][T14403] netlink: 'syz.2.2743': attribute type 29 has an invalid length. [ 983.220795][T14405] syzkaller0: entered promiscuous mode [ 983.248315][T14405] syzkaller0: entered allmulticast mode [ 983.265511][T14403] netlink: 'syz.2.2743': attribute type 29 has an invalid length. [ 983.363246][T14414] netlink: 'syz.3.2747': attribute type 3 has an invalid length. [ 983.380722][T14403] netlink: 'syz.2.2743': attribute type 39 has an invalid length. [ 983.399994][T14414] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2747'. [ 985.580573][T14424] netlink: 'syz.2.2750': attribute type 10 has an invalid length. [ 985.800670][T14428] syzkaller0: entered promiscuous mode [ 985.806601][T14428] syzkaller0: entered allmulticast mode [ 985.815322][T14427] netlink: 'syz.0.2751': attribute type 10 has an invalid length. [ 987.727226][T14442] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 987.738392][T14445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2755'. [ 987.852261][T14451] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2758'. [ 987.911107][T14451] netlink: 'syz.3.2758': attribute type 29 has an invalid length. [ 987.923399][T14451] netlink: 'syz.3.2758': attribute type 29 has an invalid length. [ 988.072874][T14457] netlink: 'syz.3.2758': attribute type 39 has an invalid length. [ 988.138573][T14456] netlink: 'syz.2.2760': attribute type 3 has an invalid length. [ 988.167767][T14456] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2760'. [ 988.295547][T14461] netlink: 'syz.1.2762': attribute type 10 has an invalid length. [ 988.671577][T14469] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 988.722438][T14471] syzkaller0: entered promiscuous mode [ 988.730980][T14471] syzkaller0: entered allmulticast mode [ 988.741277][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'. [ 990.041654][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 990.639938][T14487] netlink: 'syz.2.2775': attribute type 10 has an invalid length. [ 990.690177][T14489] netlink: 'syz.1.2774': attribute type 3 has an invalid length. [ 990.707623][T14489] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2774'. [ 990.847152][T14496] netlink: 'syz.3.2778': attribute type 10 has an invalid length. [ 990.894267][T14498] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2779'. [ 990.993251][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 991.028018][T14498] netlink: 'syz.2.2779': attribute type 29 has an invalid length. [ 991.073835][T14498] netlink: 'syz.2.2779': attribute type 29 has an invalid length. [ 991.156165][T14504] netlink: 'syz.1.2780': attribute type 10 has an invalid length. [ 991.214603][T14498] netlink: 'syz.2.2779': attribute type 39 has an invalid length. [ 991.328541][T14508] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 991.350346][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2782'. [ 991.593227][T14512] syzkaller0: entered promiscuous mode [ 991.614524][T14512] syzkaller0: entered allmulticast mode [ 993.072032][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 993.156867][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.169303][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.599789][T14535] netlink: 'syz.3.2789': attribute type 10 has an invalid length. [ 993.911168][T14541] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 993.965839][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 993.998057][T14547] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2795'. [ 994.046521][ T12] wlan1: Trigger new scan to find an IBSS to join [ 994.053569][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 994.112044][T14547] netlink: 'syz.2.2795': attribute type 29 has an invalid length. [ 994.140985][T14547] netlink: 'syz.2.2795': attribute type 29 has an invalid length. [ 994.401186][T14552] syzkaller0: entered promiscuous mode [ 994.411267][T14552] syzkaller0: entered allmulticast mode [ 994.421262][T14555] netlink: 'syz.2.2795': attribute type 39 has an invalid length. [ 996.425535][T14567] netlink: 'syz.1.2803': attribute type 10 has an invalid length. [ 996.613956][T14571] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 996.675140][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 996.819364][T14579] syzkaller0: entered promiscuous mode [ 996.826154][T14579] syzkaller0: entered allmulticast mode [ 996.993200][T14175] wlan1: Creating new IBSS network, BSSID 56:e8:34:69:1f:ab [ 997.072575][ T42] wlan1: Trigger new scan to find an IBSS