last executing test programs:

10.48579986s ago: executing program 1 (id=2351):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8.417040903s ago: executing program 1 (id=2356):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x4000, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

8.119811257s ago: executing program 2 (id=2360):
socket$kcm(0x21, 0x2, 0x2)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, r0, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x6, &(0x7f0000000740), 0x4)
setsockopt$sock_attach_bpf(r1, 0x107, 0x14, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="060003076844babeb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x27, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044)

5.789371393s ago: executing program 1 (id=2362):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000002900000043"], 0x18}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x11, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x2, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000002c0)={[{0x2b, 'net_cls'}, {0x2d, 'freezer'}, {0x2b, 'blkio'}, {0x6, 'io'}, {0x2b, 'net'}]}, 0x22)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000001040), 0x4)
r3 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, &(0x7f0000000280), 0x4)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4)

5.682114019s ago: executing program 0 (id=2364):
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c"], 0xfe1b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000d9bd00950000000000200045"], 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x22, 0x2, 0x21)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffd, 0x0, 0x0, 0x0, 0x7a19}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40)

5.574061224s ago: executing program 2 (id=2365):
r0 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x7, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d}, 0x94)
r3 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x83, 0x43a1bd76, 0x7, 0x9, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r6)
r7 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r7, 0x0, 0x200ce0c0)
write$cgroup_subtree(r6, 0x0, 0x0)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000980)="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", 0x11d}], 0x1}, 0x80d1)
close(r3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x11, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x101, 0x7b, &(0x7f0000000640)=""/123, 0x41100, 0x40, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2000001, 0x8, 0xff, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x2, 0x2, 0x6, 0x3}]}, 0x94)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000000c0))

5.550541215s ago: executing program 4 (id=2366):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.416029502s ago: executing program 3 (id=2367):
socket$kcm(0x29, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0xf, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a636"], 0x0}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x5}, 0x94)
socket$kcm(0x28, 0x1, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='-cpu +cpu -freezer +perf_event -net_cls \x00fre'], 0x3e)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000001100)=0x5c9, 0x12)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000004000001811", @ANYRES64=r4], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.278199148s ago: executing program 0 (id=2368):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x11, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4840)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x2, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000280), 0x4)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07", 0xd5}], 0x1}, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4)

5.239197401s ago: executing program 4 (id=2369):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0x80ffffff}, {}, {}, {0x6}]})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b40800000000000073119a7b0f0000008510000002000000b7000000000000009500c200000000009500001200000000c9c0d590e85f1915418694ea7bc0f93ad15d894d7fe8ba3d4a86ad66767d"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="d8000000240081064e81f782db44b9040a0208000300000000000100f1ffffff020014260360160cac08da30399d11540e120800280024000000a80009001100014003000000036010fab94dcf5c0461c1ff7f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dc81ed0bffece0b42a9ecbee5de6ccd40dd60100ef3d93452a92954b43370e97011d65966a41", 0xd8}], 0x1}, 0x4004000)
close(0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000180))
setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, &(0x7f0000000040), 0x3b)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000c0000000400000001000084010000000a0000000200000000000000010000000000000c05000000006101302e6161612e0061"], 0x0, 0x48}, 0x28)

5.238133511s ago: executing program 2 (id=2379):
r0 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x7, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d}, 0x94)
r3 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x83, 0x43a1bd76, 0x7, 0x9, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r6)
r7 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r7, 0x0, 0x200ce0c0)
write$cgroup_subtree(r6, 0x0, 0x0)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000980)="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", 0x11d}], 0x1}, 0x80d1)
close(r3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000000c0))

5.191477803s ago: executing program 3 (id=2370):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65dee40726f6a7b4509d3c6a5c31d573dd52fca5021b7ff06"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x5112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)

4.893242858s ago: executing program 4 (id=2371):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r1 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x94, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000027000b12d25a805bb98222f90324fc60", 0x14}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x377d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r1, 0x0, 0x10)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./cgroup/file0/file0\x00', 0x81)

4.889914818s ago: executing program 1 (id=2372):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x4000, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.814745701s ago: executing program 2 (id=2373):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000002900000043"], 0x18}, 0xc)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}, 0x4840)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000002c0)={[{0x2b, 'net_cls'}, {0x2d, 'freezer'}, {0x6, 'io'}, {0x2b, 'net'}, {0x2b, 'net_cls'}]}, 0x24)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000001040), 0x4)
r4 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, &(0x7f0000000280), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

4.800726962s ago: executing program 4 (id=2374):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[], 0x0, 0x66}, 0x28)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
socket$kcm(0x11, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f0000000580), 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416070807034d2f87e5890c6aab845013f2325f1a39019403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffcb6, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x2c)

4.686932758s ago: executing program 3 (id=2375):
socket$kcm(0x21, 0x2, 0x2)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, r0, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x6, &(0x7f0000000740), 0x4)
setsockopt$sock_attach_bpf(r1, 0x107, 0x14, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="060003076844babeb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x27, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044)

4.595105613s ago: executing program 0 (id=2376):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000002000000000000000000003000000000100000002"], 0x0, 0x66}, 0x28)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f0000000580), 0x4)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast})
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416070807034d2f87e5890c6aab845013f2325f1a39019403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffcb6, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x2c)

2.381889542s ago: executing program 4 (id=2377):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65dee40726f6a7b4509d3c6a5c31d573dd52fca5021b7ff06"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r2 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5411, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)

2.381353472s ago: executing program 0 (id=2378):
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c"], 0xfe1b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000d9bd00950000000000200045"], 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x22, 0x2, 0x21)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffd, 0x0, 0x0, 0x0, 0x7a19}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40)

2.361360293s ago: executing program 1 (id=2380):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.360764083s ago: executing program 2 (id=2381):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0x80ffffff}, {}, {}, {0x6}]})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b40800000000000073119a7b0f0000008510000002000000b7000000000000009500c200000000009500001200000000c9c0d590e85f1915418694ea7bc0f93ad15d894d7fe8ba3d4a86ad66767d"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000180))
setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, &(0x7f0000000040), 0x3b)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000c0000000400000001000084010000000a0000000200000000000000010000000000000c05000000006101302e6161612e0061"], 0x0, 0x48}, 0x28)

2.312612906s ago: executing program 3 (id=2382):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
socket$kcm(0x21, 0x2, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000640)=""/292, 0x37, 0x124, 0x1}, 0x28)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100))
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0x2, 0x8, 0x1, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

2.245257959s ago: executing program 2 (id=2383):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65dee40726f6a7b4509d3c6a5c31d573dd52fca5021b7ff06"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r2 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5411, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x5112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)

157.325193ms ago: executing program 1 (id=2384):
r0 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x7, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d}, 0x94)
r3 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x83, 0x43a1bd76, 0x7, 0x9, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r6)
r7 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r7, 0x0, 0x200ce0c0)
write$cgroup_subtree(r6, 0x0, 0x0)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000980)="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", 0x11d}], 0x1}, 0x80d1)
close(r3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000000c0))

143.706963ms ago: executing program 3 (id=2385):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

131.592754ms ago: executing program 0 (id=2386):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r1 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x94, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000027000b12d25a805bb98222f90324fc60", 0x14}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x377d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r1, 0x0, 0x10)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./cgroup/file0/file0\x00', 0x81)

71.222747ms ago: executing program 4 (id=2387):
socket$kcm(0x29, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0xf, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a636"], 0x0}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x5}, 0x94)
socket$kcm(0x28, 0x1, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='-cpu +cpu -freezer +perf_event -net_cls \x00fre'], 0x3e)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000001100)=0x5c9, 0x12)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000004000001811", @ANYRES64=r4], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

27.325849ms ago: executing program 3 (id=2388):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65dee40726f6a7b4509d3c6a5c31d573dd52fca5021b7ff06"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r2 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5411, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x5112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)

0s ago: executing program 0 (id=2389):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65dee40726f6a7b4509d3c6a5c31d573dd52fca5021b7ff06"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r2 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5411, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x5112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)

kernel console output (not intermixed with test programs):

