last executing test programs: 3.38195749s ago: executing program 0 (id=9675): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000280)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000840)=[{0x10, 0x1, 0xc}], 0x10}, 0xc0) 3.204398133s ago: executing program 0 (id=9678): bpf$MAP_CREATE(0x0, 0x0, 0x50) unlink(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x3, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2000000000000374, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) close(0xffffffffffffffff) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.908578417s ago: executing program 0 (id=9684): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.72138384s ago: executing program 0 (id=9686): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000080000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000500"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./cgroup\x00', r1, 0x4000, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='xen_mmu_flush_tlb_one_user\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 2.536506902s ago: executing program 2 (id=9688): r0 = socket$kcm(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/109, 0x6d}, {&(0x7f00000027c0)=""/4047, 0xfcf}, {&(0x7f00000017c0)=""/4069, 0xfe5}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000012c0)=""/148, 0x94}, {&(0x7f00000003c0)=""/180, 0xb4}], 0x8}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046bf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86000000", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 2.428416944s ago: executing program 0 (id=9690): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x3, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ff7, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x2, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x82004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x1004d, 0x20000000c8, 0xffffffff, 0x0, 0x0, 0x38e, 0x0, 0x0, 0xb28}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002c59a086140a51d9d1bcbc303c4b5c497bbfe44ed581b43e661555302dddca982f1fa51f9b73dcd145a21ba2c3ef6d6e435df80b1051319942f27e8599343c5d7b4443192eef9688bb9d4af348327e5a08bbc7c7c75e1785aab44a6fe1039e59d646cabca90b73c7ce593ad5e0473899a23f8c2311a3478e398cc93cd4e69c1b407960ffe09c557df8c10144334d5e8dbc59aaa2c1746dd0c9e45db63687b94bf16e958e5edc4bf28ea05e451b05be3822d18ca1b463905d941b5c369d1f044b73b1d5fcf847914891bc1c1a29", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='Gc\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000100"/27], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.134616649s ago: executing program 1 (id=9693): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.964532461s ago: executing program 3 (id=9695): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.950952551s ago: executing program 1 (id=9696): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0xffffffff, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), 0x0}, 0x20) recvmsg(r0, 0x0, 0x102) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000180)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.794222814s ago: executing program 0 (id=9697): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='br_fdb_add\x00', r2}, 0x18) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee9"], 0x9a) 1.793506444s ago: executing program 1 (id=9698): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae359e2b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0deb8de9aeac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9b86ec19670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e4", 0x227}, {&(0x7f0000001440)="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", 0x38d}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) 1.40983128s ago: executing program 2 (id=9699): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000080000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000500"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./cgroup\x00', r1, 0x4000, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='xen_mmu_flush_tlb_one_user\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 671.38489ms ago: executing program 1 (id=9700): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f4080000", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) 627.183641ms ago: executing program 3 (id=9701): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100208, 0xca, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x8, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 608.619981ms ago: executing program 2 (id=9702): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4c18, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x140a5, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) 484.398783ms ago: executing program 1 (id=9703): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 483.446543ms ago: executing program 3 (id=9704): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000500000008040000cd0000000140a3005d54d4d60d325e8e9fc6e90e13c6cbd1a6371d7a1a4df6b575f73a465daa56d6b8d427568238c7ec8a8ec08f87de0bf8f907efbe96db4ead379d39780e78bdc0e6628936d668195d17d285ce29845e0c03a95e23", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4, @perf_bp={0x0}, 0x4, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7498, 0x0, 0x1000000000000}, 0x0, 0x7fc, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x408, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6680, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000000000000"], 0x18}, 0x41) 373.236035ms ago: executing program 2 (id=9705): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 372.350715ms ago: executing program 3 (id=9706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4b}, 0x94) 261.789496ms ago: executing program 1 (id=9707): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x3, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ff7, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x2, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x82004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x1004d, 0x20000000c8, 0xffffffff, 0x0, 0x0, 0x38e, 0x0, 0x0, 0xb28}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002c59a086140a51d9d1bcbc303c4b5c497bbfe44ed581b43e661555302dddca982f1fa51f9b73dcd145a21ba2c3ef6d6e435df80b1051319942f27e8599343c5d7b4443192eef9688bb9d4af348327e5a08bbc7c7c75e1785aab44a6fe1039e59d646cabca90b73c7ce593ad5e0473899a23f8c2311a3478e398cc93cd4e69c1b407960ffe09c557df8c10144334d5e8dbc59aaa2c1746dd0c9e45db63687b94bf16e958e5edc4bf28ea05e451b05be3822d18ca1b463905d941b5c369d1f044b73b1d5fcf847914891bc1c1a29", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='Gc\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000100"/27], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 210.844357ms ago: executing program 3 (id=9708): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(0xffffffffffffffff) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2, @local, 0x3, 0x1}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x65}, 0x41) 203.701947ms ago: executing program 2 (id=9716): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67200000000000150002000fff5d004507000010000000d60600000ee60000bf0500000000000073700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd030100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa733ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4378ba04a708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340c6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff67478128096b93447312cc93c738b6a83a2e83225af295e0776d0335ff913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3cc95416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd33d8a4b0f864db09907c7b8e97abb824c1f3167cff61e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff556d8556d4c14b570770000000000002873d12acc37e8a732c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41b90d2b120800c12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c1daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015ed22c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe2200000000000000000000000000bd956ca60ffc879599b3f4afd3c7cf088e922c27b263097d9707a1816718270841ef403db193cb96e7081d823097a81e68433a6b3196a69d665c7e7540f2284d20c338356e0233e7f7cd0adc8dc0565238d7d5585149b44299d2ec73117f19432bd89eadb2b49b1a683bca227ab3ea71bb14fe8bfd4e86fc894d"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 31.30646ms ago: executing program 3 (id=9709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffffe, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 0s ago: executing program 2 (id=9710): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): [ 1392.891607][T17287] veth1_macvtap: left promiscuous mode [ 1392.897295][T17287] veth0_macvtap: left promiscuous mode [ 1392.904248][T17287] veth1_vlan: left allmulticast mode [ 1392.910232][T17287] veth1_vlan: left promiscuous mode [ 1392.915617][T17287] veth0_vlan: left promiscuous mode [ 1393.190420][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1393.197301][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1393.292314][T17290] wlan1: Creating new IBSS network, BSSID 9e:85:d6:53:75:f2 [ 1393.584439][T17287] team0 (unregistering): Port device team_slave_1 removed [ 1393.654299][T17287] team0 (unregistering): Port device team_slave_0 removed [ 1393.657015][T21913] netlink: 'syz.1.5963': attribute type 9 has an invalid length. [ 1393.671209][T21913] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5963'. [ 1393.718583][T17287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.791949][T17287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.157696][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1394.322796][T17287] bond0 (unregistering): Released all slaves [ 1394.441050][T21917] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1394.817070][T21934] netlink: 'syz.2.5972': attribute type 9 has an invalid length. [ 1394.847812][T21934] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1395.176709][T21945] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1395.534191][T21960] netlink: 'syz.3.5984': attribute type 9 has an invalid length. [ 1395.543368][T21960] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5984'. [ 1395.842877][T21976] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1396.025600][T21983] netlink: 'syz.0.5995': attribute type 9 has an invalid length. [ 1396.038150][T21983] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5995'. [ 1396.149249][T17287] wlan1: Creating new IBSS network, BSSID 56:1a:47:7d:2b:03 [ 1396.455146][T22002] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1396.672252][T22009] netlink: 'syz.3.6007': attribute type 9 has an invalid length. [ 1396.681719][T22009] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1397.067713][T22025] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1397.221021][T22031] netlink: 'syz.3.6018': attribute type 9 has an invalid length. [ 1397.229120][T22031] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6018'. [ 1397.824787][T22055] netlink: 'syz.3.6029': attribute type 9 has an invalid length. [ 1397.832852][T22055] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6029'. [ 1397.915917][T22057] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1398.149495][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1398.425505][T22079] netlink: 'syz.3.6040': attribute type 9 has an invalid length. [ 1398.440766][T22079] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6040'. [ 1398.538825][T22081] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1398.916668][T22102] delete_channel: no stack [ 1399.044792][T22106] netlink: 'syz.1.6053': attribute type 9 has an invalid length. [ 1399.062976][T22106] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6053'. [ 1399.187550][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1399.271431][T22117] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1399.834659][T22137] netlink: 'syz.0.6067': attribute type 9 has an invalid length. [ 1399.867466][T22137] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6067'. [ 1400.054915][T22145] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1400.163957][T17287] wlan1: Trigger new scan to find an IBSS to join [ 1401.132664][T22177] netlink: 'syz.1.6085': attribute type 9 has an invalid length. [ 1401.140820][T22177] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6085'. [ 1401.361910][T22183] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1401.659827][T22197] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1401.760603][T22199] netlink: 'syz.3.6095': attribute type 9 has an invalid length. [ 1401.792468][T22199] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6095'. [ 1401.998632][T22211] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1402.289513][T22225] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1402.549761][T22236] netlink: 'syz.1.6112': attribute type 9 has an invalid length. [ 1402.567882][T22236] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6112'. [ 1402.687899][T22243] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1402.745583][T22245] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6117'. [ 1402.856851][T22249] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1403.120348][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1403.130034][T22259] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.6126'. [ 1403.203070][T22265] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1403.341326][T22271] netlink: 'syz.1.6129': attribute type 9 has an invalid length. [ 1403.361118][T22271] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6129'. [ 1403.499636][T22279] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1403.892557][T22295] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1404.061160][T22301] netlink: 'syz.2.6143': attribute type 9 has an invalid length. [ 1404.069917][T22301] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1404.087008][T22303] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1404.148587][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1404.694171][T22325] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1404.965593][T22334] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1405.188262][ T1139] wlan1: Trigger new scan to find an IBSS to join [ 1405.383085][T22352] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1405.401794][T22350] netlink: 'syz.3.6165': attribute type 21 has an invalid length. [ 1405.424099][T22350] netlink: 'syz.3.6165': attribute type 1 has an invalid length. [ 