to join [ 998.948282][T14600] syzkaller0: entered promiscuous mode [ 998.955264][T14600] syzkaller0: entered allmulticast mode [ 999.071688][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1000.041727][ T12] wlan1: Creating new IBSS network, BSSID f2:fe:9c:12:c5:af [ 1000.363424][T13041] Bluetooth: hci0: command 0x0406 tx timeout [ 1000.642910][T14619] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1000.655719][T14622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'. [ 1001.025089][T14631] syzkaller0: entered promiscuous mode [ 1001.046341][T14631] syzkaller0: entered allmulticast mode [ 1002.041573][T14175] wlan1: Trigger new scan to find an IBSS to join [ 1002.992826][ T42] wlan1: Trigger new scan to find an IBSS to join [ 1003.147783][T14657] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1003.213345][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2836'. [ 1003.458992][T14673] netlink: 'syz.0.2839': attribute type 10 has an invalid length. [ 1004.686773][T14710] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1004.724046][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2851'. [ 1005.054732][T14717] syzkaller0: entered promiscuous mode [ 1005.066279][T14717] syzkaller0: entered allmulticast mode [ 1006.993042][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 1007.075743][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 1007.253741][T14747] syzkaller0: entered promiscuous mode [ 1007.259545][T14747] syzkaller0: entered allmulticast mode [ 1008.054982][T11202] wlan1: Trigger new scan to find an IBSS to join [ 1008.954629][ T12] wlan1: Creating new IBSS network, BSSID 6e:62:56:bf:ed:a7 [ 1009.317146][T14758] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1009.334629][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'. [ 1009.438043][T14783] syzkaller0: entered promiscuous mode [ 1009.453844][T14783] syzkaller0: entered allmulticast mode [ 1010.032506][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1011.248605][T14796] syzkaller0: entered promiscuous mode [ 1011.255343][T14796] syzkaller0: entered allmulticast mode [ 1011.438789][T14805] netlink: 'syz.1.2883': attribute type 3 has an invalid length. [ 1011.452347][T14805] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2883'. [ 1012.043955][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 1012.994112][T11202] wlan1: Trigger new scan to find an IBSS to join [ 1013.354192][T14822] netlink: 'syz.3.2879': attribute type 10 has an invalid length. [ 1013.487573][T14829] syzkaller0: entered promiscuous mode [ 1013.531570][T14829] syzkaller0: entered allmulticast mode [ 1013.669725][T14844] netlink: 'syz.2.2885': attribute type 3 has an invalid length. [ 1013.682466][T14844] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2885'. [ 1013.938866][ T1071] wlan1: Creating new IBSS network, BSSID 42:3d:94:fb:9a:e3 [ 1015.071896][T11202] wlan1: Trigger new scan to find an IBSS to join [ 1015.458116][T14848] syzkaller0: entered promiscuous mode [ 1015.467446][T14848] syzkaller0: entered allmulticast mode [ 1015.561810][T14861] netlink: 'syz.1.2887': attribute type 29 has an invalid length. [ 1015.713012][T13041] Bluetooth: hci4: command 0x0406 tx timeout [ 1016.187503][T14880] netlink: 'syz.0.2894': attribute type 3 has an invalid length. [ 1016.206377][T14880] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2894'. [ 1017.580262][T14856] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2887'. [ 1017.592018][T14861] netlink: 'syz.1.2887': attribute type 29 has an invalid length. [ 1017.600134][T14874] netlink: 'syz.1.2887': attribute type 39 has an invalid length. [ 1017.608232][T14878] netlink: 'syz.2.2893': attribute type 10 has an invalid length. [ 1017.887039][T14885] syzkaller0: entered promiscuous mode [ 1017.932296][T14885] syzkaller0: entered allmulticast mode [ 1017.983027][T14894] netlink: 'syz.3.2899': attribute type 3 has an invalid length. [ 1017.999511][T14894] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2899'. [ 1018.032642][ T5845] wlan1: Creating new IBSS network, BSSID 66:ae:ed:0c:3e:a7 [ 1018.199004][T14892] syzkaller0: entered promiscuous mode [ 1018.215543][T14892] syzkaller0: entered allmulticast mode [ 1019.022253][T14917] netlink: 'syz.3.2907': attribute type 29 has an invalid length. [ 1020.831717][T13041] Bluetooth: hci2: command 0x0406 tx timeout [ 1021.730317][T14916] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2907'. [ 1021.740165][T14917] netlink: 