etlink: 'syz.0.957': attribute type 1 has an invalid length.
[  153.689595][ T6978] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.957'.
[  153.720695][ T6976] netlink: 'syz.3.956': attribute type 1 has an invalid length.
[  153.829050][ T6976] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.956'.
[  154.049737][ T6995] netlink: 'syz.0.962': attribute type 10 has an invalid length.
[  154.089178][ T6995] netlink: 55 bytes leftover after parsing attributes in process `syz.0.962'.
[  154.194058][ T7001] netlink: 'syz.3.963': attribute type 5 has an invalid length.
[  154.812058][ T7009] netlink: 'syz.4.966': attribute type 3 has an invalid length.
[  154.839643][ T7009] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.966'.
[  154.955162][ T7015] netlink: 'syz.3.969': attribute type 1 has an invalid length.
[  155.088020][ T7020] netlink: 'syz.1.970': attribute type 5 has an invalid length.
[  155.239651][ T7020] netlink: 'syz.1.970': attribute type 10 has an invalid length.
[  155.325373][ T7028] netlink: 'syz.0.973': attribute type 21 has an invalid length.
[  155.353756][ T7026] netlink: 'syz.0.973': attribute type 1 has an invalid length.
[  156.026341][ T7054] device syzkaller0 entered promiscuous mode
[  156.072980][ T7047] bridge0: port 4(bond0) entered blocking state
[  156.079398][ T7047] bridge0: port 4(bond0) entered forwarding state
[  156.086733][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.093862][ T7047] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.101229][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.108382][ T7047] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.211137][ T7047] bridge0: port 4(bond0) entered disabled state
[  156.217653][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.224849][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.963229][ T7080] bridge0: port 3(bond0) entered blocking state
[  156.973263][ T7080] bridge0: port 3(bond0) entered forwarding state
[  156.987565][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.998408][ T7080] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.013864][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.023045][ T7080] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.129369][ T7080] bridge0: port 3(bond0) entered disabled state
[  157.141236][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.153222][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.420948][ T7098] device syzkaller0 entered promiscuous mode
[  157.642104][ T7113] __nla_validate_parse: 10 callbacks suppressed
[  157.642125][ T7113] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1003'.
[  157.740679][ T7113] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1003'.
[  157.823360][ T7124] bridge0: port 3(bond0) entered blocking state
[  157.829765][ T7124] bridge0: port 3(bond0) entered forwarding state
[  157.836493][ T7124] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.843598][ T7124] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.851032][ T7124] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.858199][ T7124] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.884681][ T7124] bridge0: port 3(bond0) entered disabled state
[  157.891164][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.898404][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.899779][ T7127] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1007'.
[  157.956170][ T7122] device syzkaller0 entered promiscuous mode
[  158.166901][ T7133] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1010'.
[  158.209459][ T7134] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1009'.
[  158.554546][ T7147] bridge0: port 3(bond0) entered blocking state
[  158.560878][ T7147] bridge0: port 3(bond0) entered forwarding state
[  158.567549][ T7147] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.574675][ T7147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.582055][ T7147] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.589197][ T7147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.678502][ T7147] bridge0: port 3(bond0) entered disabled state
[  158.685012][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.692175][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.823147][ T7153] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1019'.
[  158.850219][ T7158] validate_nla: 22 callbacks suppressed
[  158.850235][ T7158] netlink: 'syz.1.1020': attribute type 12 has an invalid length.
[  158.890834][ T7158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1020'.
[  158.921534][ T7156] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1020'.
[  158.969032][ T7157] netlink: 'syz.0.1019': attribute type 12 has an invalid length.
[  158.984133][ T7157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1019'.
[  159.115762][ T7165] netlink: 'syz.4.1022': attribute type 5 has an invalid length.
[  159.298742][ T7161] device syzkaller0 entered promiscuous mode
[  159.316204][ T7174] netlink: 'syz.4.1022': attribute type 10 has an invalid length.
[  159.328556][ T7174] bridge0: port 4(bond0) entered blocking state
[  159.334920][ T7174] bridge0: port 4(bond0) entered forwarding state
[  159.341580][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.348738][ T7174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.356332][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.363404][ T7174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.372454][ T7174] bridge0: port 4(bond0) entered disabled state
[  159.378973][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.386148][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.429923][ T7177] netlink: 'syz.2.1026': attribute type 10 has an invalid length.
[  159.438043][ T7177] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1026'.
[  159.712916][ T7194] netlink: 'syz.3.1031': attribute type 5 has an invalid length.
[  159.834356][ T7200] netlink: 'syz.3.1031': attribute type 10 has an invalid length.
[  160.161185][ T7206] netlink: 'syz.4.1036': attribute type 5 has an invalid length.
[  160.598615][ T7215] netlink: 'syz.4.1036': attribute type 10 has an invalid length.
[  160.614143][ T7215] bridge0: port 4(bond0) entered blocking state
[  160.620515][ T7215] bridge0: port 4(bond0) entered forwarding state
[  160.627182][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.634314][ T7215] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.641708][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.648888][ T7215] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.706885][ T7215] bridge0: port 4(bond0) entered disabled state
[  160.713402][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.720615][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.957240][ T7214] device syzkaller0 entered promiscuous mode
[  160.977580][ T7217] netlink: 'syz.1.1040': attribute type 5 has an invalid length.
[  161.023413][ T7223] device wlan0 entered promiscuous mode
[  161.680373][ T7247] device syzkaller0 entered promiscuous mode
[  162.570800][ T7273] device syzkaller0 entered promiscuous mode
[  162.809725][ T7282] __nla_validate_parse: 10 callbacks suppressed
[  162.809761][ T7282] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1062'.
[  162.870352][ T7283] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1062'.
[  163.176939][ T7297] bridge0: port 3(bond0) entered blocking state
[  163.183304][ T7297] bridge0: port 3(bond0) entered forwarding state
[  163.190077][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.197174][ T7297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.204569][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.211691][ T7297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.355263][ T7304] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1070'.
[  163.480357][ T7297] bridge0: port 3(bond0) entered disabled state
[  163.486818][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.494015][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.657315][ T7303] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1071'.
[  163.686451][ T7304] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.1070'.
[  163.817188][ T7313] device syzkaller0 entered promiscuous mode
[  163.923464][ T7316] bond0: (slave bond_slave_0): Releasing backup interface
[  163.985728][ T7323] validate_nla: 16 callbacks suppressed
[  163.985759][ T7323] netlink: 'syz.2.1077': attribute type 21 has an invalid length.
[  164.050340][ T7323] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1077'.
[  164.078342][ T7327] netlink: 'syz.2.1077': attribute type 1 has an invalid length.
[  164.092429][ T7327] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1077'.
[  164.170334][ T7332] netlink: 'syz.4.1079': attribute type 5 has an invalid length.
[  164.411054][ T7339] netlink: 'syz.4.1079': attribute type 10 has an invalid length.
[  164.423839][ T7339] bridge0: port 4(bond0) entered blocking state
[  164.430149][ T7339] bridge0: port 4(bond0) entered forwarding state
[  164.436790][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.443897][ T7339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.451250][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.458432][ T7339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.480740][ T7339] bridge0: port 4(bond0) entered disabled state
[  164.487228][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.494643][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.586156][ T7344] netlink: 'syz.2.1084': attribute type 1 has an invalid length.
[  164.601654][ T7344] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1084'.
[  164.616428][ T7351] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1085'.
[  164.633117][ T7349] device wlan1 entered promiscuous mode
[  164.644711][ T7351] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1085'.
[  165.081281][ T7366] netlink: 'syz.2.1091': attribute type 21 has an invalid length.
[  165.098931][ T7366] netlink: 'syz.2.1091': attribute type 1 has an invalid length.
[  165.165091][ T7369] tap5: tun_chr_ioctl cmd 1074025675
[  165.170678][ T7369] tap5: persist enabled
[  165.337405][ T7375] netlink: 'syz.1.1095': attribute type 12 has an invalid length.
[  165.365509][ T7379] device wlan1 entered promiscuous mode
[  165.578706][ T7391] netlink: 'syz.1.1104': attribute type 21 has an invalid length.
[  165.600598][ T7391] netlink: 'syz.1.1104': attribute type 1 has an invalid length.
[  165.624912][ T7393] tap3: tun_chr_ioctl cmd 1074025675
[  165.644630][ T7393] tap3: persist enabled
[  166.383729][ T7433] device wlan0 entered promiscuous mode
[  166.791617][ T7437] tap4: tun_chr_ioctl cmd 1074025675
[  166.799758][ T7437] tap4: persist enabled
[  167.387702][ T7473] bond0: (slave bond_slave_0): Releasing backup interface
[  167.492884][ T7475] tap6: tun_chr_ioctl cmd 1074025675
[  167.513652][ T7475] tap6: persist enabled
[  167.914498][ T7499] __nla_validate_parse: 21 callbacks suppressed
[  167.914533][ T7499] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1145'.
[  168.021355][ T7499] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1145'.
[  168.337957][ T7514] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1151'.
[  168.525558][ T7519] tap7: tun_chr_ioctl cmd 1074025675
[  168.546326][ T7519] tap7: persist enabled
[  168.588196][ T7514] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.1151'.
[  168.843546][ T7535] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1158'.
[  168.918058][ T7540] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1161'.
[  169.007182][ T7540] validate_nla: 17 callbacks suppressed
[  169.007227][ T7540] netlink: 'syz.1.1161': attribute type 1 has an invalid length.
[  169.055847][ T7540] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1161'.
[  169.070098][ T7542] netlink: 'syz.0.1163': attribute type 5 has an invalid length.
[  169.157054][ T7542] netlink: 'syz.0.1163': attribute type 10 has an invalid length.
[  169.468718][ T7563] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1168'.
[  169.513920][ T7563] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1168'.
[  169.625051][ T7568] device syzkaller0 entered promiscuous mode
[  171.312642][ T7583] netlink: 'syz.1.1176': attribute type 21 has an invalid length.
[  171.321933][ T7583] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1176'.
[  171.371481][ T7583] netlink: 'syz.1.1176': attribute type 1 has an invalid length.
[  171.402241][ T7587] netlink: 'syz.4.1177': attribute type 5 has an invalid length.
[  171.461316][ T7587] netlink: 'syz.4.1177': attribute type 10 has an invalid length.
[  171.570919][ T7587] bridge0: port 4(bond0) entered blocking state
[  171.578860][ T7587] bridge0: port 4(bond0) entered forwarding state
[  171.591692][ T7587] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.600862][ T7587] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.619489][ T7587] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.629871][ T7587] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.655541][ T7587] bridge0: port 4(bond0) entered disabled state
[  171.662228][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.670596][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.711298][ T7593] netlink: 'syz.2.1179': attribute type 5 has an invalid length.
[  171.734574][ T7595] device wlan1 entered promiscuous mode
[  171.762894][ T7600] netlink: 'syz.2.1179': attribute type 10 has an invalid length.
[  171.779804][ T7600] bridge0: port 3(bond0) entered blocking state
[  171.786246][ T7600] bridge0: port 3(bond0) entered forwarding state
[  171.792887][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.800032][ T7600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.807452][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.814604][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.825224][ T7600] bridge0: port 3(bond0) entered disabled state
[  171.831716][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.838923][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.853911][ T7597] netlink: 'syz.0.1182': attribute type 10 has an invalid length.
[  171.890649][ T7606] device syzkaller0 entered promiscuous mode
[  173.090726][ T7617] __nla_validate_parse: 4 callbacks suppressed
[  173.090745][ T7617] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1185'.
[  173.582039][ T7624] device wlan0 left promiscuous mode
[  173.712682][ T7630] device syzkaller0 entered promiscuous mode
[  173.748642][ T7634] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1192'.
[  173.783432][ T7634] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1192'.
[  174.139181][ T7641] validate_nla: 3 callbacks suppressed
[  174.139224][ T7641] netlink: 'syz.3.1194': attribute type 5 has an invalid length.
[  174.180219][ T7643] netlink: 'syz.1.1195': attribute type 1 has an invalid length.
[  174.210220][ T7643] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1195'.
[  174.227376][ T7647] device wlan1 entered promiscuous mode
[  174.243226][ T7648] netlink: 'syz.3.1194': attribute type 10 has an invalid length.
[  174.308638][ T7652] netlink: 'syz.0.1197': attribute type 10 has an invalid length.
[  174.343859][ T7652] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1197'.
[  174.362860][ T7660] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1199'.
[  174.372906][ T7660] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1199'.
[  175.232328][ T7667] netlink: 'syz.2.1202': attribute type 3 has an invalid length.
[  175.257622][ T7667] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1202'.
[  175.379917][ T7674] netlink: 'syz.1.1203': attribute type 5 has an invalid length.
[  175.893976][ T4225] Bluetooth: hci0: command 0x0406 tx timeout
[  175.900036][ T4225] Bluetooth: hci1: command 0x0406 tx timeout
[  175.920215][ T4225] Bluetooth: hci2: command 0x0406 tx timeout
[  175.933910][ T4225] Bluetooth: hci3: command 0x0406 tx timeout
[  175.939975][ T4225] Bluetooth: hci4: command 0x0406 tx timeout
[  177.487244][ T7679] netlink: 'syz.4.1205': attribute type 21 has an invalid length.
[  177.520577][ T7679] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1205'.
[  177.593092][ T7679] netlink: 'syz.4.1205': attribute type 1 has an invalid length.
[  177.642487][ T7679] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1205'.
[  177.848766][ T7695] netlink: 'syz.4.1210': attribute type 1 has an invalid length.
[  177.953538][ T7690] device syzkaller0 entered promiscuous mode
[  181.096932][ T7709] __nla_validate_parse: 2 callbacks suppressed
[  181.096948][ T7709] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1214'.
[  181.118795][ T7717] netlink: 'syz.1.1218': attribute type 5 has an invalid length.
[  181.236944][ T7725] netlink: 'syz.0.1220': attribute type 3 has an invalid length.
[  181.276365][ T7725] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1220'.
[  181.276425][ T7726] netlink: 'syz.4.1221': attribute type 21 has an invalid length.
[  181.348719][ T7726] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1221'.
[  181.364839][ T7729] device wlan0 entered promiscuous mode
[  181.406200][ T7726] netlink: 'syz.4.1221': attribute type 1 has an invalid length.
[  181.434181][ T7726] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1221'.
[  181.510024][ T7738] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  181.526531][ T7738] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1225'.
[  181.713321][ T7741] netlink: 'syz.0.1226': attribute type 27 has an invalid length.
[  181.789787][ T7753] IPv6: Can't replace route, no match found
