last executing test programs: 5.037724737s ago: executing program 2 (id=3777): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000001c0000", @ANYRES32, @ANYBLOB="06000000000000003586cc000000fb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x8000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) 4.90649246s ago: executing program 3 (id=3778): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0x3, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0xfffffffc, 0x81, 0x0, 0x400, 0x0, 0x8000000000000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000018c0)={&(0x7f0000000080)="00ddf453305c7fd338cc7962159b5722ce4217fcef662ccab3b3d8ecfc7adc89cf7ba8faae37f649aa1a3be2f45c3e74aa733f3c34f61ade99a02f818a2522dbaa670b7cf8a83b51d20e303b5c2eeb723148d9af1aabca7784c1ae4cfb5eb251897294f471ca1ce1e4b7e354469050c8ea5b983591b97a1135b6d17dc9d67afdaf90a5ec806dca3243f8bcdfc70cd25be72f84960cab0d45e7254ea53e2ce57a7d9e8e606a52a99c32", 0x0, &(0x7f0000000780)="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", &(0x7f0000001780), 0x0, r4, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x2, 0xfffffffd, 0xc}, {0x0, 0x4, 0x0, 0x2}, {0x5, 0x4, 0x10009, 0xb}], 0x10, 0xccd6}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)={@map, 0xffffffffffffffff, 0x2e}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000b0000ff070000000100000080009767ef5fa5b80365df13", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f0000000080020012", 0x2d}, {&(0x7f0000000040)="ba6d53e0ca90a3aba0e6dd11c8249b93bb3582cfc2bd265f75d0d468216e4146b41a9f837250ada439c7cebac38416de07d6", 0x32}, {&(0x7f0000000340)}, {0x0}], 0x4}, 0x0) 4.218598666s ago: executing program 3 (id=3780): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2300000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r6 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000095eeff0000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000000c0), 0x4) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0xfdef) close(r5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="0a00000028200000001000000c23556494a7c616c4720bbf229f5565a35edee1d27cf1bd4339688962e8709d6fde0942b1786bc7af72eed54e53fd13570a2dee11874c6b0683d7cb84453ed3fa5e3ffd0f52b963a64200ff6109385e99b273f44fbebd00000000000000000000000000fc671254aaefa8d1bdbd570101d83efbf468aa7f2c", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x7ffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba", 0x29}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 4.048791161s ago: executing program 0 (id=3781): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2300000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r6 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000095eeff0000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000000c0), 0x4) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0xfdef) close(r5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="0a00000028200000001000000c23556494a7c616c4720bbf229f5565a35edee1d27cf1bd4339688962e8709d6fde0942b1786bc7af72eed54e53fd13570a2dee11874c6b0683d7cb84453ed3fa5e3ffd0f52b963a64200ff6109385e99b273f44fbebd00000000000000000000000000fc671254aaefa8d1bdbd570101d83efbf468aa7f2c", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x7ffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba800000", 0x2c}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 3.710923989s ago: executing program 2 (id=3782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000001c0000", @ANYRES32, @ANYBLOB="06000000000000003586cc000000fb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x8000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) 3.645345871s ago: executing program 1 (id=3783): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x0, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000004f"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r7, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x40) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x6a, 0x7, 0x7, 0x9, 0x0, 0x2, 0x82000, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x74, 0x2}, 0x5, 0xe3, 0x0, 0x6, 0xffff, 0x2, 0x862, 0x0, 0x200, 0x0, 0xc55}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0xfc40) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000d8ecad217f739b3f8a00000000000000000000020000000000000000000000079c890957544238f4d8"], 0x0, 0x1a, 0x0, 0x0, 0x7fffffff}, 0x28) 3.333509799s ago: executing program 1 (id=3784): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0x3, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0xfffffffc, 0x81, 0x0, 0x400, 0x0, 0x8000000000000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000018c0)={&(0x7f0000000080)="00ddf453305c7fd338cc7962159b5722ce4217fcef662ccab3b3d8ecfc7adc89cf7ba8faae37f649aa1a3be2f45c3e74aa733f3c34f61ade99a02f818a2522dbaa670b7cf8a83b51d20e303b5c2eeb723148d9af1aabca7784c1ae4cfb5eb251897294f471ca1ce1e4b7e354469050c8ea5b983591b97a1135b6d17dc9d67afdaf90a5ec806dca3243f8bcdfc70cd25be72f84960cab0d45e7254ea53e2ce57a7d9e8e606a52a99c32", 0x0, &(0x7f0000000780)="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", &(0x7f0000001780), 0x0, r4, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x2, 0xfffffffd, 0xc}, {0x0, 0x4, 0x0, 0x2}, {0x5, 0x4, 0x10009, 0xb}], 0x10, 0xccd6}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)={@map, 0xffffffffffffffff, 0x2e}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000b0000ff070000000100000080009767ef5fa5b80365df13", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f0000000080020012", 0x2d}, {&(0x7f0000000040)="ba6d53e0ca90a3aba0e6dd11c8249b93bb3582cfc2bd265f75d0d468216e4146b41a9f837250ada439c7cebac38416de07d6", 0x32}, {&(0x7f0000000340)}, {0x0}], 0x4}, 0x0) 3.322540909s ago: executing program 3 (id=3785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x48) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.311783069s ago: executing program 0 (id=3786): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0x3, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0xfffffffc, 0x81, 0x0, 0x400, 0x0, 0x8000000000000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000018c0)={&(0x7f0000000080)="00ddf453305c7fd338cc7962159b5722ce4217fcef662ccab3b3d8ecfc7adc89cf7ba8faae37f649aa1a3be2f45c3e74aa733f3c34f61ade99a02f818a2522dbaa670b7cf8a83b51d20e303b5c2eeb723148d9af1aabca7784c1ae4cfb5eb251897294f471ca1ce1e4b7e354469050c8ea5b983591b97a1135b6d17dc9d67afdaf90a5ec806dca3243f8bcdfc70cd25be72f84960cab0d45e7254ea53e2ce57a7d9e8e606a52a99c32", 0x0, &(0x7f0000000780)="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", &(0x7f0000001780), 0x0, r4, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x2, 0xfffffffd, 0xc}, {0x0, 0x4, 0x0, 0x2}, {0x5, 0x4, 0x10009, 0xb}], 0x10, 0xccd6}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)={@map, 0xffffffffffffffff, 0x2e}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000b0000ff070000000100000080009767ef5fa5b80365df13", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b2300000", 0x17}, {&(0x7f0000000040)="ba6d53e0ca90a3aba0e6dd11c8249b93bb3582cfc2bd265f75d0d468216e4146b41a9f837250ada439c7ceba", 0x2c}, {&(0x7f0000000340)}, {0x0}], 0x4}, 0x0) 2.813254091s ago: executing program 1 (id=3787): r0 = perf_event_open$cgroup(&(0x7f0000000580)={0x7, 0x80, 0xa, 0x5, 0x3c, 0x4, 0x0, 0x8, 0x800, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x26b3, 0x5}, 0xb28d, 0x74fa, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x0, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x11, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000004f"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x40) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x6a, 0x7, 0x7, 0x9, 0x0, 0x2, 0x82000, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x74, 0x2}, 0x5, 0xe3, 0x0, 0x6, 0xffff, 0x2, 0x862, 0x0, 0x200, 0x0, 0xc55}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000d8ecad217f739b3f8a00000000000000000000020000000000000000000000079c890957544238f4d8"], 0x0, 0x1a, 0x0, 0x0, 0x7fffffff}, 0x28) 2.605174926s ago: executing program 2 (id=3788): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0x3, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0xfffffffc, 0x81, 0x0, 0x400, 0x0, 0x8000000000000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000018c0)={&(0x7f0000000080)="00ddf453305c7fd338cc7962159b5722ce4217fcef662ccab3b3d8ecfc7adc89cf7ba8faae37f649aa1a3be2f45c3e74aa733f3c34f61ade99a02f818a2522dbaa670b7cf8a83b51d20e303b5c2eeb723148d9af1aabca7784c1ae4cfb5eb251897294f471ca1ce1e4b7e354469050c8ea5b983591b97a1135b6d17dc9d67afdaf90a5ec806dca3243f8bcdfc70cd25be72f84960cab0d45e7254ea53e2ce57a7d9e8e606a52a99c32", 0x0, &(0x7f0000000780)="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", &(0x7f0000001780), 0x0, r4, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x2, 0xfffffffd, 0xc}, {0x0, 0x4, 0x0, 0x2}, {0x5, 0x4, 0x10009, 0xb}], 0x10, 0xccd6}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)={@map, 0xffffffffffffffff, 0x2e}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000b0000ff070000000100000080009767ef5fa5b80365df13", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f0000000080020012", 0x2d}, {&(0x7f0000000040)="ba6d53e0ca90a3aba0e6dd11c8249b93bb3582cfc2bd265f75d0d468216e4146b41a9f837250ada439c7cebac38416de07d6", 0x32}, {&(0x7f0000000340)}, {0x0}], 0x4}, 0x0) 2.46608471s ago: executing program 0 (id=3789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f00000005c0)=""/96, 0x60, 0x0, &(0x7f0000000680)=""/147, 0x93}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xed, 0xfe, 0x0, 0x0, 0x0, 0x5, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, @perf_bp={0x0, 0x1}, 0x111319, 0x8, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x76, 0x0, 0x0) close(r3) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.387502782s ago: executing program 3 (id=3790): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2300000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r6 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000095eeff0000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000000c0), 0x4) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0xfdef) close(r5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="0a00000028200000001000000c23556494a7c616c4720bbf229f5565a35edee1d27cf1bd4339688962e8709d6fde0942b1786bc7af72eed54e53fd13570a2dee11874c6b0683d7cb84453ed3fa5e3ffd0f52b963a64200ff6109385e99b273f44fbebd00000000000000000000000000fc671254aaefa8d1bdbd570101d83efbf468aa7f2c", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x7ffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef4310000", 0x17}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 2.309535293s ago: executing program 2 (id=3791): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000001c0000", @ANYRES32, @ANYBLOB="06000000000000003586cc000000fb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x8000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) 2.298791804s ago: executing program 1 (id=3792): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000001c0000", @ANYRES32, @ANYBLOB="06000000000000003586cc000000fb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x8000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) 2.04303235s ago: executing program 0 (id=3793): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0x3, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0xfffffffc, 0x81, 0x0, 0x400, 0x0, 0x8000000000000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000018c0)={&(0x7f0000000080)="00ddf453305c7fd338cc7962159b5722ce4217fcef662ccab3b3d8ecfc7adc89cf7ba8faae37f649aa1a3be2f45c3e74aa733f3c34f61ade99a02f818a2522dbaa670b7cf8a83b51d20e303b5c2eeb723148d9af1aabca7784c1ae4cfb5eb251897294f471ca1ce1e4b7e354469050c8ea5b983591b97a1135b6d17dc9d67afdaf90a5ec806dca3243f8bcdfc70cd25be72f84960cab0d45e7254ea53e2ce57a7d9e8e606a52a99c32", 0x0, &(0x7f0000000780)="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", &(0x7f0000001780), 0x0, r4, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x2, 0xfffffffd, 0xc}, {0x0, 0x4, 0x0, 0x2}, {0x5, 0x4, 0x10009, 0xb}], 0x10, 0xccd6}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)={@map, 0xffffffffffffffff, 0x2e}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000b0000ff070000000100000080009767ef5fa5b80365df13", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e00", 0x22}, {&(0x7f0000000040)="ba6d53e0ca90a3aba0e6dd11c8249b93bb3582cfc2bd265f75d0d468216e4146b41a9f837250ada439c7ceba", 0x2c}, {&(0x7f0000000340)}, {0x0}], 0x4}, 0x0) 1.809910096s ago: executing program 3 (id=3794): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x0, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000004f"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r7, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x40) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x6a, 0x7, 0x7, 0x9, 0x0, 0x2, 0x82000, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x74, 0x2}, 0x5, 0xe3, 0x0, 0x6, 0xffff, 0x2, 0x862, 0x0, 0x200, 0x0, 0xc55}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0xfc40) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000d8ecad217f739b3f8a00000000000000000000020000000000000000000000079c890957544238f4d8"], 0x0, 0x1a, 0x0, 0x0, 0x7fffffff}, 0x28) 1.325478878s ago: executing program 0 (id=3795): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0x3, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0xfffffffc, 0x81, 0x0, 0x400, 0x0, 0x8000000000000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000018c0)={&(0x7f0000000080)="00ddf453305c7fd338cc7962159b5722ce4217fcef662ccab3b3d8ecfc7adc89cf7ba8faae37f649aa1a3be2f45c3e74aa733f3c34f61ade99a02f818a2522dbaa670b7cf8a83b51d20e303b5c2eeb723148d9af1aabca7784c1ae4cfb5eb251897294f471ca1ce1e4b7e354469050c8ea5b983591b97a1135b6d17dc9d67afdaf90a5ec806dca3243f8bcdfc70cd25be72f84960cab0d45e7254ea53e2ce57a7d9e8e606a52a99c32", 0x0, &(0x7f0000000780)="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", &(0x7f0000001780), 0x0, r4, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x2, 0xfffffffd, 0xc}, {0x0, 0x4, 0x0, 0x2}, {0x5, 0x4, 0x10009, 0xb}], 0x10, 0xccd6}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)={@map, 0xffffffffffffffff, 0x2e}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000b0000ff070000000100000080009767ef5fa5b80365df13", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f0000000080020012", 0x2d}, {&(0x7f0000000040)="ba6d53e0ca90a3aba0e6dd11c8249b93bb3582cfc2bd265f75d0d468216e4146b41a9f837250ada439c7cebac38416de07d6", 0x32}, {&(0x7f0000000340)}, {0x0}], 0x4}, 0x0) 1.23905311s ago: executing program 1 (id=3796): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000001c0000", @ANYRES32, @ANYBLOB="06000000000000003586cc000000fb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x8000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) 1.23860291s ago: executing program 2 (id=3797): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000001c0000", @ANYRES32, @ANYBLOB="06000000000000003586cc000000fb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x8000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) 1.200653241s ago: executing program 3 (id=3798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x48) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.035167925s ago: executing program 0 (id=3799): r0 = perf_event_open$cgroup(&(0x7f0000000580)={0x7, 0x80, 0xa, 0x5, 0x3c, 0x4, 0x0, 0x8, 0x800, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x26b3, 0x5}, 0xb28d, 0x74fa, 0x5, 0x5, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x0, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x11, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000004f"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000008000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cd"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x40) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x6a, 0x7, 0x7, 0x9, 0x0, 0x2, 0x82000, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x74, 0x2}, 0x5, 0xe3, 0x0, 0x6, 0xffff, 0x2, 0x862, 0x0, 0x200, 0x0, 0xc55}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000d8ecad217f739b3f8a00000000000000000000020000000000000000000000079c890957544238f4d8"], 0x0, 0x1a, 0x0, 0x0, 0x7fffffff}, 0x28) 191.265545ms ago: executing program 1 (id=3800): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0x3, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0xfffffffc, 0x81, 0x0, 0x400, 0x0, 0x8000000000000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000018c0)={&(0x7f0000000080)="00ddf453305c7fd338cc7962159b5722ce4217fcef662ccab3b3d8ecfc7adc89cf7ba8faae37f649aa1a3be2f45c3e74aa733f3c34f61ade99a02f818a2522dbaa670b7cf8a83b51d20e303b5c2eeb723148d9af1aabca7784c1ae4cfb5eb251897294f471ca1ce1e4b7e354469050c8ea5b983591b97a1135b6d17dc9d67afdaf90a5ec806dca3243f8bcdfc70cd25be72f84960cab0d45e7254ea53e2ce57a7d9e8e606a52a99c32", 0x0, &(0x7f0000000780)="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", &(0x7f0000001780), 0x0, r4, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x2, 0xfffffffd, 0xc}, {0x0, 0x4, 0x0, 0x2}, {0x5, 0x4, 0x10009, 0xb}], 0x10, 0xccd6}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)={@map, 