'syz.3.2907': attribute type 29 has an invalid length. [ 1021.751125][T14920] netlink: 'syz.3.2907': attribute type 39 has an invalid length. [ 1022.157785][T14931] netlink: 'syz.1.2912': attribute type 3 has an invalid length. [ 1022.158098][T14928] netlink: 'syz.3.2919': attribute type 3 has an invalid length. [ 1022.170373][T14931] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2912'. [ 1022.187598][T14928] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2919'. [ 1023.739813][T14934] syzkaller0: entered promiscuous mode [ 1023.745991][T14934] syzkaller0: entered allmulticast mode [ 1023.823313][T14944] netlink: 'syz.3.2922': attribute type 3 has an invalid length. [ 1023.845266][T14944] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2922'. [ 1023.866153][T14947] netlink: 'syz.2.2914': attribute type 3 has an invalid length. [ 1023.899169][T14947] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2914'. [ 1025.778275][T14958] netlink: 'syz.2.2915': attribute type 3 has an invalid length. [ 1025.820947][T14958] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2915'. [ 1025.931131][T14966] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 1025.951028][T14966] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2918'. [ 1027.475483][T14973] netlink: 'syz.0.2921': attribute type 3 has an invalid length. [ 1027.511596][T14973] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2921'. [ 1027.741641][T14975] netlink: 'syz.2.2923': attribute type 3 has an invalid length. [ 1027.771395][T14975] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2923'. [ 1028.130330][T14981] netlink: 'syz.1.2926': attribute type 3 has an invalid length. [ 1028.138928][T14981] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2926'. [ 1028.645877][T14988] netlink: 'syz.3.2930': attribute type 3 has an invalid length. [ 1028.650371][T14991] netlink: 'syz.0.2929': attribute type 3 has an invalid length. [ 1028.671895][T14988] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2930'. [ 1028.681938][T14991] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2929'. [ 1028.939863][T14999] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1029.008579][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'. [ 1029.082592][T15002] syzkaller0: entered promiscuous mode [ 1029.088142][T15002] syzkaller0: entered allmulticast mode [ 1029.363005][T15015] netlink: 'syz.0.2938': attribute type 3 has an invalid length. [ 1029.366977][T15012] syzkaller0: entered promiscuous mode [ 1029.371145][T15015] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2938'. [ 1029.377715][T15012] syzkaller0: entered allmulticast mode [ 1031.074021][T14175] wlan1: Trigger new scan to find an IBSS to join [ 1032.920357][T15026] syzkaller0: entered promiscuous mode [ 1032.932223][T15026] syzkaller0: entered allmulticast mode [ 1033.167732][T15038] netlink: 'syz.2.2943': attribute type 3 has an invalid length. [ 1033.180398][T15038] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2943'. [ 1034.037784][T14175] wlan1: Trigger new scan to find an IBSS to join [ 1034.986981][T15048] netlink: 'syz.0.2945': attribute type 3 has an invalid length. [ 1034.997258][T15043] syzkaller0: entered promiscuous mode [ 1035.001481][T15048] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1035.008725][T15043] syzkaller0: entered allmulticast mode [ 1035.042343][T15050] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1035.082672][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2946'. [ 1035.409162][T15055] netlink: 'syz.2.2949': attribute type 3 has an invalid length. [ 1035.422325][T15055] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2949'. [ 1037.227698][T15064] syzkaller0: entered promiscuous mode [ 1037.235130][T15064] syzkaller0: entered allmulticast mode [ 1037.487332][T15071] netlink: 'syz.2.2954': attribute type 3 has an invalid length. [ 1037.496643][T15071] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2954'. [ 1038.955886][T11202] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1039.003089][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 1039.196565][T15077] netlink: 'syz.0.2956': attribute type 3 has an invalid length. [ 1039.206906][T15077] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2956'. [ 1039.217332][T15080] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1039.258475][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 1039.629155][T15089] syzkaller0: entered promiscuous