last executing test programs: 2.630437042s ago: executing program 0 (id=4989): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd65"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1800}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x3, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x1c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 2.525406302s ago: executing program 3 (id=4980): socket$kcm(0x10, 0x1, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008000) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="ff000000120081ae08060cdc030000007f03e3f7000000026ee2ff4a1b1f1400000004c074bd34718558446956331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a66c00123d000140090c0c00815ae8746b09aafc138a1cf9446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a967ee2b49e33538afa8af923569c4f399dcc11d85d35", 0x93}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 2.179293246s ago: executing program 0 (id=4982): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x38}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000700)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0), 0x12) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x107c01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbdf55c5ca5705acd}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.949739168s ago: executing program 3 (id=4984): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c5) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000040), 0x4) close(r4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x8}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={0xffffffffffffffff, 0x0, 0x0, 0xf1, 0x0, &(0x7f0000001a00)=""/241, 0x5e880b8b, 0x0, 0x3d, 0x0, &(0x7f0000001b00)="8ba9d25ab067d03bc27c033e113bcc2df4ccd21958391b94c0f574892d298bc14666e6162aff90cae7dee2d3564e138cc1965d0226bc5b6cf8e2f21ed8", &(0x7f00000008c0), 0x5, 0x0, 0xc}, 0x50) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1.878776726s ago: executing program 2 (id=4985): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.820516661s ago: executing program 4 (id=4986): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, &(0x7f0000000140)=r1, 0x4) 1.770450936s ago: executing program 1 (id=4988): r0 = socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x101088, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x62) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) 1.659356867s ago: executing program 0 (id=4991): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xdc, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4004) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x5, 0x0, 0x81, 0x81f37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x2}, 0x40, 0x8, 0x800, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xf, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) close(0x3) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.658330698s ago: executing program 4 (id=4992): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2a1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001980)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="04"], 0x10) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.508078782s ago: executing program 2 (id=4993): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b07d25a806f8c6394f90424fc60040001002b1b0100083582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.316793771s ago: executing program 1 (id=4994): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r0, &(0x7f0000000f00)={&(0x7f0000000900)=@phonet, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b00)=""/203, 0xcb}, {&(0x7f0000000980)=""/89, 0x59}, {&(0x7f0000000c00)=""/183, 0xb7}, {&(0x7f0000000800)=""/42, 0x2a}, {&(0x7f0000000a00)=""/41, 0x29}, {&(0x7f0000000cc0)=""/72, 0x48}, {&(0x7f0000000d40)=""/53, 0x35}, {&(0x7f0000000d80)=""/188, 0xbc}], 0x8}, 0x41) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x47}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 1.059477166s ago: executing program 3 (id=4995): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2}, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.059039756s ago: executing program 0 (id=4996): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67152944, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.058656696s ago: executing program 2 (id=4997): socket$kcm(0x10, 0x1, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008000) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="ff000000120081ae08060cdc030000007f03e3f7000000026ee2ff4a1b1f1400000004c074bd34718558446956331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a66c00123d000140090c0c00815ae8746b09aafc138a1cf9446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a967ee2b49e33538afa8af923569c4f399dcc11d85d35", 0x93}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 1.057805406s ago: executing program 4 (id=4998): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, r0}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1.011786881s ago: executing program 1 (id=4999): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x17, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{}, 0x0, &(0x7f0000000f80)='%pK \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 756.437916ms ago: executing program 3 (id=5000): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffa, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x9a) 734.237558ms ago: executing program 2 (id=5001): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x92}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x108}, 0x14002) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 715.12606ms ago: executing program 0 (id=5002): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18, 0x841}, 0x84) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="c9399cdd7302fe00001d042086d9961ba78f465d1f620d5700810000000000f207c804a00d0000008808fd0e0b0002a60a0ada1b40d80800c5ffffff7fb897266a4e5d180b3d17d7c02a8a5cb730d41bc453a9c3dd39cf0e87984d803dd75e513a8fd271c8cf5eb9ed4d320001974ab1a8b407e4bf1313c2307891449d24fbd3903c3c305ebbb18551be197d9ead86bab1b59874fde943e7367db573e8a1b3b24d1506b128f6ad4b578d4f0c7afd70629769bc180572255b824a659498", 0xbd}, {&(0x7f0000000740)="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", 0xfd9}], 0x2, 0x0, 0x0, 0x5865}, 0x8010) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, 0x0, 0x0) 661.774155ms ago: executing program 4 (id=5003): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 632.187948ms ago: executing program 1 (id=5004): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0a3f000000a3f500"], 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r3, 0x29, 0x17, &(0x7f0000000100)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="bd30bc791f4860246406f853f8f0eadad664503b45fdb7b5c366689c837fdcf97beeb608f932e7f6b1064bf8eb2988e5258f75bbfc67db851fd69e822e11ddbc831f38", 0x43}, {&(0x7f00000021c0)}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f", 0xc}], 0x1}, 0x0) 494.949652ms ago: executing program 3 (id=5005): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x3, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x80000001}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_kthread_stop\x00'}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r3) 336.577157ms ago: executing program 4 (id=5006): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x400000, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000004000000040000"], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 283.520632ms ago: executing program 1 (id=5007): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b07d25a806f8c6394f90424fc60040001002b1b0100083582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 176.228543ms ago: executing program 2 (id=5008): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xdc, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4004) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x5, 0x0, 0x81, 0x81f37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x2}, 0x40, 0x8, 0x800, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xf, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) close(0x3) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 174.448703ms ago: executing program 0 (id=5018): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4b1}, 0x0, 0x0, 0x0, 0x5, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, r1, 0x0, 0x4, &(0x7f0000000880)='\\[\\\x00'}, 0x30) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 11.49547ms ago: executing program 2 (id=5009): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c5) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000040), 0x4) close(r4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x8}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={0xffffffffffffffff, 0x0, 0x0, 0xf1, 0x0, &(0x7f0000001a00)=""/241, 0x5e880b8b, 0x0, 0x3d, 0x0, &(0x7f0000001b00)="8ba9d25ab067d03bc27c033e113bcc2df4ccd21958391b94c0f574892d298bc14666e6162aff90cae7dee2d3564e138cc1965d0226bc5b6cf8e2f21ed8", &(0x7f00000008c0), 0x5, 0x0, 0xc}, 0x50) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 11.115539ms ago: executing program 3 (id=5010): r0 = socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x101088, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x62) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r7], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) 10.77727ms ago: executing program 4 (id=5011): socket$kcm(0x10, 0x1, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008000) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="ff000000120081ae08060cdc030000007f03e3f7000000026ee2ff4a1b1f1400000004c074bd34718558446956331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a66c00123d000140090c0c00815ae8746b09aafc138a1cf9446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a967ee2b49e33538afa8af923569c4f399dcc11d85d35", 0x93}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 0s ago: executing program 1 (id=5012): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2}, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 073] R13: 00007fad91de6038 R14: 00007fad91de5fa0 R15: 00007ffd305ceca8 [ 277.247099][ T7073] [ 278.265450][ T7104] device syzkaller0 entered promiscuous mode [ 278.291283][ T7104] syzkaller0: tun_net_xmit 1280 [ 281.715137][ T7151] netlink: 'syz.4.1030': attribute type 10 has an invalid length. [ 281.988211][ T7151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1030'. [ 282.782455][ T7169] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1047'. [ 282.864969][ T7169] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 283.583685][ T7187] netlink: 'syz.4.1043': attribute type 3 has an invalid length. [ 283.613892][ T7187] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1043'. [ 283.711327][ T7190] netlink: 'syz.2.1044': attribute type 10 has an invalid length. [ 283.789904][ T7190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1044'. [ 285.941643][ T7232] netlink: 'syz.1.1061': attribute type 10 has an invalid length. [ 285.989701][ T7232] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1061'. [ 286.112657][ T4283] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7 [ 286.240651][ T7241] netlink: 'syz.0.1075': attribute type 10 has an invalid length. [ 286.321880][ T7241] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1075'. [ 286.653198][ T7244] device syzkaller0 entered promiscuous mode [ 289.777947][ T7282] device wlan1 entered promiscuous mode [ 289.789525][ T7282] syz.3.1077 uses obsolete (PF_INET,SOCK_PACKET) [ 290.122081][ T7294] netlink: 'syz.2.1081': attribute type 10 has an invalid length. [ 290.149832][ T7294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1081'. [ 290.442059][ T7299] device syzkaller0 entered promiscuous mode [ 295.593633][ T7329] netlink: 'syz.1.1098': attribute type 10 has an invalid length. [ 295.614686][ T7334] netlink: 'syz.0.1108': attribute type 3 has an invalid length. [ 295.624430][ T7334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1108'. [ 295.674000][ T7329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1098'. [ 298.849571][ T4283] Bluetooth: hci4: unexpected event 0x3c length: 15 > 7 [ 301.879966][ T7386] netlink: 'syz.2.1114': attribute type 3 has an invalid length. [ 301.903390][ T7386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1114'. [ 302.170094][ T7364] device syzkaller0 entered promiscuous mode [ 302.244396][ T7369] device syzkaller0 entered promiscuous mode [ 305.995550][ T7401] device wlan1 entered promiscuous mode [ 306.565139][ T7420] netlink: 'syz.3.1125': attribute type 39 has an invalid length. [ 306.933466][ T7424] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1140'. [ 306.978802][ T7424] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 307.042538][ T7426] netlink: 'syz.3.1128': attribute type 3 has an invalid length. [ 307.091782][ T7426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1128'. [ 310.610527][ T7443] device syzkaller0 entered promiscuous mode [ 312.314455][ T7466] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1143'. [ 312.323721][ T7466] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 312.461542][ T7472] netlink: 'syz.1.1144': attribute type 3 has an invalid length. [ 312.494990][ T7472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1144'. [ 312.729959][ T7480] sctp: [Deprecated]: syz.1.1148 (pid 7480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.729959][ T7480] Use struct sctp_sack_info instead [ 313.393634][ T7496] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1157'. [ 313.419906][ T7496] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 314.524226][ T7516] sctp: [Deprecated]: syz.0.1166 (pid 7516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.524226][ T7516] Use struct sctp_sack_info instead [ 314.959146][ T7526] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1169'. [ 314.975789][ T7526] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 315.812928][ T7540] Dead loop on virtual device ip6_vti0, fix it urgently! [ 316.659193][ T7554] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 316.728280][ T7558] sctp: [Deprecated]: syz.2.1181 (pid 7558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.728280][ T7558] Use struct sctp_sack_info instead [ 317.194669][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.201084][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.280429][ T7562] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1183'. [ 317.294869][ T7562] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 317.638654][ T7572] netlink: 'syz.1.1189': attribute type 4 has an invalid length. [ 317.673770][ T7572] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1189'. [ 318.072239][ T7572] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 318.417213][ T7578] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 318.443823][ T7578] device syzkaller0 entered promiscuous mode [ 321.375763][ T7590] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1198'. [ 321.384849][ T7590] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 321.762761][ T7610] netlink: 'syz.4.1205': attribute type 21 has an invalid length. [ 321.815415][ T7610] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 322.170995][ T7622] tun0: tun_chr_ioctl cmd 1074025694 [ 322.267436][ T7626] Q6`Ҙ: renamed from lo [ 322.321858][ T7627] netlink: 'syz.1.1213': attribute type 3 has an invalid length. [ 322.340679][ T7627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1213'. [ 322.924541][ T7641] netlink: 'syz.2.1229': attribute type 3 has an invalid length. [ 322.952331][ T7641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1229'. [ 324.331895][ T7662] bond0: (slave team0): Error: Slave device does not support XDP [ 329.212360][ T7694] netlink: 'syz.0.1246': attribute type 3 has an invalid length. [ 329.341908][ T7694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1246'. [ 330.123008][ T7700] device syzkaller0 entered promiscuous mode [ 330.910909][ T7714] netlink: 'syz.1.1241': attribute type 21 has an invalid length. [ 330.928220][ T7714] netlink: 'syz.1.1241': attribute type 1 has an invalid length. [ 331.138264][ T7721] Q6`Ҙ: renamed from lo [ 332.601948][ T7735] netlink: 