0xffffffffffffffff, 0x2e}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000b0000ff070000000100000080009767ef5fa5b80365df13", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f0000000080020012", 0x2d}, {&(0x7f0000000040)="ba6d53e0ca90a3aba0e6dd11c8249b93bb3582cfc2bd265f75d0d468216e4146b41a9f837250ada439c7cebac38416de07d6", 0x32}, {&(0x7f0000000340)}, {0x0}], 0x4}, 0x0) 0s ago: executing program 2 (id=3801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f00000005c0)=""/96, 0x60, 0x0, &(0x7f0000000680)=""/147, 0x93}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xed, 0xfe, 0x0, 0x0, 0x0, 0x5, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, @perf_bp={0x0, 0x1}, 0x111319, 0x8, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x76, 0x0, 0x0) close(r3) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): n: entered promiscuous mode [ 499.239402][T12597] veth1_vlan: entered promiscuous mode [ 499.285436][T12597] veth0_macvtap: entered promiscuous mode [ 499.298132][T12597] veth1_macvtap: entered promiscuous mode [ 499.321735][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.332464][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.343580][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.354429][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.365587][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.376378][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.392276][T12597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.410984][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.422106][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.432337][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.442837][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.452785][T12597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.463333][T12597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.475091][T12597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.485862][T12597] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.494844][T12597] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.503601][T12597] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.512819][T12597] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.582050][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.594007][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.618593][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.627460][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.760702][T12722] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.2438'. [ 500.074912][T12723] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2425'. [ 500.094749][T12723] hsr0: entered promiscuous mode [ 500.114534][T12723] bridge0: port 3(hsr0) entered blocking state [ 500.138231][T12723] bridge0: port 3(hsr0) entered disabled state [ 500.167249][T12723] hsr0: entered allmulticast mode [ 500.173364][T12723] hsr_slave_0: entered allmulticast mode [ 500.204565][T12723] hsr_slave_1: entered allmulticast mode [ 500.333749][T12723] bridge0: port 3(hsr0) entered blocking state [ 500.342195][T12723] bridge0: port 3(hsr0) entered forwarding state [ 500.355623][ T5087] Bluetooth: hci0: command tx timeout [ 500.375169][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.383781][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.401459][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.411529][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.419938][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 500.427533][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.581817][T12728] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.2431'. [ 500.664550][T12731] validate_nla: 8 callbacks suppressed [ 500.664592][T12731] netlink: 'syz.2.2433': attribute type 5 has an invalid length. [ 500.683128][T12731] netlink: 'syz.2.2433': attribute type 1 has an invalid length. [ 500.701146][T12731] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.2433'. [ 500.728700][T12728] hsr_slave_1 (unregistering): left promiscuous mode [ 500.852246][T12734] netlink: 'syz.2.2433': attribute type 39 has an invalid length. [ 500.922893][ T4726] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.967195][T12733] netlink: 'syz.1.2432': attribute type 10 has an invalid length. [ 500.990503][T12733] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2432'. [ 501.037758][ T4726] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.185398][ T4726] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.358008][ T4726] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.520564][T12736] netlink: 'syz.2.2435': attribute type 10 has an invalid length. [ 501.545661][T12736] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2435'. [ 501.575206][T12738] netlink: 'syz.1.2434': attribute type 10 has an invalid length. [ 501.583501][T12738] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2434'. [ 501.613482][T12725] chnl_net:caif_netlink_parms(): no params data found [ 501.638398][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.644938][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.983677][T12725] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.007664][T12755] netlink: 'syz.2.2440': attribute type 5 has an invalid length. [ 502.022571][T12725] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.031540][T12725] bridge_slave_0: entered allmulticast mode [ 502.040624][T12755] netlink: 'syz.2.2440': attribute type 1 has an invalid length. [ 502.059263][T12725] bridge_slave_0: entered promiscuous mode [ 502.067918][T12755] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.2440'. [ 502.117398][T12725] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.131289][T12725] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.139069][T12725] bridge_slave_1: entered allmulticast mode [ 502.154765][T12725] bridge_slave_1: entered promiscuous mode [ 502.175225][T12763] netlink: 'syz.2.2440': attribute type 39 has an invalid length. [ 502.253100][T12759] netlink: 'syz.1.2441': attribute type 10 has an invalid length. [ 502.266441][T12759] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2441'. [ 502.313831][T12725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.393057][T12725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.437335][ T5785] Bluetooth: hci0: command tx timeout [ 502.444979][T12725] team0: Port device team_slave_0 added [ 502.463413][T12725] team0: Port device team_slave_1 added [ 502.490381][T12770] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.2442'. [ 502.524489][ T5785] Bluetooth: hci1: command tx timeout [ 502.557480][T12725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.570633][T12725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.603290][T12725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.672238][T12725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.680186][T12725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.707240][T12725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.786264][T12725] hsr_slave_0: entered promiscuous mode [ 502.792457][T12725] hsr_slave_1: entered promiscuous mode [ 502.801229][T12725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.808854][T12725] Cannot create hsr debugfs directory [ 503.136477][ T4726] hsr_slave_0: left promiscuous mode [ 503.151782][ T4726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.167404][ T4726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.179122][ T4726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.191401][ T4726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.201954][ T4726] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 503.212413][ T4726] batman_adv: batadv0: Removing interface: virt_wifi0 [ 503.222328][ T4726] hsr0: left allmulticast mode [ 503.230863][ T4726] bridge0: port 3(hsr0) entered disabled state [ 503.242386][ T4726] bridge_slave_1: left allmulticast mode [ 503.252702][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.266820][ T4726] bridge_slave_0: left allmulticast mode [ 503.272613][ T4726] bridge_slave_0: left promiscuous mode [ 503.287712][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.395129][ T4726] veth1_macvtap: left promiscuous mode [ 503.400762][ T4726] veth0_macvtap: left promiscuous mode [ 503.489534][T12789] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.2443'. [ 504.143695][ T4726] team0 (unregistering): Port device team_slave_1 removed [ 504.185637][ T4726] team0 (unregistering): Port device team_slave_0 removed [ 504.231839][ T4726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.531022][ T4726] bond0 (unregistering): Released all slaves [ 504.598655][ T5785] Bluetooth: hci1: command tx timeout [ 504.630946][T12795] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2445'. [ 504.640148][T12797] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2444'. [ 505.228894][T12725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 505.357877][T12725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 505.415862][T12725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 505.502063][T12725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 505.907130][T12725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.979490][T12725] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.065959][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.073213][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.125027][T12823] validate_nla: 10 callbacks suppressed [ 506.125074][T12823] netlink: 'syz.0.2450': attribute type 10 has an invalid length. [ 506.143183][T12823] __nla_validate_parse: 2 callbacks suppressed [ 506.143199][T12823] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2450'. [ 506.192288][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.199530][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.251098][T12831] netlink: 'syz.2.2452': attribute type 5 has an invalid length. [ 506.295106][T12831] netlink: 'syz.2.2452': attribute type 1 has an invalid length. [ 506.306834][T12831] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.2452'. [ 506.336597][T12836] netlink: 'syz.2.2452': attribute type 39 has an invalid length. [ 506.659832][T12725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.675141][ T5785] Bluetooth: hci1: command tx timeout [ 506.729604][T12725] veth0_vlan: entered promiscuous mode [ 506.742840][T12725] veth1_vlan: entered promiscuous mode [ 506.778706][T12725] veth0_macvtap: entered promiscuous mode [ 506.788824][T12725] veth1_macvtap: entered promiscuous mode [ 506.812222][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.823373][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.842229][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.853555][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.864025][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.876724][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.893463][T12725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.911460][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.924362][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.940599][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.951979][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.962327][T12725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.973069][T12725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.985863][T12725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.000176][T12725] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.011532][T12725] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.020448][T12725] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.029738][T12725] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.114947][ T4716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.131678][ T4716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.162928][T12744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.179108][T12744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.653434][T12865] netlink: 'syz.0.2461': attribute type 10 has an invalid length. [ 507.706147][T12865] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2461'. [ 507.872291][T12861] netlink: 'syz.3.2439': attribute type 10 has an invalid length. [ 507.943691][T12861] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2439'. [ 507.974640][T12861] hsr0: entered promiscuous mode [ 508.024668][T12861] bridge0: port 3(hsr0) entered blocking state [ 508.048335][T12861] bridge0: port 3(hsr0) entered disabled state [ 508.064027][T12861] hsr0: entered allmulticast mode [ 508.086055][T12861] hsr_slave_0: entered allmulticast mode [ 508.092118][T12861] hsr_slave_1: entered allmulticast mode [ 508.139602][T12861] bridge0: port 3(hsr0) entered blocking state [ 508.147520][T12861] bridge0: port 3(hsr0) entered forwarding state [ 508.241591][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 508.251270][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 508.265411][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 508.275686][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 508.284500][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 508.292730][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 508.433774][T12880] netlink: 'syz.0.2463': attribute type 10 has an invalid length. [ 508.464428][T12880] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2463'. [ 508.572787][T12744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.636246][T12881] netlink: 'syz.1.2464': attribute type 10 has an invalid length. [ 508.648043][T12881] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2464'. [ 508.754439][ T5785] Bluetooth: hci1: command tx timeout [ 508.762459][T12887] netlink: 'syz.3.2453': attribute type 10 has an invalid length. [ 508.802060][T12887] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2453'. [ 508.917061][T12744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.148668][T12906] netlink: 'syz.3.2457': attribute type 5 has an invalid length. [ 509.164458][T12906] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.2457'. [ 509.165522][T12744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.228806][T12894] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2454'. [ 509.380506][T12744] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.459965][T12903] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2455'. [ 509.622964][T12875] chnl_net:caif_netlink_parms(): no params data found [ 509.965132][T12875] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.006812][T12875] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.026048][T12875] bridge_slave_0: entered allmulticast mode [ 510.033238][T12875] bridge_slave_0: entered promiscuous mode [ 510.116512][T12875] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.199394][T12875] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.254540][T12875] bridge_slave_1: entered allmulticast mode [ 510.303189][T12875] bridge_slave_1: entered promiscuous mode [ 510.354552][ T5785] Bluetooth: hci2: command tx timeout [ 510.561112][T12875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.587243][T12875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.953458][T12875] team0: Port device team_slave_0 added [ 511.106333][T12875] team0: Port device team_slave_1 added [ 511.352923][T12955] validate_nla: 8 callbacks suppressed [ 511.352967][T12955] netlink: 'syz.3.2471': attribute type 10 has an invalid length. [ 511.372160][T12955] __nla_validate_parse: 4 callbacks suppressed [ 511.372170][T12955] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2471'. [ 511.395709][T12875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.402752][T12875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.429252][T12875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.465174][T12875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.477779][T12875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.504952][T12875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.660211][T12875] hsr_slave_0: entered promiscuous mode [ 511.694845][T12875] hsr_slave_1: entered promiscuous mode [ 511.727318][T12875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.759772][T12875] Cannot create hsr debugfs directory [ 512.052796][T12969] netlink: 'syz.3.2473': attribute type 10 has an invalid length. [ 512.085898][T12969] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2473'. [ 512.440014][ T5785] Bluetooth: hci2: command tx timeout [ 512.561859][T12979] netlink: 'syz.1.2476': attribute type 10 has an invalid length. [ 512.582819][T12979] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2476'. [ 512.653071][T12744] hsr_slave_0: left promiscuous mode [ 512.708228][T12744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.731741][T12744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.747014][T12744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.769570][T12744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.793653][T12744] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 512.831967][T12744] batman_adv: batadv0: Removing interface: virt_wifi0 [ 512.855299][T12744] hsr0: left allmulticast mode [ 512.860328][T12744] bridge0: port 3(hsr0) entered disabled state [ 512.892308][T12997] netlink: 'syz.1.2479': attribute type 5 has an invalid length. [ 512.903202][T12997] netlink: 'syz.1.2479': attribute type 1 has an invalid length. [ 512.914601][T12744] bridge_slave_1: left allmulticast mode [ 512.920468][T12744] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.935532][T12997] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.2479'. [ 512.955948][T12744] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.001019][T12744] veth1_macvtap: left promiscuous mode [ 513.007031][T12744] veth0_macvtap: left promiscuous mode [ 513.459329][T12744] team0 (unregistering): Port device team_slave_1 removed [ 513.497803][T12744] team0 (unregistering): Port device team_slave_0 removed [ 513.537701][T12744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.830401][T12744] bond0 (unregistering): Released all slaves [ 513.923179][T12985] netlink: 'syz.0.2477': attribute type 10 has an invalid length. [ 513.931136][T12985] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2477'. [ 513.944343][T12987] netlink: 'syz.3.2478': attribute type 10 has an invalid length. [ 513.952306][T12987] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2478'. [ 514.191835][T13005] netlink: 'syz.3.2480': attribute type 5 has an invalid length. [ 514.227071][T13005] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 514.271895][T13005] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.2480'. [ 514.370879][T13008] netlink: 'syz.3.2480': attribute type 39 has an invalid length. [ 514.509373][T13008] hsr_slave_1 (unregistering): left promiscuous mode [ 514.521726][ T5785] Bluetooth: hci2: command tx timeout [ 514.597549][T13003] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2481'. [ 515.376275][T13020] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2482'. [ 515.498883][T13028] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2486'. [ 515.668208][T12875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.703621][T12875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.788094][T12875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.803705][T12875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.942744][T12875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.000668][T12875] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.012990][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.020206][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.178148][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.185479][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.436312][T12875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.508969][T13044] validate_nla: 8 callbacks suppressed [ 516.508984][T13044] netlink: 'syz.0.2490': attribute type 10 has an invalid length. [ 516.554520][T13044] __nla_validate_parse: 3 callbacks suppressed [ 516.554537][T13044] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2490'. [ 516.594903][T13042] netlink: 'syz.3.2491': attribute type 10 has an invalid length. [ 516.603530][T13042] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2491'. [ 516.613136][ T5785] Bluetooth: hci2: command tx timeout [ 517.011554][T13051] netlink: 'syz.1.2492': attribute type 10 has an invalid length. [ 517.027514][T13051] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2492'. [ 517.187207][T12875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.313190][T12875] veth0_vlan: entered promiscuous mode [ 517.360485][T12875] veth1_vlan: entered promiscuous mode [ 517.578972][T13070] netlink: 'syz.0.2496': attribute type 10 has an invalid length. [ 517.594432][T13070] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2496'. [ 517.620533][T12875] veth0_macvtap: entered promiscuous mode [ 517.707476][T12875] veth1_macvtap: entered promiscuous mode [ 517.730427][T13073] netlink: 'syz.3.2495': attribute type 10 has an invalid length. [ 517.750654][T13073] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2495'. [ 517.821974][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.844954][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.860081][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.874448][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.887439][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.901632][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.913633][T12875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.922519][T13074] netlink: 'syz.1.2497': attribute type 10 has an invalid length. [ 517.932417][T13074] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2497'. [ 517.958980][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.004042][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.092213][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.158503][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.245609][T12875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.317903][T12875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.339589][T12875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.401791][T12875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.437807][T12875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.454395][T12875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.463151][T12875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.490206][T13086] netlink: 'syz.0.2498': attribute type 10 has an invalid length. [ 518.502414][T13086] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2498'. [ 518.524463][T13083] netlink: 'syz.3.2499': attribute type 10 has an invalid length. [ 518.538247][T13083] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2499'. [ 518.813959][T13098] netlink: 'syz.0.2501': attribute type 5 has an invalid length. [ 518.837445][ T4716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.854417][T13098] netlink: 'syz.0.2501': attribute type 1 has an invalid length. [ 518.863492][ T4716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.882576][T13098] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.2501'. [ 518.985683][T12744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.014185][T12744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.771270][T13118] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2504'. [ 519.848148][T13116] hsr0: entered promiscuous mode [ 519.872081][T13116] bridge0: port 3(hsr0) entered blocking state [ 519.879739][T13116] bridge0: port 3(hsr0) entered disabled state [ 519.927869][T13116] hsr0: entered allmulticast mode [ 519.943746][T13116] hsr_slave_0: entered allmulticast mode [ 520.014518][T13116] hsr_slave_1: entered allmulticast mode [ 520.047454][T13116] bridge0: port 3(hsr0) entered blocking state [ 520.054623][T13116] bridge0: port 3(hsr0) entered forwarding state [ 521.605371][T13161] validate_nla: 10 callbacks suppressed [ 521.605427][T13161] netlink: 'syz.1.2513': attribute type 10 has an invalid length. [ 521.644216][T13161] __nla_validate_parse: 6 callbacks suppressed [ 521.664495][T13161] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2513'. [ 522.150844][T13165] netlink: 'syz.0.2524': attribute type 10 has an invalid length. [ 522.168001][T13165] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2524'. [ 522.185880][T13169] netlink: 'syz.2.2516': attribute type 10 has an invalid length. [ 522.206630][T13169] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2516'. [ 522.367155][T13175] netlink: 'syz.3.2517': attribute type 10 has an invalid length. [ 522.396018][T13175] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2517'. [ 523.145987][T13188] netlink: 'syz.1.2521': attribute type 10 has an invalid length. [ 523.204865][T13188] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2521'. [ 523.245206][T13186] netlink: 'syz.0.2518': attribute type 10 has an invalid length. [ 523.287239][T13186] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2518'. [ 523.330169][T13201] netlink: 'syz.3.2522': attribute type 10 has an invalid length. [ 523.350910][T13201] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2522'. [ 523.463822][T13209] netlink: 'syz.2.2523': attribute type 5 has an invalid length. [ 523.488403][T13209] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 523.516844][T13209] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.2523'. [ 523.532959][T13214] netlink: 'syz.2.2523': attribute type 39 has an invalid length. [ 523.656024][T13214] hsr_slave_1 (unregistering): left promiscuous mode [ 524.146335][T13221] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2527'. [ 524.260978][T13226] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2528'. [ 526.917078][T13272] validate_nla: 16 callbacks suppressed [ 526.917178][T13272] netlink: 'syz.3.2545': attribute type 10 has an invalid length. [ 526.972750][T13272] __nla_validate_parse: 10 callbacks suppressed [ 526.972803][T13272] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2545'. [ 527.293860][T13285] netlink: 'syz.3.2550': attribute type 5 has an invalid length. [ 527.307712][T13285] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 527.326267][T13285] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.2550'. [ 527.346642][T13285] netlink: 'syz.3.2550': attribute type 39 has an invalid length. [ 527.534899][T13282] netlink: 'syz.0.2549': attribute type 10 has an invalid length. [ 527.543614][T13282] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2549'. [ 528.034898][T13295] netlink: 'syz.3.2554': attribute type 10 has an invalid length. [ 528.050560][T13295] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2554'. [ 528.074010][T13296] netlink: 'syz.1.2553': attribute type 10 has an invalid length. [ 528.082249][T13296] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2553'. [ 528.092941][T13298] netlink: 'syz.2.2555': attribute type 10 has an invalid length. [ 528.103690][T13298] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2555'. [ 528.633404][T13305] netlink: 'syz.1.2558': attribute type 10 has an invalid length. [ 528.651420][T13305] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2558'. [ 528.787108][T13310] netlink: 'syz.3.2556': attribute type 10 has an invalid length. [ 528.861453][T13310] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2556'. [ 528.896861][T13308] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2559'. [ 529.149588][T13322] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2563'. [ 531.963538][T13365] validate_nla: 32 callbacks suppressed [ 531.963597][T13365] netlink: 'syz.2.2588': attribute type 10 has an invalid length. [ 531.979235][T13365] __nla_validate_parse: 16 callbacks suppressed [ 531.979318][T13365] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2588'. [ 532.041154][T13361] netlink: 'syz.3.2579': attribute type 10 has an invalid length. [ 532.072813][T13361] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2579'. [ 532.117483][T13366] netlink: 'syz.0.2587': attribute type 10 has an invalid length. [ 532.126195][T13366] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2587'. [ 532.627528][T13372] netlink: 'syz.1.2581': attribute type 10 has an invalid length. [ 532.641636][T13372] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2581'. [ 532.700463][T13383] netlink: 'syz.2.2585': attribute type 5 has an invalid length. [ 532.725206][T13383] netlink: 'syz.2.2585': attribute type 1 has an invalid length. [ 532.765943][T13377] netlink: 'syz.3.2583': attribute type 10 has an invalid length. [ 532.783291][T13377] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2583'. [ 532.806645][T13383] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.2585'. [ 532.813700][T13384] netlink: 'syz.2.2585': attribute type 39 has an invalid length. [ 532.938272][T13382] netlink: 'syz.0.2584': attribute type 10 has an invalid length. [ 532.948645][T13382] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2584'. [ 533.193973][T13388] netlink: 'syz.3.2589': attribute type 5 has an invalid length. [ 533.221011][T13388] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.2589'. [ 533.314195][T13386] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2586'. [ 533.473390][T13393] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.2591'. [ 537.201204][T13463] validate_nla: 41 callbacks suppressed [ 537.201242][T13463] netlink: 'syz.1.2613': attribute type 5 has an invalid length. [ 537.220336][T13452] netlink: 'syz.3.2610': attribute type 10 has an invalid length. [ 537.229303][T13463] netlink: 'syz.1.2613': attribute type 1 has an invalid length. [ 537.229374][T13463] __nla_validate_parse: 21 callbacks suppressed [ 537.229424][T13463] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.2613'. [ 537.267052][T13452] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2610'. [ 537.284523][T13464] netlink: 'syz.1.2613': attribute type 39 has an invalid length. [ 537.311105][T13460] netlink: 'syz.0.2612': attribute type 10 has an invalid length. [ 537.322861][T13460] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2612'. [ 537.464042][T13468] netlink: 'syz.3.2614': attribute type 5 has an invalid length. [ 537.472302][T13468] netlink: 'syz.3.2614': attribute type 1 has an invalid length. [ 537.485320][T13468] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2614'. [ 537.500250][T13468] netlink: 'syz.3.2614': attribute type 39 has an invalid length. [ 537.668191][T13472] netlink: 'syz.0.2627': attribute type 5 has an invalid length. [ 537.688862][T13472] netlink: 'syz.0.2627': attribute type 1 has an invalid length. [ 537.704065][T13472] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.2627'. [ 537.816678][T13474] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.2615'. [ 537.992643][T13475] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2616'. [ 538.123736][T13483] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2618'. [ 538.354033][T13491] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2623'. [ 538.460712][T13487] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2622'. [ 542.364097][T13559] validate_nla: 45 callbacks suppressed [ 542.364191][T13559] netlink: 'syz.3.2652': attribute type 10 has an invalid length. [ 542.378925][T13559] __nla_validate_parse: 21 callbacks suppressed [ 542.378948][T13559] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2652'. [ 542.438896][T13558] netlink: 'syz.0.2651': attribute type 10 has an invalid length. [ 542.483465][T13558] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2651'. [ 542.539689][T13561] netlink: 'syz.1.2650': attribute type 10 has an invalid length. [ 542.560424][T13561] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2650'. [ 542.650359][T13566] netlink: 'syz.2.2654': attribute type 10 has an invalid length. [ 542.663063][T13566] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2654'. [ 543.032871][T13575] netlink: 'syz.0.2659': attribute type 5 has an invalid length. [ 543.104508][T13575] netlink: 'syz.0.2659': attribute type 1 has an invalid length. [ 543.112502][T13580] netlink: 'syz.0.2659': attribute type 39 has an invalid length. [ 543.172750][T13575] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.2659'. [ 543.221006][T13572] netlink: 'syz.2.2657': attribute type 10 has an invalid length. [ 543.232270][T13572] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2657'. [ 543.264703][T13570] netlink: 'syz.3.2656': attribute type 10 has an invalid length. [ 543.273046][T13570] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2656'. [ 543.374757][T13576] netlink: 'syz.1.2658': attribute type 10 has an invalid length. [ 543.382813][T13576] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2658'. [ 543.633525][T13584] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.2668'. [ 543.750643][T13590] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.2662'. [ 547.645649][T13651] validate_nla: 38 callbacks suppressed [ 547.645699][T13651] netlink: 'syz.3.2684': attribute type 10 has an invalid length. [ 547.751677][T13651] __nla_validate_parse: 22 callbacks suppressed [ 547.751726][T13651] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2684'. [ 547.778644][T13647] netlink: 'syz.0.2692': attribute type 10 has an invalid length. [ 547.792347][T13647] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2692'. [ 547.820551][T13649] netlink: 'syz.2.2685': attribute type 10 has an invalid length. [ 547.844541][T13649] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2685'. [ 547.864998][T13656] netlink: 'syz.1.2686': attribute type 10 has an invalid length. [ 547.872884][T13656] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2686'. [ 548.272193][T13660] netlink: 'syz.3.2687': attribute type 10 has an invalid length. [ 548.303074][T13660] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2687'. [ 548.424703][T13664] netlink: 'syz.2.2689': attribute type 10 has an invalid length. [ 548.432897][T13664] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2689'. [ 548.459588][T13663] netlink: 'syz.0.2688': attribute type 10 has an invalid length. [ 548.474589][T13663] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2688'. [ 548.693353][T13669] netlink: 'syz.1.2690': attribute type 10 has an invalid