mode [ 1039.636498][T15089] syzkaller0: entered allmulticast mode [ 1039.649140][T15088] netlink: 'syz.3.2962': attribute type 3 has an invalid length. [ 1039.665894][T15088] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2962'. [ 1039.864629][T15095] netlink: 'syz.0.2965': attribute type 3 has an invalid length. [ 1039.874600][T15095] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2965'. [ 1041.449873][T15098] netlink: 'syz.0.2966': attribute type 3 has an invalid length. [ 1041.459941][T15098] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2966'. [ 1041.627373][T15107] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1041.657505][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2970'. [ 1041.812971][T15116] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2974'. [ 1041.897048][T15116] netlink: 'syz.3.2974': attribute type 29 has an invalid length. [ 1041.910028][T15117] syzkaller0: entered promiscuous mode [ 1041.932486][T15117] syzkaller0: entered allmulticast mode [ 1041.957069][T15116] netlink: 'syz.3.2974': attribute type 29 has an invalid length. [ 1042.058223][T15123] netlink: 'syz.3.2974': attribute type 39 has an invalid length. [ 1043.074405][T11202] wlan1: Trigger new scan to find an IBSS to join [ 1043.869760][T15129] syzkaller0: entered promiscuous mode [ 1043.876267][T15129] syzkaller0: entered allmulticast mode [ 1044.046346][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1045.615652][T15137] netlink: 'syz.2.2979': attribute type 3 has an invalid length. [ 1045.631162][T15137] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2979'. [ 1045.654357][T15141] netlink: 'syz.1.2978': attribute type 3 has an invalid length. [ 1045.668696][T15141] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2978'. [ 1045.710642][T15140] syzkaller0: entered promiscuous mode [ 1045.718584][T15140] syzkaller0: entered allmulticast mode [ 1046.031645][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 1046.037319][T15148] netlink: 'syz.3.2982': attribute type 3 has an invalid length. [ 1046.049515][T15148] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2982'. [ 1046.964475][T14175] wlan1: Creating new IBSS network, BSSID 42:1a:a6:75:e9:81 [ 1047.072168][T11202] wlan1: Trigger new scan to find an IBSS to join [ 1047.644059][T15150] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1047.662115][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'. [ 1047.903727][T15160] netlink: 'syz.3.2988': attribute type 3 has an invalid length. [ 1047.933197][T15160] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2988'. [ 1047.944524][T15162] netlink: 'syz.2.2990': attribute type 3 has an invalid length. [ 1047.955100][T15162] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2990'. [ 1048.154579][T15170] netlink: 'syz.1.2993': attribute type 3 has an invalid length. [ 1048.170036][T15170] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2993'. [ 1048.207154][T15168] netlink: 'syz.0.2992': attribute type 3 has an invalid length. [ 1048.241646][T15168] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2992'. [ 1048.457998][T15174] netlink: 'syz.3.2994': attribute type 3 has an invalid length. [ 1048.479119][T15174] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2994'. [ 1048.659342][T15177] syzkaller0: entered promiscuous mode [ 1048.689853][T15177] syzkaller0: entered allmulticast mode [ 1048.724569][T15181] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1050.034241][T14175] wlan1: Trigger new scan to find an IBSS to join [ 1050.041164][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 1050.490246][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2997'. [ 1050.647805][T15188] netlink: 'syz.1.3001': attribute type 3 has an invalid length. [ 1050.665203][T15188] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3001'. [ 1050.830636][T15194] netlink: 'syz.2.3003': attribute type 3 has an invalid length. [ 1050.891492][T15194] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3003'. [ 1050.937392][T15198] netlink: 'syz.3.3004': attribute type 3 has an invalid length. [ 1050.942462][T15197] netlink: 'syz.0.3011': attribute type 9 has an invalid length. [ 1050.958291][T15198] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3004'. [ 1050.968788][T15197] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3011'. [ 1051.049982][ T5845] wlan1: Creating new IBSS network, BSSID 3a:7c:50:57:9b:83 [ 1051.074495][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 