1405.642624][T22360] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1406.033578][T22374] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1406.244760][T22386] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1406.701965][T22407] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1407.211225][T22429] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1408.009022][T22457] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1408.720979][T22484] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1409.185005][T22508] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1409.195293][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1409.340495][T22514] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1409.901503][T22538] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1410.470545][T22565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1410.498783][T22565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1410.525331][T22562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1410.552186][T22566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1410.754502][T22571] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1411.195554][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1411.202819][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1411.392979][T22594] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1411.981707][T22621] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1412.157587][T17287] wlan1: Trigger new scan to find an IBSS to join [ 1412.461776][T22642] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1413.245511][T22669] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1413.864807][T22696] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1415.092125][T22711] netlink: 'syz.3.6328': attribute type 10 has an invalid length. [ 1415.187929][T17287] wlan1: Trigger new scan to find an IBSS to join [ 1415.524456][T22725] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1415.606499][T22728] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1416.095991][T22744] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1416.168539][T22746] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1416.827720][T22770] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1416.892582][T22772] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1417.467153][T22794] netlink: 'syz.2.6366': attribute type 10 has an invalid length. [ 1417.489670][T22794] geneve0: entered promiscuous mode [ 1417.660807][T22794] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1417.769833][T22796] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1417.794114][T22802] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1418.295618][T22828] netlink: 'syz.0.6380': attribute type 12 has an invalid length. [ 1418.303946][T22828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6380'. [ 1418.329041][T22831] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1418.440328][T22833] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1418.804456][T22845] netlink: 'syz.0.6388': attribute type 10 has an invalid length. [ 1418.813392][T22845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6388'. [ 1418.823134][T22845] dummy0: entered promiscuous mode [ 1418.936621][T22849] netlink: 'syz.2.6390': attribute type 12 has an invalid length. [ 1418.977969][T22849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6390'. [ 1419.108853][T17287] wlan1: Trigger new scan to find an IBSS to join [ 1419.123280][T22856] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1419.145114][T22853] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1419.729793][T22880] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1419.807258][T22882] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1420.286128][T22898] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1420.659333][T22905] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1420.970015][T22923] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1421.109478][ T1139] wlan1: Trigger new scan to find an IBSS to join [ 1421.112315][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1421.685505][T22940] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1421.903405][T22947] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1422.480774][T22969] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1422.638682][T22975] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1423.242423][T22993] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1423.361744][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.368309][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.434192][T22999] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1423.802733][T15519] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1423.973936][T23024] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1424.253332][T23032] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1424.817751][T23054] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1425.073599][T23061] netlink: 'syz.2.6485': attribute type 3 has an invalid length. [ 1425.086376][T23061] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6485'. [ 1425.188135][ T1139] wlan1: Trigger new scan to find an IBSS to join [ 1425.384686][T23075] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1425.404232][T23079] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1425.633296][T23084] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.6495'. [ 1425.855671][T23094] ipvlan0: entered promiscuous mode [ 1425.861739][T23094] ipvlan0: entered allmulticast mode [ 1425.868554][T23094] veth0_vlan: entered allmulticast mode [ 1426.036339][T23098] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1426.067152][T23101] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1426.761509][T23126] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1426.816637][T23128] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1427.022784][T23135] netlink: 'syz.1.6519': attribute type 25 has an invalid length. [ 1427.340436][T23147] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1427.393794][T23151] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1428.148766][T17287] wlan1: Trigger new scan to find an IBSS to join [ 1428.423606][T23175] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1428.465342][T23177] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1429.188870][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1429.335590][T23199] bridge0: entered promiscuous mode [ 1429.345528][T23199] bridge0: entered allmulticast mode [ 1429.514900][T23201] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1429.530469][T23205] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1430.167981][T23232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1430.178037][T23231] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1430.187462][T23232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1430.198531][T23227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1430.209137][T23232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1430.260229][T23229] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1430.842268][T23256] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1431.050988][T23260] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1431.107608][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1432.205779][T23279] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1432.549246][T23291] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1432.926909][T23306] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1433.198587][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1433.400555][T23321] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1433.729034][T23335] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1434.168716][T23350] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1434.448988][T23360] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1434.560314][T23365] sit0: entered promiscuous mode [ 1434.566512][T23365] sit0: entered allmulticast mode [ 1435.187941][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1436.042645][T23383] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1436.821909][T23391] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1437.187727][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1437.196465][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1437.237931][ T1139] wlan1: Creating new IBSS network, BSSID fe:a7:37:56:c0:9f [ 1438.030565][T23403] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1438.169501][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1439.496921][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1439.912262][T23421] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1440.150148][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1440.202180][T23431] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1440.981979][T23455] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1440.994935][T23453] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1441.697658][T23475] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1441.779054][T23476] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1442.217508][T23492] netlink: 'syz.1.6667': attribute type 10 has an invalid length. [ 1442.244362][T23492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6667'. [ 1442.257463][T23492] team0: entered promiscuous mode [ 1442.262592][T23492] team_slave_0: entered promiscuous mode [ 1442.269344][T23492] team_slave_1: entered promiscuous mode [ 1442.275288][T23492] team0: entered allmulticast mode [ 1442.280862][T23492] team_slave_0: entered allmulticast mode [ 1442.286636][T23492] team_slave_1: entered allmulticast mode [ 1442.293350][T23492] bridge0: port 3(team0) entered blocking state [ 1442.301683][T23492] bridge0: port 3(team0) entered disabled state [ 1442.312385][T23492] bridge0: port 3(team0) entered blocking state [ 1442.318865][T23492] bridge0: port 3(team0) entered forwarding state [ 1442.544794][T23501] netlink: 'syz.2.6672': attribute type 39 has an invalid length. [ 1442.614253][T23503] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1442.740831][T23505] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.6674'. [ 1443.234985][T23521] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1443.430750][T23524] netlink: 'syz.0.6683': attribute type 39 has an invalid length. [ 1444.157761][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1444.164895][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1445.188013][ T1139] wlan1: Trigger new scan to find an IBSS to join [ 1445.279154][T23556] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1445.527612][T23567] netlink: 'syz.1.6700': attribute type 39 has an invalid length. [ 1446.406202][T23585] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1446.979197][T23600] netlink: 'syz.3.6713': attribute type 39 has an invalid length. [ 1447.226590][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1448.154245][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1448.831507][T23627] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1449.084746][T23642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6730'. [ 1449.108859][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1449.334201][T23648] netlink: 'syz.0.6734': attribute type 39 has an invalid length. [ 1449.460114][T23656] netlink: 'syz.2.6738': attribute type 12 has an invalid length. [ 1449.481243][T23656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6738'. [ 1449.581759][T23658] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1450.147531][ T1139] wlan1: Creating new IBSS network, BSSID 46:58:4a:5e:c1:73 [ 1450.147781][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1450.688617][T23676] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6748'. [ 1451.458755][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1452.095225][T23712] netlink: 'syz.1.6761': attribute type 21 has an invalid length. [ 1452.107246][T23712] netlink: 'syz.1.6761': attribute type 1 has an invalid length. [ 1452.155840][T17290] wlan1: Creating new IBSS network, BSSID a6:1b:7c:df:cc:23 [ 1452.202458][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1452.365667][T23719] netlink: 'syz.2.6764': attribute type 10 has an invalid length. [ 1452.374148][T23719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6764'. [ 1452.384580][T23719] team0: entered promiscuous mode [ 1452.391633][T23719] team_slave_0: entered promiscuous mode [ 1452.398439][T23719] team_slave_1: entered promiscuous mode [ 1452.404245][T23719] team0: entered allmulticast mode [ 1452.412049][T23719] team_slave_0: entered allmulticast mode [ 1452.419138][T23719] team_slave_1: entered allmulticast mode [ 1452.426156][T23719] bridge0: port 3(team0) entered blocking state [ 1452.436178][T23719] bridge0: port 3(team0) entered disabled state [ 1452.451658][T23719] bridge0: port 3(team0) entered blocking state [ 1452.458168][T23719] bridge0: port 3(team0) entered forwarding state [ 1452.516827][T23721] C: renamed from team_slave_0 (while UP) [ 1452.539155][T23721] netlink: 'syz.1.6765': attribute type 3 has an invalid length. [ 1452.547177][T23721] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6765'. [ 1452.558862][T23721] net_ratelimit: 3319 callbacks suppressed [ 1452.558880][T23721] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1452.876312][T23731] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1452.919447][T23734] netlink: 'syz.3.6771': attribute type 21 has an invalid length. [ 1452.943859][T23734] netlink: 'syz.3.6771': attribute type 1 has an invalid length. [ 1452.960708][T23735] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6770'. [ 1453.039988][T23740] netlink: 'syz.0.6774': attribute type 10 has an invalid length. [ 1453.057654][T23740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6774'. [ 1453.069915][T23740] team0: entered promiscuous mode [ 1453.075029][T23740] team_slave_0: entered promiscuous mode [ 1453.107902][T23740] team_slave_1: entered promiscuous mode [ 1453.133849][T23740] team0: entered allmulticast mode [ 1453.140316][T23740] team_slave_0: entered allmulticast mode [ 1453.152591][T23740] team_slave_1: entered allmulticast mode [ 1453.166991][T23740] bridge0: port 3(team0) entered blocking state [ 1453.182152][T23740] bridge0: port 3(team0) entered disabled state [ 1453.199863][T23740] bridge0: port 3(team0) entered blocking state [ 1453.206356][T23740] bridge0: port 3(team0) entered forwarding state [ 1453.605807][T23757] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1454.147510][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1454.227850][ T59] wlan1: Creating new IBSS network, BSSID 12:a1:db:07:26:cb [ 1454.637605][T23775] netlink: 'syz.1.6787': attribute type 10 has an invalid length. [ 1454.645942][T23775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6787'. [ 1454.808589][T23780] netlink: 'syz.2.6789': attribute type 21 has an invalid length. [ 1454.834552][T23780] netlink: 'syz.2.6789': attribute type 1 has an invalid length. [ 1454.854059][T23782] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1455.187644][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1455.565761][T23806] netlink: 'syz.3.6803': attribute type 10 has an invalid length. [ 1455.573808][T23806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6803'. [ 1455.597578][T23806] team0: entered promiscuous mode [ 1455.602710][T23806] team_slave_0: entered promiscuous mode [ 1455.624441][T23806] team_slave_1: entered promiscuous mode [ 1455.631059][T23806] team0: entered allmulticast mode [ 1455.636462][T23806] team_slave_0: entered allmulticast mode [ 1455.642817][T23806] team_slave_1: entered allmulticast mode [ 1455.650016][T23806] bridge0: port 3(team0) entered blocking state [ 1455.656601][T23806] bridge0: