last executing test programs: 8.779209393s ago: executing program 0 (id=1553): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0xfffffffa}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8993, &(0x7f0000000080)) 8.512720046s ago: executing program 0 (id=1557): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r0, 0x0, 0x2000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 8.157768334s ago: executing program 0 (id=1561): r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="66c0c2a8709a9ad8a7cb87f88e90849ae36449bbefaa93f456b3bef4b869bb8d232ed43be8e444ff95951c61e847cc410fc44a8fe4220781cbc96cff20e957773724d9b507714e12dbd648700b76960a43d21465e6d4d3becd98e268a204b4b0eda3591d14f148828e0105745bb1412b2a019e64f3f7100a6bcc5ab9deb3", 0x7e}], 0x1, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x20, 0x800}, 0x810) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6}]}) r3 = perf_event_open(&(0x7f00000011c0)={0x7, 0x80, 0x4, 0x6, 0x0, 0x1, 0x0, 0x2, 0x4000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x3, @perf_bp={&(0x7f0000001140), 0xc}, 0x80, 0x4, 0x10000, 0x7, 0x7, 0x7, 0x800, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000001240)='pimreg0\x00') socket$kcm(0x2, 0x200000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e6ff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x10002, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x10000}, 0x80, 0x0}, 0x50a0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) 6.941588604s ago: executing program 0 (id=1573): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.796365612s ago: executing program 1 (id=1574): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.006004061s ago: executing program 3 (id=1579): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.723661495s ago: executing program 2 (id=1580): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.660629628s ago: executing program 1 (id=1581): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r1, 0x0, 0x2000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getpid() ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c050", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 5.660278728s ago: executing program 4 (id=1582): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0xfffffffa}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8993, &(0x7f0000000080)) 5.638813299s ago: executing program 0 (id=1583): r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="66c0c2a8709a9ad8a7cb87f88e90849ae36449bbefaa93f456b3bef4b869bb8d232ed43be8e444ff95951c61e847cc410fc44a8fe4220781cbc96cff20e957773724d9b507714e12dbd648700b76960a43d21465e6d4d3becd98e268a204b4b0eda3591d14f148828e0105745bb1412b2a019e64f3f7100a6bcc5ab9deb3", 0x7e}], 0x1, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x20, 0x800}, 0x810) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6}]}) r3 = perf_event_open(&(0x7f00000011c0)={0x7, 0x80, 0x4, 0x6, 0x0, 0x1, 0x0, 0x2, 0x4000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x3, @perf_bp={&(0x7f0000001140), 0xc}, 0x80, 0x4, 0x10000, 0x7, 0x7, 0x7, 0x800, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000001240)='pimreg0\x00') socket$kcm(0x2, 0x200000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e6ff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x10002, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x10000}, 0x80, 0x0}, 0x50a0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) 5.510121115s ago: executing program 3 (id=1584): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r0, 0x0, 0x2000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 5.470072818s ago: executing program 2 (id=1585): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4.936480665s ago: executing program 2 (id=1586): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r1, 0x0, 0x2000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getpid() ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 4.936106614s ago: executing program 4 (id=1587): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) 4.935053604s ago: executing program 1 (id=1597): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r1, 0x0, 0x2000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getpid() ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c050", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 4.870073988s ago: executing program 3 (id=1588): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x1000, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='\x00') r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r6) 3.437837769s ago: executing program 2 (id=1590): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x10057) 3.400356021s ago: executing program 4 (id=1591): r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x20, 0x800}, 0x810) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044050) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) r3 = perf_event_open(&(0x7f00000011c0)={0x7, 0x80, 0x4, 0x6, 0x0, 0x1, 0x0, 0x2, 0x4000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x3, @perf_bp={&(0x7f0000001140), 0xc}, 0x80, 0x4, 0x10000, 0x7, 0x7, 0x7, 0x800, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000001240)='pimreg0\x00') socket$kcm(0x2, 0x200000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="000000000000000000000000e6ff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.273557057s ago: executing program 4 (id=1592): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x3, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000001000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00g\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f0000000180), 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x19) 3.273188197s ago: executing program 2 (id=1593): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.238564719s ago: executing program 1 (id=1594): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000002c000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ff", 0x16}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000100100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xfc0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x38}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0x1) 3.01528763s ago: executing program 4 (id=1595): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.01420118s ago: executing program 0 (id=1606): r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="66c0c2a8709a9ad8a7cb87f88e90849ae36449bbefaa93f456b3bef4b869bb8d232ed43be8e444ff95951c61e847cc410fc44a8fe4220781cbc96cff20e957773724d9b507714e12dbd648700b76960a43d21465e6d4d3becd98e268a204b4b0eda3591d14f148828e0105745bb1412b2a019e64f3f7100a6bcc5ab9deb3", 0x7e}], 0x1, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x20, 0x800}, 0x810) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6}]}) r4 = perf_event_open(&(0x7f00000011c0)={0x7, 0x80, 0x4, 0x6, 0x0, 0x1, 0x0, 0x2, 0x4000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x3, @perf_bp={&(0x7f0000001140), 0xc}, 0x80, 0x4, 0x10000, 0x7, 0x7, 0x7, 0x800, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001240)='pimreg0\x00') socket$kcm(0x2, 0x200000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e6ff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x10002, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x10000}, 0x80, 0x0}, 0x50a0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) 3.00974983s ago: executing program 3 (id=1596): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.847133218s ago: executing program 1 (id=1598): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.154441283s ago: executing program 2 (id=1599): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r1, 0x0, 0x2000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getpid() ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2.131503054s ago: executing program 4 (id=1600): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r0, 0x0, 0x2000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.837420309s ago: executing program 1 (id=1601): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0xfffffffa}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8993, &(0x7f0000000080)) 1.673783337s ago: executing program 3 (id=1602): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) 0s ago: executing program 3 (id=1603): r0 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x20, 0x800}, 0x810) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044050) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) r3 = perf_event_open(&(0x7f00000011c0)={0x7, 0x80, 0x4, 0x6, 0x0, 0x1, 0x0, 0x2, 0x4000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x3, @perf_bp={&(0x7f0000001140), 0xc}, 0x80, 0x4, 0x10000, 0x7, 0x7, 0x7, 0x800, 0x0, 0xfff, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000001240)='pimreg0\x00') socket$kcm(0x2, 0x200000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="000000000000000000000000e6ff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. [ 49.246656][ T4172] cgroup: Unknown subsys name 'net' [ 49.377794][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.608437][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.776976][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.873462][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 