[  181.813093][ T7753] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  181.837241][ T7755] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1230'.
[  181.854542][ T7755] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.1230'.
[  181.939834][ T7757] device syzkaller0 entered promiscuous mode
[  182.590174][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1231'.
[  182.661295][ T7768] netlink: 'syz.1.1234': attribute type 5 has an invalid length.
[  184.765304][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  184.990134][ T7774] netlink: 'syz.1.1234': attribute type 10 has an invalid length.
[  185.004186][ T7776] netlink: 'syz.3.1237': attribute type 1 has an invalid length.
[  185.018179][ T7776] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1237'.
[  185.088607][ T7781] netlink: 'syz.2.1239': attribute type 3 has an invalid length.
[  185.107031][ T7781] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1239'.
[  185.317020][ T7793] device wlan0 entered promiscuous mode
[  185.373544][ T7790] tap5: tun_chr_ioctl cmd 1074025675
[  185.390319][ T7790] tap5: persist enabled
[  186.234147][ T7816] device syzkaller0 entered promiscuous mode
[  186.306141][ T7820] validate_nla: 5 callbacks suppressed
[  186.306158][ T7820] netlink: 'syz.2.1251': attribute type 27 has an invalid length.
[  186.395344][ T7827] netlink: 'syz.3.1256': attribute type 3 has an invalid length.
[  186.403350][ T7827] __nla_validate_parse: 5 callbacks suppressed
[  186.403389][ T7827] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1256'.
[  186.442387][ T7820] bond0: (slave bond_slave_0): Releasing backup interface
[  186.494614][ T7820] device bond_slave_0 left promiscuous mode
[  186.750755][ T7838] netlink: 'syz.1.1261': attribute type 1 has an invalid length.
[  186.785144][ T7838] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1261'.
[  186.869045][ T7845] IPv6: Can't replace route, no match found
[  186.885546][ T7845] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  186.912180][ T7852] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1264'.
[  186.930572][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'.
[  186.968549][ T7852] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1264'.
[  187.028019][ T7854] netlink: 'syz.0.1266': attribute type 5 has an invalid length.
[  187.440069][ T7863] netlink: 'syz.0.1266': attribute type 10 has an invalid length.
[  187.951575][ T7872] device syzkaller0 entered promiscuous mode
[  188.151654][ T7878] netlink: 'syz.4.1275': attribute type 1 has an invalid length.
[  188.160562][ T7878] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1275'.
[  188.219078][ T7882] netlink: 'syz.0.1286': attribute type 21 has an invalid length.
[  188.244273][ T7882] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1286'.
[  188.267150][ T7887] netlink: 'syz.1.1278': attribute type 3 has an invalid length.
[  188.277519][ T7887] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1278'.
[  188.313958][ T7882] netlink: 'syz.0.1286': attribute type 1 has an invalid length.
[  188.337897][ T7882] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1286'.
[  188.364443][ T7889] netlink: 'syz.4.1276': attribute type 27 has an invalid length.
[  188.556594][ T7897] IPv6: Can't replace route, no match found
[  188.604500][ T7897] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  188.641442][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'.
[  189.060789][ T7919] bridge0: port 3(bond0) entered blocking state
[  189.067166][ T7919] bridge0: port 3(bond0) entered forwarding state
[  189.073816][ T7919] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.080904][ T7919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.088309][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.095437][ T7919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.144442][ T7919] bridge0: port 3(bond0) entered disabled state
[  189.151014][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.158213][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.193291][ T7916] device syzkaller0 entered promiscuous mode
[  189.847153][ T7953] device syzkaller0 entered promiscuous mode
[  190.845140][    T9] wlan1: Trigger new scan to find an IBSS to join
[  190.851695][    T9] wlan1: Trigger new scan to find an IBSS to join
[  191.203344][ T7979] bridge0: port 3(bond0) entered blocking state
[  191.209755][ T7979] bridge0: port 3(bond0) entered forwarding state
[  191.216426][ T7979] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.223529][ T7979] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.231003][ T7979] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.238162][ T7979] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.525280][ T7979] bridge0: port 3(bond0) entered disabled state
[  191.531780][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.538974][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.554782][ T7981] validate_nla: 11 callbacks suppressed
[  191.554817][ T7981] netlink: 'syz.4.1312': attribute type 21 has an invalid length.
[  191.569860][ T7981] __nla_validate_parse: 12 callbacks suppressed
[  191.569894][ T7981] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1312'.
[  191.677610][ T7982] netlink: 'syz.4.1312': attribute type 1 has an invalid length.
[  191.699093][ T7982] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1312'.
[  191.744838][ T7985] netlink: 'syz.0.1313': attribute type 10 has an invalid length.
[  191.760937][ T7985] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1313'.
[  191.787152][ T7987] netlink: 'syz.3.1314': attribute type 5 has an invalid length.
[  191.806802][ T7989] netlink: 'syz.3.1314': attribute type 10 has an invalid length.
[  192.008195][ T8006] netlink: 'syz.1.1321': attribute type 21 has an invalid length.
[  192.022463][ T8006] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1321'.
[  192.062088][ T8006] netlink: 'syz.1.1321': attribute type 1 has an invalid length.
[  192.071087][ T8006] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1321'.
[  192.135006][ T8001] device syzkaller0 entered promiscuous mode
[  192.169407][ T8011] device syzkaller0 entered promiscuous mode
[  192.401492][ T8012] delete_channel: no stack
[  192.442942][ T8020] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1325'.
[  192.460210][ T8020] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1325'.
[  192.464384][ T8022] netlink: 'syz.1.1326': attribute type 3 has an invalid length.
[  192.483017][ T8022] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1326'.
[  192.547516][ T8028] netlink: 'syz.4.1327': attribute type 21 has an invalid length.
[  192.562613][ T8028] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1327'.
[  192.600139][ T8028] netlink: 'syz.4.1327': attribute type 1 has an invalid length.
[  192.613111][ T8028] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1327'.
[  193.114018][ T8042] bridge0: port 3(bond0) entered blocking state
[  193.114096][ T8042] bridge0: port 3(bond0) entered forwarding state
[  193.114258][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.134236][ T8042] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.141673][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.148828][ T8042] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.814166][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  194.218656][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.225134][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.783169][ T8042] bridge0: port 3(bond0) entered disabled state
[  194.789630][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.796937][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.849545][  T154] wlan1: Trigger new scan to find an IBSS to join
[  194.909187][ T8045] device syzkaller0 entered promiscuous mode
[  194.980053][  T154] wlan1: Creating new IBSS network, BSSID da:5b:2a:29:06:58
[  195.011389][ T8051] device syzkaller0 entered promiscuous mode
[  195.025497][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  195.219714][ T8063] tap6: tun_chr_ioctl cmd 1074025675
[  195.227848][ T8063] tap6: persist enabled
[  195.356443][ T8062] delete_channel: no stack
[  196.495162][ T8102] device syzkaller0 entered promiscuous mode
[  196.774041][    T9] wlan1: Creating new IBSS network, BSSID 2e:59:d2:9a:b8:54
[  197.478150][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  197.543628][ T8108] device syzkaller0 entered promiscuous mode
[  197.642716][ T8111] validate_nla: 14 callbacks suppressed
[  197.642757][ T8111] netlink: 'syz.3.1354': attribute type 21 has an invalid length.
[  197.667359][ T8111] __nla_validate_parse: 11 callbacks suppressed
[  197.667404][ T8111] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1354'.
[  197.695337][ T8115] netlink: 'syz.3.1354': attribute type 1 has an invalid length.
[  197.712610][ T8115] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1354'.
[  197.779340][ T8120] netlink: 'syz.1.1356': attribute type 10 has an invalid length.
[  197.789002][ T8120] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1356'.
[  197.800928][ T8122] netlink: 'syz.2.1357': attribute type 21 has an invalid length.
[  197.815774][ T8122] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1357'.
[  197.832766][ T8113] netlink: 'syz.4.1353': attribute type 27 has an invalid length.
[  197.847266][ T8122] netlink: 'syz.2.1357': attribute type 1 has an invalid length.
[  197.879559][ T8122] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1357'.
[  197.957145][ T8131] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1360'.
[  197.979664][ T8131] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1360'.
[  198.007976][ T8133] netlink: 'syz.4.1361': attribute type 5 has an invalid length.
[  198.132007][ T8139] netlink: 'syz.4.1361': attribute type 10 has an invalid length.
[  198.195004][ T8139] bridge0: port 4(bond0) entered blocking state
[  198.201373][ T8139] bridge0: port 4(bond0) entered forwarding state
[  198.208062][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.215188][ T8139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.222572][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.229721][ T8139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.822930][ T8142] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1373'.
[  200.254926][ T8139] bridge0: port 4(bond0) entered disabled state
[  200.261341][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.268563][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.387501][ T8142] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1373'.
[  200.408482][ T8152] netlink: 'syz.0.1364': attribute type 5 has an invalid length.
[  200.502122][ T8159] netlink: 'syz.1.1368': attribute type 21 has an invalid length.
[  200.522156][ T8159] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1368'.
[  200.594978][ T8161] device syzkaller0 entered promiscuous mode
[  200.665202][ T8155] device syzkaller0 entered promiscuous mode
[  204.085950][ T8210] validate_nla: 8 callbacks suppressed
[  204.085983][ T8210] netlink: 'syz.3.1384': attribute type 21 has an invalid length.
[  204.103598][ T8210] __nla_validate_parse: 8 callbacks suppressed
[  204.103629][ T8210] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1384'.
[  204.130555][ T8210] netlink: 'syz.3.1384': attribute type 1 has an invalid length.
[  204.138535][ T8210] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1384'.
[  204.204855][ T8212] device syzkaller0 entered promiscuous mode
[  204.352148][ T8220] netlink: 'syz.4.1386': attribute type 21 has an invalid length.
[  204.370722][ T8220] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1386'.
[  204.388972][ T8226] netlink: 'syz.4.1386': attribute type 1 has an invalid length.
[  204.396926][ T8226] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1386'.
[  204.476365][ T8218] device syzkaller0 entered promiscuous mode
[  204.490531][ T8230] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1391'.
[  204.507012][ T8230] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1391'.
[  204.531030][ T8234] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1392'.
[  204.598027][ T8234] netlink: 'syz.2.1392': attribute type 12 has an invalid length.
[  204.612546][ T8234] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1392'.
[  204.763060][ T8245] IPv6: Can't replace route, no match found
[  204.786464][ T8243] netlink: 'syz.0.1394': attribute type 27 has an invalid length.
[  204.802809][ T8245] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  204.827699][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'.
[  204.877470][ T8248] netlink: 'syz.1.1396': attribute type 27 has an invalid length.
[  204.920028][ T8252] IPv6: Can't replace route, no match found
[  204.928984][ T8252] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  205.076372][ T8260] device syzkaller0 entered promiscuous mode
[  205.128852][ T8265] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1403'.
[  205.272417][ T8261] delete_channel: no stack
[  208.197611][ T8273] netlink: 'syz.3.1405': attribute type 21 has an invalid length.
[  208.208849][ T8274] netlink: 'syz.3.1405': attribute type 1 has an invalid length.
[  208.234539][ T8278] netlink: 'syz.4.1406': attribute type 21 has an invalid length.
[  208.735635][ T8288] device syzkaller0 entered promiscuous mode
[  208.764088][ T4390] wlan1: Trigger new scan to find an IBSS to join
[  209.007542][ T8318] IPv6: Can't replace route, no match found
[  209.027431][ T8318] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  209.173563][ T8323] device syzkaller0 entered promiscuous mode
[  209.181264][ T8325] validate_nla: 7 callbacks suppressed
[  209.181301][ T8325] netlink: 'syz.4.1422': attribute type 21 has an invalid length.
[  209.207673][ T8325] __nla_validate_parse: 11 callbacks suppressed
[  209.207716][ T8325] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1422'.
[  211.805377][  T381] wlan1: Trigger new scan to find an IBSS to join
[  212.053725][ T8325] netlink: 'syz.4.1422': attribute type 1 has an invalid length.
[  212.061813][ T8325] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1422'.
[  212.086133][ T8329] netlink: 'syz.0.1423': attribute type 10 has an invalid length.
[  212.095192][ T8329] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1423'.
[  212.107990][ T8334] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  212.147086][ T8337] device wlan0 left promiscuous mode
[  212.158505][ T8334] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  212.185795][ T8334] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  212.305055][ T8340] netlink: 'syz.4.1426': attribute type 5 has an invalid length.
[  212.358638][ T8342] netlink: 'syz.0.1437': attribute type 10 has an invalid length.
[  212.366703][ T8342] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1437'.
[  212.412951][ T8340] netlink: 'syz.4.1426': attribute type 10 has an invalid length.
[  212.494943][ T8340] bridge0: port 4(bond0) entered blocking state
[  212.501259][ T8340] bridge0: port 4(bond0) entered forwarding state
[  212.507955][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.515079][ T8340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.522472][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.529646][ T8340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.563778][ T8340] bridge0: port 4(bond0) entered disabled state
[  212.570201][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.577467][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.655436][ T8355] netlink: 'syz.2.1430': attribute type 27 has an invalid length.
[  212.744631][ T8358] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1431'.
[  212.761029][ T8350] device syzkaller0 entered promiscuous mode
[  212.768454][ T8358] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1431'.
[  212.778281][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  212.848300][  T381] wlan1: Creating new IBSS network, BSSID da:ae:90:57:08:e7
[  212.899238][ T8361] netlink: 'syz.3.1443': attribute type 5 has an invalid length.
[  213.002083][ T8361] netlink: 'syz.3.1443': attribute type 10 has an invalid length.
[  213.781713][ T8378] netlink: 'syz.2.1438': attribute type 21 has an invalid length.
[  213.791515][ T8378] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1438'.
[  213.827460][ T8378] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1438'.
[  213.981326][ T8381] device syzkaller0 entered promiscuous mode
[  214.845127][ T4390] wlan1: Trigger new scan to find an IBSS to join
[  216.059239][ T4390] wlan1: Creating new IBSS network, BSSID e2:01:9d:88:c2:eb
[  216.079980][ T8383] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  216.090238][ T8383] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  216.124144][ T8383] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  216.207076][ T8386] validate_nla: 1 callbacks suppressed
[  216.207186][ T8386] netlink: 'syz.3.1441': attribute type 5 has an invalid length.
[  216.253075][ T8391] netlink: 'syz.4.1442': attribute type 10 has an invalid length.
[  216.275625][ T8391] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1442'.
[  216.326877][ T8396] device syzkaller0 entered promiscuous mode
[  216.340599][ T8386] netlink: 'syz.3.1441': attribute type 10 has an invalid length.
[  216.362128][ T8395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1446'.
[  216.374375][ T8399] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1447'.
[  216.385666][ T8399] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1447'.