port 3(team0) entered disabled state [ 1455.675346][T23806] bridge0: port 3(team0) entered blocking state [ 1455.681828][T23806] bridge0: port 3(team0) entered forwarding state [ 1455.706074][T23810] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1456.147591][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1456.750533][T23824] netlink: 'syz.0.6808': attribute type 21 has an invalid length. [ 1456.772780][T23824] netlink: 'syz.0.6808': attribute type 1 has an invalid length. [ 1457.171374][T23839] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1458.143188][T23867] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1458.157510][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1458.853543][T23892] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1459.190482][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1460.149525][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1460.340134][T23922] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1461.117865][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1461.478625][T23958] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1462.153511][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1462.277823][T23983] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1463.134025][T24007] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1463.720849][T24035] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1464.148133][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1464.150133][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1464.365920][T24062] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1465.771572][T24094] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1466.148300][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1466.157766][T17287] wlan1: Creating new IBSS network, BSSID 62:6b:ad:22:c9:9a [ 1466.167511][T17290] wlan1: Trigger new scan to find an IBSS to join [ 1466.387405][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 1466.670753][T24138] netlink: 'syz.3.6947': attribute type 39 has an invalid length. [ 1467.021421][T24152] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1467.709606][T24182] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1468.151774][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1468.726445][T24202] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1469.775752][T24235] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1470.148407][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1470.990119][T24265] tun0: tun_chr_ioctl cmd 1074025675 [ 1471.011479][T24265] tun0: persist enabled [ 1471.032582][T24265] tun0: tun_chr_ioctl cmd 1074025675 [ 1471.041753][T24265] tun0: persist disabled [ 1471.087163][T17287] wlan1: Creating new IBSS network, BSSID 5e:82:36:7d:c4:fc [ 1471.113112][T17287] wlan1: Trigger new scan to find an IBSS to join [ 1472.148375][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1472.155144][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1474.157444][T17290] wlan1: Creating new IBSS network, BSSID 72:0a:12:88:29:be [ 1475.203176][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1476.147570][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1476.627490][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 1477.647682][T24424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7072'. [ 1477.656951][T24424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7072'. [ 1477.666693][T24423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7072'. [ 1477.678931][T24424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7072'. [ 1478.157549][ T59] wlan1: Creating new IBSS network, BSSID 8a:7f:3f:b9:3c:a7 [ 1478.157999][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1478.207894][ T59] wlan1: Creating new IBSS network, BSSID d2:a8:23:e4:df:2d [ 1478.363290][T24448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7084'. [ 1478.387030][T24448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7084'. [ 1478.409191][T24442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7084'. [ 1478.434191][T24452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7084'. [ 1479.643204][T24489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7099'. [ 1479.653451][T24489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7099'. [ 1481.828502][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 1483.992873][T24661] netlink: 'syz.2.7180': attribute type 21 has an invalid length. [ 1484.003473][T24661] netlink: 'syz.2.7180': attribute type 1 has an invalid length. [ 1484.794841][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.807535][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.879918][T24699] netlink: 'syz.1.7199': attribute type 21 has an invalid length. [ 1484.889136][T24699] netlink: 'syz.1.7199': attribute type 1 has an invalid length. [ 1485.522911][T24727] netlink: 'syz.0.7211': attribute type 21 has an invalid length. [ 1485.559500][T24727] netlink: 'syz.0.7211': attribute type 1 has an invalid length. [ 1485.801590][T24743] __nla_validate_parse: 2 callbacks suppressed [ 1485.801604][T24743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7220'. [ 1485.817068][T24743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7220'. [ 1485.882496][T24743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7220'. [ 1486.693835][T24777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7234'. [ 1486.708132][T24777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7234'. [ 1486.734968][T24777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7234'. [ 1488.419100][T24864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1488.441895][T24864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1488.456433][T24861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1488.468526][T24864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7275'. [ 1491.990779][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 1493.263927][T25051] __nla_validate_parse: 7 callbacks suppressed [ 1493.263946][T25051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7360'. [ 1493.301099][T25051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7360'. [ 1493.327923][T25054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7360'. [ 1493.835891][T25080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7372'. [ 1493.845838][T25080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7372'. [ 1493.858188][T25080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7372'. [ 1494.371521][T25098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7381'. [ 1494.382083][T25098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7381'. [ 1494.393659][T25098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7381'. [ 1494.501788][T25105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7383'. [ 1494.901941][T25127] netlink: 'syz.1.7394': attribute type 10 has an invalid length. [ 1494.913172][T25127] geneve0: entered promiscuous mode [ 1494.986761][T25127] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1496.054927][T25162] netlink: 'syz.3.7407': attribute type 10 has an invalid length. [ 1496.212339][T25162] geneve0: entered promiscuous mode [ 1496.352836][T25162] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1497.851754][T25201] netlink: 'syz.0.7421': attribute type 10 has an invalid length. [ 1497.868668][T25201] geneve0: entered promiscuous mode [ 1497.992499][T25201] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1498.563781][T25235] __nla_validate_parse: 6 callbacks suppressed [ 1498.563799][T25235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7434'. [ 1498.597633][T25235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7434'. [ 1498.618576][T25235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7434'. [ 1498.762765][T25243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7446'. [ 1498.772341][T25243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7446'. [ 1498.798556][T25243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7446'. [ 1498.902167][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1499.233170][T25267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7450'. [ 1499.242692][T25267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7450'. [ 1499.253111][T25267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7450'. [ 1499.395581][T25273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7451'. [ 1500.054171][T25291] ipvlan0: entered promiscuous mode [ 1500.060486][T25291] ipvlan0: entered allmulticast mode [ 1500.065838][T25291] veth0_vlan: entered allmulticast mode [ 1503.750639][T25432] __nla_validate_parse: 32 callbacks suppressed [ 1503.750659][T25432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7515'. [ 1503.815514][T25432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7515'. [ 1503.867075][T25429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7515'. [ 1503.888559][T25435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7515'. [ 1504.701455][T25468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7529'. [ 1504.726023][T25468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7529'. [ 1504.753436][T25467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7529'. [ 1504.772826][T25471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7529'. [ 1504.997827][T25478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7532'. [ 1505.013313][T25478] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7532'. [ 1509.381863][T25610] __nla_validate_parse: 16 callbacks suppressed [ 1509.381881][T25610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7589'. [ 1509.386958][T25612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7588'. [ 1509.388953][T25610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7589'. [ 1509.415780][T25612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7588'. [ 1509.425393][T25608] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7589'. [ 1509.435179][T25609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7588'. [ 1509.444565][T25612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7588'. [ 1509.457311][T25610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7589'. [ 1510.046940][T25635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7598'. [ 1510.056435][T25635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7598'. [ 1515.529654][T25802] __nla_validate_parse: 46 callbacks suppressed [ 1515.529673][T25802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7664'. [ 1515.647573][T25802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7664'. [ 1515.675334][T25795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7664'. [ 1515.699589][T25803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7664'. [ 1515.736111][T25808] ipvlan0: entered promiscuous mode [ 1515.767726][T25808] ipvlan0: entered allmulticast mode [ 1515.792615][T25808] veth0_vlan: entered allmulticast mode [ 1517.457075][T25838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7680'. [ 1517.473855][T25838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7680'. [ 1517.485828][T25837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7680'. [ 1517.502273][T25838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7680'. [ 1517.515418][T25840] ipvlan0: entered promiscuous mode [ 1517.521905][T25840] ipvlan0: entered allmulticast mode [ 1517.527725][T25840] veth0_vlan: entered allmulticast mode [ 1518.405530][T25866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7690'. [ 1518.414801][T25866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7690'. [ 1521.734697][T25935] __nla_validate_parse: 6 callbacks suppressed [ 1521.734716][T25935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7715'. [ 1521.751780][T25935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7715'. [ 1521.766872][T25930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7715'. [ 1521.777850][T25935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7715'. [ 1521.865762][T25940] : port 1(ip6gretap0) entered blocking state [ 1521.873734][T25940] : port 1(ip6gretap0) entered disabled state [ 1521.880743][T25940] ip6gretap0: entered allmulticast mode [ 1521.890769][T25940] ip6gretap0: entered promiscuous mode [ 1523.875762][T25969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7727'. [ 1523.900671][T25969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7727'. [ 1523.931972][T25968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7727'. [ 1523.979373][T25969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7727'. [ 1525.579256][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7736'. [ 1525.639126][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7736'. [ 1527.144192][ T5798] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1527.529562][T26029] __nla_validate_parse: 2 callbacks suppressed [ 1527.529582][T26029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7748'. [ 1527.550329][T26029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7748'. [ 1527.596329][T26027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7748'. [ 1527.698796][T26031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7748'. [ 1528.617220][T26041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7752'. [ 1529.038359][T26041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7752'. [ 1529.052808][T26040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7752'. [ 1529.065591][T26044] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7752'. [ 1530.009424][T26060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7757'. [ 1530.037588][T26060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7757'. [ 1530.182426][T15519] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1530.190362][T15519] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1532.662450][T26112] __nla_validate_parse: 10 callbacks suppressed [ 1532.662469][T26112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7775'. [ 1532.717484][T26112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7775'. [ 1532.743873][T26111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7775'. [ 1532.758186][T26118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7775'. [ 1532.969125][T26128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7779'. [ 1532.997421][T26128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7779'. [ 1533.017189][T26124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7779'. [ 1533.036925][T26128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7779'. [ 1533.459063][T26143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7787'. [ 1533.477872][T26143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7787'. [ 1533.993637][T26164] : port 2(syz_tun) entered blocking state [ 1534.017535][T26164] : port 2(syz_tun) entered disabled state [ 1534.037658][T26164] syz_tun: entered allmulticast mode [ 1534.045091][T26164] syz_tun: entered promiscuous mode [ 1534.786542][T26194] : port 1(syz_tun) entered blocking state [ 1534.795318][T26194] : port 1(syz_tun) entered disabled state [ 1534.801681][T26194] syz_tun: entered allmulticast mode [ 1534.811664][T26194] syz_tun: entered promiscuous mode [ 1535.539084][T26221] : port 1(syz_tun) entered