length. [ 548.703092][T13669] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2690'. [ 549.009037][T13671] netlink: 'syz.3.2691': attribute type 10 has an invalid length. [ 549.017614][T13671] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2691'. [ 549.262566][T13673] netlink: 'syz.0.2694': attribute type 10 has an invalid length. [ 549.270937][T13673] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2694'. [ 552.942942][T13733] validate_nla: 20 callbacks suppressed [ 552.942986][T13733] netlink: 'syz.3.2713': attribute type 10 has an invalid length. [ 552.965229][T13733] __nla_validate_parse: 18 callbacks suppressed [ 552.965275][T13733] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2713'. [ 553.041478][T13739] netlink: 'syz.0.2715': attribute type 10 has an invalid length. [ 553.074654][T13739] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2715'. [ 553.085329][T13742] netlink: 'syz.2.2716': attribute type 10 has an invalid length. [ 553.093181][T13742] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2716'. [ 553.283468][T13747] netlink: 'syz.3.2718': attribute type 5 has an invalid length. [ 553.406509][T13747] netlink: 'syz.3.2718': attribute type 1 has an invalid length. [ 553.425106][T13747] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.2718'. [ 553.457662][T13753] netlink: 'syz.3.2718': attribute type 39 has an invalid length. [ 553.543593][T13745] netlink: 'syz.1.2717': attribute type 10 has an invalid length. [ 553.552516][T13745] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2717'. [ 553.849662][T13749] netlink: 'syz.2.2719': attribute type 10 has an invalid length. [ 553.906376][T13749] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2719'. [ 553.938748][T13752] netlink: 'syz.0.2720': attribute type 10 has an invalid length. [ 553.960391][T13752] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2720'. [ 553.980505][T13755] netlink: 'syz.3.2721': attribute type 10 has an invalid length. [ 554.036435][T13755] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2721'. [ 554.536741][T13765] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.2725'. [ 554.571438][T13767] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2724'. [ 557.988780][T13825] validate_nla: 29 callbacks suppressed [ 557.988799][T13825] netlink: 'syz.1.2745': attribute type 10 has an invalid length. [ 558.014683][T13825] __nla_validate_parse: 19 callbacks suppressed [ 558.014727][T13825] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2745'. [ 558.098518][T13829] netlink: 'syz.3.2747': attribute type 10 has an invalid length. [ 558.124517][T13829] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2747'. [ 558.483036][T13833] netlink: 'syz.2.2757': attribute type 10 has an invalid length. [ 558.492496][T13833] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2757'. [ 558.502281][T13835] netlink: 'syz.1.2748': attribute type 10 has an invalid length. [ 558.510930][T13835] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2748'. [ 558.745200][T13840] netlink: 'syz.0.2753': attribute type 5 has an invalid length. [ 558.771608][T13840] netlink: 'syz.0.2753': attribute type 1 has an invalid length. [ 558.818299][T13840] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.2753'. [ 558.835036][T13847] netlink: 'syz.0.2753': attribute type 39 has an invalid length. [ 558.888327][T13849] netlink: 'syz.2.2754': attribute type 5 has an invalid length. [ 558.901933][T13849] netlink: 'syz.2.2754': attribute type 1 has an invalid length. [ 558.942492][T13849] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.2754'. [ 558.984780][T13852] netlink: 'syz.2.2754': attribute type 39 has an invalid length. [ 559.012507][T13843] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2750'. [ 559.082664][T13851] netlink: 144848 bytes leftover after parsing attributes in process `syz.3.2755'. [ 559.482923][T13858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2758'. [ 559.863846][T13863] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2759'. [ 563.078228][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.086398][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.533319][T13922] validate_nla: 20 callbacks suppressed [ 563.533358][T13922] netlink: 'syz.1.2780': attribute type 5 has an invalid length. [ 563.560363][T13922] netlink: 'syz.1.2780': attribute type 1 has an invalid length. [ 563.618901][T13928] netlink: 'syz.1.2780': attribute type 39 has an invalid length. [ 563.655539][T13922] __nla_validate_parse: 13 callbacks suppressed [ 563.655586][T13922] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.2780'. [ 564.027566][T13927] netlink: 'syz.0.2782': attribute type 10 has an invalid length. [ 564.062064][T13927] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2782'. [ 564.072020][T13920] netlink: 'syz.3.2779': attribute type 10 has an invalid length. [ 564.164686][T13920] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2779'. [ 564.182143][T13924] netlink: 'syz.2.2789': attribute type 10 has an invalid length. [ 564.200255][T13924] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2789'. [ 564.503231][T13932] netlink: 'syz.0.2783': attribute type 10 has an invalid length. [ 564.513007][T13932] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2783'. [ 564.955917][T13944] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 564.965983][T13944] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2787'. [ 566.178595][T13962] netlink: 'syz.2.2802': attribute type 10 has an invalid length. [ 566.240090][T13962] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2802'. [ 566.325933][T13958] netlink: 'syz.3.2794': attribute type 10 has an invalid length. [ 566.343236][T13958] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2794'. [ 566.366232][T13954] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2793'. [ 566.903382][T13971] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2795'. [ 568.674384][T14020] validate_nla: 7 callbacks suppressed [ 568.674433][T14020] netlink: 'syz.2.2821': attribute type 10 has an invalid length. [ 568.700052][T14020] __nla_validate_parse: 5 callbacks suppressed [ 568.700098][T14020] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2821'. [ 569.075618][T14032] netlink: 'syz.3.2824': attribute type 10 has an invalid length. [ 569.083835][T14032] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2824'. [ 569.175666][T14034] netlink: 'syz.0.2825': attribute type 10 has an invalid length. [ 569.184222][T14034] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2825'. [ 570.874911][T14054] netlink: 'syz.1.2831': attribute type 10 has an invalid length. [ 570.953687][T14054] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2831'. [ 571.018916][T14057] netlink: 'syz.3.2833': attribute type 10 has an invalid length. [ 571.051275][T14057] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2833'. [ 571.940850][T14068] netlink: 'syz.1.2837': attribute type 10 has an invalid length. [ 571.948933][T14068] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2837'. [ 571.996819][T14067] netlink: 'syz.0.2838': attribute type 10 has an invalid length. [ 572.011639][T14067] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2838'. [ 572.410888][T14075] netlink: 'syz.1.2841': attribute type 5 has an invalid length. [ 572.434721][T14075] netlink: 'syz.1.2841': attribute type 1 has an invalid length. [ 572.448076][T14075] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.2841'. [ 572.621305][T14075] netlink: 'syz.1.2841': attribute type 39 has an invalid length. [ 572.667046][T14077] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2842'. [ 574.039147][T14095] validate_nla: 1 callbacks suppressed [ 574.040082][T14095] netlink: 'syz.2.2848': attribute type 10 has an invalid length. [ 574.063495][T14095] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2848'. [ 575.242610][T14101] netlink: 'syz.3.2850': attribute type 10 has an invalid length. [ 575.253458][T14101] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2850'. [ 575.529110][T14107] netlink: 'syz.0.2853': attribute type 5 has an invalid length. [ 575.542274][T14107] netlink: 'syz.0.2853': attribute type 1 has an invalid length. [ 575.552239][T14107] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.2853'. [ 575.563213][T14103] netlink: 'syz.1.2851': attribute type 5 has an invalid length. [ 575.574771][T14103] netlink: 'syz.1.2851': attribute type 1 has an invalid length. [ 575.584945][T14103] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.2851'. [ 575.595854][T14107] netlink: 'syz.0.2853': attribute type 39 has an invalid length. [ 575.605864][T14111] netlink: 'syz.1.2851': attribute type 39 has an invalid length. [ 575.713951][T14110] vlan1: entered allmulticast mode [ 575.727063][T14110] veth0_vlan: entered allmulticast mode [ 576.038075][T14113] netlink: 'syz.3.2855': attribute type 10 has an invalid length. [ 576.064582][T14113] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2855'. [ 576.818087][T14123] netlink: 'syz.2.2858': attribute type 10 has an invalid length. [ 576.826899][T14123] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2858'. [ 577.040466][T14125] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2859'. [ 578.010834][T14139] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.2864'. [ 578.038943][T14140] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2861'. [ 578.091388][T14133] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2862'. [ 579.609969][T14156] validate_nla: 10 callbacks suppressed [ 579.610057][T14156] netlink: 'syz.3.2871': attribute type 10 has an invalid length. [ 579.625860][T14156] __nla_validate_parse: 2 callbacks suppressed [ 579.625948][T14156] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2871'. [ 579.674884][T14160] netlink: 'syz.2.2873': attribute type 10 has an invalid length. [ 579.683084][T14160] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2873'. [ 579.693848][T14158] netlink: 'syz.1.2872': attribute type 10 has an invalid length. [ 579.710217][T14158] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2872'. [ 580.196765][T14169] netlink: 'syz.2.2875': attribute type 10 has an invalid length. [ 580.211688][T14169] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2875'. [ 580.351424][T14176] netlink: 'syz.3.2876': attribute type 10 has an invalid length. [ 580.364342][T14176] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2876'. [ 581.065278][T14183] netlink: 'syz.0.2880': attribute type 10 has an invalid length. [ 581.090232][T14183] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2880'. [ 581.111796][T14184] netlink: 'syz.1.2881': attribute type 10 has an invalid length. [ 581.123647][T14184] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2881'. [ 581.638397][T14190] netlink: 'syz.3.2884': attribute type 10 has an invalid length. [ 581.646581][T14190] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2884'. [ 581.849339][T14198] netlink: 'syz.2.2886': attribute type 10 has an invalid length. [ 581.872737][T14198] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2886'. [ 581.935583][T14203] netlink: 'syz.1.2889': attribute type 5 has an invalid length. [ 581.943600][T14203] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.2889'. [ 582.446876][T14214] vlan1: entered allmulticast mode [ 582.452359][T14214] veth0_vlan: entered allmulticast mode [ 583.953417][T14249] vlan1: entered allmulticast mode [ 583.981252][T14249] veth0_vlan: entered allmulticast mode [ 584.981173][T14270] validate_nla: 20 callbacks suppressed [ 584.981222][T14270] netlink: 'syz.2.2916': attribute type 10 has an invalid length. [ 585.000371][T14270] __nla_validate_parse: 12 callbacks suppressed [ 585.000416][T14270] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2916'. [ 585.178782][T14279] netlink: 'syz.3.2919': attribute type 10 has an invalid length. [ 585.199487][T14279] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2919'. [ 585.290508][T14284] netlink: 'syz.0.2920': attribute type 10 has an invalid length. [ 585.302073][T14284] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2920'. [ 585.369340][T14285] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 585.373773][T14287] netlink: 'syz.2.2922': attribute type 5 has an invalid length. [ 585.411878][T14287] netlink: 'syz.2.2922': attribute type 1 has an invalid length. [ 585.421233][T14287] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.2922'. [ 585.438777][T14291] netlink: 'syz.2.2922': attribute type 39 has an invalid length. [ 585.450220][T14289] netlink: 'syz.1.2921': attribute type 3 has an invalid length. [ 585.461629][T14289] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.2921'. [ 585.978117][T14295] netlink: 'syz.3.2925': attribute type 10 has an invalid length. [ 585.986368][T14295] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2925'. [ 586.568134][T14308] netlink: 'syz.2.2928': attribute type 10 has an invalid length. [ 586.576300][T14308] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2928'. [ 586.756405][T14309] netlink: 'syz.3.2929': attribute type 10 has an invalid length. [ 586.770171][T14309] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2929'. [ 586.972805][T14313] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.2931'. [ 587.254193][T14321] vlan1: entered allmulticast mode [ 587.344504][T14321] veth0_vlan: entered allmulticast mode [ 587.395956][T14311] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2930'. [ 587.728083][T14328] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 588.038428][ T49] wlan1: Trigger new scan to find an IBSS to join [ 588.150787][T14339] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 589.338328][T14361] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 589.697807][T14372] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 590.172430][T14379] validate_nla: 25 callbacks suppressed [ 590.172451][T14379] netlink: 'syz.2.2956': attribute type 10 has an invalid length. [ 590.192582][T14379] __nla_validate_parse: 15 callbacks suppressed [ 590.192599][T14379] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2956'. [ 590.715930][T14381] netlink: 'syz.3.2958': attribute type 10 has an invalid length. [ 590.724930][T14381] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2958'. [ 590.872622][T14383] netlink: 'syz.0.2957': attribute type 10 has an invalid length. [ 590.881408][T14383] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2957'. [ 591.332219][T14391] netlink: 'syz.2.2961': attribute type 10 has an invalid length. [ 591.361104][T14391] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2961'. [ 591.529934][T14406] netlink: 'syz.0.2967': attribute type 5 has an invalid length. [ 591.544525][T14406] netlink: 'syz.0.2967': attribute type 1 has an invalid length. [ 591.554812][T14406] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.2967'. [ 591.572960][T14400] netlink: 'syz.3.2965': attribute type 10 has an invalid length. [ 591.592357][T14400] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2965'. [ 591.607004][T14407] netlink: 'syz.0.2967': attribute type 39 has an invalid length. [ 591.665722][T14410] netlink: 'syz.2.2968': attribute type 5 has an invalid length. [ 591.675025][T14410] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 591.683160][T14410] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.2968'. [ 592.035788][T12744] wlan1: Trigger new scan to find an IBSS to join [ 592.058047][ T49] wlan1: Trigger new scan to find an IBSS to join [ 592.926859][T14414] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 592.940377][T14416] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2970'. [ 593.049892][T14419] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 593.074727][ T49] wlan1: Trigger new scan to find an IBSS to join [ 593.089380][T14419] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.2974'. [ 593.384487][T14423] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2972'. [ 593.579136][T14437] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 593.608678][T14438] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 594.997118][ T4726] wlan1: Trigger new scan to find an IBSS to join [ 595.075111][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 595.480521][T14455] validate_nla: 9 callbacks suppressed [ 595.480609][T14455] netlink: 'syz.0.2987': attribute type 10 has an invalid length. [ 595.530523][T14455] __nla_validate_parse: 3 callbacks suppressed [ 595.530572][T14455] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2987'. [ 595.570413][T14457] netlink: 'syz.2.2986': attribute type 10 has an invalid length. [ 595.583410][T14457] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2986'. [ 595.663557][T14464] netlink: 'syz.1.2997': attribute type 10 has an invalid length. [ 595.692443][T14464] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2997'. [ 595.978063][T14467] netlink: 'syz.0.2991': attribute type 5 has an invalid length. [ 596.015126][T14474] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 596.024878][T14467] netlink: 'syz.0.2991': attribute type 1 has an invalid length. [ 