[  216.408643][ T8395] netlink: 'syz.0.1446': attribute type 12 has an invalid length.
[  216.439580][ T8395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1446'.
[  216.616896][ T8404] device syzkaller0 entered promiscuous mode
[  216.753713][ T8415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1451'.
[  216.812146][ T8415] netlink: 'syz.1.1451': attribute type 12 has an invalid length.
[  216.825432][ T8415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1451'.
[  216.851484][ T8420] netlink: 'syz.2.1452': attribute type 5 has an invalid length.
[  216.862010][ T8422] netlink: 'syz.4.1453': attribute type 5 has an invalid length.
[  216.916504][ T8420] netlink: 'syz.2.1452': attribute type 10 has an invalid length.
[  216.943239][ T8420] bridge0: port 3(bond0) entered blocking state
[  216.949661][ T8420] bridge0: port 3(bond0) entered forwarding state
[  216.956324][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.963398][ T8420] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.970832][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.977991][ T8420] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.098848][ T8420] bridge0: port 3(bond0) entered disabled state
[  217.105352][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.112504][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.219097][ T8423] netlink: 'syz.4.1453': attribute type 10 has an invalid length.
[  217.258917][ T8423] bridge0: port 4(bond0) entered blocking state
[  217.265300][ T8423] bridge0: port 4(bond0) entered forwarding state
[  217.271977][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.279090][ T8423] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.286585][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.293693][ T8423] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.527734][ T8423] bridge0: port 4(bond0) entered disabled state
[  217.534215][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.541471][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.634008][ T8428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1454'.
[  217.718216][ T8425] netlink: 'syz.3.1454': attribute type 12 has an invalid length.
[  217.785780][ T8425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1454'.
[  217.946367][ T8435] device syzkaller0 entered promiscuous mode
[  218.056050][ T8446] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1458'.
[  218.100834][ T8448] IPv6: Can't replace route, no match found
[  218.129196][ T8448] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  218.612955][ T8464] device syzkaller0 entered promiscuous mode
[  218.643183][ T8479] bridge0: port 4(bond0) entered blocking state
[  218.649569][ T8479] bridge0: port 4(bond0) entered forwarding state
[  218.656219][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.663313][ T8479] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.670784][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.677958][ T8479] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.697889][ T8479] bridge0: port 4(bond0) entered disabled state
[  218.704383][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.711533][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.382416][ T8482] device syzkaller0 entered promiscuous mode
[  219.455057][ T8489] device syzkaller0 entered promiscuous mode
[  219.831787][ T8505] IPv6: Can't replace route, no match found
[  219.856042][ T8505] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  220.502171][ T8526] delete_channel: no stack
[  220.555311][ T8531] bridge0: port 4(bond0) entered blocking state
[  220.561710][ T8531] bridge0: port 4(bond0) entered forwarding state
[  220.568386][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.575512][ T8531] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.582889][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.590047][ T8531] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.806527][ T8531] bridge0: port 4(bond0) entered disabled state
[  220.813006][ T8531] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.820259][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.844552][    T9] wlan1: Trigger new scan to find an IBSS to join
[  220.906276][ T8536] device syzkaller0 entered promiscuous mode
[  221.014068][ T8541] device syzkaller0 entered promiscuous mode
[  221.494665][ T8561] validate_nla: 14 callbacks suppressed
[  221.494699][ T8561] netlink: 'syz.4.1506': attribute type 29 has an invalid length.
[  221.561053][ T8566] __nla_validate_parse: 16 callbacks suppressed
[  221.561074][ T8566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1497'.
[  221.673987][ T8561] netlink: 'syz.4.1506': attribute type 29 has an invalid length.
[  221.693391][ T8564] netlink: 'syz.2.1497': attribute type 12 has an invalid length.
[  221.719981][ T8564] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1497'.
[  222.841868][ T8577] netlink: 'syz.0.1501': attribute type 10 has an invalid length.
[  222.852781][ T8577] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1501'.
[  222.868102][ T8578] netlink: 'syz.4.1500': attribute type 5 has an invalid length.
[  223.804542][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  224.437705][ T8585] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1504'.
[  224.455840][ T8585] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1504'.
[  224.677588][ T8588] delete_channel: no stack
[  224.705218][ T8598] device syzkaller0 entered promiscuous mode
[  224.716504][ T8602] IPv6: Can't replace route, no match found
[  224.728797][ T8602] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  224.811880][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'.
[  224.844497][  T381] wlan1: Trigger new scan to find an IBSS to join
[  224.930320][ T8616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1514'.
[  224.947743][ T8616] netlink: 'syz.2.1514': attribute type 12 has an invalid length.
[  224.957483][ T8616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1514'.
[  225.082116][ T8622] IPv6: Can't replace route, no match found
[  225.096918][ T8622] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  225.114439][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'.
[  225.209778][ T8631] netlink: 'syz.1.1520': attribute type 10 has an invalid length.
[  225.221093][ T8631] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1520'.
[  225.757160][ T8639] device syzkaller0 entered promiscuous mode
[  225.873185][ T8617] delete_channel: no stack
[  226.764001][ T3095] wlan1: Creating new IBSS network, BSSID 2a:1b:3b:ab:d8:bf
[  226.844038][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  227.809619][  T381] wlan1: Trigger new scan to find an IBSS to join
[  228.576842][ T8643] device syzkaller0 entered promiscuous mode
[  228.744320][ T8661] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1528'.
[  228.819121][ T8658] netlink: 'syz.0.1528': attribute type 12 has an invalid length.
[  228.912167][ T8658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1528'.
[  229.001751][ T8664] delete_channel: no stack
[  229.025588][ T8659] device syzkaller0 entered promiscuous mode
[  229.170131][ T8681] netlink: 'syz.3.1534': attribute type 10 has an invalid length.
[  229.183683][ T8681] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1534'.
[  229.338809][ T8686] netlink: 'syz.4.1535': attribute type 5 has an invalid length.
[  229.529551][ T8687] netlink: 'syz.4.1535': attribute type 10 has an invalid length.
[  229.562436][ T8687] bridge0: port 4(bond0) entered blocking state
[  229.568859][ T8687] bridge0: port 4(bond0) entered forwarding state
[  229.575522][ T8687] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.582659][ T8687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.590079][ T8687] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.597221][ T8687] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.843899][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  232.344942][ T4649] wlan1: Creating new IBSS network, BSSID d6:18:32:98:cb:e1
[  232.364973][ T8687] bridge0: port 4(bond0) entered disabled state
[  232.371371][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.378565][ T8687] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.485208][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  232.529990][ T8696] device syzkaller0 entered promiscuous mode
[  232.538851][ T8707] IPv6: Can't replace route, no match found
[  232.565805][ T8708] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  232.668259][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'.
[  232.784921][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  232.869061][ T8714] device syzkaller0 entered promiscuous mode
[  232.920319][ T8719] netlink: 'syz.2.1548': attribute type 10 has an invalid length.
[  232.948131][ T8719] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1548'.
[  233.493718][ T8742] device syzkaller0 entered promiscuous mode
[  233.537855][ T8753] IPv6: Can't replace route, no match found
[  233.556376][ T8753] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  233.568602][ T8751] netlink: 'syz.3.1559': attribute type 5 has an invalid length.
[  233.638124][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'.
[  233.688081][ T8754] netlink: 'syz.3.1559': attribute type 10 has an invalid length.
[  233.735799][ T3095] wlan1: Creating new IBSS network, BSSID 9e:74:3f:60:fd:23
[  233.764556][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  233.824301][ T8759] netlink: 'syz.4.1562': attribute type 10 has an invalid length.
[  233.860996][ T8759] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1562'.
[  233.933780][ T8764] IPv6: Can't replace route, no match found
[  233.995077][ T8764] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  234.020738][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'.
[  234.189209][ T8770] device syzkaller0 entered promiscuous mode
[  234.239402][ T8772] netlink: 'syz.4.1566': attribute type 21 has an invalid length.
[  234.295969][ T8772] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1566'.
[  234.357038][ T8774] netlink: 'syz.4.1566': attribute type 1 has an invalid length.
[  234.390599][ T8774] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1566'.
[  234.764349][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  235.804238][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  236.180260][ T8790] device syzkaller0 entered promiscuous mode
[  236.257077][ T8804] netlink: 'syz.3.1576': attribute type 10 has an invalid length.
[  236.265830][ T8804] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1576'.
[  236.314392][ T8806] netlink: 'syz.0.1587': attribute type 10 has an invalid length.
[  236.329981][ T8806] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1587'.
[  236.419686][ T8810] netlink: 'syz.2.1578': attribute type 5 has an invalid length.
[  236.430017][ T8812] IPv6: Can't replace route, no match found
[  236.440819][ T8812] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  236.469096][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1579'.
[  236.680278][ T8817] netlink: 'syz.2.1578': attribute type 10 has an invalid length.
[  236.742295][ T8817] bridge0: port 3(bond0) entered blocking state
[  236.748679][ T8817] bridge0: port 3(bond0) entered forwarding state
[  236.755393][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.762470][ T8817] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.769863][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.776986][ T8817] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.184128][ T8807] delete_channel: no stack
[  237.804132][ T4390] wlan1: Trigger new scan to find an IBSS to join
[  238.361183][ T8817] bridge0: port 3(bond0) entered disabled state
[  238.367642][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.374872][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.473407][ T8823] netlink: 'syz.4.1583': attribute type 21 has an invalid length.
[  238.503950][ T8823] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1583'.
[  238.551306][ T8826] netlink: 'syz.4.1583': attribute type 1 has an invalid length.
[  238.563935][ T8826] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1583'.
[  238.620629][ T8820] device syzkaller0 entered promiscuous mode
[  238.791907][ T8840] device wlan0 entered promiscuous mode
[  238.818998][ T8844] netlink: 'syz.4.1590': attribute type 10 has an invalid length.
[  238.844163][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  238.853986][ T8844] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1590'.
[  238.931573][ T8842] device syzkaller0 entered promiscuous mode
[  239.061449][ T8852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1591'.
[  239.071579][ T8851] netlink: 'syz.1.1591': attribute type 12 has an invalid length.
[  239.082723][ T8851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1591'.
[  239.092252][ T8856] IPv6: Can't replace route, no match found
[  239.099896][ T8859] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  239.113162][ T8854] IPv6: Can't replace route, no match found
[  239.124321][ T8860] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  239.142258][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1593'.
[  239.166416][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'.
[  239.276386][ T8867] IPv6: Can't replace route, no match found
[  239.307197][ T8867] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  239.330289][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'.
[  239.391669][ T8876] IPv6: Can't replace route, no match found
[  239.405993][ T8876] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  239.430895][ T8862] delete_channel: no stack
[  239.431138][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'.
[  239.621933][ T8884] device syzkaller0 entered promiscuous mode
[  239.643015][ T8871] delete_channel: no stack
[  239.654482][ T8886] netlink: 'syz.4.1606': attribute type 21 has an invalid length.
[  239.663359][ T8886] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1606'.
[  239.674057][ T8887] netlink: 'syz.4.1606': attribute type 1 has an invalid length.
[  239.681796][ T8887] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1606'.
[  239.803911][  T381] wlan1: Trigger new scan to find an IBSS to join
[  240.843884][  T381] wlan1: Trigger new scan to find an IBSS to join
[  241.292716][ T4390] wlan1: Creating new IBSS network, BSSID 66:73:2d:67:03:b0
[  241.302531][ T8892] netlink: 'syz.2.1607': attribute type 5 has an invalid length.
[  241.310475][ T8897] netlink: 'syz.1.1608': attribute type 5 has an invalid length.
[  241.555862][ T8909] IPv6: Can't replace route, no match found
[  241.597898][ T8909] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  241.622510][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'.
[  241.686392][ T8912] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1614'.
[  241.775005][ T8906] device syzkaller0 entered promiscuous mode
[  241.789859][ T8912] netlink: 'syz.4.1614': attribute type 12 has an invalid length.
[  241.807723][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  241.814505][ T4390] wlan1: Trigger new scan to find an IBSS to join
[  241.841799][ T8925] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  241.870818][ T8920] device wlan0 left promiscuous mode
[  241.909425][ T8922] IPv6: Can't replace route, no match found
[  242.316468][ T8927] delete_channel: no stack
[  242.566554][ T8941] device syzkaller0 entered promiscuous mode
[  245.259175][ T8949] netlink: 'syz.0.1622': attribute type 5 has an invalid length.
[  245.267650][ T8950] netlink: 'syz.3.1623': attribute type 5 has an invalid length.
[  245.451458][ T8956] IPv6: Can't replace route, no match found
[  245.470138][ T8958] IPv6: Can't replace route, no match found
[  245.480473][ T8958] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  245.500047][ T8956] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  245.517184][ T8956] __nla_validate_parse: 2 callbacks suppressed
[  245.517211][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'.
[  245.544784][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'.
[  245.606298][ T8964] device wlan0 left promiscuous mode
[  245.661602][ T8965] IPv6: Can't replace route, no match found
[  245.739860][ T8969] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  245.792797][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'.
[  245.814022][  T381] wlan1: Trigger new scan to find an IBSS to join
[  245.821634][  T381] wlan1: Trigger new scan to find an IBSS to join
[  245.891701][ T8976] netlink: 'syz.4.1635': attribute type 5 has an invalid length.
[  246.071279][ T8989] netlink: 'syz.4.1635': attribute type 10 has an invalid length.
[  246.175829][ T8989] bridge0: port 4(bond0) entered blocking state
[  246.182185][ T8989] bridge0: port 4(bond0) entered forwarding state
[  246.188840][ T8989] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.195963][ T8989] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.203326][ T8989] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.210477][ T8989] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.804106][  T381] wlan1: Creating new IBSS network, BSSID d2:66:d9:77:70:75
[  247.811602][ T4390] wlan1: Trigger new scan to find an IBSS to join
[  247.812671][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  247.818388][    T9] wlan1: Creating new IBSS network, BSSID 82:cc:9d:27:48:0f
[  247.824638][  T154] wlan1: Trigger new scan to find an IBSS to join