1051.528905][T15204] netlink: 'syz.2.3005': attribute type 3 has an invalid length. [ 1051.554254][T13041] Bluetooth: hci1: command 0x0406 tx timeout [ 1051.569735][T15204] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3005'. [ 1051.599419][T15202] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3014'. [ 1051.654290][T15208] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3007'. [ 1051.672539][T15206] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3006'. [ 1052.221809][T15212] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3008'. [ 1052.362513][T15214] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3009'. [ 1053.091479][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 1053.302838][T15225] validate_nla: 6 callbacks suppressed [ 1053.302900][T15225] netlink: 'syz.1.3016': attribute type 9 has an invalid length. [ 1053.545165][T15231] netlink: 'syz.3.3019': attribute type 3 has an invalid length. [ 1053.813814][T15227] netlink: 'syz.0.3017': attribute type 9 has an invalid length. [ 1054.164533][T15229] netlink: 'syz.2.3018': attribute type 9 has an invalid length. [ 1054.391653][T15237] netlink: 'syz.2.3022': attribute type 3 has an invalid length. [ 1054.506722][T15239] netlink: 'syz.3.3023': attribute type 29 has an invalid length. [ 1054.530659][T15239] netlink: 'syz.3.3023': attribute type 29 has an invalid length. [ 1054.616718][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.627702][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.720606][T15245] netlink: 'syz.3.3023': attribute type 39 has an invalid length. [ 1054.999141][T15249] netlink: 'syz.0.3026': attribute type 3 has an invalid length. [ 1055.194645][T15253] netlink: 'syz.2.3028': attribute type 9 has an invalid length. [ 1055.678977][T15258] __nla_validate_parse: 9 callbacks suppressed [ 1055.678996][T15258] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3038'. [ 1055.779653][T15257] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3029'. [ 1055.995210][T15260] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3030'. [ 1056.031608][T11202] wlan1: Trigger new scan to find an IBSS to join [ 1056.031902][T14175] wlan1: Creating new IBSS network, BSSID 4e:66:d4:3a:58:30 [ 1056.575541][T15265] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3032'. [ 1056.797399][T15271] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1056.970390][T14175] wlan1: Creating new IBSS network, BSSID ee:54:12:30:26:3d [ 1057.111960][T15269] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3031'. [ 1057.246807][T15276] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3045'. [ 1057.915738][T15288] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3041'. [ 1058.169517][T15290] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3042'. [ 1058.524137][T15293] validate_nla: 13 callbacks suppressed [ 1058.524175][T15293] netlink: 'syz.1.3043': attribute type 3 has an invalid length. [ 1058.581386][T15293] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3043'. [ 1058.929310][T15301] netlink: 'syz.3.3047': attribute type 9 has an invalid length. [ 1059.312382][T15304] netlink: 'syz.1.3049': attribute type 9 has an invalid length. [ 1059.656663][T15307] netlink: 'syz.2.3050': attribute type 9 has an invalid length. [ 1059.942368][T15318] netlink: 'syz.3.3054': attribute type 29 has an invalid length. [ 1059.997845][T15318] netlink: 'syz.3.3054': attribute type 29 has an invalid length. [ 1060.006923][T15316] netlink: 'syz.0.3053': attribute type 9 has an invalid length. [ 1060.238264][T15321] netlink: 'syz.3.3054': attribute type 39 has an invalid length. [ 1060.353454][T15322] netlink: 'syz.1.3057': attribute type 3 has an invalid length. [ 1061.165752][T15342] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1061.224082][T15342] __nla_validate_parse: 6 callbacks suppressed [ 1061.224118][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 1061.229307][T15346] netlink: 'syz.1.3067': attribute type 9 has an invalid length. [ 1061.261771][T15346] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3067'. [ 1061.568393][T15352] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3070'. [ 1061.591649][T15348] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3066'. [ 1061.999883][T15355] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3071'. [ 1062.294520][T15360] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3072'. [ 1062.470714][T15362] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3074'. [ 