'syz.1.1252': attribute type 3 has an invalid length. [ 332.610644][ T7735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1252'. [ 334.501203][ T7726] netlink: 'syz.3.1245': attribute type 15 has an invalid length. [ 334.887934][ T7748] bond0: (slave team0): Error: Slave device does not support XDP [ 337.987529][ T7756] netlink: 'syz.2.1262': attribute type 21 has an invalid length. [ 338.043788][ T7756] netlink: 'syz.2.1262': attribute type 1 has an invalid length. [ 338.186316][ T7770] Q6`Ҙ: renamed from lo [ 338.299084][ T7767] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1265'. [ 339.701252][ T7782] device syzkaller0 entered promiscuous mode [ 339.991670][ T7798] Dead loop on virtual device ip6_vti0, fix it urgently! [ 341.672270][ T7800] netlink: 'syz.0.1275': attribute type 21 has an invalid length. [ 341.680435][ T7800] netlink: 'syz.0.1275': attribute type 6 has an invalid length. [ 341.688301][ T7800] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1275'. [ 341.962672][ T7810] netlink: 'syz.3.1279': attribute type 21 has an invalid length. [ 342.038416][ T7810] netlink: 'syz.3.1279': attribute type 1 has an invalid length. [ 343.286676][ T7827] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1296'. [ 343.802075][ T7833] bond0: (slave team0): Error: Slave device does not support XDP [ 346.277394][ T7839] device syzkaller0 entered promiscuous mode [ 348.281658][ T7867] netlink: 'syz.0.1299': attribute type 21 has an invalid length. [ 348.289974][ T7867] netlink: 'syz.0.1299': attribute type 1 has an invalid length. [ 348.306346][ T7874] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1303'. [ 350.352967][ T7902] netlink: 'syz.3.1317': attribute type 21 has an invalid length. [ 350.408488][ T7902] netlink: 'syz.3.1317': attribute type 1 has an invalid length. [ 350.656690][ T7905] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 350.739044][ T7905] device syzkaller0 entered promiscuous mode [ 352.409625][ T7914] Dead loop on virtual device ip6_vti0, fix it urgently! [ 352.476596][ T7916] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 352.538870][ T7916] device syzkaller0 entered promiscuous mode [ 354.653893][ T7940] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1341'. [ 354.692801][ T7940] openvswitch: netlink: Message has 41214 unknown bytes. [ 355.702654][ T7962] Dead loop on virtual device ip6_vti0, fix it urgently! [ 358.626481][ T8006] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1350'. [ 358.662609][ T8006] openvswitch: netlink: Message has 41214 unknown bytes. [ 359.221495][ T8019] Dead loop on virtual device ip6_vti0, fix it urgently! [ 359.716728][ T8026] netlink: 'syz.4.1360': attribute type 39 has an invalid length. [ 359.746625][ T8026] device veth0_macvtap left promiscuous mode [ 360.268427][ T8031] delete_channel: no stack [ 361.383252][ T8051] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1368'. [ 361.453533][ T8051] openvswitch: netlink: Message has 41214 unknown bytes. [ 362.394292][ T8062] Dead loop on virtual device ip6_vti0, fix it urgently! [ 362.992857][ T8072] Dead loop on virtual device ip6_vti0, fix it urgently! [ 363.832544][ T8088] netlink: 'syz.2.1385': attribute type 39 has an invalid length. [ 363.859837][ T8090] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1384'. [ 363.898707][ T8088] device veth0_macvtap left promiscuous mode [ 363.912508][ T8090] openvswitch: netlink: Message has 41214 unknown bytes. [ 364.480415][ T8102] netlink: 'syz.1.1401': attribute type 39 has an invalid length. [ 364.506596][ T8102] device veth0_macvtap left promiscuous mode [ 365.654251][ T8121] Dead loop on virtual device ip6_vti0, fix it urgently! [ 368.375233][ T8127] Dead loop on virtual device ip6_vti0, fix it urgently! [ 369.343560][ T8150] netlink: 'syz.0.1406': attribute type 39 has an invalid length. [ 369.604624][ T8150] device veth0_macvtap left promiscuous mode [ 370.257624][ T8165] Dead loop on virtual device ip6_vti0, fix it urgently! [ 373.096087][ T8206] netlink: 'syz.3.1427': attribute type 39 has an invalid length. [ 373.456348][ T8220] Dead loop on virtual device ip6_vti0, fix it urgently! [ 375.946301][ T8206] device veth0_macvtap left promiscuous mode [ 376.512303][ T8232] delete_channel: no stack [ 378.300052][ T8261] Dead loop on virtual device ip6_vti0, fix it urgently! [ 378.689176][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.696432][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.763055][ T8266] netlink: 'syz.3.1449': attribute type 21 has an invalid length. [ 378.773412][ T8266] netlink: 'syz.3.1449': attribute type 1 has an invalid length. [ 378.822481][ T8267] netlink: 'syz.1.1459': attribute type 39 has an invalid length. [ 382.092242][ T8285] netlink: 'syz.3.1452': attribute type 21 has an invalid length. [ 382.104034][ T8285] netlink: 'syz.3.1452': attribute type 6 has an invalid length. [ 382.112041][ T8285] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1452'. [ 382.326251][ T8295] Dead loop on virtual device ip6_vti0, fix it urgently! [ 382.755649][ T8299] delete_channel: no stack [ 382.904335][ T8309] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1465'. [ 382.952910][ T8309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.010343][ T8313] netlink: 'syz.2.1467': attribute type 21 has an invalid length. [ 383.035558][ T8313] netlink: 'syz.2.1467': attribute type 1 has an invalid length. [ 383.152978][ T8314] bond0: (slave team0): Error: Slave device does not support XDP [ 384.304063][ T8329] netlink: 'syz.1.1474': attribute type 39 has an invalid length. [ 385.058712][ T8344] delete_channel: no stack [ 385.261699][ T8349] netlink: 'syz.3.1481': attribute type 21 has an invalid length. [ 385.301814][ T8349] netlink: 'syz.3.1481': attribute type 1 has an invalid length. [ 385.735063][ T8363] netlink: 'syz.4.1484': attribute type 39 has an invalid length. [ 385.910155][ T8364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1485'. [ 385.936991][ T8364] device caif0 left promiscuous mode [ 385.942378][ T8364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.323829][ T8367] bond0: (slave team0): Error: Slave device does not support XDP [ 386.503237][ T8376] netlink: 'syz.0.1488': attribute type 39 has an invalid length. [ 386.734085][ T8384] netlink: 'syz.2.1504': attribute type 39 has an invalid length. [ 386.797067][ T8386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1503'. [ 386.879956][ T8386] device caif0 left promiscuous mode [ 386.905644][ T8386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.757838][ T8404] netlink: 'syz.2.1501': attribute type 39 has an invalid length. [ 389.460228][ T8420] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1510'. [ 389.548885][ T8420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.513019][ T8439] device veth1_macvtap left promiscuous mode [ 390.537910][ T8439] device macsec0 entered promiscuous mode [ 391.012848][ T8447] netlink: 'syz.0.1517': attribute type 39 has an invalid length. [ 392.511968][ T8475] device veth1_macvtap left promiscuous mode [ 393.527176][ T8493] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1539'. [ 393.548807][ T8493] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 393.708144][ T8490] netlink: 'syz.0.1535': attribute type 39 has an invalid length. [ 395.960726][ T8522] device veth1_macvtap entered promiscuous mode [ 396.113811][ T8516] bond0: (slave team0): Error: Slave device does not support XDP [ 397.031670][ T8530] bond0: (slave team0): Error: Slave device does not support XDP [ 397.775306][ T8542] netlink: 9351 bytes leftover after parsing attributes in process `syz.4.1553'. [ 399.105777][ T8544] netlink: 'syz.3.1554': attribute type 39 has an invalid length. [ 399.398362][ T8554] netlink: 'syz.3.1559': attribute type 39 has an invalid length. [ 399.614653][ T8560] netlink: 'syz.4.1573': attribute type 39 has an invalid length. [ 400.896892][ T8587] netlink: 'syz.0.1571': attribute type 39 has an invalid length. [ 402.876827][ T8628] netlink: 'syz.4.1588': attribute type 39 has an invalid length. [ 403.262728][ T8632] netlink: 'syz.2.1593': attribute type 21 has an invalid length. [ 403.321300][ T8632] netlink: 'syz.2.1593': attribute type 6 has an invalid length. [ 403.426450][ T8632] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1593'. [ 404.512919][ T8663] netlink: 'syz.4.1606': attribute type 39 has an invalid length. [ 404.847885][ T8671] netlink: 'syz.1.1610': attribute type 21 has an invalid length. [ 404.907254][ T8671] netlink: 'syz.1.1610': attribute type 6 has an invalid length. [ 404.968245][ T8671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1610'. [ 405.112169][ T8681] netlink: 'syz.3.1614': attribute type 39 has an invalid length. [ 406.514135][ T8705] netlink: 9351 bytes leftover after parsing attributes in process `syz.1.1620'. [ 408.701965][ T8718] netlink: 'syz.4.1624': attribute type 39 has an invalid length. [ 409.089237][ T8730] device pim6reg1 entered promiscuous mode [ 409.117040][ T8725] netlink: 'syz.4.1627': attribute type 21 has an invalid length. [ 409.134573][ T8725] netlink: 'syz.4.1627': attribute type 6 has an invalid length. [ 409.146110][ T8725] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1627'. [ 410.221826][ T8757] netlink: 'syz.4.1642': attribute type 39 has an invalid length. [ 410.552249][ T8763] netlink: 'syz.0.1656': attribute type 39 has an invalid length. [ 413.552896][ T8771] netlink: 'syz.3.1649': attribute type 21 has an invalid length. [ 413.561047][ T8771] netlink: 'syz.3.1649': attribute type 6 has an invalid length. [ 413.590217][ T8771] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1649'. [ 415.874177][ T8820] netlink: 'syz.0.1669': attribute type 39 has an invalid length. [ 421.167243][ T8855] device pim6reg1 entered promiscuous mode [ 421.202662][ T8858] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 421.762647][ T8868] netlink: 'syz.2.1695': attribute type 39 has an invalid length. [ 423.887405][ T4311] wlan1: Trigger new scan to find an IBSS to join [ 426.555095][ T8907] device pim6reg1 entered promiscuous mode [ 426.846993][ T75] wlan1: Trigger new scan to find an IBSS to join [ 427.362700][ T8926] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1700'. [ 429.380848][ T8963] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 429.604633][ T4283] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10 [ 429.885880][ T33] wlan1: Trigger new scan to find an IBSS to join [ 430.764843][ T8984] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1723'. [ 430.946192][ T4311] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 431.890138][ T4368] wlan1: Trigger new scan to find an IBSS to join [ 434.262232][ T8989] netlink: 'syz.4.1724': attribute type 10 has an invalid length. [ 434.270296][ T8989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1724'. [ 434.284992][ T8989] batman_adv: batadv0: Adding interface: virt_wifi0 [ 434.294494][ T8989] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.345688][ T8989] batman_adv: batadv0: Interface activated: virt_wifi0 [ 434.858888][ T9003] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 434.927042][ T11] wlan1: Trigger new scan to find an IBSS to join [ 435.000871][ T9007] netlink: 9351 bytes leftover after parsing attributes in process `syz.3.1730'. [ 437.136534][ T9051] netlink: 'syz.2.1744': attribute type 25 has an invalid length. [ 437.885818][ T33] wlan1: Trigger new scan to find an IBSS to join [ 438.243385][ T9082] netlink: 'syz.0.1752': attribute type 21 has an invalid length. [ 438.304609][ T9082] netlink: 'syz.0.1752': attribute type 6 has an invalid length. [ 438.385881][ T9082] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1752'. [ 438.845734][ T4364] wlan1: Trigger new scan to find an IBSS to join [ 438.897323][ T33] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 439.973926][ T4283] Bluetooth: hci2: ISO packet for unknown connection handle 2815 [ 440.049329][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.055783][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.886781][ T4364] wlan1: Trigger new scan to find an IBSS to join [ 442.913088][ T75] wlan1: Creating new IBSS network, BSSID 8e:33:9d:68:18:7f [ 443.943308][ T9142] bond0: (slave team0): Error: Slave device does not support XDP [ 443.952441][ T9154] netlink: 'syz.0.1786': attribute type 10 has an invalid length. [ 443.965850][ T9154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1786'. [ 443.983638][ T9154] batman_adv: batadv0: Adding interface: virt_wifi0 [ 444.006512][ T9154] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.100634][ T9154] batman_adv: batadv0: Interface activated: virt_wifi0 [ 445.320488][ T4283] Bluetooth: hci4: ISO packet for unknown connection handle 2815 [ 445.981208][ T9197] netlink: 'syz.4.1802': attribute type 39 has an invalid length. [ 446.377733][ T9209] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1808'. [ 446.787351][ T9215] device syzkaller0 entered promiscuous mode [ 449.013709][ T9229] netlink: 'syz.4.1816': attribute type 4 has an invalid length. [ 449.022036][ T9229] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1816'. [ 449.080980][ T9229] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 449.607626][ T9238] device syzkaller0 entered promiscuous mode [ 449.658314][ T9250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1823'. [ 453.092613][ T4283] Bluetooth: hci4: ISO packet for unknown connection handle 2815 [ 453.669292][ T9287] device syzkaller0 entered promiscuous mode [ 453.677777][ T4283] Bluetooth: hci4: ISO packet for unknown connection handle 2815 [ 458.212932][ T9305] : port 1(veth0_to_bridge) entered blocking state [ 458.220090][ T9305] : port 1(veth0_to_bridge) entered disabled state [ 458.228196][ T9305] device veth0_to_bridge entered promiscuous mode [ 458.240254][ T9307] : port 2(erspan0) entered blocking state [ 458.246620][ T9307] : port 2(erspan0) entered disabled state [ 458.253917][ T9307] device erspan0 entered promiscuous mode [ 460.673601][ T9363] device syzkaller0 entered promiscuous mode [ 461.363475][ T4283] Bluetooth: hci4: ISO packet for unknown connection handle 2815 [ 463.086422][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 463.915899][ T9372] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1868'. [ 464.007784][ T9376] device syzkaller0 entered promiscuous mode [ 464.040918][ T9397] netlink: 'syz.2.1877': attribute type 10 has an invalid length. [ 464.056240][ T9397] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1877'. [ 467.401861][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1889'. [ 467.420321][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 467.439503][ T9427] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1889'. [ 467.455920][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 467.475202][ T9427] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1889'. [ 467.489503][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 467.499645][ T9427] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1889'. [ 468.389830][ T9432] device syzkaller0 entered promiscuous mode [ 470.144073][ T9441] netlink: 'syz.1.1893': attribute type 39 has an invalid length. [ 470.180082][ T9442] netlink: 'syz.4.1891': attribute type 10 has an invalid length. [ 470.188082][ T9442] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1891'. [ 470.199190][ T9442] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 470.316033][ T9442] batman_adv: batadv0: Removing interface: virt_wifi0 [ 470.531464][ T9448] netlink: 'syz.3.1896': attribute type 11 has an invalid length. [ 470.541548][ T9448] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1896'. [ 470.562263][ T9447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.697630][ T9454] netlink: 'syz.1.1910': attribute type 10 has an invalid length. [ 470.725248][ T9454] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1910'. [ 471.410411][ T4364] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 472.316209][ T9470] : port 1(veth0_to_bridge) entered blocking state [ 472.323118][ T9470] : port 1(veth0_to_bridge) entered disabled state [ 472.345006][ T9470] device