[  248.961722][ T8989] bridge0: port 4(bond0) entered disabled state
[  248.968314][ T8989] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.975551][ T8989] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.000993][ T8987] netlink: 'syz.2.1638': attribute type 5 has an invalid length.
[  249.012891][ T8991] netlink: 'syz.2.1638': attribute type 10 has an invalid length.
[  249.022233][ T8991] bridge0: port 3(bond0) entered blocking state
[  249.028581][ T8991] bridge0: port 3(bond0) entered forwarding state
[  249.035198][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.042279][ T8991] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.049713][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.056886][ T8991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.069668][ T8991] bridge0: port 3(bond0) entered disabled state
[  249.076083][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.083186][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.143049][ T8994] device syzkaller0 entered promiscuous mode
[  249.167212][ T9008] IPv6: Can't replace route, no match found
[  252.127893][ T9008] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  252.182929][ T9012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1644'.
[  252.192960][ T9015] netlink: 'syz.3.1644': attribute type 12 has an invalid length.
[  252.201384][ T9015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1644'.
[  252.222230][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'.
[  252.370171][ T9024] device wlan0 left promiscuous mode
[  252.553685][ T9030] device syzkaller0 entered promiscuous mode
[  252.559964][ T9020] delete_channel: no stack
[  252.589266][ T9035] IPv6: Can't replace route, no match found
[  252.602768][ T9037] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  252.673269][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1647'.
[  252.781822][ T9047] netlink: 'syz.1.1653': attribute type 5 has an invalid length.
[  252.821275][ T9050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1654'.
[  252.844055][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  252.864341][ T9050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1654'.
[  252.877533][ T9047] netlink: 'syz.1.1653': attribute type 10 has an invalid length.
[  252.913627][ T9050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1654'.
[  252.929175][ T9054] netlink: 'syz.0.1655': attribute type 5 has an invalid length.
[  252.945439][  T154] wlan1: Creating new IBSS network, BSSID fa:a0:75:fd:d3:22
[  252.999748][ T9057] netlink: 'syz.0.1655': attribute type 10 has an invalid length.
[  253.089252][ T9060] netlink: 'syz.3.1658': attribute type 21 has an invalid length.
[  253.134082][ T9060] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1658'.
[  253.161400][ T9061] netlink: 'syz.1.1660': attribute type 5 has an invalid length.
[  253.236830][ T9061] netlink: 'syz.1.1660': attribute type 10 has an invalid length.
[  254.764062][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  254.843973][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  255.645891][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.652339][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  256.117879][ T9068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1662'.
[  256.175970][ T9077] netlink: 'syz.0.1662': attribute type 12 has an invalid length.
[  256.281363][ T9077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1662'.
[  256.317572][ T9078] netlink: 'syz.3.1663': attribute type 12 has an invalid length.
[  256.568723][ T9085] device syzkaller0 entered promiscuous mode
[  256.898517][ T9102] device wlan0 left promiscuous mode
[  259.813976][  T154] wlan1: Trigger new scan to find an IBSS to join
[  259.813988][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  259.862979][  T154] wlan1: Creating new IBSS network, BSSID be:d7:7f:8a:c6:d9
[  259.915889][ T4649] wlan1: Creating new IBSS network, BSSID da:88:ea:7d:0f:83
[  259.934301][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  260.019302][ T9113] __nla_validate_parse: 7 callbacks suppressed
[  260.019339][ T9113] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1678'.
[  260.053357][ T9113] validate_nla: 6 callbacks suppressed
[  260.053390][ T9113] netlink: 'syz.4.1678': attribute type 12 has an invalid length.
[  260.080964][ T9113] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1678'.
[  260.332264][ T9132] IPv6: Can't replace route, no match found
[  260.350657][ T9130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1685'.
[  260.364538][ T9132] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  260.444104][ T9134] device syzkaller0 entered promiscuous mode
[  260.460965][ T9130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1685'.
[  260.480557][ T9138] netlink: 'syz.0.1687': attribute type 21 has an invalid length.
[  260.491808][ T9138] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1687'.
[  260.514648][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'.
[  260.541240][ T9136] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1685'.
[  260.664962][ T9143] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  260.722686][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'.
[  260.787569][ T9148] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1690'.
[  260.944418][ T9144] delete_channel: no stack
[  261.079852][ T9166] netlink: 'syz.3.1698': attribute type 21 has an invalid length.
[  261.100617][ T9166] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1698'.
[  261.288654][ T9176] device wlan0 entered promiscuous mode
[  261.461129][ T9181] device syzkaller0 entered promiscuous mode
[  261.524625][ T9185] IPv6: Can't replace route, no match found
[  261.638696][ T9185] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  261.722074][ T9190] netlink: 'syz.0.1715': attribute type 21 has an invalid length.
[  261.738740][ T9190] netlink: 'syz.0.1715': attribute type 1 has an invalid length.
[  261.763533][ T9192] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  261.851871][ T9194] netlink: 'syz.1.1717': attribute type 29 has an invalid length.
[  261.932491][ T9194] netlink: 'syz.1.1717': attribute type 29 has an invalid length.
[  262.350593][ T9217] netlink: 'syz.2.1714': attribute type 21 has an invalid length.
[  262.496100][ T9224] netlink: 'syz.1.1718': attribute type 3 has an invalid length.
[  262.545169][ T9226] netlink: 'syz.2.1719': attribute type 21 has an invalid length.
[  262.585934][ T9211] delete_channel: no stack
[  262.844476][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  262.911213][ T9232] device syzkaller0 entered promiscuous mode
[  262.961885][ T9236] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  263.302151][ T9253] device wlan0 left promiscuous mode
[  263.714038][ T9262] delete_channel: no stack
[  263.803928][  T154] wlan1: Trigger new scan to find an IBSS to join
[  263.810497][    T9] wlan1: Trigger new scan to find an IBSS to join
[  263.914145][ T9280] device syzkaller0 entered promiscuous mode
[  264.208620][ T9278] delete_channel: no stack
[  264.646668][ T9307] delete_channel: no stack
[  264.770606][ T9323] device syzkaller0 entered promiscuous mode
[  265.068009][ T9335] validate_nla: 17 callbacks suppressed
[  265.068040][ T9335] netlink: 'syz.2.1761': attribute type 21 has an invalid length.
[  265.109267][ T9335] __nla_validate_parse: 25 callbacks suppressed
[  265.109302][ T9335] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1761'.
[  265.167023][ T9340] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1763'.
[  265.290712][ T9342] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1765'.
[  265.323825][ T9331] delete_channel: no stack
[  265.367689][ T9346] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1764'.
[  265.488124][ T9347] netlink: 'syz.0.1766': attribute type 29 has an invalid length.
[  265.509817][ T9347] netlink: 'syz.0.1766': attribute type 29 has an invalid length.
[  265.651233][ T9363] netlink: 'syz.2.1770': attribute type 10 has an invalid length.
[  265.671444][ T9363] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1770'.
[  266.759783][ T9373] netlink: 'syz.0.1774': attribute type 21 has an invalid length.
[  266.767943][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  266.779890][ T9373] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1774'.
[  266.811589][ T9375] netlink: 'syz.2.1775': attribute type 21 has an invalid length.
[  266.820720][ T9375] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1775'.
[  266.844451][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  266.865304][ T9375] netlink: 'syz.2.1775': attribute type 1 has an invalid length.
[  266.889251][ T9375] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1775'.
[  267.072419][ T9383] netlink: 'syz.0.1778': attribute type 5 has an invalid length.
[  267.092356][ T9385] netlink: 'syz.4.1777': attribute type 5 has an invalid length.
[  267.309121][ T9384] netlink: 'syz.0.1778': attribute type 10 has an invalid length.
[  267.409705][ T9385] bridge0: port 4(bond0) entered blocking state
[  267.416076][ T9385] bridge0: port 4(bond0) entered forwarding state
[  267.422741][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.429907][ T9385] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.437334][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.444499][ T9385] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.488362][ T9385] bridge0: port 4(bond0) entered disabled state
[  267.494865][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.502217][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.808067][  T154] wlan1: Trigger new scan to find an IBSS to join
[  267.814758][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  267.884831][ T9389] device wlan0 left promiscuous mode
[  268.140588][ T9400] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1785'.
[  268.169295][ T9402] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1784'.
[  268.843944][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  268.850625][    T9] wlan1: Creating new IBSS network, BSSID 4e:13:52:7b:09:db
[  269.803860][ T4649] wlan1: Creating new IBSS network, BSSID 2a:94:b3:5b:a3:1a
[  269.811346][ T3075] wlan1: Creating new IBSS network, BSSID ee:a5:1f:90:f9:72
[  269.995637][ T9422] device wlan0 entered promiscuous mode
[  270.197836][ T9436] validate_nla: 7 callbacks suppressed
[  270.197849][ T9436] netlink: 'syz.2.1795': attribute type 10 has an invalid length.
[  270.289768][ T9436] bridge0: port 3(bond0) entered blocking state
[  270.296293][ T9436] bridge0: port 3(bond0) entered forwarding state
[  270.302944][ T9436] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.310104][ T9436] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.317529][ T9436] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.324680][ T9436] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.349714][ T9442] netlink: 'syz.3.1800': attribute type 3 has an invalid length.
[  270.377404][ T9442] __nla_validate_parse: 3 callbacks suppressed
[  270.377448][ T9442] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1800'.
[  270.426057][ T9436] bridge0: port 3(bond0) entered disabled state
[  270.432506][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.439718][ T9436] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.610590][ T9440] netlink: 'syz.4.1799': attribute type 10 has an invalid length.
[  270.625095][ T9440] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1799'.
[  270.640822][ T9443] netlink: 'syz.1.1798': attribute type 10 has an invalid length.
[  270.716147][ T9450] netlink: 'syz.3.1802': attribute type 21 has an invalid length.
[  270.724508][ T9450] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1802'.
[  270.755335][ T9450] netlink: 'syz.3.1802': attribute type 1 has an invalid length.
[  270.764294][ T9450] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1802'.
[  270.775556][ T9451] netlink: 'syz.4.1803': attribute type 21 has an invalid length.
[  270.791070][ T9451] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1803'.
[  271.623446][ T9472] device wlan0 entered promiscuous mode
[  271.816930][    T9] wlan1: Creating new IBSS network, BSSID d6:84:c6:33:c4:b8
[  273.131999][ T9478] netlink: 'syz.4.1815': attribute type 21 has an invalid length.
[  273.142295][ T9477] netlink: 'syz.3.1812': attribute type 29 has an invalid length.
[  273.144431][ T9478] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1815'.
[  273.176236][ T9477] netlink: 'syz.3.1812': attribute type 29 has an invalid length.
[  273.209992][ T9478] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1815'.
[  273.232847][ T9482] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1813'.
[  273.337206][ T9487] bridge0: port 3(bond0) entered blocking state
[  273.343524][ T9487] bridge0: port 3(bond0) entered forwarding state
[  273.350205][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.357327][ T9487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.364742][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.371833][ T9487] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.412015][ T9487] bridge0: port 3(bond0) entered disabled state
[  273.418483][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.425661][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.541753][ T9491] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1817'.
[  274.450372][ T9515] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1826'.
[  276.477802][ T9525] validate_nla: 10 callbacks suppressed
[  276.477818][ T9525] netlink: 'syz.4.1829': attribute type 10 has an invalid length.
[  276.513364][ T9525] __nla_validate_parse: 1 callbacks suppressed
[  276.513379][ T9525] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1829'.
[  276.544295][ T9528] netlink: 'syz.0.1832': attribute type 21 has an invalid length.
[  276.555041][ T9528] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1832'.
[  276.663564][ T9530] netlink: 'syz.1.1828': attribute type 10 has an invalid length.
[  276.929936][ T9539] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  277.018079][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'.
[  277.053055][ T9541] netlink: 'syz.2.1836': attribute type 5 has an invalid length.
[  277.126214][ T9544] netlink: 'syz.3.1837': attribute type 21 has an invalid length.
[  277.143877][ T9544] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1837'.
[  277.211823][ T9544] netlink: 'syz.3.1837': attribute type 1 has an invalid length.
[  277.253086][ T9544] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1837'.
[  277.342573][ T9548] device wlan0 entered promiscuous mode
[  277.370624][ T9552] netlink: 'syz.2.1836': attribute type 10 has an invalid length.
[  277.422736][ T9552] bridge0: port 3(bond0) entered blocking state
[  277.429473][ T9552] bridge0: port 3(bond0) entered forwarding state
[  277.436133][ T9552] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.443210][ T9552] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.450615][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.457745][ T9552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.307152][ T9552] bridge0: port 3(bond0) entered disabled state
[  279.313568][ T9552] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.320801][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.481103][ T9556] netlink: 'syz.4.1842': attribute type 5 has an invalid length.
[  279.511538][ T9558] netlink: 'syz.4.1842': attribute type 10 has an invalid length.
[  279.584994][ T9558] bridge0: port 4(bond0) entered blocking state
[  279.591368][ T9558] bridge0: port 4(bond0) entered forwarding state
[  279.598002][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.605118][ T9558] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.612481][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.619767][ T9558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.634869][ T9558] bridge0: port 4(bond0) entered disabled state
[  279.641306][ T9558] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.648524][ T9558] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.667615][ T9564] netlink: 'syz.3.1845': attribute type 10 has an invalid length.
[  279.706799][ T9564] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1845'.
[  279.753864][ T9562] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1844'.
[  280.102579][ T9583] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  280.264857][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'.
[  280.454548][ T9593] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1853'.
[  280.491280][ T9593] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1853'.
[  280.835345][ T9602] bridge0: port 3(bond0) entered blocking state
[  280.841698][ T9602] bridge0: port 3(bond0) entered forwarding state
[  280.848387][ T9602] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.855513][ T9602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.862902][ T9602] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.870070][ T9602] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.877713][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  281.849742][ T9602] bridge0: port 3(bond0) entered disabled state
[  281.856293][ T9602] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.863461][ T9602] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.901887][ T9605] device wlan0 entered promiscuous mode
[  282.843941][    T9] wlan1: Trigger new scan to find an IBSS to join
[  282.996553][ T9615] validate_nla: 6 callbacks suppressed