1063.129861][T15374] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1063.145630][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3080'. [ 1063.289271][T15378] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3082'. [ 1063.549649][T15386] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3086'. [ 1063.703638][T15386] validate_nla: 8 callbacks suppressed [ 1063.703657][T15386] netlink: 'syz.1.3086': attribute type 29 has an invalid length. [ 1063.754830][T15386] netlink: 'syz.1.3086': attribute type 29 has an invalid length. [ 1063.771599][T15385] netlink: 'syz.0.3085': attribute type 9 has an invalid length. [ 1063.957109][T15390] netlink: 'syz.1.3086': attribute type 39 has an invalid length. [ 1064.132720][T15389] netlink: 'syz.2.3087': attribute type 9 has an invalid length. [ 1064.216028][T15392] netlink: 'syz.3.3088': attribute type 3 has an invalid length. [ 1065.002962][T14175] wlan1: Trigger new scan to find an IBSS to join [ 1065.186269][T15407] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1065.848108][T15421] netlink: 'syz.2.3101': attribute type 3 has an invalid length. [ 1065.986626][T15425] netlink: 'syz.1.3102': attribute type 9 has an invalid length. [ 1066.560949][T15436] netlink: 'syz.0.3108': attribute type 9 has an invalid length. [ 1066.577316][T15436] __nla_validate_parse: 6 callbacks suppressed [ 1066.577402][T15436] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3108'. [ 1066.963290][T15438] netlink: 'syz.2.3110': attribute type 9 has an invalid length. [ 1066.981704][T15438] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1066.993487][T15442] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1067.045777][T15442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3111'. [ 1067.655836][T15456] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3116'. [ 1067.849400][T15462] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3118'. [ 1068.085961][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1068.441180][T15467] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3120'. [ 1068.733954][T15470] validate_nla: 3 callbacks suppressed [ 1068.734038][T15470] netlink: 'syz.3.3121': attribute type 9 has an invalid length. [ 1068.761712][T15470] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3121'. [ 1068.835663][T15475] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1068.988103][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'. [ 1069.071955][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 1069.594305][T15488] netlink: 'syz.3.3128': attribute type 9 has an invalid length. [ 1069.610968][T15488] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3128'. [ 1070.276887][T15491] netlink: 'syz.0.3130': attribute type 9 has an invalid length. [ 1070.297748][T15491] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3130'. [ 1070.698115][T15498] netlink: 'syz.2.3133': attribute type 9 has an invalid length. [ 1070.977978][T15505] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1071.067105][T15507] netlink: 'syz.3.3138': attribute type 9 has an invalid length. [ 1071.402158][T15510] netlink: 'syz.1.3139': attribute type 9 has an invalid length. [ 1071.455209][T15516] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1071.593708][T15519] __nla_validate_parse: 4 callbacks suppressed [ 1071.593723][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3149'. [ 1071.740159][T15517] netlink: 'syz.2.3141': attribute type 9 has an invalid length. [ 1071.755168][T15517] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3141'. [ 1072.185732][T15523] netlink: 'syz.1.3144': attribute type 9 has an invalid length. [ 1072.208204][T15523] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3144'. [ 1072.628674][T15535] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1072.685738][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 1073.081769][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 1073.165344][T15543] netlink: 'syz.0.3151': attribute type 9 has an invalid length. [ 1073.174047][T15543] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3151'. [ 1073.666005][T15547] netlink: 'syz.3.3155': attribute type 9 has an invalid length. [ 1073.690761][T15547] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1074.019467][T15553] netlink: 'syz.1.3156': attribute type 9 has an invalid length. [ 1074.031536][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 