veth0_to_bridge entered promiscuous mode [ 472.405170][ T9468] : port 2(erspan0) entered blocking state [ 472.416860][ T9468] : port 2(erspan0) entered disabled state [ 472.424251][ T9468] device erspan0 entered promiscuous mode [ 474.468844][ T9495] netlink: 'syz.3.1915': attribute type 3 has an invalid length. [ 474.477968][ T9495] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1915'. [ 474.551000][ T9497] netlink: 'syz.2.1912': attribute type 11 has an invalid length. [ 474.561204][ T9501] netlink: 'syz.4.1916': attribute type 2 has an invalid length. [ 474.570057][ T9497] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1912'. [ 474.580780][ T9501] netlink: 'syz.4.1916': attribute type 8 has an invalid length. [ 474.591756][ T9501] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1916'. [ 474.615757][ T9496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.949768][ T9512] netlink: 'syz.0.1919': attribute type 10 has an invalid length. [ 474.967952][ T9512] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1919'. [ 475.245568][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 475.745975][ T9512] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 475.788546][ T9512] batman_adv: batadv0: Removing interface: virt_wifi0 [ 475.814915][ T9511] : port 1(veth0_to_bridge) entered blocking state [ 475.822136][ T9511] : port 1(veth0_to_bridge) entered disabled state [ 475.835774][ T9511] device veth0_to_bridge entered promiscuous mode [ 475.845844][ T9513] : port 2(erspan0) entered blocking state [ 475.852171][ T9513] : port 2(erspan0) entered disabled state [ 475.859947][ T9513] device erspan0 entered promiscuous mode [ 477.248376][ T9543] netlink: 'syz.4.1930': attribute type 11 has an invalid length. [ 477.283805][ T9543] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1930'. [ 477.323446][ T9542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.738000][ T9547] netlink: 'syz.0.1931': attribute type 2 has an invalid length. [ 479.785651][ T9547] netlink: 'syz.0.1931': attribute type 8 has an invalid length. [ 479.793469][ T9547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1931'. [ 480.141618][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 480.180517][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 480.193544][ T9558] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1937'. [ 480.205159][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 480.223191][ T9558] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1937'. [ 480.243551][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 480.254039][ T9558] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1937'. [ 484.724297][ T9590] netlink: 'syz.1.1948': attribute type 2 has an invalid length. [ 484.737016][ T9590] netlink: 'syz.1.1948': attribute type 8 has an invalid length. [ 484.745880][ T9590] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1948'. [ 484.772527][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 484.792489][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 484.805928][ T9597] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1952'. [ 484.831820][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 484.853059][ T9597] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1952'. [ 484.867713][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 484.879966][ T9597] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1952'. [ 485.228835][ T9610] netlink: 'syz.4.1955': attribute type 3 has an invalid length. [ 485.276712][ T9610] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1955'. [ 488.379627][ T9695] netlink: 'syz.0.1967': attribute type 11 has an invalid length. [ 488.387736][ T9695] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1967'. [ 488.404311][ T9693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.726473][ T9704] netlink: 'syz.1.1971': attribute type 3 has an invalid length. [ 489.427591][ T9705] device syzkaller0 entered promiscuous mode [ 491.955249][ T9717] bond0: (slave team0): Error: Slave device does not support XDP [ 493.720589][ T9752] netlink: 'syz.1.1985': attribute type 11 has an invalid length. [ 493.793936][ T9752] __nla_validate_parse: 1 callbacks suppressed [ 493.793973][ T9752] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1985'. [ 493.823448][ T9751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.445492][ T4368] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 497.684438][ T9765] netlink: 'syz.2.2003': attribute type 11 has an invalid length. [ 497.694447][ T9765] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2003'. [ 497.756021][ T9764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.488086][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.494502][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.810435][ T9823] netlink: 'syz.2.2012': attribute type 11 has an invalid length. [ 501.822470][ T9823] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2012'. [ 501.848614][ T9822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.834329][ T9828] netlink: 'syz.0.2013': attribute type 10 has an invalid length. [ 503.469071][ T4364] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 507.250231][ T9312] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 509.054435][ T9890] bond0: (slave team0): Error: Slave device does not support XDP [ 514.175068][ T9925] device syzkaller0 entered promiscuous mode [ 516.492705][ T9940] bond0: (slave team0): Error: Slave device does not support XDP [ 518.417472][ T4283] Bluetooth: hci2: unexpected event 0x2c length: 82 > 17 [ 518.920513][ T9967] netlink: 'syz.0.2066': attribute type 2 has an invalid length. [ 519.027166][ T9969] netlink: 'syz.0.2066': attribute type 2 has an invalid length. [ 522.284883][ T9980] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 523.307280][ T9999] : renamed from pim6reg1 [ 523.625579][T10004] netlink: 'syz.4.2082': attribute type 2 has an invalid length. [ 523.648591][ T4283] Bluetooth: hci4: unexpected event 0x2c length: 82 > 17 [ 523.664471][T10004] netlink: 'syz.4.2082': attribute type 2 has an invalid length. [ 524.078072][T10013] device syzkaller0 entered promiscuous mode [ 527.090169][ T4311] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 528.082858][T10020] bond0: (slave team0): Error: Slave device does not support XDP [ 528.377855][T10030] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 529.335849][T10049] netlink: 'syz.3.2096': attribute type 2 has an invalid length. [ 529.356702][T10049] netlink: 'syz.3.2096': attribute type 2 has an invalid length. [ 529.451659][T10052] device syzkaller0 entered promiscuous mode [ 529.654243][T10054] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 529.924783][T10064] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 529.931702][T10064] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 531.114128][T10092] : renamed from pim6reg1 [ 531.664361][T10099] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 531.822006][T10100] device syzkaller0 entered promiscuous mode [ 532.632461][T10120] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 532.656600][T10117] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 533.163240][T10129] netlink: 'syz.2.2128': attribute type 39 has an invalid length. [ 533.918803][T10148] device syzkaller0 entered promiscuous mode [ 534.564531][T10153] bond0: (slave team0): Error: Slave device does not support XDP [ 535.413252][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 535.811666][T10160] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 535.818700][T10160] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 536.221362][T10158] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 536.254989][T10171] netlink: 'syz.4.2143': attribute type 39 has an invalid length. [ 536.877620][T10187] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 537.045987][T10191] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 537.249496][T10195] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 537.531397][T10202] bond0: (slave team0): Error: Slave device does not support XDP [ 537.877127][T10210] netlink: 'syz.0.2158': attribute type 39 has an invalid length. [ 537.911159][T10214] bond0: (slave team0): Error: Slave device does not support XDP [ 538.504658][T10229] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2166'. [ 539.247755][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 539.459384][T10245] device syzkaller0 entered promiscuous mode [ 539.782592][ T4283] Bluetooth: hci4: Malformed LE Event: 0x0d [ 539.945939][T10260] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2181'. [ 540.230399][T10271] netlink: 'syz.1.2194': attribute type 39 has an invalid length. [ 541.471219][T10289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.499993][T10289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.554869][T10289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.585905][T10289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.292597][T10311] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 542.428225][T10296] device syzkaller0 entered promiscuous mode [ 542.730029][T10319] netlink: 'syz.1.2208': attribute type 10 has an invalid length. [ 542.813263][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.837003][T10319] team0: Port device hsr0 added [ 543.434700][T10337] device syzkaller0 entered promiscuous mode [ 543.527625][T10339] netlink: 'syz.3.2201': attribute type 39 has an invalid length. [ 544.049704][T10354] bond0: (slave team0): Error: Slave device does not support XDP [ 544.864281][T10359] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2212'. [ 545.416060][T10372] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2219'. [ 547.273658][T10364] netlink: 'syz.0.2216': attribute type 10 has an invalid length. [ 547.287202][T10364] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 547.313545][T10389] netlink: 'syz.4.2222': attribute type 39 has an invalid length. [ 548.325252][T10380] device syzkaller0 entered promiscuous mode [ 548.604052][ T4283] Bluetooth: hci4: Malformed LE Event: 0x0d [ 548.608491][T10405] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 548.691901][T10405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.734617][T10407] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2229'. [ 549.471877][T10421] netlink: 'syz.2.2231': attribute type 10 has an invalid length. [ 549.499797][T10421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2231'. [ 550.761565][T10438] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2241'. [ 552.154893][T10453] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2246'. [ 552.171067][T10452] netlink: 'syz.1.2245': attribute type 2 has an invalid length. [ 552.235386][T10452] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2245'. [ 553.123608][T10466] netlink: 'syz.3.2251': attribute type 10 has an invalid length. [ 553.497581][T10466] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 556.212717][T10519] netlink: 'syz.2.2269': attribute type 10 has an invalid length. [ 556.860654][T10519] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 557.547016][T10537] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 557.568800][T10537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.445572][ T4364] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 560.171474][T10570] netlink: 'syz.4.2287': attribute type 10 has an invalid length. [ 560.273905][T10570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 560.354066][T10570] team0: Port device hsr0 added [ 562.768894][T10608] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 562.938516][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.944944][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.140522][T10620] netlink: 'syz.4.2309': attribute type 10 has an invalid length. [ 565.345005][T10657] netlink: 'syz.4.2323': attribute type 10 has an invalid length. [ 565.599814][T10662] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 567.089438][T10685] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 567.505725][T10698] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2349'. [ 567.584125][T10698] netlink: 'syz.3.2349': attribute type 21 has an invalid length. [ 567.613861][T10698] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2349'. [ 569.006520][T10734] netlink: 'syz.2.2354': attribute type 2 has an invalid length. [ 569.014824][T10734] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2354'. [ 569.464115][T10743] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 569.509118][T10743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.971366][T10757] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 570.680539][T10780] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.2373'. [ 570.794769][T10780] netlink: 'syz.1.2373': attribute type 21 has an invalid length. [ 570.815841][T10780] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2373'. [ 571.005240][T10786] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 571.027711][T10786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.248333][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 572.573581][T10825] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 572.626682][T10823] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.2391'. [ 572.680778][T10828] netlink: 'syz.0.2391': attribute type 21 has an invalid length. [ 572.722607][T10828] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2391'. [ 573.323511][T10839] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 573.562184][T10846] device wlan1 left promiscuous mode [ 575.364222][T10877] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2408'. [ 575.413585][T10877] netlink: 'syz.2.2408': attribute type 21 has an invalid length. [ 575.456585][T10877] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2408'. [ 575.542489][T10881] netlink: 'syz.0.2420': attribute type 10 has an invalid length. [ 575.574400][T10881] team0: Device ipvlan1 failed to register rx_handler [ 575.947435][T10889] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 577.074605][T10917] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.2423'. [ 577.113518][T10917] netlink: 'syz.4.2423': attribute type 21 has an invalid length. [ 577.132097][T10917] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2423'. [ 577.565482][T10928] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 577.600563][T10934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 577.670126][T10934] team0: Port device team_slave_0 removed [ 577.677365][T10934] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 577.905088][T10941] device wlan1 left promiscuous mode [ 578.912174][T10960] IPv6: pim6reg1: Disabled Multicast RS [ 579.284563][T10976] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 579.372124][T10978] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2448'. [ 581.860249][T11023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.041507][T11026] IPv6: pim6reg1: Disabled Multicast RS [ 582.828386][T11050] netlink: 'syz.4.2476': attribute type 10 has an invalid length. [ 583.390881][T11067] netlink: 'syz.0.2483': attribute type 10 has an invalid length. [ 583.423834][T11067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.499196][T11067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.621867][T11067] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 583.716272][T11076] IPv6: pim6reg1: Disabled Multicast RS [ 584.618917][T11083] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2490'. [ 584.640983][T11087] netlink: 'syz.2.2489': attribute type 27 has an invalid length. [ 584.654945][T11087] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2489'. [ 584.895682][T11094] netlink: 'syz.1.2493': attribute type 10 has an invalid length. [ 585.382899][T11109] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2511'. [ 586.304278][T11124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.900706][T11164] netlink: 'syz.2.2518': attribute type 10 has an invalid length. [ 587.958770][T11164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.067187][T11164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.144672][T11164] device batadv_slave_0 entered promiscuous