blocking state [ 1535.547917][T26221] : port 1(syz_tun) entered disabled state [ 1535.566878][T26221] syz_tun: entered allmulticast mode [ 1535.579078][T26221] syz_tun: entered promiscuous mode [ 1537.969737][T26263] __nla_validate_parse: 30 callbacks suppressed [ 1537.969758][T26263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1538.002232][T26263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1538.024232][T26262] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1538.050629][T26263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1538.497963][T26272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7837'. [ 1538.520301][T26272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7837'. [ 1538.542440][T26268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7837'. [ 1538.573096][T26274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7837'. [ 1540.614963][T26301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7846'. [ 1540.696119][T26301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7846'. [ 1540.737890][T26303] : port 2(ip6gretap0) entered blocking state [ 1540.744403][T26303] : port 2(ip6gretap0) entered disabled state [ 1540.787976][T26303] ip6gretap0: entered allmulticast mode [ 1540.839461][T26303] ip6gretap0: entered promiscuous mode [ 1543.470485][T26332] __nla_validate_parse: 6 callbacks suppressed [ 1543.470505][T26332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7859'. [ 1543.521869][T26332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7859'. [ 1543.638033][T26331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7859'. [ 1543.686712][T26333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7859'. [ 1543.994311][T26341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7860'. [ 1544.063614][T26341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7860'. [ 1544.142289][T26340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7860'. [ 1544.219903][T26342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7860'. [ 1546.234033][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.242162][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.646107][T26369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7872'. [ 1546.697192][T26369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7872'. [ 1550.311833][T26405] __nla_validate_parse: 2 callbacks suppressed [ 1550.311855][T26405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1550.371207][T26405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1550.418486][T26402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1550.448194][T26406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1551.812880][T26419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7891'. [ 1551.847702][T26419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7891'. [ 1551.881248][T26419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7891'. [ 1553.016102][T26432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7895'. [ 1553.118430][T26432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7895'. [ 1553.129111][T26431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7895'. [ 1555.817435][T26464] __nla_validate_parse: 1 callbacks suppressed [ 1555.817454][T26464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7908'. [ 1555.874940][T26464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7908'. [ 1555.998454][T26463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7908'. [ 1556.034633][T26466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7908'. [ 1557.270411][T15519] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1557.278197][T15519] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1559.579991][T26506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7920'. [ 1559.617733][T26507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7922'. [ 1559.637394][T26506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7920'. [ 1559.713783][T26502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7920'. [ 1559.787865][T26507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7922'. [ 1559.886426][T26508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7920'. [ 1561.069344][T26520] __nla_validate_parse: 2 callbacks suppressed [ 1561.069368][T26520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7927'. [ 1561.137430][T26520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7927'. [ 1561.198037][T26522] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7927'. [ 1561.813746][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1561.825727][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1563.670010][T26535] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7931'. [ 1563.724956][T26535] bond_slave_0: entered promiscuous mode [ 1563.738871][T26535] bond_slave_1: entered promiscuous mode [ 1565.239639][T26546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7934'. [ 1565.396857][T26546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7934'. [ 1565.481293][T26545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7934'. [ 1565.707427][T26548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7934'. [ 1567.741573][T15519] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1567.751775][T15519] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1567.761041][T15519] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1567.770991][T15519] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1567.779965][T15519] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1567.843207][T15519] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1568.979960][T26573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7944'. [ 1569.226974][T17285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.421059][T26573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7944'. [ 1569.431935][T26572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7944'. [ 1569.525775][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1569.533510][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1569.605491][T17285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.780143][T26574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7944'. [ 1569.871243][T17285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.907808][T15519] Bluetooth: hci3: command tx timeout [ 1570.196888][T17285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.435728][T26557] chnl_net:caif_netlink_parms(): no params data found [ 1571.241078][T26557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.248760][T26557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.256222][T26557] bridge_slave_0: entered allmulticast mode [ 1571.275413][T26557] bridge_slave_0: entered promiscuous mode [ 1571.448362][T26557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.457828][T26557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.465205][T26557] bridge_slave_1: entered allmulticast mode [ 1571.491885][T26557] bridge_slave_1: entered promiscuous mode [ 1571.809421][T26557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.987520][T15519] Bluetooth: hci3: command tx timeout [ 1572.158617][T26557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1572.638774][T26557] team0: Port device team_slave_0 added [ 1572.662026][T26557] team0: Port device team_slave_1 added [ 1572.963952][T26557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.971315][T26557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1573.018718][T26557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1573.066787][T26557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1573.078765][T26557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1573.135859][T26557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1573.584193][T26557] hsr_slave_0: entered promiscuous mode [ 1573.639559][T26557] hsr_slave_1: entered promiscuous mode [ 1573.657799][T26557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1573.675896][T26557] Cannot create hsr debugfs directory [ 1574.081722][T15519] Bluetooth: hci3: command tx timeout [ 1574.185119][T26612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7954'. [ 1574.272621][T26612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7954'. [ 1574.619855][T26611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7954'. [ 1574.847426][T26614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7954'. [ 1574.993940][T26623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7960'. [ 1575.208565][T26623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7960'. [ 1575.228237][T26622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7960'. [ 1575.316482][T26624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7960'. [ 1575.443889][T17285] hsr_slave_0: left promiscuous mode [ 1575.537916][T17285] hsr_slave_1: left promiscuous mode [ 1575.607778][T17285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1575.615387][T17285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.631142][T17285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.645793][T17285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.674047][T17285] bridge0: port 3(team0) entered disabled state [ 1575.690809][T17285] bridge_slave_1: left allmulticast mode [ 1575.696777][T17285] bridge_slave_1: left promiscuous mode [ 1575.705196][T17285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.734821][T17285] bridge_slave_0: left allmulticast mode [ 1575.741605][T17285] bridge_slave_0: left promiscuous mode [ 1575.748866][T17285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.847187][T17285] veth1_macvtap: left promiscuous mode [ 1575.859881][T17285] veth0_macvtap: left promiscuous mode [ 1575.870649][T17285] veth1_vlan: left promiscuous mode [ 1575.870830][T26631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7963'. [ 1575.886759][T17285] veth0_vlan: left promiscuous mode [ 1576.096833][T15519] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1576.106170][T15519] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1576.157678][ T5798] Bluetooth: hci3: command tx timeout [ 1576.463292][T17285] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1577.548252][T17285] team_slave_1 (unregistering): left promiscuous mode [ 1577.555469][T17285] team_slave_1 (unregistering): left allmulticast mode [ 1577.571623][T17285] team0 (unregistering): Port device team_slave_1 removed [ 1577.690690][T17285] team_slave_0 (unregistering): left promiscuous mode [ 1577.699529][T17285] team_slave_0 (unregistering): left allmulticast mode [ 1577.711983][T17285] team0 (unregistering): Port device team_slave_0 removed [ 1577.781010][T17285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1577.871041][T17285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1578.780950][T17285] bond0 (unregistering): Released all slaves [ 1579.016386][T26631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7963'. [ 1579.525181][T26645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7968'. [ 1579.566105][T26645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7968'. [ 1579.578276][T26642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7968'. [ 1579.587982][T26646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7968'. [ 1579.665628][T26557] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1579.711134][T26557] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1579.726571][T26557] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1579.753192][T26557] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1579.818807][T26663] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7970'. [ 1579.847822][T26663] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7970'. [ 1579.848227][T26662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7971'. [ 1579.873011][T26650] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7970'. [ 1579.883117][T26662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7971'. [ 1579.894440][T26650] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7970'. [ 1579.980092][T26557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.030668][T26557] 8021q: adding VLAN 0 to HW filter on device team0 [ 1580.064807][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.072156][T17285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.094507][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.101849][T17285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1580.488799][ T5798] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1580.496714][ T5798] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1580.566375][T26557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.692531][T26557] veth0_vlan: entered promiscuous mode [ 1580.712773][T26557] veth1_vlan: entered promiscuous mode [ 1580.754802][T26557] veth0_macvtap: entered promiscuous mode [ 1580.768530][T26557] veth1_macvtap: entered promiscuous mode [ 1580.790114][T26557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.802394][T26557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.812364][T26557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.823002][T26557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.833042][T26557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.843614][T26557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.856840][T26557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.883367][T26557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1580.895467][T26557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.906826][T26557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1580.918296][T26557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.929746][T26557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1580.940722][T26557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.965510][T26557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1581.023580][T26557] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.043587][T26557] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.057329][T26557] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.066095][T26557] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.276103][T17287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.286732][T17287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.382501][T17290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.411961][T17290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.616438][T15519] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1581.624638][T15519] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1582.490420][T21156] syz_tun (unregistering): left allmulticast mode [ 1582.496932][T21156] syz_tun (unregistering): left promiscuous mode [ 1582.512558][T21156] : port 1(syz_tun) entered disabled state [ 1582.639863][T15519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1582.650931][T15519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1582.666388][T15519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1582.704675][T15519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1582.720235][T15519] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1582.728169][T15519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1582.976292][T15519] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1583.177599][T26750] chnl_net:caif_netlink_parms(): no