1074.041739][T15553] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3156'. [ 1074.350358][T15558] netlink: 'syz.0.3158': attribute type 9 has an invalid length. [ 1074.367407][T15560] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1074.381741][T15558] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3158'. [ 1074.414697][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3160'. [ 1075.013228][T14175] wlan1: Creating new IBSS network, BSSID 62:18:ee:e4:2b:1a [ 1075.083141][ T5845] wlan1: Trigger new scan to find an IBSS to join [ 1075.105660][T15569] netlink: 'syz.1.3164': attribute type 9 has an invalid length. [ 1075.116563][T15569] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3164'. [ 1075.611219][T15578] netlink: 'syz.2.3167': attribute type 9 has an invalid length. [ 1075.949523][T15587] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1076.041804][ T11] wlan1: Creating new IBSS network, BSSID 06:b3:50:f8:ac:c9 [ 1076.056569][T15588] netlink: 'syz.0.3179': attribute type 9 has an invalid length. [ 1076.669338][T15599] netlink: 'syz.3.3180': attribute type 9 has an invalid length. [ 1076.679611][T15599] __nla_validate_parse: 3 callbacks suppressed [ 1076.679678][T15599] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3180'. [ 1077.006529][T15603] netlink: 'syz.1.3181': attribute type 9 has an invalid length. [ 1077.034826][T15603] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3181'. [ 1077.074396][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1077.257355][T15614] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1077.281668][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3186'. [ 1077.350314][T15612] netlink: 'syz.0.3185': attribute type 9 has an invalid length. [ 1077.367360][T15612] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3185'. [ 1078.038309][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1078.041836][T15626] netlink: 'syz.3.3191': attribute type 9 has an invalid length. [ 1078.069713][T15626] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3191'. [ 1078.701163][T15638] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1078.731330][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3197'. [ 1078.821121][T15640] netlink: 'syz.3.3198': attribute type 9 has an invalid length. [ 1078.830284][T15640] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3198'. [ 1079.179157][T15642] netlink: 'syz.0.3199': attribute type 9 has an invalid length. [ 1079.207048][T15642] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3199'. [ 1079.501215][T15644] netlink: 'syz.2.3200': attribute type 9 has an invalid length. [ 1079.531754][T15644] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3200'. [ 1079.855797][T15652] netlink: 'syz.3.3203': attribute type 9 has an invalid length. [ 1079.864655][T15652] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3203'. [ 1080.041901][T14175] wlan1: Trigger new scan to find an IBSS to join [ 1080.048478][ T1071] wlan1: Trigger new scan to find an IBSS to join [ 1080.315726][T15660] netlink: 'syz.2.3207': attribute type 9 has an invalid length. [ 1081.081100][T11202] wlan1: Creating new IBSS network, BSSID c2:d2:85:3d:59:1f [ 1081.123406][T15672] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1081.128788][T11202] ------------[ cut here ]------------ [ 1081.139083][T11202] WARNING: CPU: 0 PID: 11202 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 1081.150144][T11202] Modules linked in: [ 1081.154770][T11202] CPU: 0 PID: 11202 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1081.163106][T11202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1081.173502][T11202] Workqueue: cfg80211 cfg80211_event_work [ 1081.179441][T11202] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 1081.185842][T11202] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 be 84 97 f7 0f 0b eb bf e8 b5 84 97 f7 <0f> 0b eb b6 e8 ac 84 97 f7 0f 0b e9 e2 fd ff ff e8 a0 84 97 f7 0f [ 1081.205793][T11202] RSP: 0018:ffffc900045ffa40 EFLAGS: 00010293 [ 1081.212100][T11202] RAX: ffffffff89effdbb RBX: dffffc0000000000 RCX: ffff888027f1da00 [ 1081.220108][T11202] RDX: 0000000000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d35e0 [ 1081.228200][T11202] RBP: ffffc900045ffaf8 R08: ffffffff911ef56f R09: 1ffffffff223dead [ 1081.236415][T11202] R10: dffffc0000000000 R11: fffffbfff223deae R12: ffff88807b990d10 [ 1081.244531][T11202] R13: ffff88807e2a3618 R14: 1ffff920008bff4c R15: 000000000000001f [ 