mode [ 588.168869][T11164] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 589.708160][T11191] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2528'. [ 589.782734][T11191] device bond_slave_0 entered promiscuous mode [ 589.789413][T11191] device bond_slave_1 entered promiscuous mode [ 589.796002][T11191] device team_slave_1 entered promiscuous mode [ 592.438884][T11222] netlink: 'syz.4.2538': attribute type 10 has an invalid length. [ 592.535763][T11222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.022380][T11222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.148877][T11222] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 595.387895][T11265] netlink: 'syz.3.2563': attribute type 15 has an invalid length. [ 595.411999][T11265] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2563'. [ 596.716965][T11289] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2561'. [ 597.098575][T11293] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2565'. [ 598.085731][T11324] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2577'. [ 598.798110][T11331] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2581'. [ 598.848559][T11334] netlink: 'syz.2.2583': attribute type 2 has an invalid length. [ 598.865464][T11334] netlink: 'syz.2.2583': attribute type 8 has an invalid length. [ 598.873859][T11334] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2583'. [ 599.228051][T11345] netlink: 'syz.0.2588': attribute type 10 has an invalid length. [ 599.265458][T11345] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2588'. [ 599.294586][T11347] netlink: 'syz.1.2589': attribute type 27 has an invalid length. [ 599.303549][T11345] bond0: (slave team0): Releasing backup interface [ 599.315874][T11347] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2589'. [ 599.767480][T11364] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2596'. [ 601.024671][T11387] netlink: 'syz.4.2606': attribute type 27 has an invalid length. [ 601.039795][T11387] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2606'. [ 601.303317][T11396] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2610'. [ 601.382798][T11398] netlink: 'syz.0.2620': attribute type 15 has an invalid length. [ 601.393950][T11398] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2620'. [ 603.381194][T11420] netlink: 'syz.1.2618': attribute type 33 has an invalid length. [ 603.861980][T11437] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2626'. [ 604.477305][T11442] netlink: 'syz.4.2627': attribute type 15 has an invalid length. [ 604.518179][T11442] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2627'. [ 605.187101][T11447] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2628'. [ 605.214352][T11447] device bond_slave_0 entered promiscuous mode [ 605.221054][T11447] device bond_slave_1 entered promiscuous mode [ 608.080383][T11474] netlink: 766 bytes leftover after parsing attributes in process `syz.4.2641'. [ 608.106229][T11474] device bond_slave_0 entered promiscuous mode [ 608.113006][T11474] device bond_slave_1 entered promiscuous mode [ 608.119900][T11474] device batadv_slave_0 entered promiscuous mode [ 608.190406][T11477] netlink: 'syz.1.2642': attribute type 15 has an invalid length. [ 608.233975][T11477] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.2642'. [ 608.460938][T11488] netlink: 'syz.2.2644': attribute type 33 has an invalid length. [ 613.022637][T11536] netlink: 'syz.4.2662': attribute type 33 has an invalid length. [ 613.327008][ T4283] Bluetooth: hci4: unexpected event 0x34 length: 15 > 6 [ 616.233556][ T4283] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 619.373811][T11597] netlink: 'syz.1.2687': attribute type 10 has an invalid length. [ 620.862471][T11597] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.871961][T11597] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.883219][T11597] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.893178][T11597] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.920233][T11597] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.965486][T11597] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.974498][T11597] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.023754][T11597] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.042563][T11597] team0: Port device geneve1 added [ 621.066077][T11610] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2691'. [ 621.715011][T11628] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2698'. [ 621.776661][T11627] netlink: 'syz.4.2700': attribute type 21 has an invalid length. [ 621.827024][T11627] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2700'. [ 621.860073][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2700'. [ 622.460118][T11643] netlink: 'syz.2.2705': attribute type 10 has an invalid length. [ 624.150969][T11643] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.160170][T11643] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.169256][T11643] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.191889][T11643] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.228554][T11643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.261571][T11643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.277705][T11643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.286717][T11643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.328640][T11643] device geneve1 entered promiscuous mode [ 624.352234][T11643] team0: Port device geneve1 added [ 624.370731][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.377176][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.410612][T11654] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2708'. [ 625.344604][T11669] netlink: 'syz.3.2715': attribute type 21 has an invalid length. [ 625.357256][T11669] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2715'. [ 625.377337][T11669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2715'. [ 628.650892][T11686] netlink: 'syz.4.2722': attribute type 10 has an invalid length. [ 628.668625][T11686] team0: Port device geneve1 added [ 630.560057][T11742] netlink: 'syz.3.2742': attribute type 10 has an invalid length. [ 630.605134][T11742] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.625146][T11742] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.635743][T11742] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.654702][T11742] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.722730][T11742] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.761830][T11742] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.780557][T11742] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.789781][T11742] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.819066][T11742] device geneve1 entered promiscuous mode [ 630.836352][T11742] team0: Port device geneve1 added [ 632.794641][T11763] netlink: 'syz.0.2760': attribute type 16 has an invalid length. [ 632.824862][T11763] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2760'. [ 638.463542][T11822] bond_slave_1: mtu less than device minimum [ 639.847386][T11843] netlink: 'syz.0.2780': attribute type 10 has an invalid length. [ 639.862248][T11843] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.873309][T11843] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.891676][T11843] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.902849][T11843] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.966896][T11843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.003528][T11843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.026335][T11843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.035281][T11843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.063515][T11843] team0: Port device geneve1 added [ 640.210055][T11848] netlink: 'syz.2.2786': attribute type 29 has an invalid length. [ 640.251168][T11848] netlink: 'syz.2.2786': attribute type 29 has an invalid length. [ 641.363326][T11874] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2796'. [ 641.664919][T11878] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2806'. [ 645.020237][T11899] bond_slave_1: mtu less than device minimum [ 646.977861][T11935] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2819'. [ 653.204349][T12036] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2863'. [ 653.741877][T12044] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2869'. [ 655.908208][T12096] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2884'. [ 656.043461][T12100] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2888'. [ 657.711058][T12128] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2902'. [ 658.558299][T12138] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2906'. [ 659.223829][ T4283] Bluetooth: hci2: Malformed LE Event: 0x0d [ 665.108413][T12226] device syzkaller0 entered promiscuous mode [ 673.768671][T12391] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3006'. [ 684.568498][ T4283] Bluetooth: hci2: unexpected event 0x3d length: 15 > 14 [ 685.810559][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.824071][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.590706][T12575] netlink: 'syz.2.3085': attribute type 17 has an invalid length. [ 693.604564][T12575] netlink: 'syz.2.3085': attribute type 16 has an invalid length. [ 693.615156][T12575] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3085'. [ 694.290216][T12597] IPv6: Can't replace route, no match found [ 694.338842][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3094'. [ 694.652565][T12607] netlink: 'syz.4.3098': attribute type 27 has an invalid length. [ 695.139684][T12607] bond0: (slave bond_slave_0): Releasing backup interface [ 695.649559][T12621] netlink: 'syz.1.3101': attribute type 17 has an invalid length. [ 695.685473][T12621] netlink: 'syz.1.3101': attribute type 16 has an invalid length. [ 695.693488][T12621] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3101'. [ 696.506545][T12641] IPv6: Can't replace route, no match found [ 698.020719][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3108'. [ 698.978557][T12663] netlink: 'syz.3.3117': attribute type 17 has an invalid length. [ 699.026053][T12663] netlink: 'syz.3.3117': attribute type 16 has an invalid length. [ 699.079286][T12663] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3117'. [ 699.851822][T12666] netlink: 'syz.3.3118': attribute type 27 has an invalid length. [ 700.068221][T12666] bond0: (slave bond_slave_0): Releasing backup interface [ 701.049018][T12687] IPv6: Can't replace route, no match found [ 701.081219][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3127'. [ 702.611064][T12695] netlink: 'syz.4.3130': attribute type 17 has an invalid length. [ 702.623826][T12695] netlink: 'syz.4.3130': attribute type 16 has an invalid length. [ 702.632116][T12695] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3130'. [ 702.781360][T12701] IPv6: Can't replace route, no match found [ 702.841081][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 704.520176][T12732] netlink: 'syz.0.3143': attribute type 17 has an invalid length. [ 704.541327][T12732] netlink: 'syz.0.3143': attribute type 16 has an invalid length. [ 704.571314][T12732] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3143'. [ 705.278534][T12737] device syzkaller0 entered promiscuous mode [ 708.256914][T12745] netlink: 'syz.1.3150': attribute type 27 has an invalid length. [ 708.365220][T12745] bond0: (slave bond_slave_0): Releasing backup interface [ 708.394695][T12769] netlink: 'syz.2.3158': attribute type 17 has an invalid length. [ 708.402870][T12769] netlink: 'syz.2.3158': attribute type 16 has an invalid length. [ 708.411383][T12769] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3158'. [ 708.570123][T12775] IPv6: Can't replace route, no match found [ 708.580001][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3159'. [ 709.403198][T12791] netlink: 'syz.1.3167': attribute type 39 has an invalid length. [ 709.538738][T12797] netlink: 'syz.2.3171': attribute type 17 has an invalid length. [ 709.585761][T12797] netlink: 'syz.2.3171': attribute type 16 has an invalid length. [ 709.599572][T12797] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3171'. [ 710.009353][T12810] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 711.083237][T12833] netlink: 'syz.0.3184': attribute type 17 has an invalid length. [ 711.094947][T12833] netlink: 'syz.0.3184': attribute type 16 has an invalid length. [ 711.109282][T12833] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3184'. [ 711.871321][T12846] IPv6: Can't replace route, no match found [ 711.931947][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3189'. [ 713.551945][T12864] netlink: 'syz.2.3193': attribute type 27 has an invalid length. [ 713.794564][T12864] bond0: (slave bond_slave_0): Releasing backup interface [ 714.360673][T12878] netlink: 'syz.2.3200': attribute type 29 has an invalid length. [ 714.441042][T12878] netlink: 'syz.2.3200': attribute type 29 has an invalid length. [ 714.649721][T12888] IPv6: Can't replace route, no match found [ 714.679002][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3202'. [ 716.871736][T12912] netlink: 'syz.0.3212': attribute type 27 has an invalid length. [ 717.354568][T12912] bond0: (slave bond_slave_0): Releasing backup interface [ 717.665722][T12920] netlink: 'syz.3.3216': attribute type 39 has an invalid length. [ 718.254203][T12936] netlink: 'syz.1.3222': attribute type 3 has an invalid length. [ 718.305709][T12936] netlink: 'syz.1.3222': attribute type 1 has an invalid length. [ 718.325717][T12936] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3222'. [ 719.438705][T12961] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3240'. [ 719.661391][T12969] netlink: 'syz.0.3231': attribute type 27 has an invalid length. [ 719.793065][T12971] netlink: 'syz.2.3232': attribute type 39 has an invalid length. [ 720.319416][T12985] netlink: 'syz.0.3239': attribute type 3 has an invalid length. [ 720.327766][T12985] netlink: 'syz.0.3239': attribute type 1 has an invalid length. [ 720.336471][T12985] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3239'. [ 720.712832][T12992] netlink: 'syz.0.3242': attribute type 1 has an invalid length. [ 720.723630][T12992] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3242'. [ 722.518119][T12990] netlink: 'syz.0.3242': attribute type 10 has an invalid length. [ 722.914995][T12999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3246'. [ 723.023520][T13005] netlink: 'syz.3.3247': attribute type 27 has an invalid length. [ 723.795087][T13023] netlink: 'syz.2.3253': attribute type 3 has an invalid length. [ 723.817314][T13023] netlink: 'syz.2.3253': attribute type 1 has an invalid length. [ 723.835807][T13023] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3253'. [ 723.964473][T13025] device syzkaller0 entered promiscuous mode [ 724.155545][ T4283] Bluetooth: hci4: unexpected event 0x2c length: 82 > 17 [ 724.155579][ T4283] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 725.200922][T13062] netlink: 'syz.3.3264': attribute type 29 has an invalid length. [ 726.818616][T13037] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3260'. [ 726.841205][T13062] netlink: 'syz.3.3264': attribute type 29 has an invalid length. [ 727.046327][T13066] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3275'. [ 729.654870][T13101] netlink: 'syz.0.3277': attribute type 29 has an invalid length. [ 729.745150][T13101] netlink: 'syz.0.3277': attribute type 29 has an invalid length. [ 730.464009][T13127] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3283'. [ 730.629976][T13125] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 730.641742][T13125] syzkaller0: linktype set to 800 [ 730.831435][T13127] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 730.847297][T13127] CPU: 0 PID: 13127 Comm: syz.2.3283 Not tainted syzkaller #0 [ 730.854821][T13127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 730.864939][T13127] Call Trace: [ 730.868332][T13127] [ 730.871319][T13127] dump_stack_lvl+0x168/0x22e [ 730.876138][T13127] ? show_regs_print_info+0x12/0x12 [ 730.881382][T13127] ? load_image+0x3b0/0x3b0 [ 