params data found [ 1583.275647][T26750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.283177][T26750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.296947][T26750] bridge_slave_0: entered allmulticast mode [ 1583.316773][T26750] bridge_slave_0: entered promiscuous mode [ 1583.326425][T26750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.334033][T26750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.341679][T26750] bridge_slave_1: entered allmulticast mode [ 1583.364101][T26750] bridge_slave_1: entered promiscuous mode [ 1583.441828][T26750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.488594][T26750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.580621][T17290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.613517][T26750] team0: Port device team_slave_0 added [ 1583.650254][T26750] team0: Port device team_slave_1 added [ 1583.688215][T17290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.782147][T26750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.789700][T26750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.837299][T26750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1583.882366][T17290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.904240][T26750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1583.935593][T26750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.997442][T26750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.049470][T17290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.129335][ T5798] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1584.136823][ T5798] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1584.189221][T26750] hsr_slave_0: entered promiscuous mode [ 1584.203614][T26750] hsr_slave_1: entered promiscuous mode [ 1584.787680][ T5798] Bluetooth: hci0: command tx timeout [ 1585.473935][T26750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1585.491213][ T5798] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1585.498924][ T5798] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1585.529020][T26750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1585.621923][T26750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1585.636621][T26750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1585.873388][T17290] hsr_slave_0: left promiscuous mode [ 1585.893696][T17290] hsr_slave_1: left promiscuous mode [ 1585.911135][T17290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1585.927567][T17290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.942931][T17290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1585.953210][T17290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.966410][T17290] bridge0: port 3(team0) entered disabled state [ 1585.981994][T17290] bridge_slave_1: left allmulticast mode [ 1585.990255][T17290] bridge_slave_1: left promiscuous mode [ 1585.996075][T17290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.007082][T17290] bridge_slave_0: left allmulticast mode [ 1586.013205][T17290] bridge_slave_0: left promiscuous mode [ 1586.020341][T17290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.069208][T17290] veth1_macvtap: left promiscuous mode [ 1586.077128][T17290] veth0_macvtap: left promiscuous mode [ 1586.084089][T17290] veth1_vlan: left promiscuous mode [ 1586.094024][T17290] veth0_vlan: left promiscuous mode [ 1586.319095][T17290] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1586.758720][T17290] team_slave_1 (unregistering): left promiscuous mode [ 1586.765907][T17290] team_slave_1 (unregistering): left allmulticast mode [ 1586.786977][T17290] team0 (unregistering): Port device team_slave_1 removed [ 1586.831302][T17290] C (unregistering): left promiscuous mode [ 1586.837207][T17290] C (unregistering): left allmulticast mode [ 1586.844845][T17290] team0 (unregistering): Port device C removed [ 1586.882497][ T5798] Bluetooth: hci0: command tx timeout [ 1586.901741][T17290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1586.947996][T17290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1587.412020][T17290] bond0 (unregistering): Released all slaves [ 1587.687074][T26750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.764985][T26750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.779629][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.786867][T17285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.811329][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.818569][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.340156][T26750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1588.451776][T26750] veth0_vlan: entered promiscuous mode [ 1588.495172][T26750] veth1_vlan: entered promiscuous mode [ 1588.616378][T26750] veth0_macvtap: entered promiscuous mode [ 1588.655692][T26750] veth1_macvtap: entered promiscuous mode [ 1588.712867][T26750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.744499][T26750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.756780][T26750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.776886][T26750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.788051][T26750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.803323][T26750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.815231][T26750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.840075][T26888] __nla_validate_parse: 26 callbacks suppressed [ 1588.840114][T26888] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8050'. [ 1588.872824][T26888] bond_slave_0: entered promiscuous mode [ 1588.879124][T26888] bond_slave_1: entered promiscuous mode [ 1588.925786][T26750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1588.942238][T26750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.956434][T26750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1588.970227][ T5798] Bluetooth: hci0: command tx timeout [ 1588.977766][T26750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.987826][T26750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1588.999173][T26750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.011051][T26750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1589.041017][T26750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.050985][T26750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.060414][T26750] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.070237][T26750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.302819][ T5798] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1589.314249][ T5798] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1589.334924][T17290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.344001][T17290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.409249][T17290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.428442][T17290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.583720][T26917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7994'. [ 1589.607936][T26917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7994'. [ 1589.621600][T26913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7994'. [ 1589.660624][T26917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7994'. [ 1589.894397][T26923] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8063'. [ 1590.416539][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8070'. [ 1590.461071][ T5798] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1590.471525][ T5798] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1590.494282][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8070'. [ 1590.513879][T26945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8070'. [ 1590.530436][T26951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8070'. [ 1591.061111][T15519] Bluetooth: hci0: command tx timeout [ 1591.630259][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1591.637890][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1592.306382][T27014] netlink: 'syz.2.8094': attribute type 10 has an invalid length. [ 1592.426794][T27014] veth0_vlan: left promiscuous mode [ 1592.466622][T27014] veth0_vlan: entered promiscuous mode [ 1592.512784][T27014] team0: Device veth0_vlan failed to register rx_handler [ 1592.854350][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1592.867824][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1592.876765][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1592.886339][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1592.897887][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1592.905322][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1592.946211][T21479] syz_tun (unregistering): left allmulticast mode [ 1592.955490][T21479] syz_tun (unregistering): left promiscuous mode [ 1592.967666][T21479] : port 2(syz_tun) entered disabled state [ 1593.056731][T15519] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1593.470333][T17287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.604341][T17287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.632521][T27023] chnl_net:caif_netlink_parms(): no params data found [ 1593.706708][T17287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.854120][T17287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.956390][T27023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.974531][T27023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.989055][T27023] bridge_slave_0: entered allmulticast mode [ 1594.010327][T27023] bridge_slave_0: entered promiscuous mode [ 1594.029714][T27023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.037122][T27023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.044604][T27023] bridge_slave_1: entered allmulticast mode [ 1594.052435][T27023] bridge_slave_1: entered promiscuous mode [ 1594.059626][T27065] __nla_validate_parse: 12 callbacks suppressed [ 1594.059662][T27065] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8107'. [ 1594.078026][T27065] bond_slave_0: entered promiscuous mode [ 1594.084111][T27065] bond_slave_1: entered promiscuous mode [ 1594.147185][T27023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.179118][T27023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.323615][T27023] team0: Port device team_slave_0 added [ 1594.392108][T15519] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1594.392313][T27023] team0: Port device team_slave_1 added [ 1594.399652][T15519] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1594.506020][T27023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.528349][T27023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1594.570458][T27023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.598402][T27023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.611916][T27023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1594.639567][T27023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.864658][T17287] ip6gretap0 (unregistering): left allmulticast mode [ 1594.875305][T17287] ip6gretap0 (unregistering): left promiscuous mode [ 1594.890173][T17287] : port 1(ip6gretap0) entered disabled state [ 1594.943160][T27023] hsr_slave_0: entered promiscuous mode [ 1594.949149][ T5798] Bluetooth: hci1: command tx timeout [ 1594.963435][T27023] hsr_slave_1: entered promiscuous mode [ 1594.969979][T27023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1594.977668][T27023] Cannot create hsr debugfs directory [ 1595.795424][ T5798] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1595.803285][ T5798] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1596.215363][T17287] hsr_slave_0: left promiscuous mode [ 1596.247784][T17287] hsr_slave_1: left promiscuous mode [ 1596.254567][T17287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1596.263224][T17287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1596.273052][T17287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1596.287693][T17287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1596.304961][T17287] bridge0: port 3(team0) entered disabled state [ 1596.398561][T17287] bridge_slave_1: left allmulticast mode [ 1596.423924][T17287] bridge_slave_1: left promiscuous mode [ 1596.442225][T17287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.526637][T17287] bridge_slave_0: left allmulticast mode [ 1596.548848][T17287] bridge_slave_0: left promiscuous mode [ 1596.554735][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.705699][T17287] veth1_vlan: left promiscuous mode [ 1596.722095][T17287] veth0_vlan: left promiscuous mode [ 1596.934066][T17287] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1597.032639][T15519] Bluetooth: hci1: command tx timeout [ 1597.324078][T17287] team_slave_1 (unregistering): left promiscuous mode [ 1597.331380][T17287] team_slave_1 (unregistering): left allmulticast mode [ 1597.342721][T17287] team0 (unregistering): Port device team_slave_1 removed [ 1597.392879][T17287] team_slave_0 (unregistering): left promiscuous mode [ 1597.399800][T17287] team_slave_0 (unregistering): left allmulticast mode [ 1597.412178][T17287] team0 (unregistering): Port device team_slave_0 removed [ 1597.503488][T17287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1597.561807][T17287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1598.057869][T17287] bond0 (unregistering): Released all slaves [ 1598.155905][T27135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1598.332850][T27023] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1598.360694][T27023] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1598.396800][T27023] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1598.432057][T27023] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1598.653687][T27023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.688752][T27023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.726586][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.733975][T17285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.748825][T15519] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1598.756393][T15519] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1598.776638][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.783927][T17285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1598.991980][T27023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1599.107655][T15519] Bluetooth: hci1: command tx timeout [ 1599.374226][T27023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.687829][T27023] veth0_vlan: entered promiscuous mode [ 1599.763599][T27023] veth1_vlan: entered promiscuous mode [ 1600.074914][T15519] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1600.092764][T15519] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1600.307065][T27023] veth0_macvtap: entered promiscuous mode [ 1600.327103][T27023] veth1_macvtap: entered promiscuous mode [ 