[  282.996569][ T9615] netlink: 'syz.2.1860': attribute type 10 has an invalid length.
[  283.026520][ T9615] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1860'.
[  283.041153][ T9620] netlink: 'syz.1.1859': attribute type 21 has an invalid length.
[  283.081295][ T9620] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1859'.
[  283.178801][ T9630] netlink: 'syz.0.1864': attribute type 3 has an invalid length.
[  283.227709][ T9630] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1864'.
[  283.318030][ T9638] netlink: 'syz.4.1866': attribute type 21 has an invalid length.
[  283.363813][ T9638] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1866'.
[  283.444710][ T9639] netlink: 'syz.2.1865': attribute type 10 has an invalid length.
[  283.502974][ T9639] bridge0: port 3(bond0) entered blocking state
[  283.509375][ T9639] bridge0: port 3(bond0) entered forwarding state
[  283.516064][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.523144][ T9639] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.530535][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.537659][ T9639] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.610755][ T9639] bridge0: port 3(bond0) entered disabled state
[  283.617225][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.624425][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.638740][ T9642] netlink: 'syz.1.1868': attribute type 3 has an invalid length.
[  283.655453][ T9642] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1868'.
[  283.729938][ T9638] netlink: 'syz.4.1866': attribute type 1 has an invalid length.
[  283.752741][ T9638] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1866'.
[  283.805419][    T9] wlan1: Trigger new scan to find an IBSS to join
[  284.141434][ T9653] netlink: 'syz.2.1872': attribute type 5 has an invalid length.
[  284.392059][ T9658] netlink: 'syz.2.1872': attribute type 10 has an invalid length.
[  284.464320][ T9658] bridge0: port 3(bond0) entered blocking state
[  284.470806][ T9658] bridge0: port 3(bond0) entered forwarding state
[  284.477472][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.484579][ T9658] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.491947][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.499097][ T9658] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.866758][ T9658] bridge0: port 3(bond0) entered disabled state
[  285.873219][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.880443][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.943973][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  286.020953][ T3095] wlan1: Creating new IBSS network, BSSID 6a:ad:83:98:72:46
[  286.183011][ T9661] netlink: 'syz.0.1875': attribute type 10 has an invalid length.
[  286.262508][ T9661] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1875'.
[  286.328206][ T9668] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1877'.
[  286.422727][ T9674] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1880'.
[  286.503272][ T9674] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1880'.
[  286.720762][ T9675] delete_channel: no stack
[  286.843915][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  286.853342][ T9692] IPv6: Can't replace route, no match found
[  288.302659][ T9722] delete_channel: no stack
[  288.345146][ T9735] validate_nla: 10 callbacks suppressed
[  288.345164][ T9735] netlink: 'syz.0.1903': attribute type 10 has an invalid length.
[  288.580171][ T9735] __nla_validate_parse: 6 callbacks suppressed
[  288.580189][ T9735] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1903'.
[  288.739331][ T9738] netlink: 'syz.4.1902': attribute type 10 has an invalid length.
[  288.765536][  T154] wlan1: Creating new IBSS network, BSSID 86:a6:e9:07:f4:a4
[  288.814881][ T9738] bridge0: port 4(bond0) entered blocking state
[  288.821201][ T9738] bridge0: port 4(bond0) entered forwarding state
[  288.827858][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.834964][ T9738] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.842334][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.849481][ T9738] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.845039][  T154] wlan1: Trigger new scan to find an IBSS to join
[  291.110981][ T9738] bridge0: port 4(bond0) entered disabled state
[  291.117443][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.124633][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.198599][ T9742] IPv6: Can't replace route, no match found
[  291.232326][ T9746] netlink: 'syz.1.1905': attribute type 5 has an invalid length.
[  291.316306][ T9756] netlink: 'syz.1.1905': attribute type 10 has an invalid length.
[  291.415967][ T9758] netlink: 'syz.4.1909': attribute type 21 has an invalid length.
[  291.424492][ T9758] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1909'.
[  291.456422][ T9758] netlink: 'syz.4.1909': attribute type 1 has an invalid length.
[  291.468859][ T9758] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1909'.
[  291.739499][ T9773] netlink: 'syz.2.1916': attribute type 10 has an invalid length.
[  291.754012][ T9773] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1916'.
[  291.777311][ T9772] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1915'.
[  291.817285][ T9778] netlink: 'syz.1.1918': attribute type 21 has an invalid length.
[  291.848362][ T9778] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1918'.
[  291.952393][ T9786] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1921'.
[  291.978896][ T9786] netlink: 21648 bytes leftover after parsing attributes in process `syz.4.1921'.
[  292.020622][ T9790] netlink: 'syz.1.1922': attribute type 21 has an invalid length.
[  292.040216][ T9790] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1922'.
[  292.055493][ T9775] delete_channel: no stack
[  292.100112][ T9791] netlink: 'syz.2.1919': attribute type 10 has an invalid length.
[  292.171060][ T9791] bridge0: port 3(bond0) entered blocking state
[  292.177454][ T9791] bridge0: port 3(bond0) entered forwarding state
[  292.184098][ T9791] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.191178][ T9791] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.198594][ T9791] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.205718][ T9791] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.282629][ T9791] bridge0: port 3(bond0) entered disabled state
[  292.289116][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.296306][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.310658][ T9792] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1922'.
[  292.375552][ T9799] IPv6: Can't replace route, no match found
[  292.661280][ T9813] bridge0: port 3(bond0) entered blocking state
[  292.667653][ T9813] bridge0: port 3(bond0) entered forwarding state
[  292.674318][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.681420][ T9813] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.688841][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.695997][ T9813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.806130][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  293.813275][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  294.398234][ T3075] wlan1: Creating new IBSS network, BSSID 26:cd:29:5d:df:71
[  294.423998][ T9813] bridge0: port 3(bond0) entered disabled state
[  294.430402][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.437582][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.494029][ T9815] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  294.626092][ T9825] validate_nla: 4 callbacks suppressed
[  294.626134][ T9825] netlink: 'syz.4.1934': attribute type 21 has an invalid length.
[  294.660277][ T9825] __nla_validate_parse: 2 callbacks suppressed
[  294.660324][ T9825] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1934'.
[  294.733912][ T9828] netlink: 'syz.1.1935': attribute type 29 has an invalid length.
[  294.749426][ T9825] netlink: 'syz.4.1934': attribute type 1 has an invalid length.
[  294.757566][ T9825] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1934'.
[  294.770804][ T9824] netlink: 'syz.2.1933': attribute type 12 has an invalid length.
[  294.815683][ T9824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1933'.
[  294.844989][  T381] wlan1: Trigger new scan to find an IBSS to join
[  294.943636][ T9828] netlink: 'syz.1.1935': attribute type 29 has an invalid length.
[  295.004758][ T9830] netlink: 'syz.0.1936': attribute type 10 has an invalid length.
[  295.200184][ T9836] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1939'.
[  295.214061][ T9838] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1940'.
[  295.256807][ T9836] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1939'.
[  295.281393][ T9843] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1939'.
[  295.307304][ T9836] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1939'.
[  295.489118][ T9844] device syzkaller0 entered promiscuous mode
[  295.553357][ T9856] netlink: 'syz.0.1946': attribute type 10 has an invalid length.
[  295.566738][ T9856] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1946'.
[  295.597075][ T9854] netlink: 'syz.2.1945': attribute type 5 has an invalid length.
[  295.700996][ T9859] netlink: 'syz.2.1945': attribute type 10 has an invalid length.
[  295.737663][ T9859] bridge0: port 3(bond0) entered blocking state
[  295.744040][ T9859] bridge0: port 3(bond0) entered forwarding state
[  295.750711][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.757839][ T9859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.765219][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.772313][ T9859] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.788560][ T9859] bridge0: port 3(bond0) entered disabled state
[  295.794989][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.802121][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.834013][ T9858] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  295.843565][ T9861] netlink: 'syz.0.1948': attribute type 21 has an invalid length.
[  295.855731][ T9861] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1948'.
[  295.924369][ T9866] IPv6: Can't replace route, no match found
[  296.845008][  T381] wlan1: Trigger new scan to find an IBSS to join
[  297.813907][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  298.471286][ T9891] device syzkaller0 entered promiscuous mode
[  298.480388][ T9897] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  299.805324][  T381] wlan1: Trigger new scan to find an IBSS to join
[  300.375736][ T9926] device hsr0 entered promiscuous mode
[  300.409137][ T9926] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  300.430709][ T9926] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  300.444255][ T9926] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  300.457065][ T9926] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  300.563053][ T9931] device wlan0 entered promiscuous mode
[  300.685966][ T9937] validate_nla: 12 callbacks suppressed
[  300.686011][ T9937] netlink: 'syz.4.1977': attribute type 21 has an invalid length.
[  300.836610][ T9937] __nla_validate_parse: 11 callbacks suppressed
[  300.836645][ T9937] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1977'.
[  300.872531][  T381] wlan1: Trigger new scan to find an IBSS to join
[  300.879259][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  300.879286][  T154] wlan1: Trigger new scan to find an IBSS to join
[  300.929477][  T154] wlan1: Creating new IBSS network, BSSID 2e:8e:aa:f4:9a:74
[  300.937094][ T9935] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1976'.
[  300.948384][ T3095] wlan1: Creating new IBSS network, BSSID 36:b6:9c:84:d5:02
[  300.966785][ T9940] netlink: 'syz.4.1977': attribute type 1 has an invalid length.
[  301.046056][ T9940] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1977'.
[  301.130878][ T9938] netlink: 'syz.3.1975': attribute type 10 has an invalid length.
[  301.222760][ T9947] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  301.262281][ T9951] netlink: 'syz.4.1980': attribute type 21 has an invalid length.
[  301.281652][ T9951] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1980'.
[  301.407710][ T9959] netlink: 'syz.4.1985': attribute type 10 has an invalid length.
[  301.423206][ T9959] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1985'.
[  301.490325][ T9961] netlink: 'syz.3.1984': attribute type 27 has an invalid length.
[  303.182017][ T9961] bond0: (slave bond_slave_0): Releasing backup interface
[  303.213009][ T9973] netlink: 'syz.1.1987': attribute type 10 has an invalid length.
[  303.227828][ T9973] device hsr0 entered promiscuous mode
[  303.257016][ T9973] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  303.292548][ T9973] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  303.304171][ T9973] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  303.318802][ T9973] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  303.333822][ T9976] netlink: 'syz.0.1999': attribute type 10 has an invalid length.
[  303.346285][ T9976] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1999'.
[  303.358535][ T9980] netlink: 'syz.2.1990': attribute type 21 has an invalid length.
[  303.382423][ T9980] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1990'.
[  303.406396][ T9979] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1989'.
[  303.427043][ T9982] netlink: 'syz.2.1990': attribute type 1 has an invalid length.
[  303.440770][ T9982] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1990'.
[  303.450641][ T9983] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1989'.
[  303.712999][ T9997] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  303.809351][  T381] wlan1: Trigger new scan to find an IBSS to join
[  304.500680][T10029] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  305.598017][T10062] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  305.918551][T10080] __nla_validate_parse: 30 callbacks suppressed
[  305.918594][T10080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2031'.
[  305.933075][T10079] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2033'.
[  305.941867][T10081] validate_nla: 12 callbacks suppressed
[  305.941901][T10081] netlink: 'syz.1.2032': attribute type 21 has an invalid length.
[  305.957531][T10081] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2032'.
[  305.980254][T10079] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2033'.
[  305.997828][T10080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2031'.
[  306.011333][T10084] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2031'.
[  306.028127][T10085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2033'.
[  306.033201][T10087] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2035'.
[  306.039092][T10083] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2034'.
[  306.057838][T10080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2031'.
[  306.278204][T10097] netlink: 'syz.1.2039': attribute type 21 has an invalid length.
[  306.298142][T10098] netlink: 'syz.2.2037': attribute type 10 has an invalid length.
[  306.702904][T10107] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  306.765231][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  306.809237][T10110] netlink: 'syz.3.2045': attribute type 21 has an invalid length.
[  306.884225][T10114] netlink: 'syz.0.2041': attribute type 10 has an invalid length.
[  307.194684][T10119] netlink: 'syz.4.2047': attribute type 10 has an invalid length.
[  307.226846][T10119] bridge0: port 4(bond0) entered blocking state
[  307.233212][T10119] bridge0: port 4(bond0) entered forwarding state
[  307.239881][T10119] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.247013][T10119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.254433][T10119] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.261546][T10119] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.294172][T10119] bridge0: port 4(bond0) entered disabled state
[  307.300625][T10119] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.307825][T10119] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.388447][T10124] netlink: 'syz.2.2050': attribute type 21 has an invalid length.
[  307.804062][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  307.811989][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  308.725173][ T3075] wlan1: Creating new IBSS network, BSSID 0a:09:79:97:a2:b5
[  308.757796][T10131] device wlan0 left promiscuous mode
[  308.798686][T10136] netlink: 'syz.3.2052': attribute type 10 has an invalid length.
[  308.844053][  T154] wlan1: Trigger new scan to find an IBSS to join
[  308.995569][T10151] netlink: 'syz.2.2058': attribute type 21 has an invalid length.
[  309.209337][T10155] netlink: 'syz.3.2060': attribute type 5 has an invalid length.
[  309.775589][T10164] bridge0: port 3(bond0) entered blocking state
[  309.781943][T10164] bridge0: port 3(bond0) entered forwarding state
[  309.788653][T10164] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.795758][T10164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.803129][T10164] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.810246][T10164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.911669][T10164] bridge0: port 3(bond0) entered disabled state
[  309.918140][T10164] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.925339][T10164] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.010839][T10168] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  310.031921][T10174] bridge0: port 4(bond0) entered blocking state