730.885966][T13127] sysfs_warn_dup+0x8a/0xa0 [ 730.890512][T13127] sysfs_do_create_link_sd+0xc0/0x110 [ 730.895919][T13127] device_add+0x7ed/0xfb0 [ 730.900300][T13127] wiphy_register+0x1e68/0x2bd0 [ 730.905227][T13127] ? cfg80211_event_work+0x40/0x40 [ 730.910383][T13127] ? minstrel_ht_alloc+0x894/0xa20 [ 730.915543][T13127] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 730.921659][T13127] ieee80211_register_hw+0x2d16/0x39e0 [ 730.927197][T13127] ? lockdep_hardirqs_on+0x94/0x140 [ 730.932450][T13127] ? ieee80211_register_hw+0xf21/0x39e0 [ 730.938030][T13127] ? ieee80211_register_hw+0xf21/0x39e0 [ 730.943621][T13127] ? ieee80211_tasklet_handler+0x20/0x20 [ 730.949303][T13127] ? memset+0x1e/0x40 [ 730.953329][T13127] ? __hrtimer_init+0x186/0x270 [ 730.958227][T13127] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 730.964014][T13127] hwsim_new_radio_nl+0xafa/0xce0 [ 730.969098][T13127] genl_family_rcv_msg_doit+0x22e/0x320 [ 730.974678][T13127] ? end_current_label_crit_section+0x170/0x170 [ 730.980976][T13127] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 730.986938][T13127] ? bpf_lsm_capable+0x5/0x10 [ 730.991658][T13127] ? security_capable+0x85/0xb0 [ 730.996549][T13127] genl_rcv_msg+0x5f2/0x780 [ 731.001104][T13127] ? genl_bind+0x350/0x350 [ 731.005551][T13127] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 731.011944][T13127] netlink_rcv_skb+0x1de/0x420 [ 731.016756][T13127] ? genl_bind+0x350/0x350 [ 731.021217][T13127] ? netlink_ack+0x1100/0x1100 [ 731.026026][T13127] ? down_read+0x1a8/0x2d0 [ 731.030485][T13127] genl_rcv+0x24/0x40 [ 731.034508][T13127] netlink_unicast+0x74d/0x8d0 [ 731.039323][T13127] netlink_sendmsg+0x89e/0xbc0 [ 731.044140][T13127] ? netlink_getsockopt+0x540/0x540 [ 731.049372][T13127] ? aa_sock_msg_perm+0x94/0x150 [ 731.054348][T13127] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 731.059663][T13127] ? security_socket_sendmsg+0x7c/0xa0 [ 731.065154][T13127] ? netlink_getsockopt+0x540/0x540 [ 731.070393][T13127] ____sys_sendmsg+0x59b/0x970 [ 731.075214][T13127] ? __sys_sendmsg_sock+0x30/0x30 [ 731.080266][T13127] ? __import_iovec+0x315/0x500 [ 731.085176][T13127] ? import_iovec+0x6f/0xa0 [ 731.089726][T13127] ___sys_sendmsg+0x21c/0x290 [ 731.094451][T13127] ? __sys_sendmsg+0x270/0x270 [ 731.099271][T13127] ? lock_chain_count+0x20/0x20 [ 731.104177][T13127] ? __fdget+0x17c/0x200 [ 731.108454][T13127] __se_sys_sendmsg+0x19e/0x270 [ 731.113338][T13127] ? perf_trace_preemptirq_template+0x287/0x330 [ 731.119625][T13127] ? __x64_sys_sendmsg+0x80/0x80 [ 731.124617][T13127] ? lockdep_hardirqs_on+0x94/0x140 [ 731.129857][T13127] do_syscall_64+0x4c/0xa0 [ 731.134304][T13127] ? clear_bhb_loop+0x60/0xb0 [ 731.139016][T13127] ? clear_bhb_loop+0x60/0xb0 [ 731.143718][T13127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.149629][T13127] RIP: 0033:0x7f7e9dd8efc9 [ 731.154077][T13127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.173803][T13127] RSP: 002b:00007f7e9eb95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.182251][T13127] RAX: ffffffffffffffda RBX: 00007f7e9dfe5fa0 RCX: 00007f7e9dd8efc9 [ 731.190249][T13127] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 731.198241][T13127] RBP: 00007f7e9de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 731.206229][T13127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.214224][T13127] R13: 00007f7e9dfe6038 R14: 00007f7e9dfe5fa0 R15: 00007ffd708552e8 [ 731.222235][T13127] [ 733.987152][T13123] device syzkaller0 entered promiscuous mode [ 734.162556][T13143] netlink: 'syz.4.3287': attribute type 3 has an invalid length. [ 734.171220][T13143] netlink: 'syz.4.3287': attribute type 1 has an invalid length. [ 734.179381][T13143] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3287'. [ 736.906099][T13174] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 737.266752][T13181] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3303'. [ 737.381289][T13181] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 737.462988][T13181] CPU: 1 PID: 13181 Comm: syz.0.3303 Not tainted syzkaller #0 [ 737.470538][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 737.480628][T13181] Call Trace: [ 737.483940][T13181] [ 737.486904][T13181] dump_stack_lvl+0x168/0x22e [ 737.491630][T13181] ? show_regs_print_info+0x12/0x12 [ 737.496877][T13181] ? load_image+0x3b0/0x3b0 [ 737.501443][T13181] sysfs_warn_dup+0x8a/0xa0 [ 737.505987][T13181] sysfs_do_create_link_sd+0xc0/0x110 [ 737.511394][T13181] device_add+0x7ed/0xfb0 [ 737.515779][T13181] wiphy_register+0x1e68/0x2bd0 [ 737.520689][T13181] ? cfg80211_event_work+0x40/0x40 [ 737.525837][T13181] ? minstrel_ht_alloc+0x894/0xa20 [ 737.530985][T13181] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 737.537109][T13181] ieee80211_register_hw+0x2d16/0x39e0 [ 737.542614][T13181] ? lockdep_hardirqs_on+0x94/0x140 [ 737.547864][T13181] ? ieee80211_register_hw+0xf21/0x39e0 [ 737.553446][T13181] ? ieee80211_register_hw+0xf21/0x39e0 [ 737.559031][T13181] ? ieee80211_tasklet_handler+0x20/0x20 [ 737.564713][T13181] ? memset+0x1e/0x40 [ 737.568753][T13181] ? __hrtimer_init+0x186/0x270 [ 737.573640][T13181] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 737.579422][T13181] hwsim_new_radio_nl+0xafa/0xce0 [ 737.584507][T13181] genl_family_rcv_msg_doit+0x22e/0x320 [ 737.590105][T13181] ? rcu_is_watching+0x11/0xa0 [ 737.594913][T13181] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 737.600848][T13181] ? lockdep_hardirqs_on+0x94/0x140 [ 737.606102][T13181] ? genl_rcv_msg+0x5ca/0x780 [ 737.610860][T13181] genl_rcv_msg+0x5f2/0x780 [ 737.615430][T13181] ? genl_bind+0x350/0x350 [ 737.619893][T13181] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 737.626295][T13181] netlink_rcv_skb+0x1de/0x420 [ 737.631104][T13181] ? genl_bind+0x350/0x350 [ 737.635570][T13181] ? netlink_ack+0x1100/0x1100 [ 737.640389][T13181] ? down_read+0x1a8/0x2d0 [ 737.644852][T13181] genl_rcv+0x24/0x40 [ 737.648876][T13181] netlink_unicast+0x74d/0x8d0 [ 737.653698][T13181] netlink_sendmsg+0x89e/0xbc0 [ 737.658528][T13181] ? netlink_getsockopt+0x540/0x540 [ 737.663769][T13181] ? aa_sock_msg_perm+0x94/0x150 [ 737.668931][T13181] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 737.674255][T13181] ? security_socket_sendmsg+0x7c/0xa0 [ 737.679773][T13181] ? netlink_getsockopt+0x540/0x540 [ 737.685027][T13181] ____sys_sendmsg+0x59b/0x970 [ 737.689849][T13181] ? __sys_sendmsg_sock+0x30/0x30 [ 737.694916][T13181] ? __import_iovec+0x315/0x500 [ 737.699825][T13181] ? import_iovec+0x6f/0xa0 [ 737.704377][T13181] ___sys_sendmsg+0x21c/0x290 [ 737.709102][T13181] ? __sys_sendmsg+0x270/0x270 [ 737.713933][T13181] ? do_futex+0xc0/0x320 [ 737.718248][T13181] ? __fdget+0x17c/0x200 [ 737.722537][T13181] __se_sys_sendmsg+0x19e/0x270 [ 737.727431][T13181] ? perf_trace_preemptirq_template+0x287/0x330 [ 737.734237][T13181] ? __x64_sys_sendmsg+0x80/0x80 [ 737.739246][T13181] ? lockdep_hardirqs_on+0x94/0x140 [ 737.744498][T13181] do_syscall_64+0x4c/0xa0 [ 737.748958][T13181] ? clear_bhb_loop+0x60/0xb0 [ 737.753669][T13181] ? clear_bhb_loop+0x60/0xb0 [ 737.758410][T13181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.764339][T13181] RIP: 0033:0x7f070bd8efc9 [ 737.768798][T13181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.788455][T13181] RSP: 002b:00007f070cbb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.796911][T13181] RAX: ffffffffffffffda RBX: 00007f070bfe5fa0 RCX: 00007f070bd8efc9 [ 737.804921][T13181] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 737.812923][T13181] RBP: 00007f070be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 737.820925][T13181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.828924][T13181] R13: 00007f070bfe6038 R14: 00007f070bfe5fa0 R15: 00007ffc9178d178 [ 737.836948][T13181] [ 738.412695][T13200] netlink: 'syz.1.3309': attribute type 29 has an invalid length. [ 738.444218][T13200] netlink: 'syz.1.3309': attribute type 29 has an invalid length. [ 738.470902][T13201] netlink: 'syz.3.3310': attribute type 10 has an invalid length. [ 739.814388][T13219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.363090][T13244] netlink: 'syz.4.3325': attribute type 29 has an invalid length. [ 741.407649][T13244] netlink: 'syz.4.3325': attribute type 29 has an invalid length. [ 741.692710][T13248] device syzkaller0 entered promiscuous mode [ 746.034470][T13253] device syzkaller0 entered promiscuous mode [ 746.041901][T13254] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 746.048237][T13254] syzkaller0: Linktype set failed because interface is up [ 746.061059][T13265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 746.085791][ T26] syzkaller0: tun_net_xmit 48 [ 746.309602][T13284] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3341'. [ 747.248157][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.254685][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.954127][T13284] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 747.971897][T13284] CPU: 1 PID: 13284 Comm: syz.1.3341 Not tainted syzkaller #0 [ 747.979446][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 747.990328][T13284] Call Trace: [ 747.993644][T13284] [ 747.996608][T13284] dump_stack_lvl+0x168/0x22e [ 748.001362][T13284] ? show_regs_print_info+0x12/0x12 [ 748.006607][T13284] ? load_image+0x3b0/0x3b0 [ 748.011196][T13284] sysfs_warn_dup+0x8a/0xa0 [ 748.015752][T13284] sysfs_do_create_link_sd+0xc0/0x110 [ 748.021159][T13284] device_add+0x7ed/0xfb0 [ 748.025517][T13284] wiphy_register+0x1e68/0x2bd0 [ 748.030435][T13284] ? cfg80211_event_work+0x40/0x40 [ 748.035596][T13284] ? minstrel_ht_alloc+0x894/0xa20 [ 748.040750][T13284] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 748.046888][T13284] ieee80211_register_hw+0x2d16/0x39e0 [ 748.052418][T13284] ? ieee80211_register_hw+0xf21/0x39e0 [ 748.057994][T13284] ? ieee80211_register_hw+0xf21/0x39e0 [ 748.063584][T13284] ? ieee80211_tasklet_handler+0x20/0x20 [ 748.069246][T13284] ? memset+0x1e/0x40 [ 748.073248][T13284] ? __hrtimer_init+0x186/0x270 [ 748.078114][T13284] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 748.083886][T13284] hwsim_new_radio_nl+0xafa/0xce0 [ 748.088946][T13284] genl_family_rcv_msg_doit+0x22e/0x320 [ 748.094503][T13284] ? end_current_label_crit_section+0x170/0x170 [ 748.100766][T13284] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 748.106675][T13284] ? bpf_lsm_capable+0x5/0x10 [ 748.111357][T13284] ? security_capable+0x85/0xb0 [ 748.116242][T13284] genl_rcv_msg+0x5f2/0x780 [ 748.120792][T13284] ? genl_bind+0x350/0x350 [ 748.125221][T13284] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 748.131585][T13284] netlink_rcv_skb+0x1de/0x420 [ 748.136396][T13284] ? genl_bind+0x350/0x350 [ 748.140842][T13284] ? netlink_ack+0x1100/0x1100 [ 748.145637][T13284] ? down_read+0x1a8/0x2d0 [ 748.150086][T13284] genl_rcv+0x24/0x40 [ 748.154091][T13284] netlink_unicast+0x74d/0x8d0 [ 748.158871][T13284] netlink_sendmsg+0x89e/0xbc0 [ 748.163645][T13284] ? lockdep_hardirqs_on+0x94/0x140 [ 748.168853][T13284] ? netlink_getsockopt+0x540/0x540 [ 748.174063][T13284] ? netlink_getsockopt+0x540/0x540 [ 748.179270][T13284] ____sys_sendmsg+0x59b/0x970 [ 748.184046][T13284] ? __sys_sendmsg_sock+0x30/0x30 [ 748.189076][T13284] ? __import_iovec+0x315/0x500 [ 748.193942][T13284] ? import_iovec+0x6f/0xa0 [ 748.198463][T13284] ___sys_sendmsg+0x21c/0x290 [ 748.203147][T13284] ? __sys_sendmsg+0x270/0x270 [ 748.207956][T13284] ? __fdget+0x17c/0x200 [ 748.212207][T13284] __se_sys_sendmsg+0x19e/0x270 [ 748.217072][T13284] ? __x64_sys_sendmsg+0x80/0x80 [ 748.222072][T13284] ? syscall_enter_from_user_mode+0x2a/0x80 [ 748.227980][T13284] do_syscall_64+0x4c/0xa0 [ 748.232398][T13284] ? clear_bhb_loop+0x60/0xb0 [ 748.237083][T13284] ? clear_bhb_loop+0x60/0xb0 [ 748.241768][T13284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.247686][T13284] RIP: 0033:0x7fad91b8efc9 [ 748.252105][T13284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.271745][T13284] RSP: 002b:00007fad92b10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.280198][T13284] RAX: ffffffffffffffda RBX: 00007fad91de5fa0 RCX: 00007fad91b8efc9 [ 748.288211][T13284] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 748.296284][T13284] RBP: 00007fad91c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 748.304286][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.312262][T13284] R13: 00007fad91de6038 R14: 00007fad91de5fa0 R15: 00007ffd305ceca8 [ 748.320261][T13284] [ 748.486321][T13291] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 748.558101][T13295] netlink: 'syz.2.3352': attribute type 10 has an invalid length. [ 748.628756][T13295] device dummy0 entered promiscuous mode [ 748.664655][T13295] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 749.072224][T13304] netlink: 'syz.2.3349': attribute type 10 has an invalid length. [ 750.175093][T13327] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3357'. [ 750.289766][T13327] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 750.305630][T13327] CPU: 1 PID: 13327 Comm: syz.3.3357 Not tainted syzkaller #0 [ 750.313159][T13327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 750.323247][T13327] Call Trace: [ 750.326566][T13327] [ 750.329544][T13327] dump_stack_lvl+0x168/0x22e [ 750.334277][T13327] ? show_regs_print_info+0x12/0x12 [ 750.339534][T13327] ? load_image+0x3b0/0x3b0 [ 750.344100][T13327] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.350204][T13327] ? __kasan_kmalloc+0x8e/0xa0 [ 750.355015][T13327] sysfs_warn_dup+0x8a/0xa0 [ 750.359559][T13327] sysfs_do_create_link_sd+0xc0/0x110 [ 750.364977][T13327] device_add+0x7ed/0xfb0 [ 750.369358][T13327] wiphy_register+0x1e68/0x2bd0 [ 750.374269][T13327] ? cfg80211_event_work+0x40/0x40 [ 750.379421][T13327] ? minstrel_ht_alloc+0x894/0xa20 [ 750.384576][T13327] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 750.390699][T13327] ieee80211_register_hw+0x2d16/0x39e0 [ 750.396205][T13327] ? lockdep_hardirqs_on+0x94/0x140 [ 750.401463][T13327] ? ieee80211_register_hw+0xf21/0x39e0 [ 750.407058][T13327] ? ieee80211_register_hw+0xf21/0x39e0 [ 750.412658][T13327] ? ieee80211_tasklet_handler+0x20/0x20 [ 750.418349][T13327] ? memset+0x1e/0x40 [ 750.422383][T13327] ? __hrtimer_init+0x186/0x270 [ 750.427285][T13327] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 750.433087][T13327] hwsim_new_radio_nl+0xafa/0xce0 [ 750.438184][T13327] genl_family_rcv_msg_doit+0x22e/0x320 [ 750.443779][T13327] ? end_current_label_crit_section+0x170/0x170 [ 750.450087][T13327] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 750.456034][T13327] ? bpf_lsm_capable+0x5/0x10 [ 750.460752][T13327] ? security_capable+0x85/0xb0 [ 750.465744][T13327] genl_rcv_msg+0x5f2/0x780 [ 750.470316][T13327] ? genl_bind+0x350/0x350 [ 750.474775][T13327] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 750.481179][T13327] netlink_rcv_skb+0x1de/0x420 [ 750.485995][T13327] ? genl_bind+0x350/0x350 [ 750.490459][T13327] ? netlink_ack+0x1100/0x1100 [ 750.495289][T13327] ? down_read+0x1a8/0x2d0 [ 750.499754][T13327] genl_rcv+0x24/0x40 [ 750.503836][T13327] netlink_unicast+0x74d/0x8d0 [ 750.508746][T13327] netlink_sendmsg+0x89e/0xbc0 [ 750.513576][T13327] ? netlink_getsockopt+0x540/0x540 [ 750.518857][T13327] ? aa_sock_msg_perm+0x94/0x150 [ 750.523848][T13327] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 750.529168][T13327] ? security_socket_sendmsg+0x7c/0xa0 [ 750.534679][T13327] ? netlink_getsockopt+0x540/0x540 [ 750.539920][T13327] ____sys_sendmsg+0x59b/0x970 [ 750.544749][T13327] ? __sys_sendmsg_sock+0x30/0x30 [ 750.549877][T13327] ? __import_iovec+0x315/0x500 [ 750.554785][T13327] ? import_iovec+0x6f/0xa0 [ 750.559341][T13327] ___sys_sendmsg+0x21c/0x290 [ 750.564145][T13327] ? __sys_sendmsg+0x270/0x270 [ 750.568955][T13327] ? irqentry_enter+0x33/0x50 [ 750.573696][T13327] ? rcu_is_watching+0x11/0xa0 [ 750.578542][T13327] __se_sys_sendmsg+0x19e/0x270 [ 750.583439][T13327] ? perf_trace_preemptirq_template+0x287/0x330 [ 750.589728][T13327] ? __x64_sys_sendmsg+0x80/0x80 [ 750.594728][T13327] ? lockdep_hardirqs_on+0x94/0x140 [ 750.599987][T13327] do_syscall_64+0x4c/0xa0 [ 750.604458][T13327] ? clear_bhb_loop+0x60/0xb0 [ 750.609175][T13327] ? clear_bhb_loop+0x60/0xb0 [ 750.613900][T13327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.619837][T13327] RIP: 0033:0x7f101e78efc9 [ 750.624290][T13327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.643935][T13327] RSP: 002b:00007f101f641038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.652396][T13327] RAX: ffffffffffffffda RBX: 00007f101e9e5fa0 RCX: 00007f101e78efc9 [ 750.660405][T13327] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 750.668422][T13327] RBP: 00007f101e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 750.676431][T13327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.684443][T13327] R13: 00007f101e9e6038 R14: 00007f101e9e5fa0 R15: 00007ffea1c14f68 [ 750.692465][T13327] [ 751.422974][T13352] netlink: 'syz.0.3364': attribute type 10 has an invalid length. [ 752.622306][T13384] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3377'. [ 752.731840][T13384] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 752.750867][T13384] CPU: 0 PID: 13384 Comm: syz.4.3377 Not tainted syzkaller #0 [ 752.758410][T13384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 752.768500][T13384] Call Trace: [ 752.771822][T13384] [ 752.774777][T13384] dump_stack_lvl+0x168/0x22e [ 752.779498][T13384] ? show_regs_print_info+0x12/0x12 [ 752.784734][T13384] ? load_image+0x3b0/0x3b0 [ 752.789303][T13384] sysfs_warn_dup+0x8a/0xa0 [ 752.793844][T13384] sysfs_do_create_link_sd+0xc0/0x110 [ 752.799256][T13384] device_add+0x7ed/0xfb0 [ 752.803634][T13384] wiphy_register+0x1e68/0x2bd0 [ 752.808541][T13384] ? cfg80211_event_work+0x40/0x40 [ 752.813698][T13384] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 752.819886][T13384] ? ieee80211_register_hw+0x28cd/0x39e0 [ 752.825549][T13384] ieee80211_register_hw+0x2d16/0x39e0 [ 752.831035][T13384] ? lockdep_hardirqs_on+0x94/0x140 [ 752.836283][T13384] ? ieee80211_register_hw+0xf21/0x39e0 [ 752.841862][T13384] ? ieee80211_register_hw+0xf21/0x39e0 [ 752.847448][T13384] ? ieee80211_tasklet_handler+0x20/0x20 [ 752.853116][T13384] ? memset+0x1e/0x40 [ 752.857159][T13384] ? __hrtimer_init+0x186/0x270 [ 752.862045][T13384] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 752.867847][T13384] hwsim_new_radio_nl+0xafa/0xce0 [ 752.872927][T13384] genl_family_rcv_msg_doit+0x22e/0x320 [ 752.878517][T13384] ? end_current_label_crit_section+0x170/0x170 [ 752.884807][T13384] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 752.890746][T13384] ? bpf_lsm_capable+0x5/0x10 [ 752.895463][T13384] ? security_capable+0x85/0xb0 [ 752.900356][T13384] genl_rcv_msg+0x5f2/0x780 [ 752.904898][T13384] ? irqentry_enter+0x33/0x50 [ 752.909639][T13384] ? genl_bind+0x350/0x350 [ 752.914090][T13384] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 752.920485][T13384] netlink_rcv_skb+0x1de/0x420 [ 752.925284][T13384] ? genl_bind+0x350/0x350 [ 752.929738][T13384] ? netlink_ack+0x1100/0x1100 [ 752.934556][T13384] ? down_read+0x1a8/0x2d0 [ 752.939028][T13384] genl_rcv+0x24/0x40 [ 752.943046][T13384] netlink_unicast+0x74d/0x8d0 [ 752.947857][T13384] netlink_sendmsg+0x89e/0xbc0 [ 752.952675][T13384] ? netlink_getsockopt+0x540/0x540 [ 752.957909][T13384] ? aa_sock_msg_perm+0x94/0x150 [ 752.962892][T13384] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 752.968239][T13384] ? security_socket_sendmsg+0x7c/0xa0 [ 752.973737][T13384] ? netlink_getsockopt+0x540/0x540 [ 752.978959][T13384] ____sys_sendmsg+0x59b/0x970 [ 752.983771][T13384] ? __sys_sendmsg_sock+0x30/0x30 [ 752.988814][T13384] ? __import_iovec+0x315/0x500 [ 752.993735][T13384] ? import_iovec+0x6f/0xa0 [ 752.998280][T13384] ___sys_sendmsg+0x21c/0x290 [ 753.002996][T13384] ? __sys_sendmsg+0x270/0x270 [ 753.007851][T13384] ? __fdget+0x17c/0x200 [ 753.012139][T13384] __se_sys_sendmsg+0x19e/0x270 [ 753.017031][T13384] ? __x64_sys_sendmsg+0x80/0x80 [ 753.022017][T13384] ? syscall_enter_from_user_mode+0x2a/0x80 [ 753.027970][T13384] do_syscall_64+0x4c/0xa0 [ 753.032417][T13384] ? clear_bhb_loop+0x60/0xb0 [ 753.037122][T13384] ? clear_bhb_loop+0x60/0xb0 [ 753.041829][T13384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.047747][T13384] RIP: 0033:0x7f37eed8efc9 [ 753.052192][T13384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.072055][T13384] RSP: 002b:00007f37efb58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.080511][T13384] RAX: ffffffffffffffda RBX: 00007f37eefe5fa0 RCX: 00007f37eed8efc9 [ 753.088603][T13384] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 753.096607][T13384] RBP: 00007f37eee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 753.104600][T13384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.112602][T13384] R13: 00007f37eefe6038 R14: 00007f37eefe5fa0 R15: 00007ffe39d97d18 [ 753.120625][T13384] [ 755.074296][T13404] device syzkaller0 entered promiscuous mode [ 756.949961][T13412] netlink: 'syz.1.3387': attribute type 10 has an invalid length. [ 756.950704][T13410] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 756.967538][T13410] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 756.977468][T13410] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 757.440110][T13425] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 757.724522][T13442] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3396'. [ 757.791811][T13442] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 757.875418][T13442] CPU: 1 PID: 13442 Comm: syz.1.3396 Not tainted syzkaller #0 [ 757.882959][T13442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 757.893108][T13442] Call Trace: [ 757.896435][T13442] [ 757.899402][T13442] dump_stack_lvl+0x168/0x22e [ 757.904123][T13442] ? show_regs_print_info+0x12/0x12 [ 757.909368][T13442] ? load_image+0x3b0/0x3b0 [ 757.913941][T13442] sysfs_warn_dup+0x8a/0xa0 [ 757.918503][T13442] sysfs_do_create_link_sd+0xc0/0x110 [ 757.923926][T13442] device_add+0x7ed/0xfb0 [ 757.928323][T13442] wiphy_register+0x1e68/0x2bd0 [ 757.933256][T13442] ? cfg80211_event_work+0x40/0x40 [ 757.938411][T13442] ? minstrel_ht_alloc+0x894/0xa20 [ 757.943616][T13442] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 757.949734][T13442] ieee80211_register_hw+0x2d16/0x39e0 [ 757.955224][T13442] ? ieee80211_register_hw+0xf21/0x39e0 [ 757.960787][T13442] ? ieee80211_register_hw+0xf21/0x39e0 [ 757.966355][T13442] ? ieee80211_tasklet_handler+0x20/0x20 [ 757.972014][T13442] ? memset+0x1e/0x40 [ 757.976019][T13442] ? __hrtimer_init+0x186/0x270 [ 757.980893][T13442] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 757.986649][T13442] hwsim_new_radio_nl+0xafa/0xce0 [ 757.991705][T13442] genl_family_rcv_msg_doit+0x22e/0x320 [ 757.997278][T13442] ? end_current_label_crit_section+0x170/0x170 [ 758.003545][T13442] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 758.009481][T13442] ? bpf_lsm_capable+0x5/0x10 [ 758.014166][T13442] ? security_capable+0x85/0xb0 [ 758.019037][T13442] genl_rcv_msg+0x5f2/0x780 [ 758.023565][T13442] ? genl_bind+0x350/0x350 [ 758.027993][T13442] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 758.034353][T13442] netlink_rcv_skb+0x1de/0x420 [ 758.039140][T13442] ? genl_bind+0x350/0x350 [ 758.043580][T13442] ? netlink_ack+0x1100/0x1100 [ 758.048391][T13442] ? down_read+0x1a8/0x2d0 [ 758.052825][T13442] genl_rcv+0x24/0x40 [ 758.056828][T13442] netlink_unicast+0x74d/0x8d0 [ 758.061626][T13442] netlink_sendmsg+0x89e/0xbc0 [ 758.066413][T13442] ? netlink_getsockopt+0x540/0x540 [ 758.071633][T13442] ? aa_sock_msg_perm+0x94/0x150 [ 758.076591][T13442] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 758.081920][T13442] ? security_socket_sendmsg+0x7c/0xa0 [ 758.087399][T13442] ? netlink_getsockopt+0x540/0x540 [ 758.092611][T13442] ____sys_sendmsg+0x59b/0x970 [ 758.097400][T13442] ? __sys_sendmsg_sock+0x30/0x30 [ 758.102432][T13442] ? __import_iovec+0x315/0x500 [ 758.107326][T13442] ? import_iovec+0x6f/0xa0 [ 758.111849][T13442] ___sys_sendmsg+0x21c/0x290 [ 758.116555][T13442] ? __sys_sendmsg+0x270/0x270 [ 758.121376][T13442] ? __fdget+0x17c/0x200 [ 758.125639][T13442] __se_sys_sendmsg+0x19e/0x270 [ 758.130511][T13442] ? perf_trace_preemptirq_template+0x287/0x330 [ 758.136771][T13442] ? __x64_sys_sendmsg+0x80/0x80 [ 758.141743][T13442] ? lockdep_hardirqs_on+0x94/0x140 [ 758.146965][T13442] do_syscall_64+0x4c/0xa0 [ 758.151402][T13442] ? clear_bhb_loop+0x60/0xb0 [ 758.156099][T13442] ? clear_bhb_loop+0x60/0xb0 [ 758.160793][T13442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.166698][T13442] RIP: 0033:0x7fad91b8efc9 [ 758.171124][T13442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.190776][T13442] RSP: 002b:00007fad92aef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.199205][T13442] RAX: ffffffffffffffda RBX: 00007fad91de6090 RCX: 00007fad91b8efc9 [ 758.207189][T13442] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 758.215170][T13442] RBP: 00007fad91c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 758.223144][T13442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.231120][T13442] R13: 00007fad91de6128 R14: 00007fad91de6090 R15: 00007ffd305ceca8 [ 758.239142][T13442] [ 758.963774][T13461] device syzkaller0 entered promiscuous mode [ 760.880079][T13493] netlink: 'syz.1.3415': attribute type 2 has an invalid length. [ 761.704066][T13493] device .d entered promiscuous mode [ 762.335938][T13505] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 762.940330][ T4283] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6 [ 763.329723][T13525] device syzkaller0 entered promiscuous mode [ 766.674803][T13580] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 769.119395][T13630] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 771.129783][T13680] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.3491'. [ 771.140336][T13680] openvswitch: netlink: Message has 48126 unknown bytes. [ 771.190801][T13686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.579704][T13701] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 771.890775][ T4283] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 772.749557][T13728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.930500][T13732] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 774.014871][T13763] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 774.456711][T13775] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.3535'. [ 774.477484][T13775] openvswitch: netlink: Message has 48126 unknown bytes. [ 775.578563][T13804] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 776.356116][T13819] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.3552'. [ 776.366265][T13819] openvswitch: netlink: Message has 48126 unknown bytes. [ 777.518833][T13853] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 777.650886][T13855] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.3569'. [ 777.680667][T13855] openvswitch: netlink: Message has 48126 unknown bytes. [ 779.199395][T13881] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 781.198545][T13918] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 782.570198][T13959] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 783.253770][T13975] netlink: 'syz.1.3620': attribute type 2 has an invalid length. [ 783.285579][T13975] netlink: 'syz.1.3620': attribute type 8 has an invalid length. [ 783.293888][T13975] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3620'. [ 784.348078][T13996] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 785.784931][T14021] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 786.178761][T14025] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 786.576828][T14029] netlink: 'syz.4.3643': attribute type 39 has an invalid length. [ 787.630016][T14056] netlink: 'syz.4.3651': attribute type 2 has an invalid length. [ 787.701712][T14056] netlink: 'syz.4.3651': attribute type 8 has an invalid length. [ 787.780199][T14056] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3651'. [ 787.805222][T14058] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 788.066717][T14067] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3655'. [ 789.539688][T14101] netlink: 'syz.3.3668': attribute type 2 has an invalid length. [ 789.554998][T14101] netlink: 'syz.3.3668': attribute type 8 has an invalid length. [ 789.562828][T14101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3668'. [ 789.579936][T14104] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 791.415038][T14141] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 791.499034][T14147] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3687'. [ 791.772150][T14151] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 794.008526][T14202] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 794.507685][T14217] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3711'. [ 795.390543][T14227] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 795.415398][T14233] IPv6: NLM_F_CREATE should be specified when creating new route [ 795.423289][T14233] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3717'. [ 797.799158][T14282] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 798.145155][T14292] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3742'. [ 799.473473][T14310] IPv6: NLM_F_CREATE should be specified when creating new route [ 799.514382][T14310] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3749'. [ 799.954072][T14320] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 802.153096][T14370] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 803.023484][T14388] IPv6: NLM_F_CREATE should be specified when creating new route [ 803.037942][T14390] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3776'. [ 803.056060][T14388] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3775'. [ 803.209282][T14393] delete_channel: no stack [ 803.225212][T14393] delete_channel: no stack [ 803.473654][T14399] device syzkaller0 entered promiscuous mode [ 805.635097][ T4283] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 806.514618][T14430] IPv6: NLM_F_CREATE should be specified when creating new route [ 806.598508][T14430] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3789'. [ 806.844404][T14436] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3791'. [ 806.916494][T14441] netlink: 'syz.0.3794': attribute type 11 has an invalid length. [ 806.932414][T14441] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3794'. [ 806.955545][T14441] netlink: 'syz.0.3794': attribute type 10 has an invalid length. [ 807.030724][T14441] team0: Port device wlan1 added [ 807.085857][T14440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.499975][T14448] device wlan1 entered promiscuous mode [ 807.790011][T14461] delete_channel: no stack [ 807.794833][T14461] delete_channel: no stack [ 807.964636][ T3638] udevd[3638]: worker [9329] terminated by signal 33 (Unknown signal 33) [ 807.987237][ T3638] udevd[3638]: worker [9329] failed while handling '/devices/virtual/block/loop4' [ 808.307956][T14467] IPv6: NLM_F_CREATE should be specified when creating new route [ 808.350454][T14467] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3807'. [ 808.367060][T14472] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 808.689718][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.696269][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.725063][T14478] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3809'. [ 808.772622][T14481] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 809.732758][T14499] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 809.750023][T14504] delete_channel: no stack [ 809.758801][T14501] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3823'. [ 809.771861][T14504] delete_channel: no stack [ 809.934094][ T3638] udevd[3638]: worker [9742] terminated by signal 33 (Unknown signal 33) [ 809.960919][ T3638] udevd[3638]: worker [9742] failed while handling '/devices/virtual/block/loop3' [ 809.989066][T14509] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 810.346123][T14517] device wlan1 entered promiscuous mode [ 811.172081][T14534] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 811.659204][T14544] delete_channel: no stack [ 811.663871][T14544] delete_channel: no stack [ 811.906888][T14549] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 812.252972][T14557] device wlan1 entered