596.038845][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 596.073807][T14467] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.2991'. [ 596.079388][T14476] netlink: 'syz.0.2991': attribute type 39 has an invalid length. [ 596.140170][T14469] netlink: 'syz.2.2989': attribute type 10 has an invalid length. [ 596.151388][T14469] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2989'. [ 596.298930][T14471] netlink: 'syz.3.2992': attribute type 10 has an invalid length. [ 596.307184][T14471] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2992'. [ 596.411808][T14483] netlink: 'syz.0.3004': attribute type 5 has an invalid length. [ 596.422429][T14482] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 596.427376][T14483] netlink: 'syz.0.3004': attribute type 1 has an invalid length. [ 596.441264][T14483] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3004'. [ 596.531010][T14482] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.2995'. [ 596.850299][T14485] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2996'. [ 597.217634][T14500] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3000'. [ 598.044710][ T49] wlan1: Trigger new scan to find an IBSS to join [ 599.077183][T12744] wlan1: Trigger new scan to find an IBSS to join [ 600.034833][ T49] wlan1: Trigger new scan to find an IBSS to join [ 600.337311][T14561] veth0_macvtap: left promiscuous mode [ 600.654788][T14558] validate_nla: 20 callbacks suppressed [ 600.655121][T14558] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 600.679563][T14558] __nla_validate_parse: 9 callbacks suppressed [ 600.679611][T14558] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3025'. [ 600.713910][T14567] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 600.738256][T14570] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3026'. [ 600.891051][T14572] netlink: 'syz.2.3029': attribute type 5 has an invalid length. [ 600.914810][T14572] netlink: 'syz.2.3029': attribute type 1 has an invalid length. [ 600.922830][T14572] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3029'. [ 600.949195][T14572] netlink: 'syz.2.3029': attribute type 39 has an invalid length. [ 600.972270][T14575] netlink: 'syz.1.3030': attribute type 21 has an invalid length. [ 600.995158][ T4726] wlan1: Trigger new scan to find an IBSS to join [ 601.118598][ T3455] wlan1: Creating new IBSS network, BSSID 1e:1a:50:7f:80:5e [ 601.152220][T14585] netlink: 'syz.3.3039': attribute type 10 has an invalid length. [ 601.246302][T14585] veth0_macvtap: left promiscuous mode [ 601.457271][T14579] netlink: 'syz.0.3031': attribute type 10 has an invalid length. [ 601.526382][T14579] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3031'. [ 601.631817][T14593] netlink: 'syz.1.3035': attribute type 21 has an invalid length. [ 601.711525][T14597] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 601.753104][T14597] netlink: 'syz.0.3037': attribute type 3 has an invalid length. [ 601.768305][T14597] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3037'. [ 601.843284][T14599] netlink: 'syz.3.3038': attribute type 5 has an invalid length. [ 601.861626][T14599] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3038'. [ 601.892543][T14601] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 601.918885][T14601] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3040'. [ 602.031736][T14604] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3042'. [ 602.047260][T14605] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 602.083987][T14605] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3049'. [ 602.456271][T14609] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3043'. [ 603.076329][T12744] wlan1: Trigger new scan to find an IBSS to join [ 603.825795][T14637] vcan0: entered allmulticast mode [ 603.890872][T14637] veth0_macvtap: left promiscuous mode [ 603.952462][T14641] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.036525][ T12] wlan1: Trigger new scan to find an IBSS to join [ 605.137343][T14669] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 605.422870][T14678] vcan0: entered allmulticast mode [ 605.795965][T14689] validate_nla: 32 callbacks suppressed [ 605.796007][T14689] netlink: 'syz.3.3075': attribute type 5 has an invalid length. [ 605.816538][T14689] netlink: 'syz.3.3075': attribute type 1 has an invalid length. [ 605.833475][T14691] netlink: 'syz.3.3075': attribute type 39 has an invalid length. [ 605.846171][T14689] __nla_validate_parse: 12 callbacks suppressed [ 605.846538][T14689] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3075'. [ 605.911540][T14683] netlink: 'syz.0.3073': attribute type 10 has an invalid length. [ 605.919982][T14683] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3073'. [ 605.956472][T14690] netlink: 'syz.2.3074': attribute type 5 has an invalid length. [ 605.970406][T14690] netlink: 'syz.2.3074': attribute type 1 has an invalid length. [ 605.978940][T14690] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3074'. [ 606.000757][T14690] netlink: 'syz.2.3074': attribute type 39 has an invalid length. [ 606.034814][ T4726] wlan1: Trigger new scan to find an IBSS to join [ 606.079561][T14693] netlink: 'syz.3.3076': attribute type 5 has an invalid length. [ 606.088446][T14693] netlink: 'syz.3.3076': attribute type 1 has an invalid length. [ 606.096897][T14693] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3076'. [ 606.114102][T14693] netlink: 'syz.3.3076': attribute type 39 has an invalid length. [ 606.126221][ T5087] Bluetooth: hci4: command 0x0406 tx timeout [ 606.159520][T14695] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3077'. [ 606.186344][T14697] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 606.218596][T14697] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3078'. [ 606.405229][T14702] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3080'. [ 606.667022][T14708] vcan0: entered allmulticast mode [ 606.722497][T14700] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3079'. [ 606.767044][T14708] veth0_macvtap: left promiscuous mode [ 607.005210][T14712] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3084'. [ 607.071346][T14715] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3085'. [ 607.448869][T14726] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 607.785173][T14739] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 607.908352][T14740] team0: Port device netdevsim0 added [ 608.152872][T14744] team0: Port device netdevsim0 removed [ 608.321545][T14744] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 609.382513][T14770] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 609.546738][T14772] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 609.930377][T14781] team0: Port device netdevsim0 added [ 610.035491][ T12] wlan1: Trigger new scan to find an IBSS to join [ 610.076631][T14781] team0: Port device netdevsim0 removed [ 610.256002][T14781] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 610.480989][T14792] team0: Port device netdevsim0 added [ 610.717837][T14794] team0: Port device netdevsim0 removed [ 610.736902][T14794] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 611.210870][T14796] validate_nla: 37 callbacks suppressed [ 611.210907][T14796] netlink: 'syz.0.3124': attribute type 5 has an invalid length. [ 611.361993][T14796] netlink: 'syz.0.3124': attribute type 1 has an invalid length. [ 611.376604][T14796] __nla_validate_parse: 11 callbacks suppressed [ 611.376643][T14796] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3124'. [ 611.423923][T14805] netlink: 'syz.0.3124': attribute type 39 has an invalid length. [ 611.532242][T14800] netlink: 'syz.1.3114': attribute type 10 has an invalid length. [ 611.552490][T14800] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3114'. [ 611.613162][T14809] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 611.746554][T14814] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 611.866954][T14815] netlink: 'syz.0.3129': attribute type 5 has an invalid length. [ 611.888991][T14815] netlink: 'syz.0.3129': attribute type 1 has an invalid length. [ 611.904795][T14815] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3129'. [ 611.940190][T14815] netlink: 'syz.0.3129': attribute type 39 has an invalid length. [ 611.990753][T14811] netlink: 'syz.3.3119': attribute type 10 has an invalid length. [ 612.013842][T14811] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3119'. [ 612.034666][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 613.624801][T14824] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 613.659849][T14827] netlink: 'syz.3.3121': attribute type 3 has an invalid length. [ 613.668030][T14827] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3121'. [ 613.687235][T14818] netlink: 'syz.2.3120': attribute type 10 has an invalid length. [ 613.695840][T14818] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3120'. [ 613.764983][T14832] bond0: (slave netdevsim0): Releasing backup interface [ 613.781857][T14832] team0: Port device netdevsim0 added [ 613.807165][T14833] team0: Port device netdevsim0 removed [ 613.833016][T14833] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 613.997438][T14837] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3126'. [ 614.037456][ T4726] wlan1: Trigger new scan to find an IBSS to join [ 614.356127][T14850] bond0: (slave netdevsim0): Releasing backup interface [ 614.459923][T14850] team0: Port device netdevsim0 added [ 614.553717][T14852] team0: Port device netdevsim0 removed [ 614.600385][T14852] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 614.660447][T14851] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3134'. [ 614.720994][T14854] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3135'. [ 615.358735][T14860] bond0: (slave netdevsim0): Releasing backup interface [ 615.373648][T14860] team0: Port device netdevsim0 added [ 615.407875][T14864] team0: Port device netdevsim0 removed [ 615.432542][T14864] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 616.084351][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 616.092267][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 616.294501][T14870] validate_nla: 11 callbacks suppressed [ 616.294521][T14870] netlink: 'syz.3.3139': attribute type 10 has an invalid length. [ 616.364411][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 617.079979][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 617.098826][T14870] bond0: (slave netdevsim0): Releasing backup interface [ 617.150996][T14870] team0: Port device netdevsim0 added [ 617.185955][T14873] netlink: 'syz.3.3139': attribute type 10 has an invalid length. [ 617.231014][T14873] team0: Port device netdevsim0 removed [ 617.249362][ T42] wlan1: Creating new IBSS network, BSSID ee:e1:27:17:c6:a9 [ 617.324152][T14873] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 617.510406][T14885] netlink: 'syz.2.3141': attribute type 10 has an invalid length. [ 617.656425][T14885] bond0: (slave netdevsim0): Releasing backup interface [ 617.757252][T14885] team0: Port device netdevsim0 added [ 617.814848][T14893] netlink: 'syz.1.3143': attribute type 5 has an invalid length. [ 617.825046][T14889] netlink: 'syz.2.3141': attribute type 10 has an invalid length. [ 617.843003][T14893] netlink: 'syz.1.3143': attribute type 1 has an invalid length. [ 617.859955][T14893] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3143'. [ 617.882049][T14889] team0: Port device netdevsim0 removed [ 617.911943][T14889] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 617.925611][T14890] netlink: 'syz.0.3142': attribute type 21 has an invalid length. [ 617.942366][T14897] netlink: 'syz.1.3143': attribute type 39 has an invalid length. [ 618.042984][T14895] netlink: 'syz.3.3144': attribute type 21 has an invalid length. [ 618.279200][T14900] netlink: 'syz.1.3146': attribute type 3 has an invalid length. [ 618.304383][T14900] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3146'. [ 618.330605][T14902] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3147'. [ 618.373473][T14904] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3155'. [ 618.856380][T14915] team0: Port device netdevsim0 added [ 619.077459][T14916] bond0: (slave netdevsim0): Releasing backup interface [ 619.241078][T14916] team0: Port device netdevsim0 added [ 619.471100][T14919] team0: Port device netdevsim0 removed [ 619.612741][T14919] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 619.925398][T14928] bond0: (slave netdevsim0): Releasing backup interface [ 619.948111][T14928] team0: Port device netdevsim0 added [ 619.961152][T14921] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3152'. [ 620.035008][ T42] wlan1: Creating new IBSS network, BSSID a2:33:cb:70:a9:1a [ 620.061598][T14929] team0: Port device netdevsim0 removed [ 620.096306][T14929] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 620.173139][T14932] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3154'. [ 620.414922][T14939] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3159'. [ 620.583856][T14940] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3158'. [ 620.866683][T14954] bond0: (slave netdevsim0): Releasing backup interface [ 620.909547][T14954] team0: Port device netdevsim0 added [ 621.319309][T14956] validate_nla: 16 callbacks suppressed [ 621.319329][T14956] netlink: 'syz.3.3165': attribute type 10 has an invalid length. [ 621.336968][T14956] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3165'. [ 621.701108][T14965] netlink: 'syz.3.3166': attribute type 10 has an invalid length. [ 621.800807][T14964] netlink: 'syz.2.3167': attribute type 5 has an invalid length. [ 621.809980][T14965] bond0: (slave netdevsim0): Releasing backup interface [ 621.850269][T14964] netlink: 'syz.2.3167': attribute type 1 has an invalid length. [ 621.858968][T14964] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3167'. [ 621.863925][T14965] team0: Port device netdevsim0 added [ 621.890195][T14967] netlink: 'syz.3.3166': attribute type 10 has an invalid length. [ 621.953936][T14967] team0: Port device netdevsim0 removed [ 621.998045][T14967] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 622.075169][T14969] netlink: 'syz.2.3167': attribute type 39 has an invalid length. [ 622.105011][T14977] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 622.133180][T14970] netlink: 'syz.1.3168': attribute type 21 has an invalid length. [ 622.142779][T14979] netlink: 'syz.0.3170': attribute type 3 has an invalid length. [ 622.450031][T14983] netlink: 'syz.2.3171': attribute type 3 has an invalid length. [ 622.785559][T14989] netlink: 'syz.1.3173': attribute type 10 has an invalid length. [ 622.881212][T14994] team0: Port device netdevsim0 removed [ 622.955043][T14994] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 623.061961][T14996] bond0: (slave netdevsim0): Releasing backup interface [ 623.149116][T14996] team0: Port device netdevsim0 added [ 623.233504][T14997] team0: Port device netdevsim0 removed [ 623.330061][T14997] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 624.032540][T15009] __nla_validate_parse: 2 callbacks suppressed [ 624.032581][T15009] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3181'. [ 624.176061][T15003] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3178'. [ 624.490029][T15012] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3182'. [ 624.520357][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.527179][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.549335][T15020] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 624.601190][T15020] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3185'. [ 624.771605][T15027] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 624.799635][T15027] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3186'. [ 625.149770][T15040] bond0: (slave netdevsim0): Releasing backup interface [ 625.170315][T15040] team0: Port device netdevsim0 added [ 625.217511][T15043] team0: Port device netdevsim0 removed [ 625.262662][T15043] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 625.272995][T15042] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3191'. [ 625.649360][T15047] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3194'. [ 626.007544][T15053] team0: Port device netdevsim0 removed [ 626.035039][ T4726] wlan1: Trigger new scan to find an IBSS to join [ 626.126658][T15053] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 626.191071][T15058] bond0: (slave netdevsim0): Releasing backup interface [ 626.232323][T15058] team0: Port device netdevsim0 added [ 626.290076][T15059] team0: Port device netdevsim0 removed [ 626.342510][T15059] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 626.399577][T15056] validate_nla: 25 callbacks suppressed [ 626.399594][T15056] netlink: 'syz.2.3196': attribute type 10 has an invalid length. [ 626.414464][T15056] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3196'. [ 626.486432][T15061] netlink: 'syz.3.3198': attribute type 21 has an invalid length. [ 626.593364][T15063] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 626.603482][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 