1600.453615][T27023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1600.490829][T27023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.509752][T27023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1600.523550][T27023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.537087][T27023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1600.553076][T27023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.581245][T27023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1600.602075][T27023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.617543][T27023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.647448][T27023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.667325][T27023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.687558][T27023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.698190][T27023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.721296][T27023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1600.778788][T27023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.808564][T27023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.827324][T27023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.836113][T27023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.085813][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.121393][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.185468][T27216] netlink: 'syz.0.8157': attribute type 10 has an invalid length. [ 1601.194137][ T5798] Bluetooth: hci1: command tx timeout [ 1601.263621][T27216] geneve1: entered promiscuous mode [ 1601.303749][T27216] geneve1: entered allmulticast mode [ 1601.328696][T27216] team0: Port device geneve1 added [ 1601.402305][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.435759][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1602.028810][ T5798] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1603.784919][ T5798] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1603.792666][ T5798] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1605.824069][T15519] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1605.832591][T15519] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1607.676523][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.685960][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.199474][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1608.216916][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1608.226366][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1608.235255][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1608.266919][ T5798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1608.275732][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1608.338762][T27346] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1608.430371][T27342] netlink: 'syz.1.8201': attribute type 6 has an invalid length. [ 1608.606184][T27342] sctp: [Deprecated]: syz.1.8201 (pid 27342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1608.606184][T27342] Use struct sctp_sack_info instead [ 1609.049751][T20970] syz_tun (unregistering): left allmulticast mode [ 1609.061150][T20970] syz_tun (unregistering): left promiscuous mode [ 1609.079689][T20970] : port 1(syz_tun) entered disabled state [ 1609.252240][ T2970] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.311664][T27343] chnl_net:caif_netlink_parms(): no params data found [ 1609.430030][ T2970] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.588924][ T2970] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.734226][ T2970] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.963428][T27343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.000561][T27343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.024105][T27343] bridge_slave_0: entered allmulticast mode [ 1610.047569][T27343] bridge_slave_0: entered promiscuous mode [ 1610.070730][T27343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.097642][T27343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.120995][T27343] bridge_slave_1: entered allmulticast mode [ 1610.138973][T27343] bridge_slave_1: entered promiscuous mode [ 1610.310685][T15519] Bluetooth: hci4: command tx timeout [ 1610.344790][T27343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1610.361153][T27343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1610.401244][T15519] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1610.408966][T15519] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1610.523477][T27343] team0: Port device team_slave_0 added [ 1610.571194][T27343] team0: Port device team_slave_1 added [ 1610.630258][ T2970] ip6gretap0 (unregistering): left allmulticast mode [ 1610.640329][ T2970] ip6gretap0 (unregistering): left promiscuous mode [ 1610.654255][ T2970] : port 2(ip6gretap0) entered disabled state [ 1610.744642][T27343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.760809][T27343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.824394][T27343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.938623][T27343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.945933][T27343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1611.023162][T27343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.410609][T27343] hsr_slave_0: entered promiscuous mode [ 1611.422708][T27343] hsr_slave_1: entered promiscuous mode [ 1611.429408][T27343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1611.450796][T27343] Cannot create hsr debugfs directory [ 1611.502202][T27401] sctp: [Deprecated]: syz.3.8214 (pid 27401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1611.502202][T27401] Use struct sctp_sack_info instead [ 1611.518586][T27390] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8214'. [ 1611.535367][T27397] netlink: 'syz.3.8214': attribute type 6 has an invalid length. [ 1612.107513][T27407] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8218'. [ 1612.146594][T27407] bond_slave_0: entered promiscuous mode [ 1612.152892][T27407] bond_slave_1: entered promiscuous mode [ 1612.398036][ T5798] Bluetooth: hci4: command tx timeout [ 1612.448597][ T5798] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1612.456087][ T5798] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1612.854700][ T2970] hsr_slave_0: left promiscuous mode [ 1612.867014][ T2970] hsr_slave_1: left promiscuous mode [ 1612.899574][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1612.915099][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1612.946512][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1612.961489][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1613.000645][ T2970] bridge0: port 3(team0) entered disabled state [ 1613.020508][ T2970] bridge_slave_1: left allmulticast mode [ 1613.026236][ T2970] bridge_slave_1: left promiscuous mode [ 1613.043326][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.060729][ T2970] bridge_slave_0: left allmulticast mode [ 1613.066466][ T2970] bridge_slave_0: left promiscuous mode [ 1613.087610][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.144465][ T2970] veth1_macvtap: left promiscuous mode [ 1613.151625][ T2970] veth0_macvtap: left promiscuous mode [ 1613.158483][ T2970] veth1_vlan: left promiscuous mode [ 1613.163880][ T2970] veth0_vlan: left promiscuous mode [ 1613.553430][ T2970] geneve1 (unregistering): left promiscuous mode [ 1613.563418][ T2970] geneve1 (unregistering): left allmulticast mode [ 1613.604377][ T2970] team0 (unregistering): Port device geneve1 removed [ 1613.650648][ T2970] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1614.472333][T15519] Bluetooth: hci4: command tx timeout [ 1614.518283][ T2970] team_slave_1 (unregistering): left promiscuous mode [ 1614.533028][ T2970] team_slave_1 (unregistering): left allmulticast mode [ 1614.555061][ T2970] team0 (unregistering): Port device team_slave_1 removed [ 1614.653493][ T2970] team_slave_0 (unregistering): left promiscuous mode [ 1614.677449][ T2970] team_slave_0 (unregistering): left allmulticast mode [ 1614.691959][ T2970] team0 (unregistering): Port device team_slave_0 removed [ 1614.775828][ T2970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.849150][ T2970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.336333][ T2970] bond0 (unregistering): Released all slaves [ 1615.448060][T27427] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8226'. [ 1615.640596][T27343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1615.655919][T27343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1615.669800][T27439] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8231'. [ 1615.679475][T27343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1615.705722][T27343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1615.925946][T27343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.957099][T27343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1615.973552][T17287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.980879][T17287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1616.014679][T17287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.022119][T17287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.397978][T27343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1616.483748][T27343] veth0_vlan: entered promiscuous mode [ 1616.518285][T27343] veth1_vlan: entered promiscuous mode [ 1616.548466][T15519] Bluetooth: hci4: command tx timeout [ 1616.586014][T27343] veth0_macvtap: entered promiscuous mode [ 1616.600220][T27343] veth1_macvtap: entered promiscuous mode [ 1616.636449][T27343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.647874][T27343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.658412][T27343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.669051][T27343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.678995][T27343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.690295][T27343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.703749][T27343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1616.736925][T27343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.753876][T27343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.783502][T27343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.795120][T27343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.805476][T27343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.817005][T27343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.833578][T27343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1616.845265][T27468] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8238'. [ 1616.866537][T27343] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.880916][T27343] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.894661][T27343] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.903741][T27343] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.060598][T17287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.074679][T17287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.100362][T27474] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8240'. [ 1617.112922][T27474] bond_slave_0: entered promiscuous mode [ 1617.119050][T27474] bond_slave_1: entered promiscuous mode [ 1617.175172][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.186262][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.252332][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1617.260637][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1617.872654][T27503] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8251'. [ 1618.009500][T27506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8252'. [ 1618.404646][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1618.412677][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1618.706583][T27526] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8260'. [ 1619.982988][T27563] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8274'. [ 1620.045546][T27566] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8273'. [ 1621.126484][T27600] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8287'. [ 1621.211597][T27603] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8288'. [ 1621.414659][T27609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8291'. [ 1621.771361][T27622] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8296'. [ 1621.808301][T27623] tun0: tun_chr_ioctl cmd 1074025681 [ 1621.837519][T27623] netlink: 'syz.1.8297': attribute type 7 has an invalid length. [ 1622.049492][T27638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1622.062219][T27638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1622.078256][T27635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1622.088037][T27640] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8303'. [ 1622.098587][T27638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1622.526858][T27656] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8310'. [ 1624.129011][T27711] tun0: tun_chr_ioctl cmd 1074025681 [ 1624.139716][T27711] netlink: 'syz.0.8332': attribute type 7 has an invalid length. [ 1624.272369][T27713] bond_slave_0: entered promiscuous mode [ 1624.278322][T27713] bond_slave_1: entered promiscuous mode [ 1626.823809][T27809] __nla_validate_parse: 10 callbacks suppressed [ 1626.823842][T27809] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8370'. [ 1627.003035][T27817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8372'. [ 1629.073681][T27877] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8399'. [ 1629.897140][T27902] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8410'. [ 1630.809802][T27928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8421'. [ 1631.664312][T27959] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8434'. [ 1632.625490][T27983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8444'. [ 1633.463690][T27992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8447'. [ 1633.507560][T27992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8447'. [ 1633.528221][T27992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8447'. [ 1634.161941][T28019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8458'. [ 1634.172082][T28019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8458'. [ 1634.182622][T28019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8458'. [ 1634.243408][T28023] netlink: 'syz.1.8459': attribute type 21 has an invalid length. [ 1634.259985][T28023] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8459'. [ 1634.722818][T28032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8463'. [ 1635.037682][T28042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8467'. [ 1636.580251][T15519] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1638.809457][T28129] __nla_validate_parse: 5 callbacks suppressed [ 1638.809476][T28129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8503'. [ 1638.833957][T28129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8503'. [ 1638.864868][T28129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8503'. [ 1639.015406][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1639.026325][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1640.126716][T28159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8514'. [ 1640.329391][T28163] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8517'. [ 1640.340259][T28166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8518'. [ 1640.374321][T28166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8518'. [ 1640.395457][T28161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8518'. [ 