promiscuous mode [ 812.257167][T14562] netlink: 'syz.2.3846': attribute type 11 has an invalid length. [ 812.327533][T14563] netlink: 'syz.2.3846': attribute type 10 has an invalid length. [ 812.339407][T14563] device wlan1 entered promiscuous mode [ 812.345540][T14562] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3846'. [ 812.348135][T14563] team0: Port device wlan1 added [ 812.460890][T14558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.478103][T14565] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 812.739509][T14570] netlink: 'syz.4.3853': attribute type 1 has an invalid length. [ 812.795831][T14570] netlink: 'syz.4.3853': attribute type 4 has an invalid length. [ 812.816996][T14570] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3853'. [ 813.191463][T14585] delete_channel: no stack [ 813.196464][T14585] delete_channel: no stack [ 813.517558][T14592] device wlan1 entered promiscuous mode [ 813.705120][T14600] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 814.663567][T14608] device syzkaller0 entered promiscuous mode [ 814.934364][ T9312] wlan1: Trigger new scan to find an IBSS to join [ 815.087097][T14621] delete_channel: no stack [ 815.091755][T14621] delete_channel: no stack [ 816.997168][T14625] netlink: 'syz.3.3875': attribute type 1 has an invalid length. [ 817.004975][T14625] netlink: 'syz.3.3875': attribute type 4 has an invalid length. [ 817.014674][T14625] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3875'. [ 817.025108][T14630] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 817.476752][T14636] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 818.405527][T14670] netlink: 'syz.1.3891': attribute type 1 has an invalid length. [ 818.469271][T14670] netlink: 'syz.1.3891': attribute type 4 has an invalid length. [ 818.565885][T14670] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3891'. [ 818.832161][T14666] bridge0: port 1(team0) entered blocking state [ 818.865697][T14666] bridge0: port 1(team0) entered disabled state [ 818.885400][ T4368] wlan1: Trigger new scan to find an IBSS to join [ 818.935749][T14666] device team0 entered promiscuous mode [ 818.941391][T14666] device team_slave_0 entered promiscuous mode [ 819.050690][T14666] device team_slave_1 entered promiscuous mode [ 819.065467][T14666] device geneve1 entered promiscuous mode [ 819.624909][T14681] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 820.392551][T14714] netlink: 'syz.2.3906': attribute type 1 has an invalid length. [ 820.405182][T14714] netlink: 'syz.2.3906': attribute type 4 has an invalid length. [ 820.415990][T14714] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3906'. [ 820.429939][T14715] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.797404][T14732] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 821.887018][ T4368] wlan1: Trigger new scan to find an IBSS to join [ 822.076672][ T11] wlan1: Creating new IBSS network, BSSID 1a:e6:90:c1:e1:d7 [ 822.084498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 822.451755][T14752] device syzkaller0 entered promiscuous mode [ 822.578654][T14762] netlink: 'syz.0.3921': attribute type 1 has an invalid length. [ 822.616432][T14762] netlink: 'syz.0.3921': attribute type 4 has an invalid length. [ 822.624993][T14762] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3921'. [ 827.482495][T14780] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 828.719112][T14817] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 830.010934][T14851] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 831.896666][T14887] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 833.020120][T14916] netlink: 'syz.1.3987': attribute type 9 has an invalid length. [ 833.074927][T14916] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3987'. [ 833.570920][T14923] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 833.599893][T14927] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 834.969517][T14962] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 835.360995][T14970] netlink: 'syz.1.4012': attribute type 3 has an invalid length. [ 835.389651][T14970] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.4012'. [ 835.452996][T14970] netlink: 'syz.1.4012': attribute type 39 has an invalid length. [ 835.754819][T14978] netlink: 'syz.0.4014': attribute type 1 has an invalid length. [ 835.793363][T14978] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4014'. [ 836.152501][T14992] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 836.868994][T15004] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 837.022492][T15010] netlink: 'syz.2.4027': attribute type 9 has an invalid length. [ 837.042476][T15010] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4027'. [ 837.521776][T15022] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 838.912169][T15064] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 840.276338][T15098] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 842.180146][T15140] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 842.333552][T15147] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 844.110353][T15184] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 844.521879][T15191] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 845.229281][T15208] IPv6: Can't replace route, no match found [ 845.257414][T15208] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4121'. [ 845.809299][T15224] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 846.554620][T15246] IPv6: Can't replace route, no match found [ 846.621371][T15246] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4129'. [ 847.303425][T15261] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 847.713244][T15275] netlink: 'syz.0.4141': attribute type 21 has an invalid length. [ 847.954836][T15284] IPv6: Can't replace route, no match found [ 847.979123][T15284] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4145'. [ 849.368624][T15300] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 849.405392][T15302] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 849.851067][T15315] IPv6: Can't replace route, no match found [ 849.890741][T15315] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4161'. [ 850.668606][T15331] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 852.041371][T15361] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 852.067387][T15359] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 853.469776][T15391] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 854.130739][T15411] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 854.845907][ T9] wlan1: Trigger new scan to find an IBSS to join [ 854.984634][T15427] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 855.891555][T15449] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 856.273976][T15460] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 859.673651][T15489] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 859.884628][T15491] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 859.897080][ T75] wlan1: Trigger new scan to find an IBSS to join [ 859.933310][T15496] netlink: 'syz.2.4242': attribute type 11 has an invalid length. [ 859.954606][T15496] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4242'. [ 860.038211][T15494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.801406][ T9] wlan1: Creating new IBSS network, BSSID 9e:9d:dc:2c:47:56 [ 860.826734][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 861.031391][T15523] device sit0 left promiscuous mode [ 861.633217][T15535] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 861.731864][T15543] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 862.198054][T15552] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 863.350264][T15578] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 863.542202][T15581] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 863.783326][T15586] netlink: 'syz.0.4274': attribute type 11 has an invalid length. [ 863.868268][T15586] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4274'. [ 863.918785][T15584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.301822][T15613] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 867.485118][T15619] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 867.968086][T15638] device sit0 left promiscuous mode [ 868.255784][T15641] device sit0 entered promiscuous mode [ 868.778591][T15647] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 868.846444][T15653] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 869.335285][T15660] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 870.129802][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.136393][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.694628][T15686] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 872.965378][T15698] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 873.234304][T15701] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 873.758864][T15720] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 874.107650][T15727] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 874.142797][T15733] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 874.177505][ T9312] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 874.207931][ T9312] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 874.827880][T15751] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 874.948291][T15751] device syzkaller0 entered promiscuous mode [ 874.999656][T15748] netlink: 'syz.2.4342': attribute type 21 has an invalid length. [ 876.904973][T15758] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 876.922662][T15764] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 876.932051][T15768] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 877.815156][T15794] netlink: 'syz.1.4359': attribute type 21 has an invalid length. [ 878.068934][T15805] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 878.088132][T15801] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 878.152877][T15807] netlink: 'syz.0.4365': attribute type 3 has an invalid length. [ 878.185471][T15807] netlink: 'syz.0.4365': attribute type 4 has an invalid length. [ 878.234227][T15807] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.4365'. [ 878.304995][T15809] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 881.562167][T15829] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 881.748687][T15833] netlink: 'syz.3.4385': attribute type 10 has an invalid length. [ 881.757420][T15833] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4385'. [ 882.049651][T15842] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 882.087656][T15844] netlink: 'syz.3.4375': attribute type 21 has an invalid length. [ 883.498750][T15865] netlink: 'syz.4.4389': attribute type 10 has an invalid length. [ 883.521709][T15865] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4389'. [ 883.883468][T15884] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 887.345574][T15912] netlink: 'syz.3.4404': attribute type 1 has an invalid length. [ 887.802121][T15918] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 887.846832][T15925] netlink: 'syz.1.4409': attribute type 10 has an invalid length. [ 887.860068][T15925] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4409'. [ 888.241898][T15933] netlink: 'syz.1.4414': attribute type 3 has an invalid length. [ 888.272120][T15933] netlink: 'syz.1.4414': attribute type 4 has an invalid length. [ 888.287563][T15933] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.4414'. [ 888.990663][T15957] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 889.515736][T15971] netlink: 'syz.3.4429': attribute type 3 has an invalid length. [ 889.535862][T15971] netlink: 'syz.3.4429': attribute type 4 has an invalid length. [ 889.543902][T15971] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.4429'. [ 889.707660][T15977] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 889.809162][T15977] device syzkaller0 entered promiscuous mode [ 892.004486][T15998] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 892.570173][T16011] netlink: 'syz.4.4446': attribute type 3 has an invalid length. [ 892.616589][T16011] netlink: 'syz.4.4446': attribute type 4 has an invalid length. [ 892.644322][T16017] netlink: 'syz.1.4447': attribute type 10 has an invalid length. [ 892.675528][T16011] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.4446'. [ 893.184253][ T9312] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 893.445352][T16036] netlink: 'syz.4.4455': attribute type 21 has an invalid length. [ 893.721634][T16044] netlink: 'syz.2.4459': attribute type 1 has an invalid length. [ 894.068350][T16054] netlink: 'syz.2.4464': attribute type 3 has an invalid length. [ 894.097099][T16054] netlink: 'syz.2.4464': attribute type 4 has an invalid length. [ 894.136568][T16054] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.4464'. [ 894.608403][T16067] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 894.761191][T16065] netlink: 'syz.0.4471': attribute type 1 has an invalid length. [ 894.780842][T16065] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4471'. [ 895.320286][T16080] netlink: 'syz.0.4477': attribute type 1 has an invalid length. [ 895.659452][T16090] netlink: 'syz.2.4483': attribute type 3 has an invalid length. [ 895.678665][T16090] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.4483'. [ 895.934710][T16098] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 896.492130][T16107] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.4490'. [ 897.108862][T16135] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4500'. [ 897.458353][T16139] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 900.819290][T16173] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4513'. [ 900.848295][T16171] validate_nla: 4 callbacks suppressed [ 900.848313][T16171] netlink: 'syz.0.4514': attribute type 2 has an invalid length. [ 900.869408][T16171] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4514'. [ 901.184747][T16176] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 903.874040][T16182] netlink: 'syz.0.4519': attribute type 1 has an invalid length. [ 903.883848][T16182] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4519'. [ 904.119111][T16186] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 904.151571][T16192] netlink: 'syz.1.4521': attribute type 16 has an invalid length. [ 904.172502][T16192] netlink: 'syz.1.4521': attribute type 3 has an invalid length. [ 904.205505][T16192] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4521'. [ 904.474651][T16201] netlink: 'syz.3.4526': attribute type 10 has an invalid length. [ 904.771024][T16209] netlink: 'syz.4.4530': attribute type 10 has an invalid length. [ 904.781229][T16209] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4530'. [ 905.039518][T16217] netlink: 'syz.2.4536': attribute type 2 has an invalid length. [ 905.092052][T16221] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 905.553985][T16231] netlink: 'syz.0.4541': attribute type 10 has an invalid length. [ 905.988619][T16245] netlink: 'syz.1.4548': attribute type 2 has an invalid length. [ 906.837383][T16258] netlink: 'syz.0.4560': attribute type 2 has an invalid length. [ 906.993552][T16262] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 907.513360][T16280] netlink: 'syz.1.4558': attribute type 10 has an invalid length. [ 907.530876][T16279] netlink: 'syz.2.4559': attribute type 10 has an invalid length. [ 907.597223][T16279] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4559'. [ 907.727091][T16282] netlink: 'syz.3.4561': attribute type 1 has an invalid length. [ 907.737421][T16282] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4561'. [ 907.998952][T16290] netlink: 'syz.4.4565': attribute type 2 has an invalid length. [ 908.549185][T16302] netlink: 'syz.4.4568': attribute type 16 has an invalid length. [ 908.605695][T16302] netlink: 'syz.4.4568': attribute type 3 has an invalid length. [ 908.613673][T16302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4568'. [ 908.881805][T16304] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 909.335868][T16316] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4575'. [ 