51.955738][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.963918][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.971769][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.994845][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 52.011605][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.018803][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.026643][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.038163][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 52.080940][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.113618][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.139164][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.148595][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.155921][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.164277][ T4198] device bridge_slave_0 entered promiscuous mode [ 52.192668][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.199742][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.207682][ T4198] device bridge_slave_1 entered promiscuous mode [ 52.243774][ T4184] team0: Port device team_slave_0 added [ 52.261676][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.269078][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.276903][ T4193] device bridge_slave_0 entered promiscuous mode [ 52.290231][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.297587][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.305853][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.318685][ T4184] team0: Port device team_slave_1 added [ 52.330127][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.362847][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.372034][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.379235][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.387050][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.401334][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.408716][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.417293][ T4186] device bridge_slave_1 entered promiscuous mode [ 52.429784][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.437005][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.463090][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.481417][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.497232][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.504492][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.512441][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.520917][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.528119][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.554111][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.573415][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.584402][ T4198] team0: Port device team_slave_0 added [ 52.597088][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.604454][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.612183][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.638197][ T4198] team0: Port device team_slave_1 added [ 52.645890][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.681360][ T4193] team0: Port device team_slave_0 added [ 52.690307][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.710341][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.717056][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.725383][ T4193] team0: Port device team_slave_1 added [ 52.750240][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.777739][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.784809][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.811031][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.823878][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.830842][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.857173][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.874717][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.905258][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.912216][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.938274][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.955811][ T4186] team0: Port device team_slave_0 added [ 52.962034][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.970311][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.996234][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.019145][ T4185] team0: Port device team_slave_0 added [ 53.032100][ T4186] team0: Port device team_slave_1 added [ 53.049626][ T4185] team0: Port device team_slave_1 added [ 53.078353][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.085408][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.111419][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.128966][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.136092][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.162188][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.184673][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.191630][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.217721][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.232150][ T4198] device hsr_slave_0 entered promiscuous mode [ 53.238903][ T4198] device hsr_slave_1 entered promiscuous mode [ 53.246205][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.254126][ T4198] Cannot create hsr debugfs directory [ 53.273917][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.280885][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.306974][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.356136][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.363144][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.370205][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.377930][ T4193] Cannot create hsr debugfs directory [ 53.399363][ T4186] device hsr_slave_0 entered promiscuous mode [ 53.406219][ T4186] device hsr_slave_1 entered promiscuous mode [ 53.412843][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.420406][ T4186] Cannot create hsr debugfs directory [ 53.442444][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.449627][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.456540][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.464284][ T4185] Cannot create hsr debugfs directory [ 53.620155][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 53.627663][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 53.640688][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 53.647014][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 53.658562][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 53.734327][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.744792][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.757397][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.769352][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.823994][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.836894][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.857854][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.866781][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.912404][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.922203][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.951876][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.959659][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.982322][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.999258][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.011729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.021648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.053007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.061665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.070823][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.078056][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.087561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.098729][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.107595][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.116260][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.123351][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.155228][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.164420][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.189173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.198714][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.213148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.236876][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.249285][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.269220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.277459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.285840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.296483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.304915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.330559][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.341103][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.353058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.361975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.371450][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.380063][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.390612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.399541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.425098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.433941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.442330][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.449513][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.457503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.467372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.476834][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.490476][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.499291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.508622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.517501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.526868][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.533960][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.542327][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.552890][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.563813][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.573440][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.593205][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.601837][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.610717][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.620415][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.627774][ T541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.636098][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.644958][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.654197][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.661242][ T541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.668994][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.680016][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.689807][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.712380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.721260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.737010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.751635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.761186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.775044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.784299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.811252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.820694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.859417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.869996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.879560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.888416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.897270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.907851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.916272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.924903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.934786][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.980898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.991219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.010622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.019677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.049144][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.059236][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.078741][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.096935][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.130064][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.149458][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.157922][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.166390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.175606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.190873][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.198792][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.211523][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.227736][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.240073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.250714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.263315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.271855][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.278957][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.296469][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.319414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.327745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.337836][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.346651][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.353729][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.362943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.371428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.380392][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.389792][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.396879][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.405561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.415092][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.424732][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.431753][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.439388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.448230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.457436][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.466976][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.475173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.489641][ T4184] device veth0_vlan entered promiscuous mode [ 55.506203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.516496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.526281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.535671][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.544312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.552088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.572284][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.583398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.592014][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.601827][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.609622][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.620206][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.640695][ T4184] device veth1_vlan entered promiscuous mode [ 55.653766][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.666696][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.674782][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.683675][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.693194][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 55.693809][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.700025][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 55.707925][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.718525][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 55.735338][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 55.741603][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 55.766869][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.778769][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.791408][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.801437][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.811801][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.820660][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.829479][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.838833][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.847425][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.856213][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.865090][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.874495][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.883751][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.892483][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.901149][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.915547][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.932144][ T4193] device veth0_vlan entered promiscuous mode [ 55.945625][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.954198][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.962074][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.970954][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.981808][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.995243][ T4198] device veth0_vlan entered promiscuous mode [ 56.008393][ T4184] device veth0_macvtap entered promiscuous mode [ 56.021851][ T4193] device veth1_vlan entered promiscuous mode [ 56.038688][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.048611][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.058271][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.067927][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.077863][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.093747][ T4198] device veth1_vlan entered promiscuous mode [ 56.114963][ T4184] device veth1_macvtap entered promiscuous mode [ 56.146076][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.158871][ T4193] device veth0_macvtap entered promiscuous mode [ 56.169890][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.193316][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.200839][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.208957][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.217794][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.234043][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.254737][ T4193] device veth1_macvtap entered promiscuous mode [ 56.262330][ T4198] device veth0_macvtap entered promiscuous mode [ 56.283392][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.291380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.299766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.308409][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.318637][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.327480][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.339148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.349454][ T4198] device veth1_macvtap entered promiscuous mode [ 56.357945][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.370586][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.379940][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.396384][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.420477][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.434483][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.446805][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.455818][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.464715][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.473861][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.482360][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.504724][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.511969][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.524031][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.533996][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.544803][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.556288][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.566429][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.576208][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.585263][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.594783][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.606509][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.623212][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.638843][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.654547][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.665604][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.675632][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.684809][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.695609][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.706341][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.716358][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.727476][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.738815][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.767951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.777410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.791510][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.800372][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.809328][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.819201][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.831315][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.840184][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.849188][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.858218][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.907583][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.916900][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.968337][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.976981][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.995240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.003561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.012093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.052378][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.068813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.078484][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.086775][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.102381][ T4186] device veth0_vlan entered promiscuous mode [ 57.117247][ T4185] device veth0_vlan entered promiscuous mode [ 57.147265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.159697][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.168160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.176936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.207436][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.215523][ T4186] device veth1_vlan entered promiscuous mode [ 57.222975][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.238145][ T4185] device veth1_vlan entered promiscuous mode [ 57.267817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.276680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.285506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.296603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.327988][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.336930][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.361570][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.362944][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.376330][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.385439][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.391087][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.402226][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.416819][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.427959][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.436826][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.454158][ T4185] device veth0_macvtap entered promiscuous mode [ 57.474491][ T4186] device veth0_macvtap entered promiscuous mode [ 57.489213][ T541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.499846][ T541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.511914][ T4185] device veth1_macvtap entered promiscuous mode [ 57.534293][ T4186] device veth1_macvtap entered promiscuous mode [ 57.551889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.561168][ T541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.565397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.577227][ T541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.586748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.596299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.606203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.614338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.630562][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.645695][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.655746][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.667294][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.677721][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.688493][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.704142][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.735118][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.761689][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.774586][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 57.784373][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.807432][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.808284][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 57.824026][ T4260] Bluetooth: hci1: command 0x040f tx timeout [ 57.825026][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.830163][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 57.846241][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.847148][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 57.860324][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.874085][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.885604][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.893228][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.903795][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.914645][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.925236][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.938020][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.948705][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.959309][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.970141][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.998438][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.019763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.052831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.081503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.091601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.114181][ C1] hrtimer: interrupt took 59890 ns [ 58.124413][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.137716][ T4276] netlink: 'syz.1.5': attribute type 7 has an invalid length. [ 58.139942][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.155183][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.161299][ T4276] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5'. [ 