626.628172][T15063] netlink: 'syz.2.3199': attribute type 3 has an invalid length. [ 626.636487][T15063] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3199'. [ 626.755542][T15066] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 626.813901][T15066] netlink: 'syz.3.3200': attribute type 3 has an invalid length. [ 626.824695][T15066] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3200'. [ 627.069432][T15069] netlink: 'syz.0.3208': attribute type 10 has an invalid length. [ 627.078749][ T12] wlan1: Trigger new scan to find an IBSS to join [ 627.118490][T15076] netlink: 'syz.2.3203': attribute type 5 has an invalid length. [ 627.124903][T15080] netlink: 'syz.2.3203': attribute type 39 has an invalid length. [ 627.133802][T15076] netlink: 'syz.2.3203': attribute type 1 has an invalid length. [ 627.211605][T15082] netlink: 'syz.3.3204': attribute type 5 has an invalid length. [ 627.222266][T15082] netlink: 'syz.3.3204': attribute type 1 has an invalid length. [ 627.261144][T15084] bond0: (slave netdevsim0): Releasing backup interface [ 627.292204][T15084] team0: Port device netdevsim0 added [ 627.601793][T15090] bond0: (slave netdevsim0): Releasing backup interface [ 627.714018][T15090] team0: Port device netdevsim0 added [ 627.797999][T15096] team0: Port device netdevsim0 removed [ 627.866403][T15096] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 627.925829][T15101] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 628.023989][T15103] bond0: (slave netdevsim0): Releasing backup interface [ 628.095239][T15103] team0: Port device netdevsim0 added [ 628.123737][T15107] team0: Port device netdevsim0 removed [ 628.221582][T15107] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 628.519576][T15108] team0: Port device netdevsim0 removed [ 628.687973][T15108] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 629.075891][T12744] wlan1: Trigger new scan to find an IBSS to join [ 629.085274][ T12] wlan1: Trigger new scan to find an IBSS to join [ 629.103748][T15122] __nla_validate_parse: 5 callbacks suppressed [ 629.103787][T15122] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3216'. [ 629.163852][T15118] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 629.191896][T15118] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3214'. [ 629.280028][T15124] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3217'. [ 629.375707][T15126] bond0: (slave netdevsim0): Releasing backup interface [ 629.402754][T15126] team0: Port device netdevsim0 added [ 629.612503][T15130] team0: Port device netdevsim0 removed [ 629.677812][T15130] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 629.942504][T15135] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3218'. [ 630.109738][T15136] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3220'. [ 630.206916][T12744] wlan1: Creating new IBSS network, BSSID 9a:ed:15:52:bc:2e [ 630.447699][T15138] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3221'. [ 630.542463][T15146] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3223'. [ 630.689359][T15147] bond0: (slave netdevsim0): Releasing backup interface [ 630.746379][T15147] team0: Port device netdevsim0 added [ 630.976063][T15149] team0: Port device netdevsim0 removed [ 630.993198][T15156] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3226'. [ 631.016551][T15149] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 631.072122][T15157] bond0: (slave netdevsim0): Releasing backup interface [ 631.093582][T15157] team0: Port device netdevsim0 added [ 631.201904][T15144] team0: Port device netdevsim0 removed [ 631.286381][T15144] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 631.714734][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 631.737463][T15160] validate_nla: 28 callbacks suppressed [ 631.737513][T15160] netlink: 'syz.2.3228': attribute type 10 has an invalid length. [ 631.752133][T15160] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3228'. [ 631.853904][T15169] netlink: 'syz.3.3230': attribute type 3 has an invalid length. [ 631.871206][T15169] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3230'. [ 631.883429][T15163] netlink: 'syz.0.3227': attribute type 10 has an invalid length. [ 632.043788][ T12] wlan1: Trigger new scan to find an IBSS to join [ 632.090328][T15174] netlink: 'syz.0.3232': attribute type 21 has an invalid length. [ 632.352185][T15172] netlink: 'syz.2.3231': attribute type 10 has an invalid length. [ 632.555648][T15176] netlink: 'syz.3.3233': attribute type 10 has an invalid length. [ 632.749689][T15180] netlink: 'syz.0.3235': attribute type 10 has an invalid length. [ 632.928668][T15184] netlink: 'syz.1.3236': attribute type 10 has an invalid length. [ 633.079026][ T49] wlan1: Trigger new scan to find an IBSS to join [ 633.171464][T15192] netlink: 'syz.0.3240': attribute type 3 has an invalid length. [ 633.215081][ T49] wlan1: Creating new IBSS network, BSSID b6:4d:e1:60:22:1d [ 633.256619][T15191] netlink: 'syz.3.3238': attribute type 10 has an invalid length. [ 633.411776][T15191] bond0: (slave netdevsim0): Releasing backup interface [ 633.495312][T15191] team0: Port device netdevsim0 added [ 633.584736][T15193] bond0: (slave netdevsim0): Releasing backup interface [ 633.715929][T15193] team0: Port device netdevsim0 added [ 634.028915][T15195] team0: Port device netdevsim0 removed [ 634.073478][ T12] wlan1: Trigger new scan to find an IBSS to join [ 634.195359][T15195] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 634.395163][T15194] team0: Port device netdevsim0 removed [ 634.484119][T15194] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 634.634538][T15203] __nla_validate_parse: 7 callbacks suppressed [ 634.634556][T15203] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3241'. [ 635.028412][ T42] wlan1: Creating new IBSS network, BSSID ae:ca:ae:ce:8b:69 [ 635.261136][T15209] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3243'. [ 635.624893][T15224] bond0: (slave netdevsim0): Releasing backup interface [ 635.682088][T15224] team0: Port device netdevsim0 added [ 635.688876][T15214] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3245'. [ 635.745817][T15225] team0: Port device netdevsim0 removed [ 635.796412][T15225] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 636.085902][T15229] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3250'. [ 636.531477][T15233] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3249'. [ 637.087904][T15240] validate_nla: 12 callbacks suppressed [ 637.087993][T15240] netlink: 'syz.0.3252': attribute type 10 has an invalid length. [ 637.164457][T15240] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3252'. [ 637.190933][T15242] netlink: 'syz.2.3253': attribute type 10 has an invalid length. [ 637.206245][T15242] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3253'. [ 637.589400][T15249] netlink: 'syz.1.3255': attribute type 10 has an invalid length. [ 637.622906][T15249] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3255'. [ 637.772537][T15251] netlink: 'syz.3.3258': attribute type 10 has an invalid length. [ 637.781976][T15251] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3258'. [ 637.913560][T15262] netlink: 'syz.1.3261': attribute type 5 has an invalid length. [ 637.969412][T15262] netlink: 'syz.1.3261': attribute type 1 has an invalid length. [ 637.990694][T15262] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3261'. [ 637.999965][T15266] netlink: 'syz.1.3261': attribute type 39 has an invalid length. [ 638.041115][ T42] wlan1: Trigger new scan to find an IBSS to join [ 638.127098][T15257] netlink: 'syz.0.3259': attribute type 10 has an invalid length. [ 638.309562][T15273] netlink: 'syz.3.3263': attribute type 10 has an invalid length. [ 638.474890][T15273] bond0: (slave netdevsim0): Releasing backup interface [ 638.523836][T15273] team0: Port device netdevsim0 added [ 638.536882][T15276] netlink: 'syz.3.3263': attribute type 10 has an invalid length. [ 638.582235][T15276] team0: Port device netdevsim0 removed [ 638.621593][T15276] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 639.189975][ T42] wlan1: Creating new IBSS network, BSSID 42:a7:aa:6f:7b:b2 [ 639.498304][T15288] bond0: (slave netdevsim0): Releasing backup interface [ 639.541310][T15288] team0: Port device netdevsim0 added [ 639.626933][T15292] team0: Port device netdevsim0 removed [ 639.671156][T15292] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 639.688965][T15287] __nla_validate_parse: 1 callbacks suppressed [ 639.688980][T15287] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3270'. [ 640.201718][T15298] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3273'. [ 640.345523][T15304] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3274'. [ 640.775085][T15315] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3277'. [ 640.870677][T15311] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3279'. [ 642.150516][T15331] validate_nla: 11 callbacks suppressed [ 642.150534][T15331] netlink: 'syz.0.3284': attribute type 10 has an invalid length. [ 642.374847][T15331] bond0: (slave netdevsim0): Releasing backup interface [ 642.839319][T15331] team0: Port device netdevsim0 added [ 642.975064][T15332] netlink: 'syz.2.3282': attribute type 10 has an invalid length. [ 643.185308][T15332] bond0: (slave netdevsim0): Releasing backup interface [ 643.308088][T15332] team0: Port device netdevsim0 added [ 643.354576][T15333] netlink: 'syz.2.3282': attribute type 10 has an invalid length. [ 643.482126][T15333] team0: Port device netdevsim0 removed [ 643.501564][T15333] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 643.733301][T15336] netlink: 'syz.0.3284': attribute type 10 has an invalid length. [ 644.039275][T15336] team0: Port device netdevsim0 removed [ 644.087651][T15336] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 644.117470][T15341] netlink: 'syz.1.3285': attribute type 10 has an invalid length. [ 644.142453][T15341] bond0: (slave netdevsim0): Releasing backup interface [ 644.156437][T15341] team0: Port device netdevsim0 added [ 644.173952][T15343] netlink: 'syz.1.3285': attribute type 10 has an invalid length. [ 644.198640][T15343] team0: Port device netdevsim0 removed [ 644.227180][T15343] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 644.364567][T15349] netlink: 'syz.2.3288': attribute type 5 has an invalid length. [ 644.372588][T15349] netlink: 'syz.2.3288': attribute type 1 has an invalid length. [ 644.386364][T15349] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3288'. [ 644.398216][T15354] netlink: 'syz.2.3288': attribute type 39 has an invalid length. [ 644.419166][T15353] netlink: 'syz.1.3291': attribute type 21 has an invalid length. [ 644.568467][T15360] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 644.592938][T15360] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3300'. [ 645.029429][T15358] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3292'. [ 645.227601][T15363] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3293'. [ 645.310108][T15368] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3296'. [ 646.190898][T15376] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3308'. [ 646.531977][T15378] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3297'. [ 646.995676][T12744] wlan1: Trigger new scan to find an IBSS to join [ 647.406714][T15387] validate_nla: 10 callbacks suppressed [ 647.406755][T15387] netlink: 'syz.3.3303': attribute type 21 has an invalid length. [ 647.473376][T15389] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 647.559216][T15389] netlink: 'syz.1.3304': attribute type 3 has an invalid length. [ 647.605546][T15389] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3304'. [ 647.813543][T15395] netlink: 'syz.2.3302': attribute type 10 has an invalid length. [ 647.894164][T15395] bond0: (slave netdevsim0): Releasing backup interface [ 648.012572][T15395] team0: Port device netdevsim0 added [ 648.123196][T15402] netlink: 'syz.2.3302': attribute type 10 has an invalid length. [ 648.322612][T15402] team0: Port device netdevsim0 removed [ 648.386637][T15402] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 648.472174][T15400] netlink: 'syz.0.3309': attribute type 10 has an invalid length. [ 648.499612][T15400] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3309'. [ 648.534867][T15397] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 648.554807][T15397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3307'. [ 649.000559][T15413] netlink: 'syz.0.3313': attribute type 5 has an invalid length. [ 649.034816][T15413] netlink: 'syz.0.3313': attribute type 1 has an invalid length. [ 649.043053][T15413] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3313'. [ 649.047550][T15415] netlink: 'syz.0.3313': attribute type 39 has an invalid length. [ 650.035413][ T49] wlan1: Trigger new scan to find an IBSS to join [ 650.036695][ T42] wlan1: Trigger new scan to find an IBSS to join [ 650.170167][T15429] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 650.215673][T15429] netlink: 'syz.0.3319': attribute type 3 has an invalid length. [ 650.230045][T15429] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3319'. [ 650.651880][T15432] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3321'. [ 651.477448][T15453] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3328'. [ 653.074548][ T49] wlan1: Trigger new scan to find an IBSS to join [ 653.076554][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 653.593975][T15464] validate_nla: 6 callbacks suppressed [ 653.594034][T15464] netlink: 'syz.2.3333': attribute type 10 has an invalid length. [ 653.614145][T15464] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3333'. [ 654.424080][T15468] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 654.441702][T15468] netlink: 'syz.0.3334': attribute type 3 has an invalid length. [ 654.452524][T15468] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3334'. [ 654.543819][T15472] netlink: 'syz.1.3337': attribute type 21 has an invalid length. [ 654.700565][T15476] netlink: 'syz.0.3339': attribute type 5 has an invalid length. [ 654.764628][T15476] netlink: 'syz.0.3339': attribute type 1 has an invalid length. [ 654.813924][T15478] netlink: 'syz.0.3339': attribute type 39 has an invalid length. [ 654.839841][T15476] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3339'. [ 654.864638][T15470] netlink: 'syz.2.3336': attribute type 10 has an invalid length. [ 654.883402][T15470] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3336'. [ 654.976747][T15474] netlink: 'syz.3.3338': attribute type 10 has an invalid length. [ 655.015872][T15474] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3338'. [ 657.005271][T12744] wlan1: Trigger new scan to find an IBSS to join [ 657.110372][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 657.642572][T15502] netlink: 'syz.3.3349': attribute type 5 has an invalid length. [ 657.666214][T15502] netlink: 'syz.3.3349': attribute type 1 has an invalid length. [ 657.695411][T15502] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3349'. [ 657.887936][T15506] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3352'. [ 657.993799][T12744] wlan1: Creating new IBSS network, BSSID f6:fb:0c:46:d8:e4 [ 658.181140][T15509] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3353'. [ 659.044083][T15517] validate_nla: 5 callbacks suppressed [ 659.044101][T15517] netlink: 'syz.1.3355': attribute type 10 has an invalid length. [ 659.058874][T15517] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3355'. [ 659.252132][T15521] netlink: 'syz.3.3357': attribute type 10 has an invalid length. [ 659.273911][T15521] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3357'. [ 659.593372][T15531] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 659.700142][T15528] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 659.787347][T15531] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3361'. [ 659.826427][T15529] netlink: 'syz.1.3358': attribute type 10 has an invalid length. [ 659.864079][T15529] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3358'. [ 659.902010][T15533] netlink: 'syz.2.3360': attribute type 3 has an invalid length. [ 659.917762][T15533] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3360'. [ 660.113897][T15536] netlink: 'syz.3.3362': attribute type 5 has an invalid length. [ 660.147866][T15536] netlink: 'syz.3.3362': attribute type 1 has an invalid length. [ 660.160881][T15536] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3362'. [ 660.178640][T15536] netlink: 'syz.3.3362': attribute type 39 has an invalid length. [ 660.371674][T15542] netlink: 'syz.2.3364': attribute type 5 has an invalid length. [ 660.392572][T15542] netlink: 'syz.2.3364': attribute type 1 has an invalid length. [ 660.415783][T15542] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3364'. [ 660.426548][T15546] netlink: 'syz.2.3364': attribute type 39 has an invalid length. [ 661.945987][T15568] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 662.035844][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 