909.448053][T16319] netlink: 'syz.4.4574': attribute type 10 has an invalid length. [ 909.672406][T16322] netlink: 'syz.2.4577': attribute type 1 has an invalid length. [ 909.682529][T16322] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.4577'. [ 909.895052][T16320] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 910.427912][T16337] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 910.441774][T16349] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4584'. [ 910.472049][T16337] device syzkaller0 entered promiscuous mode [ 910.929801][T16358] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4599'. [ 912.886080][T16368] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 912.893361][T16370] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4592'. [ 913.407602][T16376] validate_nla: 4 callbacks suppressed [ 913.407682][T16376] netlink: 'syz.1.4594': attribute type 1 has an invalid length. [ 913.434533][T16380] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 913.494330][T16384] netlink: 'syz.2.4597': attribute type 10 has an invalid length. [ 913.518396][T16376] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.4594'. [ 913.999593][T16391] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 914.064812][T16396] netlink: 'syz.0.4602': attribute type 16 has an invalid length. [ 914.085454][T16396] netlink: 'syz.0.4602': attribute type 3 has an invalid length. [ 914.120444][T16394] netlink: 'syz.3.4614': attribute type 10 has an invalid length. [ 914.174608][T16393] netlink: 'syz.4.4615': attribute type 1 has an invalid length. [ 914.184917][T16396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4602'. [ 914.186223][T16393] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4615'. [ 914.746898][T16406] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 914.903143][T16406] device syzkaller0 entered promiscuous mode [ 915.006666][T16412] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 916.069775][T16439] netlink: 'syz.2.4621': attribute type 1 has an invalid length. [ 916.079500][T16439] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.4621'. [ 917.698145][T16425] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4616'. [ 917.707657][T16426] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 917.715492][T16436] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4620'. [ 917.735547][T16436] device hsr_slave_1 left promiscuous mode [ 918.079696][T16458] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 918.360297][T16464] netlink: 'syz.0.4631': attribute type 10 has an invalid length. [ 918.399650][T16464] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4631'. [ 918.950547][T16479] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 919.021353][T16484] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4639'. [ 919.307642][T16493] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 919.426008][T16490] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 919.450432][T16493] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 920.424108][T16512] netlink: 'syz.3.4650': attribute type 10 has an invalid length. [ 920.446033][T16512] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4650'. [ 920.500751][T16516] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 920.863512][T16529] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4657'. [ 921.084183][T16522] netlink: 'syz.4.4656': attribute type 1 has an invalid length. [ 921.093692][T16522] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4656'. [ 921.102464][T16528] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 921.379177][T16533] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 922.872894][T16557] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 922.973492][T16558] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 923.148801][T16558] device syzkaller0 entered promiscuous mode [ 923.200832][T16567] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 925.177076][ T4368] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 925.391807][T16579] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 925.435491][T16579] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 925.879487][T16595] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 926.095202][T16603] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 927.302326][T16624] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 927.402789][T16631] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4698'. [ 927.508961][T16624] device syzkaller0 entered promiscuous mode [ 929.588578][T16639] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 929.597943][T16641] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 930.900222][T16681] team0: Port device team_slave_0 removed [ 930.930171][T16681] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 931.084875][T16683] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 931.220539][T16683] device syzkaller0 entered promiscuous mode [ 931.567878][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.574251][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.316666][T16707] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4727'. [ 932.668529][T16713] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4729'. [ 934.227648][T16701] netlink: 'syz.3.4724': attribute type 21 has an invalid length. [ 934.516865][T16725] netlink: 'syz.0.4743': attribute type 39 has an invalid length. [ 935.022128][T16728] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 935.084848][T16728] device syzkaller0 entered promiscuous mode [ 936.299170][T16749] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4741'. [ 937.970686][T16736] device team_slave_0 left promiscuous mode [ 937.988692][T16736] team0: Port device team_slave_0 removed [ 937.994785][T16736] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 938.020582][T16744] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 938.288140][T16765] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4744'. [ 938.371305][T16762] device syzkaller0 entered promiscuous mode [ 940.676508][T16771] netlink: 'syz.4.4749': attribute type 21 has an invalid length. [ 941.232309][T16790] netlink: 'syz.4.4753': attribute type 39 has an invalid length. [ 941.647531][T16805] team0: Port device team_slave_0 removed [ 941.658702][T16805] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 941.686042][T16806] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 941.726132][T16806] device syzkaller0 entered promiscuous mode [ 941.755959][T16811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 944.543231][T16819] device syzkaller0 entered promiscuous mode [ 946.805531][T16838] netlink: 'syz.1.4770': attribute type 21 has an invalid length. [ 947.042429][T16864] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 947.067925][T16865] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 947.138912][T16867] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4779'. [ 948.673982][T16893] device syzkaller0 entered promiscuous mode [ 948.691267][T16895] netlink: 'syz.0.4787': attribute type 21 has an invalid length. [ 950.555041][T16897] device syzkaller0 entered promiscuous mode [ 952.448020][T16911] device team_slave_0 left promiscuous mode [ 952.503936][T16907] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.4795'. [ 952.560759][T16911] team0: Port device team_slave_0 removed [ 952.582203][T16911] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 954.024464][T16910] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 954.764398][T16937] device syzkaller0 entered promiscuous mode [ 956.225121][T16969] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4813'. [ 957.168331][ T4368] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 958.538098][T16952] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4809'. [ 958.781712][ T4284] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 959.580363][T16996] netlink: 'syz.2.4827': attribute type 21 has an invalid length. [ 959.855520][T17003] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4829'. [ 961.116235][ T4284] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 962.519045][T17064] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4853'. [ 962.911154][T17073] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.4868'. [ 963.745736][T17087] netlink: 'syz.0.4865': attribute type 21 has an invalid length. [ 963.924036][T17090] netlink: 'syz.4.4869': attribute type 13 has an invalid length. [ 963.939788][T17090] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.4869'. [ 964.240843][T17105] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4874'. [ 964.980238][T17124] netlink: 'syz.3.4882': attribute type 21 has an invalid length. [ 965.612135][T17147] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4889'. [ 966.251653][T17164] device sit0 entered promiscuous mode [ 967.315469][T17177] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4903'. [ 969.038527][T17225] netlink: 'syz.0.4921': attribute type 13 has an invalid length. [ 969.077353][T17225] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.4921'. [ 971.298063][T17280] netlink: 'syz.2.4946': attribute type 13 has an invalid length. [ 971.327168][T17280] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.4946'. [ 973.672182][T17326] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4961'. [ 973.744196][T17328] netlink: 'syz.4.4971': attribute type 29 has an invalid length. [ 973.839686][T17328] netlink: 'syz.4.4971': attribute type 29 has an invalid length. [ 973.881736][T17330] netlink: 'syz.3.4962': attribute type 13 has an invalid length. [ 973.926991][T17330] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.4962'. [ 974.448244][T17348] device sit0 left promiscuous mode [ 975.218631][T17355] device sit0 entered promiscuous mode [ 978.606899][T17383] IPv6: Can't replace route, no match found [ 978.625416][T17385] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 978.993748][T17395] netlink: 'syz.3.4984': attribute type 29 has an invalid length. [ 979.062790][T17395] netlink: 'syz.3.4984': attribute type 29 has an invalid length. [ 980.623546][T17445] IPv6: Can't replace route, no match found [ 980.651755][T17445] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 980.699126][ T11] wlan1: Created IBSS using preconfigured BSSID ff:ff:ff:ff:00:00 [ 980.720336][ T11] wlan1: Creating new IBSS network, BSSID ff:ff:ff:ff:00:00 [ 980.781472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 980.782092][ T9312] ------------[ cut here ]------------ [ 980.794778][ T9312] WARNING: CPU: 0 PID: 9312 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x418/0x4a0 [ 980.804858][ T9312] Modules linked in: [ 980.808848][ T9312] CPU: 0 PID: 9312 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 980.816485][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 980.826636][ T9312] Workqueue: cfg80211 cfg80211_event_work [ 980.832413][ T9312] RIP: 0010:__cfg80211_ibss_joined+0x418/0x4a0 [ 980.838790][ T9312] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 11 a4 ff f7 0f 0b eb c3 e8 08 a4 ff f7 <0f> 0b 4c 8b 6c 24 20 eb b5 e8 fa a3 ff f7 0f 0b e9 7a fd ff ff e8 [ 980.858645][ T9312] RSP: 0018:ffffc9001bf87aa0 EFLAGS: 00010293 [ 980.864752][ T9312] RAX: ffffffff89812ad8 RBX: dffffc0000000000 RCX: ffff888078e30000 [ 980.872774][ T9312] RDX: 0000000000000000 RSI: ffffffff8a8c0500 RDI: ffffffff8adef020 [ 980.875540][ T9685] wlan1: Trigger new scan to find an IBSS to join [ 980.880830][ T9312] RBP: ffffc9001bf87b70 R08: dffffc0000000000 R09: fffffbfff215c456 [ 980.895465][ T9312] R10: fffffbfff215c456 R11: 1ffffffff215c455 R12: ffff888055013618 [ 980.903474][ T9312] R13: 1ffff920037f0f5c R14: 000000000000001f R15: ffff888026f3cc90 [ 980.911521][ T9312] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 980.920517][ T9312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 980.927161][ T9312] CR2: 00007f7e9eb15690 CR3: 00000000269d9000 CR4: 00000000003506f0 [ 980.935206][ T9312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 980.943219][ T9312] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 980.951256][ T9312] Call Trace: [ 980.954568][ T9312] [ 980.957563][ T9312] ? mutex_lock_nested+0x10/0x10 [ 980.962548][ T9312] ? trace_rdev_return_void+0x240/0x240 [ 980.968169][ T9312] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 980.974126][ T9312] cfg80211_process_rdev_events+0x9d/0x110 [ 980.980048][ T9312] ? process_one_work+0x7a1/0x1160 [ 980.985326][ T9312] cfg80211_event_work+0x2b/0x40 [ 980.990321][ T9312] process_one_work+0x898/0x1160 [ 980.995369][ T9312] ? worker_detach_from_pool+0x240/0x240 [ 981.001062][ T9312] ? _raw_spin_lock_irq+0x7a/0xe0 [ 981.006179][ T9312] ? _raw_spin_lock_irq+0xab/0xe0 [ 981.011265][ T9312] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 981.016726][ T9312] ? kthread_data+0x4b/0xc0 [ 981.021360][ T9312] worker_thread+0xaa2/0x1250 [ 981.026140][ T9312] ? __kthread_parkme+0x162/0x1c0 [ 981.031229][ T9312] kthread+0x29d/0x330 [ 981.035398][ T9312] ? worker_clr_flags+0x1a0/0x1a0 [ 981.040469][ T9312] ? kthread_blkcg+0xd0/0xd0 [ 981.045143][ T9312] ret_from_fork+0x1f/0x30 [ 981.049774][ T9312] [ 981.052854][ T9312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 981.060169][ T9312] CPU: 0 PID: 9312 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 981.067755][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 981.077854][ T9312] Workqueue: cfg80211 cfg80211_event_work [ 981.083638][ T9312] Call Trace: [ 981.086955][ T9312] [ 981.089930][ T9312] dump_stack_lvl+0x168/0x22e [ 981.094662][ T9312] ? memcpy+0x3c/0x60 [ 981.098708][ T9312] ? show_regs_print_info+0x12/0x12 [ 981.103963][ T9312] ? load_image+0x3b0/0x3b0 [ 981.108573][ T9312] panic+0x2c9/0x710 [ 981.112534][ T9312] ? bpf_jit_dump+0xd0/0xd0 [ 981.117118][ T9312] ? ret_from_fork+0x1f/0x30 [ 981.121791][ T9312] __warn+0x2f8/0x4f0 [ 981.125817][ T9312] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 981.131426][ T9312] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 981.137035][ T9312] report_bug+0x2ba/0x4f0 [ 981.141405][ T9312] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 981.146995][ T9312] handle_bug+0x3a/0x70 [ 981.151174][ T9312] exc_invalid_op+0x16/0x40 [ 981.155701][ T9312] asm_exc_invalid_op+0x16/0x20 [ 981.160567][ T9312] RIP: 0010:__cfg80211_ibss_joined+0x418/0x4a0 [ 981.166738][ T9312] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 11 a4 ff f7 0f 0b eb c3 e8 08 a4 ff f7 <0f> 0b 4c 8b 6c 24 20 eb b5 e8 fa a3 ff f7 0f 0b e9 7a fd ff ff e8 [ 981.186364][ T9312] RSP: 0018:ffffc9001bf87aa0 EFLAGS: 00010293 [ 981.192482][ T9312] RAX: ffffffff89812ad8 RBX: dffffc0000000000 RCX: ffff888078e30000 [ 981.200469][ T9312] RDX: 0000000000000000 RSI: ffffffff8a8c0500 RDI: ffffffff8adef020 [ 981.208452][ T9312] RBP: ffffc9001bf87b70 R08: dffffc0000000000 R09: fffffbfff215c456 [ 981.216445][ T9312] R10: fffffbfff215c456 R11: 1ffffffff215c455 R12: ffff888055013618 [ 981.224453][ T9312] R13: 1ffff920037f0f5c R14: 000000000000001f R15: ffff888026f3cc90 [ 981.232459][ T9312] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 981.238054][ T9312] ? mutex_lock_nested+0x10/0x10 [ 981.243036][ T9312] ? trace_rdev_return_void+0x240/0x240 [ 981.248650][ T9312] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 981.254595][ T9312] cfg80211_process_rdev_events+0x9d/0x110 [ 981.260422][ T9312] ? process_one_work+0x7a1/0x1160 [ 981.265549][ T9312] cfg80211_event_work+0x2b/0x40 [ 981.270511][ T9312] process_one_work+0x898/0x1160 [ 981.275539][ T9312] ? worker_detach_from_pool+0x240/0x240 [ 981.281189][ T9312] ? _raw_spin_lock_irq+0x7a/0xe0 [ 981.286252][ T9312] ? _raw_spin_lock_irq+0xab/0xe0 [ 981.291305][ T9312] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 981.296700][ T9312] ? kthread_data+0x4b/0xc0 [ 981.301247][ T9312] worker_thread+0xaa2/0x1250 [ 981.306002][ T9312] ? __kthread_parkme+0x162/0x1c0 [ 981.311064][ T9312] kthread+0x29d/0x330 [ 981.315151][ T9312] ? worker_clr_flags+0x1a0/0x1a0 [ 981.320231][ T9312] ? kthread_blkcg+0xd0/0xd0 [ 981.324859][ T9312] ret_from_fork+0x1f/0x30 [ 981.329346][ T9312] [ 981.332746][ T9312] Kernel Offset: disabled [ 981.337190][ T9312] Rebooting in 86400 seconds..