58.164472][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.215963][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.241687][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.270958][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.287902][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.299702][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.322482][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.338575][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.349108][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.360934][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.465158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.485538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.509315][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.519418][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.528753][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.537658][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.569529][ T4281] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 58.586643][ T4281] team0: Device ipvlan1 failed to register rx_handler [ 58.803874][ T4281] syz.2.7 (4281) used greatest stack depth: 20272 bytes left [ 58.885084][ T541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.907882][ T541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.937746][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.960548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.968943][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.004348][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.012042][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.032233][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.852943][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 59.859037][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 59.871539][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 59.877970][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 59.933199][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 61.255496][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.274076][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.960455][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.969734][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.196153][ T4296] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 62.385847][ T4310] netlink: 'syz.4.6': attribute type 10 has an invalid length. [ 62.443360][ T4308] netlink: 'syz.0.1': attribute type 7 has an invalid length. [ 62.452550][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.463242][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.491090][ T4308] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.685186][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.692712][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.702112][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.709434][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.911109][ T4310] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 62.949779][ T4316] netlink: 'syz.3.13': attribute type 8 has an invalid length. [ 62.960785][ T4316] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13'. [ 62.981750][ T4317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 63.002262][ T4310] syz.4.6 (4310) used greatest stack depth: 19696 bytes left [ 63.103072][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.278692][ T4317] device bridge_slave_0 left promiscuous mode [ 63.312894][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.822712][ T4331] netlink: 'syz.1.18': attribute type 10 has an invalid length. [ 63.889075][ T4331] team0: Device ipvlan1 failed to register rx_handler [ 64.815523][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 65.850016][ T4354] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 65.881500][ T4356] netlink: 'syz.2.26': attribute type 10 has an invalid length. [ 65.903648][ T4356] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.912115][ T4356] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.005950][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.013240][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.020873][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.028195][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.042610][ T4356] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 66.061001][ T4360] netlink: 'syz.3.27': attribute type 8 has an invalid length. [ 66.069475][ T4360] netlink: 156 bytes leftover after parsing attributes in process `syz.3.27'. [ 66.119194][ T4360] netlink: 40 bytes leftover after parsing attributes in process `syz.3.27'. [ 66.218471][ T4363] netlink: 'syz.2.28': attribute type 7 has an invalid length. [ 66.238555][ T4363] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.28'. [ 69.774440][ T155] wlan1: Trigger new scan to find an IBSS to join [ 71.298638][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.305201][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.055265][ T4381] netlink: 'syz.2.34': attribute type 10 has an invalid length. [ 72.085414][ T4381] team0: Device ipvlan1 failed to register rx_handler [ 72.500134][ T4387] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 72.679141][ T4398] netlink: 'syz.1.40': attribute type 8 has an invalid length. [ 72.701505][ T4398] netlink: 156 bytes leftover after parsing attributes in process `syz.1.40'. [ 72.759461][ T4401] netlink: 'syz.2.39': attribute type 10 has an invalid length. [ 72.934979][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.942910][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.148950][ T4398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.40'. [ 73.306928][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.782853][ T4294] wlan1: Creating new IBSS network, BSSID d6:0f:a3:b2:aa:44 [ 74.812884][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 75.236542][ T4398] device bridge_slave_0 left promiscuous mode [ 75.247697][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.619851][ T4421] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 75.648727][ T4421] team0: Device ipvlan1 failed to register rx_handler [ 76.418191][ T1109] cfg80211: failed to load regulatory.db [ 78.646065][ T4427] netlink: 'syz.0.58': attribute type 10 has an invalid length. [ 78.786256][ T4427] team0: Device ipvlan1 failed to register rx_handler [ 79.073165][ T4438] netlink: 'syz.0.52': attribute type 7 has an invalid length. [ 79.090331][ T4438] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.52'. [ 79.118137][ T4436] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 79.201273][ T4445] netlink: 'syz.3.53': attribute type 10 has an invalid length. [ 79.219267][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.301567][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.309063][ T4445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.375358][ T4445] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 80.082806][ T4460] netlink: 'syz.0.56': attribute type 8 has an invalid length. [ 80.119858][ T4460] netlink: 156 bytes leftover after parsing attributes in process `syz.0.56'. [ 80.223655][ T4460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.56'. [ 80.259191][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.349167][ T4460] device bridge_slave_0 left promiscuous mode [ 80.380441][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.813002][ T541] wlan1: Trigger new scan to find an IBSS to join [ 81.772969][ T154] wlan1: Trigger new scan to find an IBSS to join [ 82.828937][ T541] wlan1: Creating new IBSS network, BSSID fe:dd:b9:e4:69:9a [ 84.680212][ T4480] netlink: 'syz.1.64': attribute type 10 has an invalid length. [ 84.694976][ T4480] team0: Device ipvlan1 failed to register rx_handler [ 84.928538][ T4482] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 85.196161][ T4490] netlink: 'syz.4.67': attribute type 10 has an invalid length. [ 85.221639][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.229682][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.761515][ T4514] netlink: 'syz.1.72': attribute type 8 has an invalid length. [ 86.774855][ T4514] netlink: 156 bytes leftover after parsing attributes in process `syz.1.72'. [ 86.813925][ T9] wlan1: Trigger new scan to find an IBSS to join [ 86.881273][ T4514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.72'. [ 88.231166][ T155] wlan1: Creating new IBSS network, BSSID da:fc:41:cc:2d:4d [ 88.743602][ T154] wlan1: Trigger new scan to find an IBSS to join [ 88.945185][ T4529] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 88.967242][ T4536] netlink: 'syz.0.79': attribute type 10 has an invalid length. [ 89.005029][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.047076][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.054335][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.090538][ T4536] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 89.110369][ T4535] netlink: 'syz.2.78': attribute type 10 has an invalid length. [ 89.121374][ T4535] team0: Device ipvlan1 failed to register rx_handler [ 89.871759][ T4554] Zero length message leads to an empty skb [ 90.026119][ T4556] netlink: 'syz.1.85': attribute type 8 has an invalid length. [ 90.046038][ T4556] netlink: 156 bytes leftover after parsing attributes in process `syz.1.85'. [ 90.292938][ T4559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.85'. [ 91.286873][ T4583] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 91.488433][ T4590] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 