1641.582558][T28192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8527'. [ 1641.610110][T28192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8527'. [ 1642.832825][ T5798] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1642.840503][ T5798] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1643.873581][T28247] __nla_validate_parse: 8 callbacks suppressed [ 1643.873618][T28247] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8548'. [ 1644.013606][T28252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8551'. [ 1644.084042][T28252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8551'. [ 1644.104084][T28251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8551'. [ 1644.153426][T28256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8551'. [ 1644.625265][T28265] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8556'. [ 1645.166527][T28276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8560'. [ 1645.265718][T28282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8561'. [ 1645.297560][T28282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8561'. [ 1645.308500][T28278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8561'. [ 1646.222318][T28302] syzkaller0: entered promiscuous mode [ 1646.237559][T28302] syzkaller0: entered allmulticast mode [ 1647.653322][T28341] netlink: 'syz.0.8584': attribute type 2 has an invalid length. [ 1648.955859][T28373] __nla_validate_parse: 17 callbacks suppressed [ 1648.955898][T28373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8596'. [ 1650.013481][T28403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8608'. [ 1650.342895][T28413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8611'. [ 1650.365501][T28413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8611'. [ 1650.390639][T28410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8611'. [ 1650.415897][T28413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8611'. [ 1650.959307][T28418] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8613'. [ 1651.523090][T28431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8618'. [ 1651.718596][T28437] netlink: 'syz.0.8620': attribute type 17 has an invalid length. [ 1651.731414][T28442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8622'. [ 1651.747427][T28437] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8620'. [ 1652.028633][ T5798] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1652.036218][ T5798] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1652.429344][T15519] Bluetooth: hci1: Malformed Event: 0x02 [ 1653.931220][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1653.939290][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1653.962885][T28497] __nla_validate_parse: 5 callbacks suppressed [ 1653.962901][T28497] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.8643'. [ 1654.803101][T28519] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8651'. [ 1655.495061][T28530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8655'. [ 1655.936645][T28549] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8662'. [ 1656.519205][T28563] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8667'. [ 1658.953870][T28581] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8672'. [ 1659.351359][T28594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8678'. [ 1659.363533][T28594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8678'. [ 1659.415136][T28591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8678'. [ 1659.558918][ T5798] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1659.566463][ T5798] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1659.636455][T28600] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8679'. [ 1660.784798][T28619] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8686'. [ 1660.903449][T28626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8689'. [ 1660.917419][T28626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8689'. [ 1660.937728][T28625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8689'. [ 1660.987653][T28625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8689'. [ 1661.770295][T28649] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8698'. [ 1662.958641][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1662.966221][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1664.967574][T28699] __nla_validate_parse: 2 callbacks suppressed [ 1664.967646][T28699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8717'. [ 1665.958774][T28711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8721'. [ 1665.998583][T28711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8721'. [ 1666.020288][T28710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8721'. [ 1666.051381][T28711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8721'. [ 1666.078155][T28714] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8723'. [ 1667.530784][T28744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8733'. [ 1667.661243][T28744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8733'. [ 1667.691477][T28743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8733'. [ 1667.781846][T28745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8733'. [ 1668.613632][ T5798] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1668.621460][ T5798] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1669.111245][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.118213][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.139407][T28788] __nla_validate_parse: 5 callbacks suppressed [ 1670.139447][T28788] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8748'. [ 1671.002044][T15519] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1671.009585][T15519] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1671.665902][T28806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8753'. [ 1671.727708][T28805] sit0: entered promiscuous mode [ 1671.771778][T28805] sit0: entered allmulticast mode [ 1671.890578][T28806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8753'. [ 1671.908434][T28804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8753'. [ 1671.961985][T28810] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.8754'. [ 1671.993753][T28807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8753'. [ 1672.188576][T28812] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8755'. [ 1673.436887][T28834] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8765'. [ 1674.034063][ T5798] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1674.041784][ T5798] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1674.652401][T28863] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8777'. [ 1675.512237][T28880] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8783'. [ 1676.319722][T28893] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8788'. [ 1676.642704][T28853] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1677.857017][T28919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8798'. [ 1678.168017][T28931] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8803'. [ 1678.285549][T28853] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1678.293441][T28853] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1678.461756][T28945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8808'. [ 1678.474542][T28945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8808'. [ 1678.485174][T28944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8808'. [ 1678.495980][T28945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8808'. [ 1678.809751][T28953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8811'. [ 1679.238993][T28949] netlink: 'syz.3.8810': attribute type 2 has an invalid length. [ 1679.273571][T28949] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8810'. [ 1679.878933][T28853] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1679.886438][T28853] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1680.583822][T28995] __nla_validate_parse: 2 callbacks suppressed [ 1680.583859][T28995] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8829'. [ 1680.921317][T29005] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8840'. [ 1681.382719][T15519] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1681.393224][T15519] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1682.023360][T29042] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8847'. [ 1682.760849][T29062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8854'. [ 1682.899600][T15519] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1682.907176][T15519] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1684.121457][T15519] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1684.129432][T15519] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1684.240888][T29107] @ÿ: renamed from bond_slave_0 (while UP) [ 1684.299014][T29107] netlink: 'syz.2.8872': attribute type 2 has an invalid length. [ 1684.331813][T29107] netlink: 17255 bytes leftover after parsing attributes in process `syz.2.8872'. [ 1684.636485][T29120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8878'. [ 1684.707143][T29120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8878'. [ 1684.779397][T29118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8878'. [ 1684.797906][T29122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8878'. [ 1685.201473][T29131] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8883'. [ 1685.855717][T15519] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1685.865243][T15519] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1686.226862][T29164] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8895'. [ 1687.064645][T29195] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8910'. [ 1687.159226][T15519] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1687.166747][T15519] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1687.756337][T29219] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8919'. [ 1688.633204][T15519] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1688.640823][T15519] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1688.805358][T29253] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8932'. [ 1689.385555][T15519] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1689.393462][T15519] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1689.910819][T29281] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8942'. [ 1690.192620][T29292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8943'. [ 1690.304964][T29292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8943'. [ 1690.339010][T29289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8943'. [ 1690.357734][T29294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8943'. [ 1691.008803][T28853] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1691.016347][T28853] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1691.469997][T29330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1691.503268][T29330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1691.573298][T29326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1691.607630][T29332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8958'. [ 1691.667714][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 1692.778962][T15519] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1692.786532][T15519] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1693.825768][T29390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8981'. [ 1693.843700][T29390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8981'. [ 1693.855437][T29387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8981'. [ 1693.874532][T29390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8981'. [ 1694.079472][T29397] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8985'. [ 1694.109777][T15519] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1694.117415][T15519] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1694.762352][T29419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8993'. [ 1696.509500][T29475] __nla_validate_parse: 9 callbacks suppressed [ 1696.509518][T29475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9016'. [ 1696.619036][T29475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9016'. [ 1696.678047][T29472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9016'. [ 1696.724584][T29478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9016'. [ 1697.442817][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1697.450774][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1697.547757][T29504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9029'. [ 1697.574985][T29504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9029'. [ 1697.599964][T29502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9029'. [ 1697.625999][T29504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9029'. [ 1698.956312][ T5798] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1698.964129][ T5798] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1702.914233][T29636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9081'. [ 1702.994516][T29636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9081'. [ 1703.013455][T29633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9081'. [ 1703.075477][T29637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9081'. [ 1703.256033][T29641] netlink: set zone limit has 8 unknown bytes [ 1703.304652][T29646] netlink: 'syz.0.9083': attribute type 21 has an invalid length. [ 1703.352920][T29646] netlink: 'syz.0.9083': attribute type 4 has an invalid length. [ 1703.386445][T29646] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9083'. [ 1704.931045][T29684] netlink: set zone limit has 8 unknown bytes [ 1704.968934][T29684] netlink: 'syz.1.9101': attribute type 21 has an invalid length. [ 1704.978073][T29684] netlink: 'syz.1.9101': attribute type 4 has an invalid length. [ 1704.986602][T29684] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9101'. [ 1705.160694][T15519] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1705.172656][T15519] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1706.051769][T29713] netlink: set zone limit has 8 unknown bytes [ 1706.074477][T29720] netlink: 'syz.3.9114': attribute type 21 has an invalid length. [ 1706.087249][T29720] netlink: 'syz.3.9114': attribute type 4 has an invalid length. [ 1706.105358][T29720] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9114'. [ 1706.988942][T28853] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1706.996478][T28853] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1707.028972][T15519] Bluetooth: hci0: command 0x0406 tx timeout [ 1707.813299][T29761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9128'. [ 1707.847472][T29761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9128'. [ 1707.896865][T29758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9128'. [ 1708.062457][T29763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9128'. [ 1708.306455][T29770] netlink: set zone limit has 8 unknown bytes [ 1708.336170][T29770] netlink: 'syz.2.9132': attribute type 21 has an