[  310.038283][T10174] bridge0: port 4(bond0) entered forwarding state
[  310.044929][T10174] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.052089][T10174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.059502][T10174] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.066634][T10174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.152492][T10174] bridge0: port 4(bond0) entered disabled state
[  310.158965][T10174] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.166184][T10174] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.764026][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  310.843975][  T381] wlan1: Trigger new scan to find an IBSS to join
[  311.422355][T10210] validate_nla: 9 callbacks suppressed
[  311.422370][T10210] netlink: 'syz.3.2079': attribute type 5 has an invalid length.
[  311.909368][  T381] wlan1: Creating new IBSS network, BSSID 6e:92:7a:14:90:bc
[  312.086076][T10217] netlink: 'syz.1.2080': attribute type 10 has an invalid length.
[  312.105087][T10217] __nla_validate_parse: 22 callbacks suppressed
[  312.105103][T10217] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2080'.
[  312.198687][T10223] netlink: 'syz.4.2081': attribute type 10 has an invalid length.
[  312.264927][T10223] bridge0: port 4(bond0) entered blocking state
[  312.271267][T10223] bridge0: port 4(bond0) entered forwarding state
[  312.277908][T10223] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.285102][T10223] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.292464][T10223] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.299582][T10223] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.462741][T10223] bridge0: port 4(bond0) entered disabled state
[  312.469199][T10223] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.476431][T10223] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.491701][T10229] netlink: 'syz.0.2087': attribute type 21 has an invalid length.
[  312.499623][T10229] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2087'.
[  312.515616][T10234] netlink: 'syz.1.2088': attribute type 21 has an invalid length.
[  312.541459][T10234] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2088'.
[  312.557185][T10235] netlink: 'syz.1.2088': attribute type 1 has an invalid length.
[  312.571184][T10235] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2088'.
[  312.665456][T10224] delete_channel: no stack
[  312.763804][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  312.846584][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  313.644882][T10254] netlink: 'syz.0.2094': attribute type 5 has an invalid length.
[  313.814009][  T381] wlan1: Creating new IBSS network, BSSID 5a:88:ae:43:c7:1b
[  313.887095][ T4649] wlan1: Creating new IBSS network, BSSID de:c5:a3:f7:74:79
[  314.276365][T10242] delete_channel: no stack
[  314.442998][T10263] netlink: 'syz.0.2096': attribute type 10 has an invalid length.
[  314.454667][T10263] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2096'.
[  314.496927][T10266] netlink: 'syz.4.2099': attribute type 21 has an invalid length.
[  314.507678][T10266] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2099'.
[  314.529594][T10260] device wlan0 left promiscuous mode
[  314.737220][T10277] netlink: 'syz.3.2103': attribute type 21 has an invalid length.
[  314.762646][T10277] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2103'.
[  314.855618][T10277] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2103'.
[  315.078144][T10285] IPv6: Can't replace route, no match found
[  315.102595][T10285] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  315.125659][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2105'.
[  315.471041][T10286] delete_channel: no stack
[  315.718198][T10304] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2112'.
[  316.763961][  T154] wlan1: Trigger new scan to find an IBSS to join
[  317.087575][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.093996][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  317.723079][  T154] wlan1: Creating new IBSS network, BSSID be:90:82:2d:bb:73
[  317.819875][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  317.957529][T10312] validate_nla: 4 callbacks suppressed
[  317.957571][T10312] netlink: 'syz.0.2115': attribute type 21 has an invalid length.
[  318.031214][T10312] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2115'.
[  318.113026][T10318] netlink: 'syz.0.2115': attribute type 1 has an invalid length.
[  318.161579][T10318] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2115'.
[  318.203131][T10321] netlink: 'syz.2.2116': attribute type 10 has an invalid length.
[  318.262882][T10321] bridge0: port 3(bond0) entered blocking state
[  318.269289][T10321] bridge0: port 3(bond0) entered forwarding state
[  318.275962][T10321] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.283045][T10321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.290424][T10321] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.297554][T10321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.357233][T10321] bridge0: port 3(bond0) entered disabled state
[  318.363733][T10321] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.370895][T10321] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.491469][T10328] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2119'.
[  318.509547][T10330] IPv6: Can't replace route, no match found
[  318.517992][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'.
[  318.789326][T10342] netlink: 'syz.3.2124': attribute type 10 has an invalid length.
[  318.831045][T10342] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2124'.
[  318.924598][T10345] netlink: 'syz.2.2125': attribute type 5 has an invalid length.
[  319.096058][T10349] netlink: 'syz.2.2125': attribute type 10 has an invalid length.
[  319.162176][T10349] bridge0: port 3(bond0) entered blocking state
[  319.168544][T10349] bridge0: port 3(bond0) entered forwarding state
[  319.175175][T10349] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.182252][T10349] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.189662][T10349] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.196788][T10349] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.395495][T10349] bridge0: port 3(bond0) entered disabled state
[  319.401957][T10349] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.409186][T10349] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.826078][T10361] delete_channel: no stack
[  320.288985][T10362] device wlan0 left promiscuous mode
[  320.336691][T10368] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2132'.
[  320.357973][T10373] IPv6: Can't replace route, no match found
[  321.810257][  T154] wlan1: Trigger new scan to find an IBSS to join
[  322.156321][T10380] netlink: 'syz.1.2136': attribute type 10 has an invalid length.
[  322.195222][T10380] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2136'.
[  322.245634][T10382] netlink: 'syz.2.2137': attribute type 5 has an invalid length.
[  322.342830][T10382] netlink: 'syz.2.2137': attribute type 10 has an invalid length.
[  322.513750][T10382] bridge0: port 3(bond0) entered blocking state
[  322.522372][T10382] bridge0: port 3(bond0) entered forwarding state
[  322.535302][T10382] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.549369][T10382] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.566365][T10382] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.576687][T10382] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.762142][T10382] bridge0: port 3(bond0) entered disabled state
[  322.779105][T10382] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.796095][T10382] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.997335][T10391] netlink: 'syz.4.2135': attribute type 10 has an invalid length.
[  323.007046][T10391] bridge0: port 4(bond0) entered blocking state
[  323.013379][T10391] bridge0: port 4(bond0) entered forwarding state
[  323.020028][T10391] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.027155][T10391] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.034552][T10391] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.041680][T10391] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.075060][T10391] bridge0: port 4(bond0) entered disabled state
[  323.081464][T10391] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.088661][T10391] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.409908][T10400] device syzkaller0 entered promiscuous mode
[  323.444835][T10410] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2144'.
[  323.451654][T10416] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2147'.
[  323.486847][T10413] netlink: 'syz.1.2144': attribute type 12 has an invalid length.
[  323.511472][T10413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2144'.
[  324.150446][T10418] device wlan0 left promiscuous mode
[  324.181391][T10424] netlink: 'syz.1.2151': attribute type 21 has an invalid length.
[  324.197499][T10424] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2151'.
[  324.209437][T10425] netlink: 'syz.1.2151': attribute type 1 has an invalid length.
[  324.218352][T10425] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2151'.
[  324.250608][T10430] netlink: 'syz.0.2152': attribute type 10 has an invalid length.
[  324.269001][T10430] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2152'.
[  324.407138][T10435] netlink: 'syz.1.2153': attribute type 5 has an invalid length.
[  324.844628][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  325.811777][ T3075] wlan1: Creating new IBSS network, BSSID 36:c1:82:62:72:34
[  326.004205][T10441] device wlan0 entered promiscuous mode
[  326.027615][T10443] netlink: 'syz.2.2156': attribute type 21 has an invalid length.
[  326.048794][T10443] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2156'.
[  326.300641][T10456] netlink: 'syz.4.2154': attribute type 10 has an invalid length.
[  326.373424][T10456] bridge0: port 4(bond0) entered blocking state
[  326.379874][T10456] bridge0: port 4(bond0) entered forwarding state
[  326.386540][T10456] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.393625][T10456] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.401044][T10456] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.408194][T10456] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.478888][T10456] bridge0: port 4(bond0) entered disabled state
[  326.485368][T10456] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.492539][T10456] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.541635][T10458] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  326.566400][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2161'.
[  326.648093][T10466] netlink: 'syz.3.2164': attribute type 21 has an invalid length.
[  326.657678][T10466] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2164'.
[  326.669488][T10468] netlink: 'syz.4.2165': attribute type 10 has an invalid length.
[  326.683907][T10468] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2165'.
[  326.703317][T10470] device wlan0 left promiscuous mode
[  327.016381][T10472] device syzkaller0 entered promiscuous mode
[  328.843933][  T381] wlan1: Trigger new scan to find an IBSS to join
[  329.906352][T10491] device wlan0 entered promiscuous mode
[  330.110383][T10503] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  330.131504][T10504] validate_nla: 4 callbacks suppressed
[  330.131520][T10504] netlink: 'syz.1.2177': attribute type 10 has an invalid length.
[  330.188473][T10504] __nla_validate_parse: 2 callbacks suppressed
[  330.188490][T10504] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2177'.
[  330.228400][T10500] netlink: 'syz.4.2175': attribute type 10 has an invalid length.
[  330.275683][T10500] bridge0: port 4(bond0) entered blocking state
[  330.284699][T10500] bridge0: port 4(bond0) entered forwarding state
[  330.299681][T10500] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.310699][T10500] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.330693][T10500] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.339689][T10500] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.373634][T10500] bridge0: port 4(bond0) entered disabled state
[  330.384450][T10500] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.392274][T10500] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.417356][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2176'.
[  330.448037][T10513] device wlan0 left promiscuous mode
[  330.487403][T10516] netlink: 'syz.2.2181': attribute type 21 has an invalid length.
[  330.509530][T10516] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2181'.
[  330.538587][T10516] netlink: 'syz.2.2181': attribute type 1 has an invalid length.
[  330.546769][T10516] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2181'.
[  330.765298][T10527] device syzkaller0 entered promiscuous mode
[  332.845360][T10534] device wlan0 entered promiscuous mode
[  332.861969][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  332.862116][T10537] netlink: 'syz.0.2187': attribute type 5 has an invalid length.
[  332.918960][T10539] netlink: 'syz.0.2187': attribute type 10 has an invalid length.
[  333.122595][T10550] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  333.152219][T10554] netlink: 'syz.0.2192': attribute type 10 has an invalid length.
[  333.203861][T10554] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2192'.
[  333.219822][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2194'.
[  333.287871][T10557] netlink: 'syz.1.2193': attribute type 10 has an invalid length.
[  333.524012][T10569] device wlan0 entered promiscuous mode
[  333.767197][T10580] netlink: 'syz.4.2202': attribute type 5 has an invalid length.
[  333.803890][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  334.278980][ T3095] wlan1: Creating new IBSS network, BSSID 52:f7:8d:1f:9e:a6
[  334.306420][T10596] netlink: 'syz.3.2207': attribute type 10 has an invalid length.
[  334.323499][T10596] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2207'.
[  334.371489][T10589] device syzkaller0 entered promiscuous mode
[  335.655356][T10603] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  335.716897][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2211'.
[  335.806351][  T381] wlan1: Trigger new scan to find an IBSS to join
[  335.866142][T10612] netlink: 'syz.1.2214': attribute type 10 has an invalid length.
[  335.998990][T10626] netlink: 'syz.2.2220': attribute type 10 has an invalid length.
[  336.043917][T10626] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2220'.
[  336.081354][T10629] netlink: 'syz.3.2219': attribute type 27 has an invalid length.
[  336.182004][T10632] netlink: 'syz.1.2223': attribute type 5 has an invalid length.
[  337.805068][  T381] wlan1: Trigger new scan to find an IBSS to join
[  337.923168][T10642] device wlan0 left promiscuous mode
[  337.944046][T10643] netlink: 'syz.1.2223': attribute type 10 has an invalid length.
[  338.053004][T10639] device syzkaller0 entered promiscuous mode
[  338.088203][T10650] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  338.222666][T10656] device wlan0 entered promiscuous mode
[  338.414510][T10664] delete_channel: no stack
[  338.416903][T10671] netlink: 'syz.4.2236': attribute type 10 has an invalid length.
[  338.422473][T10673] netlink: 'syz.0.2235': attribute type 3 has an invalid length.
[  338.436701][T10673] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2235'.
[  338.447597][T10671] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2236'.
[  340.773856][  T381] wlan1: Trigger new scan to find an IBSS to join
[  341.149925][T10685] device wlan0 left promiscuous mode
[  341.174768][T10688] netlink: 'syz.2.2242': attribute type 5 has an invalid length.
[  341.302707][T10691] device syzkaller0 entered promiscuous mode
[  341.310386][T10697] netlink: 'syz.2.2242': attribute type 10 has an invalid length.
[  341.330436][T10697] bridge0: port 3(bond0) entered blocking state
[  341.336803][T10697] bridge0: port 3(bond0) entered forwarding state
[  341.343481][T10697] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.350601][T10697] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.358001][T10697] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.365141][T10697] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.380514][T10697] bridge0: port 3(bond0) entered disabled state
[  341.386935][T10697] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.394116][T10697] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.412059][T10700] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  341.421703][T10700] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  341.437733][T10703] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  341.447230][T10700] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  341.529406][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'.
[  341.548497][T10710] netlink: 'syz.1.2249': attribute type 10 has an invalid length.
[  341.559550][T10710] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2249'.
[  341.598825][T10714] netlink: 'syz.3.2250': attribute type 3 has an invalid length.
[  341.659205][T10711] delete_channel: no stack
[  341.680815][T10714] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2250'.
[  341.803888][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  341.850777][T10728] device wlan0 left promiscuous mode
[  342.028361][T10735] netlink: 'syz.1.2258': attribute type 5 has an invalid length.