91.498139][ T4590] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.666068][ T4596] netlink: 'syz.3.96': attribute type 10 has an invalid length. [ 91.678784][ T4596] team0: Device ipvlan1 failed to register rx_handler [ 91.774310][ T541] wlan1: Trigger new scan to find an IBSS to join [ 92.527499][ T4614] netlink: 'syz.3.102': attribute type 8 has an invalid length. [ 92.564758][ T4614] netlink: 156 bytes leftover after parsing attributes in process `syz.3.102'. [ 92.607978][ T4614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.102'. [ 92.818687][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 93.033656][ T541] wlan1: Creating new IBSS network, BSSID 5a:a8:ad:65:8b:1b [ 93.599475][ T4629] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 93.785922][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 94.601370][ T4639] netlink: 'syz.1.108': attribute type 10 has an invalid length. [ 94.630383][ T4639] team0: Device ipvlan1 failed to register rx_handler [ 94.682930][ T4641] netlink: 'syz.2.109': attribute type 10 has an invalid length. [ 95.783941][ T4658] netlink: 'syz.2.114': attribute type 8 has an invalid length. [ 95.791700][ T4658] netlink: 156 bytes leftover after parsing attributes in process `syz.2.114'. [ 95.797375][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 95.890421][ T4659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.114'. [ 96.043716][ T4659] device bridge_slave_0 left promiscuous mode [ 96.049856][ T4659] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.478546][ T4665] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 96.701328][ T4682] netlink: 'syz.2.121': attribute type 10 has an invalid length. [ 96.720267][ T4682] team0: Device ipvlan1 failed to register rx_handler [ 96.812819][ T9] wlan1: Trigger new scan to find an IBSS to join [ 96.871549][ T4687] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 98.460165][ T4709] netlink: 'syz.0.130': attribute type 8 has an invalid length. [ 98.469066][ T4709] netlink: 156 bytes leftover after parsing attributes in process `syz.0.130'. [ 98.531451][ T4709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'. [ 98.740429][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 99.066676][ T4720] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 99.130733][ T4723] netlink: 'syz.3.135': attribute type 10 has an invalid length. [ 99.153970][ T4723] team0: Device ipvlan1 failed to register rx_handler [ 99.385204][ T4733] netlink: 'syz.2.137': attribute type 10 has an invalid length. [ 100.743263][ T155] wlan1: Trigger new scan to find an IBSS to join [ 101.772971][ T541] wlan1: Trigger new scan to find an IBSS to join [ 102.527090][ T4294] wlan1: Creating new IBSS network, BSSID 66:79:a3:1c:f6:e3 [ 103.204211][ T4755] netlink: 'syz.1.143': attribute type 8 has an invalid length. [ 103.284099][ T4755] netlink: 156 bytes leftover after parsing attributes in process `syz.1.143'. [ 103.404496][ T4755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.143'. [ 104.007958][ T4771] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 104.742794][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 104.749429][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 106.443249][ T155] wlan1: Creating new IBSS network, BSSID 8a:df:60:b3:08:89 [ 106.446160][ T541] wlan1: Creating new IBSS network, BSSID fe:2d:a7:c2:bb:23 [ 106.467999][ T4780] netlink: 'syz.4.149': attribute type 10 has an invalid length. [ 106.491587][ T4780] team0: Device ipvlan1 failed to register rx_handler [ 106.548005][ T4781] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 106.743795][ T9] wlan1: Trigger new scan to find an IBSS to join [ 106.794341][ T4790] netlink: 'syz.2.153': attribute type 7 has an invalid length. [ 106.829209][ T4790] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.153'. [ 107.788194][ T4806] netlink: 'syz.4.159': attribute type 7 has an invalid length. [ 107.815178][ T4812] netlink: 'syz.2.160': attribute type 8 has an invalid length. [ 107.878679][ T4812] netlink: 156 bytes leftover after parsing attributes in process `syz.2.160'. [ 107.934132][ T4817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.160'. [ 107.968343][ T4806] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.159'. [ 108.081398][ T4816] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 108.384622][ T4830] netlink: 'syz.3.165': attribute type 10 has an invalid length. [ 108.422677][ T4832] netlink: 'syz.4.164': attribute type 10 has an invalid length. [ 108.490294][ T4832] team0: Device ipvlan1 failed to register rx_handler [ 109.640409][ T4858] netlink: 'syz.2.173': attribute type 8 has an invalid length. [ 109.661269][ T4858] netlink: 156 bytes leftover after parsing attributes in process `syz.2.173'. [ 109.767105][ T4863] netlink: 'syz.1.175': attribute type 7 has an invalid length. [ 109.791021][ T4860] netlink: 'syz.4.174': attribute type 7 has an invalid length. [ 109.799906][ T4863] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.175'. [ 109.819319][ T4860] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.174'. [ 109.892700][ T4858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.173'. [ 109.980964][ T4867] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 110.035988][ T4869] netlink: 'syz.3.177': attribute type 10 has an invalid length. [ 110.633001][ T4876] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 110.649514][ T4876] team0: Device ipvlan1 failed to register rx_handler [ 110.834941][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 110.963553][ T4879] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 112.066938][ T4916] netlink: 'syz.1.191': attribute type 10 has an invalid length. [ 112.080313][ T4916] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.162968][ T4916] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.170463][ T4916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.187348][ T4916] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 112.196751][ T4914] netlink: 'syz.3.189': attribute type 8 has an invalid length. [ 112.208972][ T4914] netlink: 156 bytes leftover after parsing attributes in process `syz.3.189'. [ 112.225327][ T4919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.189'. [ 112.666873][ T4925] netlink: 'syz.3.194': attribute type 7 has an invalid length. [ 112.701958][ T4925] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.194'. [ 112.752084][ T4927] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 112.966684][ T4933] team0: Device ipvlan1 failed to register rx_handler [ 113.806800][ T155] wlan1: Trigger new scan to find an IBSS to join [ 114.733469][ T4959] validate_nla: 1 callbacks suppressed [ 114.733485][ T4959] netlink: 'syz.1.205': attribute type 8 has an invalid length. [ 114.817793][ T541] wlan1: Trigger new scan to find an IBSS to join [ 114.866177][ T4959] netlink: 156 bytes leftover after parsing attributes in process `syz.1.205'. [ 114.914550][ T4958] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 114.945993][ T4960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.205'. [ 115.026281][ T4962] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 115.260622][ T4972] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 115.349266][ T4972] team0: Device ipvlan1 failed to register rx_handler [ 115.819514][ T4980] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 115.831058][ T4980] team0: Device ipvlan1 failed to register rx_handler [ 116.425462][ T4987] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 116.464586][ T4987] team0: Device ipvlan1 failed to register rx_handler [ 117.463262][ T5000] netlink: 'syz.3.217': attribute type 10 has an invalid length. [ 117.663380][ T5002] netlink: 'syz.3.218': attribute type 8 has an invalid length. [ 117.684541][ T5002] netlink: 156 bytes leftover after parsing attributes in process `syz.3.218'. [ 117.763822][ T5002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.218'. [ 117.776199][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 117.885156][ T5006] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 118.414631][ T5023] netlink: 'syz.3.225': attribute type 7 has an invalid length. [ 118.432513][ T5023] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.225'. [ 119.772887][ T155] wlan1: Trigger new scan to find an IBSS to join [ 121.435750][ T4241] wlan1: Creating new IBSS network, BSSID 0e:ac:0a:cb:0f:5a [ 121.625907][ T5051] netlink: 'syz.0.228': attribute type 7 has an invalid length. [ 121.652769][ T5051] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.228'. [ 121.678607][ T5055] netlink: 'syz.2.230': attribute type 10 has an invalid length. [ 121.728468][ T5055] team0: Device ipvlan1 failed to register rx_handler [ 121.783388][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 121.795950][ T5058] netlink: 'syz.3.231': attribute type 10 has an invalid length. [ 122.257875][ T5064] netlink: 'syz.2.233': attribute type 8 has an invalid length. [ 122.317073][ T5064] netlink: 156 bytes leftover after parsing attributes in process `syz.2.233'. [ 122.465252][ T5065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.233'. [ 122.965286][ T5075] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 123.776007][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 125.220609][ T4241] wlan1: Creating