invalid length. [ 1708.359830][T29770] netlink: 'syz.2.9132': attribute type 4 has an invalid length. [ 1708.406178][T29770] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9132'. [ 1708.734274][ T5798] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1708.749268][ T5798] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1709.662805][T29808] netlink: set zone limit has 8 unknown bytes [ 1709.696799][T29808] netlink: 'syz.3.9147': attribute type 21 has an invalid length. [ 1709.742248][T29808] netlink: 'syz.3.9147': attribute type 4 has an invalid length. [ 1709.752424][T29808] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9147'. [ 1710.113914][T29814] C: renamed from team_slave_0 (while UP) [ 1710.154786][T29814] netlink: 'syz.3.9149': attribute type 2 has an invalid length. [ 1710.182081][T29814] netlink: 116 bytes leftover after parsing attributes in process `syz.3.9149'. [ 1710.210041][T29814] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1710.729154][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1710.736642][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1711.020606][T29835] netlink: 'syz.2.9158': attribute type 21 has an invalid length. [ 1711.038000][T29835] netlink: 'syz.2.9158': attribute type 4 has an invalid length. [ 1711.053801][T29835] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9158'. [ 1713.734196][ T5798] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 1713.735776][ T5798] Bluetooth: hci3: hardware error 0x00 [ 1713.799818][T15519] Bluetooth: hci1: ACL packet for unknown connection handle 624 [ 1715.520077][T29947] Bluetooth: hci1: ACL packet for unknown connection handle 624 [ 1715.784521][T29947] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1715.792660][T29947] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1715.827559][ T5798] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1716.439621][T29980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9218'. [ 1717.268888][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 1717.677823][T30004] netlink: 'syz.3.9230': attribute type 2 has an invalid length. [ 1717.820738][T30008] C: renamed from team_slave_0 (while UP) [ 1717.859499][T30008] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9231'. [ 1718.194289][T30016] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9232'. [ 1719.007515][T30035] netlink: 'syz.1.9240': attribute type 2 has an invalid length. [ 1722.606585][T30116] netlink: 'syz.3.9278': attribute type 16 has an invalid length. [ 1722.631523][T30116] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1723.324329][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1723.331899][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1723.631500][T30142] netlink: 'syz.0.9288': attribute type 2 has an invalid length. [ 1724.615004][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1724.623350][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1724.856437][T30177] netlink: 'syz.1.9302': attribute type 1 has an invalid length. [ 1724.910959][T30177] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.9302'. [ 1725.135993][T30186] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9307'. [ 1725.883559][T30212] netlink: 'syz.1.9317': attribute type 2 has an invalid length. [ 1725.995276][T15519] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1726.003507][T15519] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1726.191338][T15519] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 1726.192741][ T5798] Bluetooth: hci0: hardware error 0x00 [ 1728.307460][ T5798] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1729.465327][T30242] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9329'. [ 1729.634086][T30249] netlink: 'syz.0.9333': attribute type 2 has an invalid length. [ 1730.037578][T30255] À: port 1(vlan0) entered blocking state [ 1730.059482][T30255] À: port 1(vlan0) entered disabled state [ 1730.065521][T30255] vlan0: entered allmulticast mode [ 1730.081630][T30255] veth0_vlan: entered allmulticast mode [ 1730.090661][T30255] vlan0: entered promiscuous mode [ 1730.488550][T30279] netlink: 'syz.2.9344': attribute type 2 has an invalid length. [ 1730.554147][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.563548][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.149390][T30304] netlink: 'syz.2.9355': attribute type 2 has an invalid length. [ 1731.749129][T30327] netlink: 'syz.1.9365': attribute type 2 has an invalid length. [ 1732.627322][T15519] Bluetooth: hci4: command 0x0406 tx timeout [ 1732.785577][T30367] netlink: 'syz.3.9378': attribute type 2 has an invalid length. [ 1732.905583][T30371] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9380'. [ 1733.527554][T30392] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9391'. [ 1734.171524][T30422] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9402'. [ 1734.935339][T30450] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9415'. [ 1735.020004][T30455] netlink: 763 bytes leftover after parsing attributes in process `syz.2.9417'. [ 1735.578981][T30479] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9428'. [ 1735.940475][T30481] À: port 1(vlan0) entered blocking state [ 1735.951046][T30481] À: port 1(vlan0) entered disabled state [ 1735.980365][T30481] vlan0: entered allmulticast mode [ 1735.985571][T30481] veth0_vlan: entered allmulticast mode [ 1736.014057][T30481] vlan0: entered promiscuous mode [ 1736.193034][T30497] netlink: 'syz.1.9434': attribute type 2 has an invalid length. [ 1736.403834][T30507] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9439'. [ 1736.815615][T30525] netlink: 'syz.2.9448': attribute type 2 has an invalid length. [ 1737.106192][T30539] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9454'. [ 1737.670032][T30563] netlink: 'syz.0.9465': attribute type 2 has an invalid length. [ 1737.768469][T30569] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9469'. [ 1738.158660][T30587] netlink: 763 bytes leftover after parsing attributes in process `syz.3.9476'. [ 1738.545603][T30600] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9481'. [ 1739.312447][T30610] netlink: 763 bytes leftover after parsing attributes in process `syz.3.9486'. [ 1739.707469][T30628] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9495'. [ 1740.813981][T30658] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9507'. [ 1741.503343][T30682] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9518'. [ 1741.865117][T30694] netlink: 'syz.3.9522': attribute type 39 has an invalid length. [ 1742.389742][T30694] veth0_macvtap: left promiscuous mode [ 1742.578484][T30708] netlink: 763 bytes leftover after parsing attributes in process `syz.1.9528'. [ 1742.700025][T30710] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9529'. [ 1742.716956][T30710] team_slave_0: entered allmulticast mode [ 1742.800713][T30714] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9530'. [ 1743.323149][T30736] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9540'. [ 1745.496987][T30736] C: entered allmulticast mode [ 1745.762864][T30744] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9543'. [ 1746.726973][T30768] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9552'. [ 1746.863123][T30772] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9554'. [ 1746.957504][T30775] netlink: 'syz.1.9555': attribute type 21 has an invalid length. [ 1747.182364][T30779] À: port 1(vlan0) entered blocking state [ 1747.200360][T30779] À: port 1(vlan0) entered disabled state [ 1747.222980][T30779] vlan0: entered allmulticast mode [ 1747.233017][T30779] veth0_vlan: entered allmulticast mode [ 1747.318448][T30779] vlan0: entered promiscuous mode [ 1747.863602][T30802] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9566'. [ 1748.208988][T30817] netlink: 'syz.0.9572': attribute type 39 has an invalid length. [ 1748.226702][T30817] veth0_macvtap: left promiscuous mode [ 1748.332364][T30821] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9574'. [ 1748.522918][T30827] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9577'. [ 1748.900756][T30846] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9585'. [ 1749.038847][T30854] netlink: 'syz.0.9588': attribute type 39 has an invalid length. [ 1749.578444][T30872] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9597'. [ 1749.590058][T30872] C: renamed from team_slave_0 (while UP) [ 1749.613801][T30873] netlink: 'syz.0.9596': attribute type 2 has an invalid length. [ 1749.626296][T30873] netlink: 'syz.0.9596': attribute type 8 has an invalid length. [ 1749.644602][T30873] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9596'. [ 1749.798804][T30882] netlink: 'syz.1.9600': attribute type 39 has an invalid length. [ 1749.809596][T30882] veth0_macvtap: left promiscuous mode [ 1750.660273][T30912] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1750.719171][T30912] netlink: 'syz.1.9614': attribute type 2 has an invalid length. [ 1750.719266][ T5798] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 1750.731826][T30912] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9614'. [ 1750.809769][T30915] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9615'. [ 1751.341732][T30934] netlink: 'syz.0.9622': attribute type 10 has an invalid length. [ 1752.140215][T30942] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9626'. [ 1752.352101][ T5798] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 1752.353552][ T5798] Bluetooth: hci1: hardware error 0x00 [ 1753.108013][ T1139] wlan1: Trigger new scan to find an IBSS to join [ 1753.654848][T30977] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9639'. [ 1754.487790][ T5798] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1756.465308][ T5798] Bluetooth: hci4: unexpected event 0x10 length: 15 > 1 [ 1756.466643][T15519] Bluetooth: hci4: hardware error 0x00 [ 1757.030636][ T5798] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 1757.034342][T31008] netlink: 'syz.2.9650': attribute type 10 has an invalid length. [ 1757.192354][T17285] wlan1: Trigger new scan to find an IBSS to join [ 1758.548105][T15519] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1758.683942][T31018] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9653'. [ 1758.716201][T31024] netlink: 'syz.2.9656': attribute type 39 has an invalid length. [ 1758.953105][T31033] netlink: 'syz.2.9661': attribute type 12 has an invalid length. [ 1758.977857][T31033] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9661'. [ 1759.107521][ T2970] wlan1: Creating new IBSS network, BSSID 96:00:1a:36:50:3c [ 1759.241964][T31049] netlink: 763 bytes leftover after parsing attributes in process `syz.0.9666'. [ 1759.393069][T31053] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9668'. [ 1759.983456][T31076] netlink: 763 bytes leftover after parsing attributes in process `syz.3.9679'. [ 1760.063504][T31077] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9678'. [ 1761.075574][T31112] À: port 1(vlan0) entered blocking state [ 1761.086256][T31112] À: port 1(vlan0) entered disabled state [ 1761.103103][T31112] vlan0: entered allmulticast mode [ 1761.113417][T31112] veth0_vlan: entered allmulticast mode [ 1761.123732][T31112] vlan0: entered promiscuous mode [ 1763.108463][ T11] wlan1: Trigger new scan to find an IBSS to join [ 1763.114994][ T11] ================================================================================ [ 1763.158964][ T11] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1209:5 [ 1763.188633][ T11] index 1 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 1763.204930][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted 6.6.95-syzkaller #0 [ 1763.212985][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1763.223089][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 1763.229445][ T11] Call Trace: [ 1763.232771][ T11] [ 1763.235754][ T11] dump_stack_lvl+0x16c/0x230 [ 1763.240494][ T11] ? show_regs_print_info+0x20/0x20 [ 1763.245759][ T11] ? load_image+0x3b0/0x3b0 [ 1763.250324][ T11] ? mutex_lock_nested+0x20/0x20 [ 1763.255331][ T11] ubsan_epilogue+0xa/0x30 [ 1763.259801][ T11] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 1763.265585][ T11] ieee80211_request_ibss_scan+0x4eb/0x790 [ 1763.271467][ T11] ieee80211_ibss_work+0xdfd/0x10c0 [ 1763.276747][ T11] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 1763.283119][ T11] ? mark_lock+0x94/0x320 [ 1763.287508][ T11] ? ieee80211_iface_work+0xbca/0xc70 [ 1763.292930][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 1763.298210][ T11] cfg80211_wiphy_work+0x225/0x260 [ 1763.303401][ T11] ? process_scheduled_works+0x957/0x15b0 [ 1763.309209][ T11] process_scheduled_works+0xa45/0x15b0 [ 1763.314839][ T11] ? assign_work+0x400/0x400 [ 1763.319481][ T11] ? assign_work+0x39e/0x400 [ 1763.324118][ T11] worker_thread+0xa55/0xfc0 [ 1763.328778][ T11] kthread+0x2fa/0x390 [ 1763.332877][ T11] ? pr_cont_work+0x560/0x560 [ 1763.337597][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1763.342218][ T11] ret_from_fork+0x48/0x80 [ 1763.346759][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1763.351385][ T11] ret_from_fork_asm+0x11/0x20 [ 1763.356215][ T11] [ 1763.360841][ T11] ================================================================================ [ 1763.374283][ T11] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1763.381552][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted 6.6.95-syzkaller #0 [ 1763.389579][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1763.399683][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 1763.405984][ T11] Call Trace: [ 1763.409307][ T11] [ 1763.412275][ T11] dump_stack_lvl+0x16c/0x230 [ 1763.417003][ T11] ? show_regs_print_info+0x20/0x20 [ 1763.422247][ T11] ? load_image+0x3b0/0x3b0 [ 1763.426808][ T11] panic+0x2c0/0x710 [ 1763.430739][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 1763.435268][ T11] ? mutex_lock_nested+0x20/0x20 [ 1763.440237][ T11] check_panic_on_warn+0x84/0xa0 [ 1763.445201][ T11] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 1763.450945][ T11] ieee80211_request_ibss_scan+0x4eb/0x790 [ 1763.456782][ T11] ieee80211_ibss_work+0xdfd/0x10c0 [ 1763.462013][ T11] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 1763.468363][ T11] ? mark_lock+0x94/0x320 [ 1763.472758][ T11] ? ieee80211_iface_work+0xbca/0xc70 [ 1763.478165][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 1763.483392][ T11] cfg80211_wiphy_work+0x225/0x260 [ 1763.488544][ T11] ? process_scheduled_works+0x957/0x15b0 [ 1763.494307][ T11] process_scheduled_works+0xa45/0x15b0 [ 1763.499921][ T11] ? assign_work+0x400/0x400 [ 1763.504550][ T11] ? assign_work+0x39e/0x400 [ 1763.509167][ T11] worker_thread+0xa55/0xfc0 [ 1763.513801][ T11] kthread+0x2fa/0x390 [ 1763.517883][ T11] ? pr_cont_work+0x560/0x560 [ 1763.522586][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1763.527198][ T11] ret_from_fork+0x48/0x80 [ 1763.531634][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1763.536239][ T11] ret_from_fork_asm+0x11/0x20 [ 1763.541046][ T11] [ 1763.544371][ T11] Kernel Offset: disabled [ 1763.548883][ T11] Rebooting in 86400 seconds..