662.063980][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 662.733295][T15578] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 662.768163][T15578] __nla_validate_parse: 8 callbacks suppressed [ 662.768196][T15578] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3386'. [ 662.922126][T15585] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 663.008445][T15585] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3380'. [ 663.331051][T15582] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3379'. [ 663.699096][T15589] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3381'. [ 664.145272][T15600] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 664.277825][T15598] validate_nla: 19 callbacks suppressed [ 664.277861][T15598] netlink: 'syz.0.3385': attribute type 5 has an invalid length. [ 664.280216][T15600] netlink: 'syz.1.3387': attribute type 3 has an invalid length. [ 664.333322][T15598] netlink: 'syz.0.3385': attribute type 1 has an invalid length. [ 664.382365][T15598] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3385'. [ 664.414445][T15600] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3387'. [ 664.469337][T15598] netlink: 'syz.0.3385': attribute type 39 has an invalid length. [ 664.595730][T15601] netlink: 'syz.3.3384': attribute type 10 has an invalid length. [ 664.604179][T15601] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3384'. [ 664.831401][T15612] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 664.856454][T15612] netlink: 'syz.3.3391': attribute type 3 has an invalid length. [ 664.869792][T15612] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3391'. [ 664.964927][T15616] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 665.000370][T15616] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3392'. [ 665.077842][ T49] wlan1: Trigger new scan to find an IBSS to join [ 665.141438][T15606] netlink: 'syz.0.3388': attribute type 10 has an invalid length. [ 665.175187][T15606] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3388'. [ 665.724484][T15630] netlink: 'syz.1.3395': attribute type 10 has an invalid length. [ 665.756869][T15631] netlink: 'syz.0.3396': attribute type 5 has an invalid length. [ 665.824473][T15631] netlink: 'syz.0.3396': attribute type 1 has an invalid length. [ 666.450548][T15643] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 667.075234][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 667.731250][T15657] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 667.860551][T15660] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 667.880589][T15660] __nla_validate_parse: 8 callbacks suppressed [ 667.880606][T15660] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3416'. [ 668.035576][ T42] wlan1: Trigger new scan to find an IBSS to join [ 668.423728][T15662] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3406'. [ 669.105696][ T3455] wlan1: Trigger new scan to find an IBSS to join [ 669.463155][T15674] validate_nla: 17 callbacks suppressed [ 669.463175][T15674] netlink: 'syz.3.3413': attribute type 10 has an invalid length. [ 669.511921][T15674] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3413'. [ 669.833421][T15680] netlink: 'syz.2.3415': attribute type 5 has an invalid length. [ 669.870301][T15680] netlink: 'syz.2.3415': attribute type 1 has an invalid length. [ 669.925283][T15680] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3415'. [ 669.945150][T15687] netlink: 'syz.2.3415': attribute type 39 has an invalid length. [ 670.051600][ T42] wlan1: Trigger new scan to find an IBSS to join [ 670.065998][T15689] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 670.155465][T15689] netlink: 'syz.3.3419': attribute type 3 has an invalid length. [ 670.191338][T15689] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3419'. [ 670.729285][T15695] netlink: 'syz.1.3420': attribute type 10 has an invalid length. [ 670.831449][T15695] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3420'. [ 670.870190][T15697] netlink: 'syz.2.3422': attribute type 10 has an invalid length. [ 670.887378][T15697] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3422'. [ 671.003804][T15699] netlink: 'syz.3.3423': attribute type 10 has an invalid length. [ 671.022216][T15699] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3423'. [ 671.075975][ T42] wlan1: Trigger new scan to find an IBSS to join [ 671.244142][T15706] netlink: 'syz.1.3425': attribute type 21 has an invalid length. [ 672.035505][ T4716] wlan1: Trigger new scan to find an IBSS to join [ 672.051163][ T49] wlan1: Creating new IBSS network, BSSID d2:d1:c7:12:a4:2c [ 672.280853][T15723] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 672.303538][T15722] netlink: 'syz.2.3430': attribute type 5 has an invalid length. [ 672.322396][T15723] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3431'. [ 672.332918][T15722] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3430'. [ 672.778207][T15729] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 672.947885][T15725] __nla_validate_parse: 1 callbacks suppressed [ 672.947942][T15725] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3432'. [ 673.387432][T15736] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3435'. [ 673.490215][T15731] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3433'. [ 673.507860][T15734] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3434'. [ 673.736751][T15746] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3439'. [ 673.946138][T15752] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3443'. [ 674.048069][T12744] wlan1: Trigger new scan to find an IBSS to join [ 674.064187][T15741] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3438'. [ 674.180106][T15757] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 674.214171][T15757] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3445'. [ 675.096640][ T4716] wlan1: Trigger new scan to find an IBSS to join [ 675.103366][T12744] wlan1: Trigger new scan to find an IBSS to join [ 675.897729][T15770] validate_nla: 16 callbacks suppressed [ 675.897787][T15770] netlink: 'syz.0.3450': attribute type 10 has an invalid length. [ 675.933496][T15770] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3450'. [ 676.743747][ T4726] wlan1: Creating new IBSS network, BSSID 1e:3a:88:93:eb:fd [ 676.882255][T15775] netlink: 'syz.1.3453': attribute type 21 has an invalid length. [ 676.963775][T15779] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 676.992234][T15777] netlink: 'syz.2.3454': attribute type 5 has an invalid length. [ 677.005421][T15779] netlink: 'syz.0.3455': attribute type 3 has an invalid length. [ 677.013676][T15777] netlink: 'syz.2.3454': attribute type 1 has an invalid length. [ 677.022163][T15779] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3455'. [ 677.043334][T15777] netlink: 'syz.2.3454': attribute type 39 has an invalid length. [ 677.613376][T15788] netlink: 'syz.1.3459': attribute type 10 has an invalid length. [ 677.730386][T15790] netlink: 'syz.2.3460': attribute type 10 has an invalid length. [ 677.749967][T15786] netlink: 'syz.0.3458': attribute type 10 has an invalid length. [ 678.055240][ T12] wlan1: Trigger new scan to find an IBSS to join [ 678.335423][T15798] netlink: 'syz.1.3462': attribute type 10 has an invalid length. [ 678.362380][T15798] __nla_validate_parse: 4 callbacks suppressed [ 678.362433][T15798] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3462'. [ 678.996002][ T4716] wlan1: Trigger new scan to find an IBSS to join [ 679.087146][ T4726] wlan1: Trigger new scan to find an IBSS to join [ 679.806836][T15812] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 679.823174][T15814] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3467'. [ 679.832872][T15810] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3466'. [ 680.027805][ T12] wlan1: Creating new IBSS network, BSSID 6a:bc:bd:e4:a9:86 [ 680.459317][T15832] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3472'. [ 680.475751][T15829] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3470'. [ 680.890815][ T12] wlan1: Creating new IBSS network, BSSID 12:c2:d0:c4:0a:e3 [ 681.247722][T15841] validate_nla: 4 callbacks suppressed [ 681.247767][T15841] netlink: 'syz.2.3475': attribute type 21 has an invalid length. [ 681.436158][T15837] netlink: 'syz.1.3484': attribute type 10 has an invalid length. [ 681.458035][T15837] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3484'. [ 681.546612][T15834] netlink: 'syz.3.3474': attribute type 10 has an invalid length. [ 681.565536][T15834] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3474'. [ 681.589775][T15840] netlink: 'syz.0.3473': attribute type 10 has an invalid length. [ 681.687084][T15840] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3473'. [ 681.881615][T15851] netlink: 'syz.3.3478': attribute type 5 has an invalid length. [ 681.902035][T15850] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 681.926814][T15851] netlink: 'syz.3.3478': attribute type 1 has an invalid length. [ 681.968314][T15851] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3478'. [ 681.982348][T15850] netlink: 'syz.1.3480': attribute type 3 has an invalid length. [ 682.004120][T15850] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3480'. [ 682.035312][ T49] wlan1: Trigger new scan to find an IBSS to join [ 682.043418][ T4726] wlan1: Trigger new scan to find an IBSS to join [ 682.053089][T15853] netlink: 'syz.3.3478': attribute type 39 has an invalid length. [ 682.128947][T15845] netlink: 'syz.2.3476': attribute type 10 has an invalid length. [ 682.640118][T15864] netlink: 'syz.2.3485': attribute type 10 has an invalid length. [ 683.108860][ T49] wlan1: Creating new IBSS network, BSSID 26:a6:f6:54:83:fe [ 683.433862][T15877] __nla_validate_parse: 3 callbacks suppressed [ 683.433881][T15877] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3488'. [ 683.516183][T15880] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 683.529943][T15881] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3491'. [ 683.609489][T15883] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3492'. [ 683.784010][T15885] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3493'. [ 683.825555][T15890] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3503'. [ 684.038677][ T42] wlan1: Trigger new scan to find an IBSS to join [ 684.305015][T15899] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3496'. [ 684.429252][T15896] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3498'. [ 684.802250][T15912] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3501'. [ 685.241587][T15911] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3504'. [ 685.281178][T15909] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3502'. [ 685.959172][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.978339][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.042542][T15943] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 686.302687][T15942] validate_nla: 32 callbacks suppressed [ 686.302771][T15942] netlink: 'syz.3.3512': attribute type 10 has an invalid length. [ 686.708478][T15948] netlink: 'syz.0.3513': attribute type 10 has an invalid length. [ 686.783279][T15951] netlink: 'syz.2.3514': attribute type 10 has an invalid length. [ 686.995055][ T49] wlan1: Trigger new scan to find an IBSS to join [ 687.227136][T15963] netlink: 'syz.3.3518': attribute type 21 has an invalid length. [ 687.628740][T15965] netlink: 'syz.2.3517': attribute type 10 has an invalid length. [ 687.848611][T15973] netlink: 'syz.3.3520': attribute type 5 has an invalid length. [ 687.869734][T15973] netlink: 'syz.3.3520': attribute type 1 has an invalid length. [ 687.908282][T15973] netlink: 'syz.3.3520': attribute type 39 has an invalid length. [ 687.924855][ T42] wlan1: Creating new IBSS network, BSSID fa:9c:9c:cc:29:12 [ 687.981178][T15977] netlink: 'syz.2.3527': attribute type 5 has an invalid length. [ 688.005572][T15977] netlink: 'syz.2.3527': attribute type 1 has an invalid length. [ 688.033281][T15979] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 688.043178][ T42] wlan1: Trigger new scan to find an IBSS to join [ 688.667026][T15985] __nla_validate_parse: 12 callbacks suppressed [ 688.667047][T15985] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3532'. [ 688.697946][T15990] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3534'. [ 689.030474][ T4726] wlan1: Creating new IBSS network, BSSID 6a:aa:4c:99:ea:eb [ 689.166493][T16009] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3541'. [ 689.262633][T16000] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3537'. [ 689.281208][T16007] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3540'. [ 689.652955][T16011] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3542'. [ 690.036370][ T4716] wlan1: Trigger new scan to find an IBSS to join [ 690.042966][ T4726] wlan1: Trigger new scan to find an IBSS to join [ 690.155248][T16030] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3548'. [ 690.432904][T16037] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3551'. [ 690.655797][T16046] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3554'. [ 690.692771][T16044] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3553'. [ 691.654423][T16066] validate_nla: 23 callbacks suppressed [ 691.654576][T16066] netlink: 'syz.2.3563': attribute type 10 has an invalid length. [ 691.718329][T16064] netlink: 'syz.0.3562': attribute type 10 has an invalid length. [ 691.790426][T16073] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 691.870589][T16069] netlink: 'syz.3.3564': attribute type 10 has an invalid length. [ 691.920979][T16076] netlink: 'syz.2.3566': attribute type 5 has an invalid length. [ 691.931670][T16076] netlink: 'syz.2.3566': attribute type 1 has an invalid length. [ 691.948850][T16076] netlink: 'syz.2.3566': attribute type 39 has an invalid length. [ 692.480973][T16079] netlink: 'syz.1.3567': attribute type 10 has an invalid length. [ 692.786337][T16097] netlink: 'syz.0.3583': attribute type 21 has an invalid length. [ 692.865196][T16092] netlink: 'syz.3.3574': attribute type 10 has an invalid length. [ 693.071210][T16102] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 693.129174][T16099] netlink: 'syz.1.3575': attribute type 10 has an invalid length. [ 693.858293][T16119] __nla_validate_parse: 13 callbacks suppressed [ 693.858309][T16119] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3582'. [ 694.039573][ T42] wlan1: Trigger new scan to find an IBSS to join [ 694.224625][T16121] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3585'. [ 694.372509][T16127] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3587'. [ 694.709677][T16132] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3588'. [ 695.002139][T12744] wlan1: Trigger new scan to find an IBSS to join [ 695.260698][T16134] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3590'. [ 695.603472][T16136] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3598'. [ 695.849216][T16141] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3592'. [ 695.950085][ T4716] wlan1: Creating new IBSS network, BSSID 7e:33:44:91:d6:43 [ 696.107413][T16146] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3593'. [ 696.410212][T16149] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3595'. [ 696.764598][T16161] validate_nla: 17 callbacks suppressed [ 696.764635][T16161] netlink: 'syz.2.3602': attribute type 5 has an invalid length. [ 696.879839][T16156] netlink: 'syz.0.3599': attribute type 10 has an invalid length. [ 696.912111][T16161] netlink: 'syz.2.3602': attribute type 1 has an invalid length. [ 696.919830][T16156] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3599'. [ 696.932244][T16164] netlink: 'syz.2.3602': attribute type 39 has an invalid length. [ 696.999864][ T4726] wlan1: Trigger new scan to find an IBSS to join [ 697.249615][T16165] netlink: 'syz.1.3601': attribute type 10 has an invalid length. [ 697.911361][T16167] netlink: 'syz.0.3611': attribute type 5 has an invalid length. [ 697.964939][T16174] netlink: 'syz.0.3611': attribute type 39 has an invalid length. [ 697.979908][T16167] netlink: 'syz.0.3611': attribute type 1 has an invalid length. [ 698.188411][T16170] netlink: 'syz.3.3605': attribute type 10 has an invalid length. [ 698.555555][T16171] netlink: 'syz.2.3603': attribute type 10 has an invalid length. [ 699.127245][T16184] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 699.137087][T16186] __nla_validate_parse: 5 callbacks suppressed [ 699.137100][T16186] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3609'. [ 699.630827][T16192] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3612'. [ 700.040481][ T49] wlan1: Trigger new scan to find an IBSS to join [ 700.048066][T16198] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3615'. [ 700.269080][T16208] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3617'. [ 700.849095][T16214] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 700.944666][T16214] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3621'. [ 701.073846][ T42] wlan1: Creating new IBSS network, BSSID a2:65:cf:3e:d0:36 [ 