new IBSS network, BSSID 5e:dc:70:e8:bb:82 [ 125.773279][ T154] wlan1: Trigger new scan to find an IBSS to join [ 126.732825][ T154] wlan1: Trigger new scan to find an IBSS to join [ 127.555644][ T5098] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 127.582898][ T5098] team0: Device ipvlan1 failed to register rx_handler [ 127.606047][ T5100] netlink: 'syz.4.245': attribute type 10 has an invalid length. [ 127.659140][ T4241] wlan1: Creating new IBSS network, BSSID 1e:5e:b7:aa:0d:34 [ 127.995837][ T5108] netlink: 'syz.0.248': attribute type 8 has an invalid length. [ 128.068657][ T5108] netlink: 156 bytes leftover after parsing attributes in process `syz.0.248'. [ 128.223019][ T5109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.248'. [ 128.814603][ T5114] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 129.782861][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 130.789315][ T9] wlan1: Creating new IBSS network, BSSID 0a:86:4f:33:c4:54 [ 131.293660][ T5142] netlink: 'syz.4.257': attribute type 10 has an invalid length. [ 131.325776][ T5142] team0: Device ipvlan1 failed to register rx_handler [ 131.439514][ T5144] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 131.539107][ T5146] netlink: 'syz.4.259': attribute type 8 has an invalid length. [ 131.552776][ T5146] netlink: 156 bytes leftover after parsing attributes in process `syz.4.259'. [ 131.639777][ T5146] netlink: 40 bytes leftover after parsing attributes in process `syz.4.259'. [ 131.746020][ T5146] device bridge_slave_0 left promiscuous mode [ 131.755280][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.906852][ T5153] netlink: 'syz.2.261': attribute type 7 has an invalid length. [ 131.919887][ T5153] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.261'. [ 132.734700][ T155] wlan1: Trigger new scan to find an IBSS to join [ 132.736036][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.748283][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.239680][ T5185] netlink: 'syz.0.271': attribute type 10 has an invalid length. [ 134.401096][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.559046][ T5194] netlink: 'syz.3.273': attribute type 8 has an invalid length. [ 134.597956][ T5194] netlink: 156 bytes leftover after parsing attributes in process `syz.3.273'. [ 134.671435][ T5194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.273'. [ 136.506836][ T4241] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 137.429205][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 137.782814][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 137.960909][ T5210] netlink: 'syz.3.278': attribute type 7 has an invalid length. [ 137.969738][ T5210] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.278'. [ 138.735348][ T155] wlan1: Creating new IBSS network, BSSID 9e:1f:f6:43:71:0e [ 138.985733][ T5217] netlink: 'syz.3.279': attribute type 7 has an invalid length. [ 139.045229][ T5217] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.279'. [ 142.025070][ T5237] netlink: 'syz.3.285': attribute type 10 has an invalid length. [ 142.202799][ T5240] netlink: 'syz.3.286': attribute type 8 has an invalid length. [ 142.210621][ T5240] netlink: 156 bytes leftover after parsing attributes in process `syz.3.286'. [ 144.922905][ T5240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.286'. [ 145.129295][ T5248] netlink: 'syz.4.290': attribute type 7 has an invalid length. [ 145.146240][ T5248] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.290'. [ 150.193543][ T5277] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 150.283183][ T5277] team0: Device ipvlan1 failed to register rx_handler [ 150.384488][ T5280] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.477185][ T5284] netlink: 'syz.2.299': attribute type 8 has an invalid length. [ 150.507078][ T5284] netlink: 156 bytes leftover after parsing attributes in process `syz.2.299'. [ 150.552004][ T5284] netlink: 40 bytes leftover after parsing attributes in process `syz.2.299'. [ 152.812674][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 154.741071][ T5311] netlink: 'syz.0.305': attribute type 7 has an invalid length. [ 154.749869][ T5311] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.305'. [ 155.249577][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 155.591392][ T5326] netlink: 'syz.1.311': attribute type 7 has an invalid length. [ 155.656772][ T5326] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.311'. [ 156.484418][ T4241] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 156.892750][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 157.913814][ T154] wlan1: Creating new IBSS network, BSSID 8a:40:0b:df:d5:13 [ 158.990336][ T5346] netlink: 'syz.1.317': attribute type 10 has an invalid length. [ 159.041302][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.783382][ T4301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 162.907404][ T5380] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.328'. [ 163.537329][ T5391] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.331'. [ 164.334700][ T5405] netlink: 'syz.3.336': attribute type 7 has an invalid length. [ 164.362003][ T5405] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.336'. [ 164.393764][ T5407] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.337'. [ 165.041448][ T5421] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.351'. [ 165.061389][ T5424] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.341'. [ 166.568221][ T5449] netlink: 'syz.4.347': attribute type 10 has an invalid length. [ 166.592427][ T5449] team0: Device ipvlan1 failed to register rx_handler [ 167.788321][ T5466] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.354'. [ 168.363030][ T5478] netlink: 'syz.2.357': attribute type 7 has an invalid length. [ 168.385201][ T5478] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.357'. [ 168.776527][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 168.870713][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.646314][ T5499] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.363'. [ 169.787360][ T4301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.993030][ T4241] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 173.824331][ T5514] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 173.943095][ T5521] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.369'. [ 174.201742][ T5525] netlink: 'syz.1.370': attribute type 7 has an invalid length. [ 174.244409][ T5525] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.370'. [ 175.782949][ T5032] Bluetooth: hci0: command 0x0406 tx timeout [ 175.789052][ T5032] Bluetooth: hci3: command 0x0406 tx timeout [ 175.802691][ T5032] Bluetooth: hci1: command 0x0406 tx timeout [ 175.814379][ T5032] Bluetooth: hci2: command 0x0406 tx timeout [ 175.827248][ T5032] Bluetooth: hci4: command 0x0406 tx timeout [ 176.685468][ T5538] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.384'. [ 177.773151][ T155] wlan1: Trigger new scan to find an IBSS to join [ 180.772034][ T5571] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.080966][ T5582] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.772786][ T541] wlan1: Creating new IBSS network, BSSID 7e:8a:46:34:8b:69 [ 183.775987][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 184.742934][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 187.604305][ T4301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 187.772913][ T541] wlan1: Trigger new scan to find an IBSS to join [ 188.371579][ T4241] wlan1: Creating new IBSS network, BSSID 3e:2c:d2:b7:16:00 [ 188.692367][ T4241] wlan1: Creating new IBSS network, BSSID e2:78:ac:25:38:a0 [ 192.900496][ T5646] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 192.975565][ T5650] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 193.023187][ T5650] team0: Device ipvlan1 failed to register rx_handler [ 193.413070][ T5663] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.404'. [ 193.514696][ T5661] netlink: 'syz.4.403': attribute type 7 has an invalid length. [ 193.667378][ T5661] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.403'. [ 194.179702][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.186048][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.812771][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 199.142103][ T5695] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.415'. [ 200.812882][ T4301] wlan1: Creating new IBSS network, BSSID 1a:5b:2d:a1:50:cc [ 203.582594][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 204.262419][ T5714] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.421'. [ 205.333676][ T5725] netlink: 'syz.4.424': attribute type 7 has an invalid length. [ 205.599442][ T5725] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.424'. [ 207.824010][ T5766] netlink: 'syz.3.434': attribute type 7 has an invalid length. [ 207.831835][ T5766] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.434'. [ 209.127848][ T5785] netlink: 'syz.2.440': attribute type 7 has an invalid length. [ 209.156399][ T5785] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.440'. [ 212.370782][ T5800] netlink: 'syz.4.443': attribute type 7 has an invalid length. [ 212.381610][ T5800] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.443'. [ 213.927435][ T5822] netlink: 