[  343.804173][ T4649] wlan1: Creating new IBSS network, BSSID 6a:d8:e8:fe:66:49
[  343.812717][  T381] wlan1: Trigger new scan to find an IBSS to join
[  343.819417][  T154] wlan1: Trigger new scan to find an IBSS to join
[  344.386369][T10741] device wlan0 entered promiscuous mode
[  344.462319][T10746] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  344.503027][T10752] netlink: 'syz.3.2263': attribute type 10 has an invalid length.
[  344.517219][T10752] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2263'.
[  344.556085][T10743] device syzkaller0 entered promiscuous mode
[  344.582694][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'.
[  344.733001][T10755] delete_channel: no stack
[  344.757511][T10761] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2266'.
[  344.791696][T10766] netlink: 'syz.3.2268': attribute type 39 has an invalid length.
[  345.039412][T10777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2270'.
[  345.079830][T10777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2270'.
[  345.113587][T10776] netlink: 'syz.4.2272': attribute type 5 has an invalid length.
[  345.194120][T10772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2270'.
[  345.230918][T10777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2270'.
[  345.241225][T10774] netlink: 'syz.4.2272': attribute type 10 has an invalid length.
[  345.315650][T10774] bridge0: port 4(bond0) entered blocking state
[  345.324099][T10774] bridge0: port 4(bond0) entered forwarding state
[  345.337731][T10774] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.349311][T10774] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.361563][T10774] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.373319][T10774] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.763907][  T381] wlan1: Trigger new scan to find an IBSS to join
[  346.770534][ T4649] wlan1: Trigger new scan to find an IBSS to join
[  346.784869][  T154] wlan1: Trigger new scan to find an IBSS to join
[  346.996282][  T381] wlan1: Creating new IBSS network, BSSID b6:67:b9:79:58:35
[  347.029237][T10774] bridge0: port 4(bond0) entered disabled state
[  347.038931][T10774] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.049930][T10774] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.208698][T10796] netlink: 'syz.4.2277': attribute type 10 has an invalid length.
[  347.262040][T10796] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2277'.
[  347.352151][T10797] delete_channel: no stack
[  347.372983][T10809] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  347.408461][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2283'.
[  347.437984][T10815] IPv6: Can't replace route, no match found
[  347.505527][T10815] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  347.581626][T10804] device syzkaller0 entered promiscuous mode
[  347.597307][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2285'.
[  347.613991][T10820] netlink: 'syz.4.2286': attribute type 5 has an invalid length.
[  347.692374][T10820] netlink: 'syz.4.2286': attribute type 10 has an invalid length.
[  347.801110][T10820] bridge0: port 4(bond0) entered blocking state
[  347.811843][T10820] bridge0: port 4(bond0) entered forwarding state
[  347.827782][T10820] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.841116][T10820] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.868050][T10820] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.879060][T10820] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.804573][  T381] wlan1: Trigger new scan to find an IBSS to join
[  349.811190][  T381] wlan1: Trigger new scan to find an IBSS to join
[  349.817891][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  350.225133][ T4649] wlan1: Creating new IBSS network, BSSID 4e:aa:f9:da:4a:72
[  350.250753][T10820] bridge0: port 4(bond0) entered disabled state
[  350.257225][T10820] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.264408][T10820] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.605958][T10849] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  350.635111][T10852] netlink: 'syz.0.2296': attribute type 10 has an invalid length.
[  350.647194][T10852] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2296'.
[  350.669948][T10851] device wlan0 left promiscuous mode
[  350.702955][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'.
[  350.713894][T10846] delete_channel: no stack
[  350.844018][  T381] wlan1: Trigger new scan to find an IBSS to join
[  350.947027][T10864] netlink: 'syz.0.2302': attribute type 5 has an invalid length.
[  351.011468][T10869] netlink: 'syz.0.2302': attribute type 10 has an invalid length.
[  351.132726][T10873] device wlan0 entered promiscuous mode
[  352.844326][ T4649] wlan1: Creating new IBSS network, BSSID f2:ca:71:de:38:d3
[  352.846249][  T381] wlan1: Trigger new scan to find an IBSS to join
[  352.852906][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  352.858334][ T3075] wlan1: Trigger new scan to find an IBSS to join
[  353.134759][T10887] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  353.172361][T10889] netlink: 'syz.3.2312': attribute type 10 has an invalid length.
[  353.199191][T10889] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2312'.
[  353.227528][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2311'.
[  353.410156][T10890] delete_channel: no stack
[  353.621219][T10912] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2322'.
[  353.880640][T10920] netlink: 'syz.2.2324': attribute type 5 has an invalid length.
[  354.764106][ T3095] wlan1: Creating new IBSS network, BSSID 92:db:d7:58:94:41
[  354.764106][  T144] wlan1: Creating new IBSS network, BSSID 32:e9:99:ec:13:3d
[  355.249263][T10925] netlink: 'syz.1.2326': attribute type 5 has an invalid length.
[  355.290087][T10929] netlink: 'syz.0.2327': attribute type 10 has an invalid length.
[  355.305870][T10929] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2327'.
[  355.402102][T10932] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  355.453316][T10928] delete_channel: no stack
[  355.465495][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'.
[  355.718631][T10942] netlink: 'syz.1.2326': attribute type 10 has an invalid length.
[  355.803992][  T381] wlan1: Trigger new scan to find an IBSS to join
[  355.878271][T10946] netlink: 'syz.3.2334': attribute type 10 has an invalid length.
[  355.953003][T10946] device hsr0 entered promiscuous mode
[  356.010770][T10946] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  356.033031][T10946] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  356.139988][T10946] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  356.180086][T10946] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  356.201167][T10952] netlink: 'syz.0.2332': attribute type 10 has an invalid length.
[  356.234602][T10954] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2335'.
[  356.244202][T10955] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2336'.
[  356.254202][T10959] IPv6: Can't replace route, no match found
[  356.271075][T10959] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  356.301274][T10961] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2338'.
[  356.344614][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'.
[  356.512475][T10973] netlink: 'syz.3.2342': attribute type 10 has an invalid length.
[  356.547998][T10973] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2342'.
[  357.815360][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  358.765279][  T144] wlan1: Trigger new scan to find an IBSS to join
[  359.476355][T10978] netlink: 'syz.1.2343': attribute type 5 has an invalid length.
[  359.535154][T10982] device wlan0 entered promiscuous mode
[  359.584039][T10978] netlink: 'syz.1.2343': attribute type 10 has an invalid length.
[  359.629356][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2348'.
[  359.748627][T10988] netlink: 'syz.3.2347': attribute type 5 has an invalid length.
[  359.804931][  T381] wlan1: Trigger new scan to find an IBSS to join
[  359.933400][T10992] delete_channel: no stack
[  359.970344][T11003] netlink: 'syz.0.2350': attribute type 10 has an invalid length.
[  360.037483][T11002] netlink: 'syz.2.2354': attribute type 10 has an invalid length.
[  360.056114][T11002] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2354'.
[  360.068932][T11004] netlink: 'syz.3.2347': attribute type 10 has an invalid length.
[  360.097207][T11005] netlink: 'syz.4.2353': attribute type 27 has an invalid length.
[  361.779279][T11008] IPv6: Can't replace route, no match found
[  361.808610][ T3095] wlan1: Creating new IBSS network, BSSID 8a:18:a6:d2:26:f5
[  361.808680][  T144] wlan1: Trigger new scan to find an IBSS to join
[  361.816264][  T381] wlan1: Trigger new scan to find an IBSS to join
[  361.855485][T11008] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  361.888934][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2355'.
[  362.018713][T11012] device wlan0 left promiscuous mode
[  362.099289][T11018] netlink: 'syz.0.2358': attribute type 10 has an invalid length.
[  363.813838][ T3075] wlan1: Creating new IBSS network, BSSID 42:3c:bc:f8:e8:3c
[  364.245875][T11018] device hsr0 entered promiscuous mode
[  364.312240][T11018] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  364.345186][T11018] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  364.383589][T11018] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  364.441355][T11018] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  364.454438][T11023] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  364.471989][T11023] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  364.481917][T11023] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  364.521696][T11026] device wlan0 entered promiscuous mode
[  364.562461][T11028] netlink: 'syz.1.2362': attribute type 5 has an invalid length.
[  364.628845][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2363'.
[  364.723280][T11037] netlink: 'syz.2.2365': attribute type 10 has an invalid length.
[  364.807910][T11042] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2367'.
[  364.828334][T11037] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2365'.
[  364.886119][T11030] netlink: 'syz.1.2362': attribute type 10 has an invalid length.
[  364.995013][T11040] delete_channel: no stack
[  365.062716][T11051] netlink: 'syz.2.2379': attribute type 10 has an invalid length.
[  365.189247][T11051] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2379'.
[  365.244513][T11054] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2369'.
[  365.262615][T11053] IPv6: Can't replace route, no match found
[  365.292690][T11057] netlink: 'syz.0.2368': attribute type 10 has an invalid length.
[  365.335089][T11058] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  365.354416][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2370'.
[  365.805511][ T3095] wlan1: Trigger new scan to find an IBSS to join
[  367.664419][T11068] device wlan0 left promiscuous mode
[  367.774667][T11076] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  367.788520][T11076] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  367.804082][  T381] wlan1: Trigger new scan to find an IBSS to join
[  367.823069][T11076] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  369.803895][  T381] wlan1: Trigger new scan to find an IBSS to join
[  369.954157][ T3075] wlan1: Creating new IBSS network, BSSID 1e:d5:1b:f6:32:a4
[  369.998790][T11080] delete_channel: no stack
[  370.084583][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'.
[  370.115878][T11094] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  370.139359][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2383'.
[  370.201172][  T144] ------------[ cut here ]------------
[  370.201540][T11099] netlink: 'syz.1.2384': attribute type 10 has an invalid length.
[  370.214329][  T144] WARNING: CPU: 1 PID: 144 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0
[  370.237376][T11099] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2384'.
[  370.261222][T11111] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2387'.
[  370.276797][T11109] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  370.283723][  T144] Modules linked in:
[  370.291358][T11112] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  370.308830][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'.
[  370.311236][  T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0
[  370.353425][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2389'.
[  370.357751][  T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  370.384910][  T144] Workqueue: cfg80211 cfg80211_event_work
[  370.390840][  T144] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0
[  370.401448][  T144] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a1 b7 43 f8 0f 0b eb bb e8 98 b7 43 f8 <0f> 0b eb b2 e8 8f b7 43 f8 0f 0b e9 77 fd ff ff e8 83 b7 43 f8 0f
[  370.427980][  T144] RSP: 0018:ffffc900010afaa0 EFLAGS: 00010293
[  370.437132][  T144] RAX: ffffffff89356978 RBX: dffffc0000000000 RCX: ffff888017a6d940
[  370.450769][  T144] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980
[  370.460654][  T144] RBP: ffffc900010afb70 R08: ffffffff901d412f R09: 1ffffffff203a825
[  370.475601][  T144] R10: dffffc0000000000 R11: fffffbfff203a826 R12: ffff888024f6b630
[  370.488220][  T144] R13: 1ffff92000215f5c R14: 000000000000001f R15: ffff888060a24c90
[  370.499330][  T144] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  370.508633][  T144] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  370.515732][  T144] CR2: 00007f7ac234de80 CR3: 000000007defe000 CR4: 00000000003506f0
[  370.524596][  T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  370.534479][  T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  370.542583][  T144] Call Trace:
[  370.548165][  T144]  <TASK>
[  370.558365][  T144]  ? trace_rdev_return_void+0x1c0/0x1c0
[  370.572442][  T144]  cfg80211_process_wdev_events+0x3ad/0x4f0
[  370.578660][  T144]  cfg80211_process_rdev_events+0x9d/0x110
[  370.585246][  T144]  cfg80211_event_work+0x2b/0x40
[  370.590301][  T144]  process_one_work+0x85f/0x1010
[  370.601510][  T144]  ? worker_detach_from_pool+0x240/0x240
[  370.608100][  T144]  ? lockdep_hardirqs_off+0x70/0x100
[  370.613421][  T144]  ? _raw_spin_lock_irq+0xb7/0xf0
[  370.618570][  T144]  ? _raw_spin_lock_irqsave+0x100/0x100
[  370.624641][  T144]  ? wq_worker_running+0x97/0x170
[  370.629690][  T144]  worker_thread+0xaa6/0x1290
[  370.635648][  T144]  kthread+0x436/0x520
[  370.639813][  T144]  ? rcu_lock_release+0x20/0x20
[  370.644962][  T144]  ? kthread_blkcg+0xd0/0xd0
[  370.649635][  T144]  ret_from_fork+0x1f/0x30
[  370.654803][  T144]  </TASK>
[  370.657922][  T144] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  370.665194][  T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0
[  370.672627][  T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  370.682662][  T144] Workqueue: cfg80211 cfg80211_event_work
[  370.688371][  T144] Call Trace:
[  370.691632][  T144]  <TASK>
[  370.694545][  T144]  dump_stack_lvl+0x188/0x250
[  370.699221][  T144]  ? show_regs_print_info+0x20/0x20
[  370.704486][  T144]  ? load_image+0x400/0x400
[  370.708975][  T144]  panic+0x2e5/0x810
[  370.712847][  T144]  ? bpf_jit_dump+0xd0/0xd0
[  370.717344][  T144]  ? ret_from_fork+0x1f/0x30
[  370.721932][  T144]  ? __cfg80211_ibss_joined+0x428/0x4b0
[  370.727463][  T144]  __warn+0x248/0x2b0
[  370.731425][  T144]  ? __cfg80211_ibss_joined+0x428/0x4b0
[  370.736956][  T144]  report_bug+0x1b7/0x2e0
[  370.741300][  T144]  handle_bug+0x3a/0x70
[  370.745448][  T144]  exc_invalid_op+0x16/0x40
[  370.749946][  T144]  asm_exc_invalid_op+0x16/0x20
[  370.754864][  T144] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0
[  370.761037][  T144] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a1 b7 43 f8 0f 0b eb bb e8 98 b7 43 f8 <0f> 0b eb b2 e8 8f b7 43 f8 0f 0b e9 77 fd ff ff e8 83 b7 43 f8 0f
[  370.780632][  T144] RSP: 0018:ffffc900010afaa0 EFLAGS: 00010293
[  370.786685][  T144] RAX: ffffffff89356978 RBX: dffffc0000000000 RCX: ffff888017a6d940
[  370.794643][  T144] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980
[  370.802609][  T144] RBP: ffffc900010afb70 R08: ffffffff901d412f R09: 1ffffffff203a825
[  370.810559][  T144] R10: dffffc0000000000 R11: fffffbfff203a826 R12: ffff888024f6b630
[  370.818519][  T144] R13: 1ffff92000215f5c R14: 000000000000001f R15: ffff888060a24c90
[  370.826500][  T144]  ? __cfg80211_ibss_joined+0x428/0x4b0
[  370.832137][  T144]  ? trace_rdev_return_void+0x1c0/0x1c0
[  370.837675][  T144]  cfg80211_process_wdev_events+0x3ad/0x4f0
[  370.843590][  T144]  cfg80211_process_rdev_events+0x9d/0x110
[  370.849394][  T144]  cfg80211_event_work+0x2b/0x40
[  370.854332][  T144]  process_one_work+0x85f/0x1010
[  370.859277][  T144]  ? worker_detach_from_pool+0x240/0x240
[  370.864887][  T144]  ? lockdep_hardirqs_off+0x70/0x100
[  370.870158][  T144]  ? _raw_spin_lock_irq+0xb7/0xf0
[  370.875168][  T144]  ? _raw_spin_lock_irqsave+0x100/0x100
[  370.880714][  T144]  ? wq_worker_running+0x97/0x170
[  370.885722][  T144]  worker_thread+0xaa6/0x1290
[  370.890393][  T144]  kthread+0x436/0x520
[  370.894449][  T144]  ? rcu_lock_release+0x20/0x20
[  370.899292][  T144]  ? kthread_blkcg+0xd0/0xd0
[  370.903863][  T144]  ret_from_fork+0x1f/0x30
[  370.908264][  T144]  </TASK>
[  370.911577][  T144] Kernel Offset: disabled
[  370.916044][  T144] Rebooting in 86400 seconds..