1081.253024][T11202] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1081.262137][T11202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1081.268754][T11202] CR2: 0000001b2d507ff8 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 1081.276825][T11202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1081.285003][T11202] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1081.293160][T11202] Call Trace: [ 1081.296569][T11202] [ 1081.299600][T11202] ? trace_rdev_return_void+0x1c0/0x1c0 [ 1081.305349][T11202] cfg80211_process_wdev_events+0x396/0x500 [ 1081.312326][T11202] cfg80211_process_rdev_events+0xa1/0x110 [ 1081.318304][T11202] cfg80211_event_work+0x2f/0x40 [ 1081.323524][T11202] ? process_scheduled_works+0x975/0x1600 [ 1081.329402][T11202] process_scheduled_works+0xa60/0x1600 [ 1081.335262][T11202] ? worker_attach_to_pool+0x370/0x370 [ 1081.340855][T11202] ? assign_work+0x3cc/0x5d0 [ 1081.345637][T11202] worker_thread+0xa5e/0xfe0 [ 1081.350661][T11202] ? _raw_spin_unlock+0x40/0x40 [ 1081.355780][T11202] ? __kthread_parkme+0x71/0x1c0 [ 1081.360796][T11202] kthread+0x2fa/0x390 [ 1081.365095][T11202] ? pr_cont_work+0x550/0x550 [ 1081.369842][T11202] ? kthread_blkcg+0xd0/0xd0 [ 1081.374553][T11202] ret_from_fork+0x48/0x80 [ 1081.379045][T11202] ? kthread_blkcg+0xd0/0xd0 [ 1081.383778][T11202] ret_from_fork_asm+0x11/0x20 [ 1081.388615][T11202] [ 1081.391777][T11202] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1081.399120][T11202] CPU: 0 PID: 11202 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1081.407209][T11202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1081.417279][T11202] Workqueue: cfg80211 cfg80211_event_work [ 1081.423015][T11202] Call Trace: [ 1081.426296][T11202] [ 1081.429245][T11202] dump_stack_lvl+0x18c/0x250 [ 1081.434021][T11202] ? show_regs_print_info+0x20/0x20 [ 1081.439228][T11202] ? load_image+0x420/0x420 [ 1081.443769][T11202] panic+0x2ca/0x720 [ 1081.447715][T11202] ? bpf_jit_dump+0xd0/0xd0 [ 1081.452257][T11202] ? ret_from_fork_asm+0x11/0x20 [ 1081.457236][T11202] __warn+0x2e0/0x470 [ 1081.461241][T11202] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 1081.466807][T11202] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 1081.472347][T11202] report_bug+0x2be/0x4f0 [ 1081.476717][T11202] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 1081.482262][T11202] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 1081.487806][T11202] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 1081.493960][T11202] handle_bug+0xcf/0x120 [ 1081.498402][T11202] exc_invalid_op+0x1a/0x50 [ 1081.503118][T11202] asm_exc_invalid_op+0x1a/0x20 [ 1081.508073][T11202] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 1081.514253][T11202] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 be 84 97 f7 0f 0b eb bf e8 b5 84 97 f7 <0f> 0b eb b6 e8 ac 84 97 f7 0f 0b e9 e2 fd ff ff e8 a0 84 97 f7 0f [ 1081.533967][T11202] RSP: 0018:ffffc900045ffa40 EFLAGS: 00010293 [ 1081.540056][T11202] RAX: ffffffff89effdbb RBX: dffffc0000000000 RCX: ffff888027f1da00 [ 1081.548234][T11202] RDX: 0000000000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d35e0 [ 1081.556216][T11202] RBP: ffffc900045ffaf8 R08: ffffffff911ef56f R09: 1ffffffff223dead [ 1081.564186][T11202] R10: dffffc0000000000 R11: fffffbfff223deae R12: ffff88807b990d10 [ 1081.572178][T11202] R13: ffff88807e2a3618 R14: 1ffff920008bff4c R15: 000000000000001f [ 1081.580182][T11202] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 1081.585772][T11202] ? trace_rdev_return_void+0x1c0/0x1c0 [ 1081.591337][T11202] cfg80211_process_wdev_events+0x396/0x500 [ 1081.597335][T11202] cfg80211_process_rdev_events+0xa1/0x110 [ 1081.603144][T11202] cfg80211_event_work+0x2f/0x40 [ 1081.608078][T11202] ? process_scheduled_works+0x975/0x1600 [ 1081.613824][T11202] process_scheduled_works+0xa60/0x1600 [ 1081.619475][T11202] ? worker_attach_to_pool+0x370/0x370 [ 1081.624939][T11202] ? assign_work+0x3cc/0x5d0 [ 1081.629546][T11202] worker_thread+0xa5e/0xfe0 [ 1081.634187][T11202] ? _raw_spin_unlock+0x40/0x40 [ 1081.639117][T11202] ? __kthread_parkme+0x71/0x1c0 [ 1081.644076][T11202] kthread+0x2fa/0x390 [ 1081.648137][T11202] ? pr_cont_work+0x550/0x550 [ 1081.652899][T11202] ? kthread_blkcg+0xd0/0xd0 [ 1081.657508][T11202] ret_from_fork+0x48/0x80 [ 1081.661942][T11202] ? kthread_blkcg+0xd0/0xd0 [ 1081.666529][T11202] ret_from_fork_asm+0x11/0x20 [ 1081.671301][T11202] [ 1081.674564][T11202] Kernel Offset: disabled [ 1081.678939][T11202] Rebooting in 86400 seconds..