701.221103][T16217] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3620'. [ 701.635528][T16226] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3625'. [ 701.946113][T16227] validate_nla: 9 callbacks suppressed [ 701.946517][T16227] netlink: 'syz.1.3624': attribute type 10 has an invalid length. [ 701.970071][T16227] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3624'. [ 702.436565][T16239] netlink: 'syz.1.3629': attribute type 5 has an invalid length. [ 702.491497][T16239] netlink: 'syz.1.3629': attribute type 1 has an invalid length. [ 702.545537][T16240] netlink: 'syz.1.3629': attribute type 39 has an invalid length. [ 702.593797][T16239] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3629'. [ 702.994485][ T49] wlan1: Trigger new scan to find an IBSS to join [ 703.001135][ T12] wlan1: Trigger new scan to find an IBSS to join [ 703.336087][T16245] netlink: 'syz.2.3631': attribute type 5 has an invalid length. [ 703.355952][T16245] netlink: 'syz.2.3631': attribute type 1 has an invalid length. [ 703.366168][T16245] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3631'. [ 703.432012][T16245] netlink: 'syz.2.3631': attribute type 39 has an invalid length. [ 704.232016][T16253] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 704.268774][T16253] netlink: 'syz.0.3633': attribute type 3 has an invalid length. [ 704.277948][T16253] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3633'. [ 704.651104][T16255] netlink: 'syz.3.3634': attribute type 10 has an invalid length. [ 704.659326][T16255] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3634'. [ 704.825405][T16270] netlink: 'syz.2.3641': attribute type 5 has an invalid length. [ 704.855518][T16270] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3641'. [ 705.147366][T16274] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3640'. [ 705.261421][T16282] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3644'. [ 705.818900][T16286] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 705.840781][T16286] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3646'. [ 706.994669][ T4716] wlan1: Trigger new scan to find an IBSS to join [ 707.225360][T16313] validate_nla: 7 callbacks suppressed [ 707.225405][T16313] netlink: 'syz.2.3656': attribute type 21 has an invalid length. [ 707.277005][T16315] netlink: 'syz.0.3657': attribute type 5 has an invalid length. [ 707.294825][T16315] netlink: 'syz.0.3657': attribute type 1 has an invalid length. [ 707.314581][T16315] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3657'. [ 707.330180][T16316] netlink: 'syz.0.3657': attribute type 39 has an invalid length. [ 707.741298][T16326] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 707.761104][T16326] netlink: 'syz.0.3660': attribute type 3 has an invalid length. [ 707.769455][T16326] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3660'. [ 707.984135][T16335] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 708.005824][T16335] netlink: 'syz.0.3671': attribute type 3 has an invalid length. [ 708.014095][T16335] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3671'. [ 708.038078][ T4716] wlan1: Trigger new scan to find an IBSS to join [ 708.060499][ T12] wlan1: Trigger new scan to find an IBSS to join [ 708.074550][T12744] wlan1: Trigger new scan to find an IBSS to join [ 708.500572][T16343] netlink: 'syz.0.3666': attribute type 5 has an invalid length. [ 708.515675][T16343] netlink: 'syz.0.3666': attribute type 1 has an invalid length. [ 708.548013][T16343] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3666'. [ 708.567354][T16346] netlink: 'syz.0.3666': attribute type 39 has an invalid length. [ 709.003364][T16361] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 709.027361][T16361] netlink: 'syz.2.3674': attribute type 3 has an invalid length. [ 709.095653][ T4716] wlan1: Creating new IBSS network, BSSID 82:77:17:d1:60:9d [ 709.445586][T16367] __nla_validate_parse: 1 callbacks suppressed [ 709.445628][T16367] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3675'. [ 709.526557][T16380] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3678'. [ 709.832226][T16391] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 709.866094][T16391] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3686'. [ 710.036330][ T49] wlan1: Trigger new scan to find an IBSS to join [ 711.086460][ T4716] wlan1: Trigger new scan to find an IBSS to join [ 711.102203][T16412] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3691'. [ 711.615096][T16426] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 711.630387][T16422] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3695'. [ 711.651137][T16426] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3697'. [ 712.037884][ T49] wlan1: Trigger new scan to find an IBSS to join [ 712.280856][T16427] validate_nla: 12 callbacks suppressed [ 712.280889][T16427] netlink: 'syz.0.3695': attribute type 39 has an invalid length. [ 712.539107][T16439] netlink: 'syz.3.3701': attribute type 5 has an invalid length. [ 712.580187][T16439] netlink: 'syz.3.3701': attribute type 1 has an invalid length. [ 712.589402][T16442] netlink: 'syz.3.3701': attribute type 39 has an invalid length. [ 712.628507][T16439] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3701'. [ 714.066240][ T42] wlan1: Trigger new scan to find an IBSS to join [ 714.490656][T16468] netlink: 'syz.1.3711': attribute type 5 has an invalid length. [ 714.502360][T16468] netlink: 'syz.1.3711': attribute type 1 has an invalid length. [ 714.519389][T16468] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3711'. [ 714.732718][T16462] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 714.745568][T16465] netlink: 'syz.3.3708': attribute type 3 has an invalid length. [ 714.753357][T16465] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3708'. [ 714.795941][T16469] netlink: 'syz.1.3711': attribute type 39 has an invalid length. [ 715.056102][T16478] netlink: 'syz.1.3714': attribute type 21 has an invalid length. [ 715.075496][ T42] wlan1: Trigger new scan to find an IBSS to join [ 715.084913][T12744] wlan1: Trigger new scan to find an IBSS to join [ 716.276314][ T4726] wlan1: Creating new IBSS network, BSSID e6:57:e7:9b:84:3a [ 716.284116][ T12] wlan1: Creating new IBSS network, BSSID 0e:3e:ab:93:cd:f3 [ 716.297387][T16497] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 716.331217][T16498] netlink: 'syz.3.3722': attribute type 3 has an invalid length. [ 716.348429][T16498] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3722'. [ 716.445484][T16504] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3724'. [ 717.081818][ T49] wlan1: Trigger new scan to find an IBSS to join [ 718.241481][T16536] validate_nla: 3 callbacks suppressed [ 718.241526][T16536] netlink: 'syz.3.3735': attribute type 5 has an invalid length. [ 718.263275][T16536] netlink: 'syz.3.3735': attribute type 1 has an invalid length. [ 718.272848][T16536] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3735'. [ 718.445646][T16531] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 718.468635][T16532] netlink: 'syz.1.3734': attribute type 3 has an invalid length. [ 718.491612][T16532] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3734'. [ 718.508614][T16537] netlink: 'syz.3.3735': attribute type 39 has an invalid length. [ 718.810960][T16546] netlink: 'syz.0.3745': attribute type 5 has an invalid length. [ 718.842700][T16546] netlink: 'syz.0.3745': attribute type 1 has an invalid length. [ 718.853479][T16546] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3745'. [ 718.891596][T16546] netlink: 'syz.0.3745': attribute type 39 has an invalid length. [ 719.075981][T12744] wlan1: Trigger new scan to find an IBSS to join [ 721.074419][ T1126] wlan1: Trigger new scan to find an IBSS to join [ 721.171893][T16572] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 721.205911][T16575] netlink: 'syz.2.3747': attribute type 3 has an invalid length. [ 721.213765][T16575] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3747'. [ 721.402100][T16585] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 721.414466][T16583] netlink: 'syz.3.3751': attribute type 5 has an invalid length. [ 721.422556][T16583] netlink: 'syz.3.3751': attribute type 1 has an invalid length. [ 721.424073][T16585] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3760'. [ 721.439932][T16583] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3751'. [ 721.711033][T16592] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3763'. [ 723.516611][T16621] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 723.547860][T16621] validate_nla: 6 callbacks suppressed [ 723.547909][T16621] netlink: 'syz.1.3764': attribute type 3 has an invalid length. [ 723.581859][T16621] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3764'. [ 723.670732][T16622] netlink: 'syz.0.3766': attribute type 5 has an invalid length. [ 723.706168][T16622] netlink: 'syz.0.3766': attribute type 1 has an invalid length. [ 723.756476][T16623] netlink: 'syz.0.3766': attribute type 39 has an invalid length. [ 723.769153][T16622] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3766'. [ 724.078166][T16628] netlink: 'syz.1.3767': attribute type 10 has an invalid length. [ 725.006464][ T42] wlan1: Trigger new scan to find an IBSS to join [ 725.017365][T12744] wlan1: Trigger new scan to find an IBSS to join [ 725.086131][T16655] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 725.122032][T16655] netlink: 'syz.1.3776': attribute type 3 has an invalid length. [ 725.150387][T16655] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3776'. [ 725.306463][T16659] netlink: 'syz.3.3778': attribute type 5 has an invalid length. [ 725.339687][T16659] netlink: 'syz.3.3778': attribute type 1 has an invalid length. [ 725.362128][T16660] netlink: 'syz.3.3778': attribute type 39 has an invalid length. [ 725.435825][T16659] netlink: 141908 bytes leftover after parsing attributes in process `syz.3.3778'. [ 726.051588][ T42] wlan1: Creating new IBSS network, BSSID 9e:2d:81:b3:1a:b9 [ 726.962921][T16680] netlink: 'syz.1.3784': attribute type 5 has an invalid length. [ 727.013382][T16680] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3784'. [ 727.051643][T16683] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3786'. [ 727.100737][T16681] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3786'. [ 727.550609][T16690] netlink: 141908 bytes leftover after parsing attributes in process `syz.2.3788'. [ 727.602048][T16694] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 727.654058][T16694] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3789'. [ 728.055590][T12744] wlan1: Trigger new scan to find an IBSS to join [ 728.275516][T16704] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3793'. [ 728.787556][T16711] validate_nla: 10 callbacks suppressed [ 728.787590][T16711] netlink: 'syz.0.3795': attribute type 5 has an invalid length. [ 728.802957][T16711] netlink: 'syz.0.3795': attribute type 1 has an invalid length. [ 728.811811][T16711] netlink: 141908 bytes leftover after parsing attributes in process `syz.0.3795'. [ 728.832220][T16711] netlink: 'syz.0.3795': attribute type 39 has an invalid length. [ 729.014347][T12744] wlan1: Trigger new scan to find an IBSS to join [ 729.960756][T16724] netlink: 'syz.1.3800': attribute type 5 has an invalid length. [ 729.981573][T16724] netlink: 'syz.1.3800': attribute type 1 has an invalid length. [ 729.991060][T16724] netlink: 141908 bytes leftover after parsing attributes in process `syz.1.3800'. [ 730.028679][T16724] netlink: 'syz.1.3800': attribute type 39 has an invalid length. [ 730.038662][ T42] wlan1: Trigger new scan to find an IBSS to join [ 730.330803][ T12] wlan1: Creating new IBSS network, BSSID 0e:ef:95:3d:e0:ab [ 730.342412][T16727] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 730.342937][ T12] ------------[ cut here ]------------ [ 730.357464][ T12] WARNING: CPU: 0 PID: 12 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 730.367414][ T12] Modules linked in: [ 730.368306][T16728] netlink: 'syz.2.3801': attribute type 3 has an invalid length. [ 730.371330][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 730.387010][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.397168][ T12] Workqueue: cfg80211 cfg80211_event_work [ 730.403093][ T12] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 730.409460][ T12] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 16 98 f7 0f 0b eb bf e8 65 16 98 f7 <0f> 0b eb b6 e8 5c 16 98 f7 0f 0b e9 e2 fd ff ff e8 50 16 98 f7 0f [ 730.429227][ T12] RSP: 0018:ffffc90000117a40 EFLAGS: 00010293 [ 730.435538][ T12] RAX: ffffffff89ef5bbb RBX: dffffc0000000000 RCX: ffff88801b65da00 [ 730.443539][ T12] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 730.452457][ T12] RBP: ffffc90000117af8 R08: ffffffff911ed56f R09: 1ffffffff223daad [ 730.460920][ T12] R10: dffffc0000000000 R11: fffffbfff223daae R12: ffff888069cdcd10 [ 730.469342][ T12] R13: ffff8880590fb618 R14: 1ffff92000022f4c R15: 000000000000001f [ 730.477733][ T12] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 730.487183][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 730.493807][ T12] CR2: 00007f5072e9bff8 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 730.495096][T16728] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3801'. [ 730.501928][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 730.519236][ T12] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 730.527399][ T12] Call Trace: [ 730.530792][ T12] [ 730.533845][ T12] ? trace_rdev_return_void+0x1c0/0x1c0 [ 730.539551][ T12] cfg80211_process_wdev_events+0x396/0x500 [ 730.545599][ T12] cfg80211_process_rdev_events+0xa1/0x110 [ 730.551453][ T12] cfg80211_event_work+0x2f/0x40 [ 730.556476][ T12] ? process_scheduled_works+0x975/0x1600 [ 730.562284][ T12] process_scheduled_works+0xa60/0x1600 [ 730.568033][ T12] ? worker_attach_to_pool+0x370/0x370 [ 730.573530][ T12] ? assign_work+0x3cc/0x5d0 [ 730.578191][ T12] worker_thread+0xa5e/0xfe0 [ 730.583133][ T12] kthread+0x2fa/0x390 [ 730.587376][ T12] ? pr_cont_work+0x550/0x550 [ 730.592092][ T12] ? kthread_blkcg+0xd0/0xd0 [ 730.596905][ T12] ret_from_fork+0x48/0x80 [ 730.601380][ T12] ? kthread_blkcg+0xd0/0xd0 [ 730.606068][ T12] ret_from_fork_asm+0x11/0x20 [ 730.610920][ T12] [ 730.613967][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 730.621282][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 730.628647][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.638808][ T12] Workqueue: cfg80211 cfg80211_event_work [ 730.644544][ T12] Call Trace: [ 730.647857][ T12] [ 730.650806][ T12] dump_stack_lvl+0x18c/0x250 [ 730.655541][ T12] ? show_regs_print_info+0x20/0x20 [ 730.660921][ T12] ? load_image+0x420/0x420 [ 730.665511][ T12] panic+0x2ca/0x720 [ 730.669465][ T12] ? bpf_jit_dump+0xd0/0xd0 [ 730.674067][ T12] ? ret_from_fork_asm+0x11/0x20 [ 730.679024][ T12] __warn+0x2e0/0x470 [ 730.683010][ T12] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 730.688562][ T12] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 730.694114][ T12] report_bug+0x2be/0x4f0 [ 730.698470][ T12] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 730.704009][ T12] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 730.709566][ T12] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 730.715119][ T12] handle_bug+0xcf/0x120 [ 730.719457][ T12] exc_invalid_op+0x1a/0x50 [ 730.723959][ T12] asm_exc_invalid_op+0x1a/0x20 [ 730.728874][ T12] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 730.735027][ T12] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 16 98 f7 0f 0b eb bf e8 65 16 98 f7 <0f> 0b eb b6 e8 5c 16 98 f7 0f 0b e9 e2 fd ff ff e8 50 16 98 f7 0f [ 730.754621][ T12] RSP: 0018:ffffc90000117a40 EFLAGS: 00010293 [ 730.760696][ T12] RAX: ffffffff89ef5bbb RBX: dffffc0000000000 RCX: ffff88801b65da00 [ 730.771059][ T12] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 730.779033][ T12] RBP: ffffc90000117af8 R08: ffffffff911ed56f R09: 1ffffffff223daad [ 730.786995][ T12] R10: dffffc0000000000 R11: fffffbfff223daae R12: ffff888069cdcd10 [ 730.794961][ T12] R13: ffff8880590fb618 R14: 1ffff92000022f4c R15: 000000000000001f [ 730.803019][ T12] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 730.808577][ T12] ? trace_rdev_return_void+0x1c0/0x1c0 [ 730.814126][ T12] cfg80211_process_wdev_events+0x396/0x500 [ 730.820020][ T12] cfg80211_process_rdev_events+0xa1/0x110 [ 730.826081][ T12] cfg80211_event_work+0x2f/0x40 [ 730.831030][ T12] ? process_scheduled_works+0x975/0x1600 [ 730.836740][ T12] process_scheduled_works+0xa60/0x1600 [ 730.842295][ T12] ? worker_attach_to_pool+0x370/0x370 [ 730.847765][ T12] ? assign_work+0x3cc/0x5d0 [ 730.852347][ T12] worker_thread+0xa5e/0xfe0 [ 730.856941][ T12] kthread+0x2fa/0x390 [ 730.860998][ T12] ? pr_cont_work+0x550/0x550 [ 730.865667][ T12] ? kthread_blkcg+0xd0/0xd0 [ 730.870251][ T12] ret_from_fork+0x48/0x80 [ 730.874667][ T12] ? kthread_blkcg+0xd0/0xd0 [ 730.879250][ T12] ret_from_fork_asm+0x11/0x20 [ 730.884019][ T12] [ 730.887290][ T12] Kernel Offset: disabled [ 730.891659][ T12] Rebooting in 86400 seconds..