'syz.2.449': attribute type 7 has an invalid length. [ 213.970948][ T5822] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.449'. [ 217.487200][ T5840] netlink: 'syz.2.453': attribute type 7 has an invalid length. [ 217.501140][ T5840] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.453'. [ 218.370256][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 218.505758][ T5855] netlink: 'syz.0.456': attribute type 7 has an invalid length. [ 218.583737][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 218.740546][ T541] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 218.761580][ T5855] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.456'. [ 219.768005][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.847867][ T5876] netlink: 'syz.2.460': attribute type 7 has an invalid length. [ 220.866317][ T5876] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.460'. [ 225.757584][ T5932] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.476'. [ 228.983250][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 229.896452][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 230.786801][ T5978] netlink: 'syz.2.488': attribute type 7 has an invalid length. [ 230.807350][ T5978] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.488'. [ 230.879143][ T5979] netlink: 'syz.4.489': attribute type 7 has an invalid length. [ 230.911082][ T5979] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.489'. [ 231.834046][ T5993] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.404891][ T6006] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 233.151839][ T6017] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.496'. [ 234.813858][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 236.970507][ T6041] netlink: 'syz.2.504': attribute type 7 has an invalid length. [ 237.023705][ T6041] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.504'. [ 237.108873][ T6050] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.507'. [ 238.814507][ T9] wlan1: Trigger new scan to find an IBSS to join [ 239.510656][ T6092] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.518'. [ 239.818819][ T9] wlan1: Creating new IBSS network, BSSID 36:9d:e0:ef:d6:0f [ 239.902192][ T6100] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.531'. [ 239.951680][ T6101] netlink: 'syz.3.520': attribute type 7 has an invalid length. [ 239.989476][ T6101] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.520'. [ 242.555896][ T6129] netlink: 'syz.3.529': attribute type 7 has an invalid length. [ 242.585725][ T6129] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.529'. [ 245.122876][ T6151] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.536'. [ 246.718676][ T6169] netlink: 'syz.3.542': attribute type 7 has an invalid length. [ 246.879997][ T6169] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.542'. [ 249.659439][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 250.264790][ T6193] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.548'. [ 250.281457][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 250.392036][ T6192] netlink: 'syz.2.549': attribute type 7 has an invalid length. [ 250.493409][ T6192] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.549'. [ 251.076329][ T6202] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.561'. [ 251.092917][ T4301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.945884][ T6223] netlink: 'syz.4.556': attribute type 7 has an invalid length. [ 252.983371][ T6223] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.556'. [ 253.398436][ T6229] netlink: 'syz.2.558': attribute type 7 has an invalid length. [ 253.417253][ T6229] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.558'. [ 255.346844][ T6240] netlink: 'syz.1.562': attribute type 7 has an invalid length. [ 255.375732][ T6240] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.562'. [ 255.625431][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.631940][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.067774][ T6249] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.565'. [ 258.817921][ T6289] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.577'. [ 260.923242][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 262.118306][ T6304] netlink: 'syz.3.581': attribute type 7 has an invalid length. [ 262.160283][ T6304] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.581'. [ 268.350629][ T6342] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.590'. [ 268.370460][ T6343] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.592'. [ 269.242155][ T6356] netlink: 'syz.2.595': attribute type 7 has an invalid length. [ 269.341599][ T6356] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.595'. [ 269.835394][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 270.857223][ T4301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 276.441036][ T6400] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.606'. [ 277.895105][ T6411] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.609'. [ 280.041156][ T6417] netlink: 'syz.2.610': attribute type 7 has an invalid length. [ 280.075923][ T6417] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.610'. [ 280.578796][ T6424] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.613'. [ 280.796629][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 280.968945][ T6438] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.621'. [ 281.710611][ T541] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 281.813762][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.427108][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.632181][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.349080][ T6446] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.676976][ T6453] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.624'. [ 284.013891][ T6458] netlink: 'syz.0.625': attribute type 7 has an invalid length. [ 284.053501][ T6458] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.625'. [ 284.833229][ T6472] netlink: 'syz.1.627': attribute type 7 has an invalid length. [ 284.938905][ T6472] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.627'. [ 285.727083][ T6476] netlink: 'syz.4.630': attribute type 7 has an invalid length. [ 285.746607][ T6476] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.630'. [ 286.068329][ T6489] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.633'. [ 287.222623][ T6500] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.636'. [ 287.523852][ T6510] netlink: 'syz.0.640': attribute type 7 has an invalid length. [ 287.562622][ T6510] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.640'. [ 289.000409][ T6543] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.650'. [ 291.621267][ T6598] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.669'. [ 291.950804][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 292.985887][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 297.182136][ T6741] netlink: 39083 bytes leftover after parsing attributes in process `syz.1.719'. [ 298.086679][ T6756] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 298.741933][ T6777] netlink: 'syz.1.729': attribute type 7 has an invalid length. [ 298.765711][ T6777] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.729'. [ 298.967640][ T6775] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.430756][ T6796] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.734'. [ 299.491375][ T6794] netlink: 'syz.0.733': attribute type 10 has an invalid length. [ 300.905986][ T6830] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.747'. [ 300.920500][ T6828] netlink: 'syz.3.748': attribute type 10 has an invalid length. [ 301.141240][ T6833] netlink: 'syz.3.749': attribute type 7 has an invalid length. [ 301.149299][ T6833] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.749'. [ 301.871234][ T6858] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.768'. [ 301.994965][ T6863] netlink: 'syz.1.759': attribute type 10 has an invalid length. [ 302.813770][ T4301] wlan1: Trigger new scan to find an IBSS to join [ 303.556157][ T6898] netlink: 39083 bytes leftover after parsing attributes in process `syz.0.772'. [ 303.688141][ T6905] netlink: 'syz.2.775': attribute type 10 has an invalid length. [ 303.794476][ T6912] netlink: 144 bytes leftover after parsing attributes in process `syz.1.776'. [ 303.828367][ T4294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 303.936893][ T6906] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.776'. [ 304.036067][ T6921] netlink: 'syz.0.792': attribute type 10 has an invalid length. [ 304.078132][ T6922] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.780'. [ 304.270874][ T6930] netlink: 144 bytes leftover after parsing attributes in process `syz.4.782'. [ 304.308939][ T6930] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.782'. [ 304.955194][ T4301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 307.159673][ T6940] netlink: 'syz.3.786': attribute type 10 has an invalid length. [ 307.170747][ T6940] netlink: 2 bytes leftover after parsing attributes in process `syz.3.786'. [ 307.184142][ T6940] device bond0 entered promiscuous mode [ 307.192346][ T6940] device bond_slave_0 entered promiscuous mode [ 307.199967][ T6940] device bond_slave_1 entered promiscuous mode [ 307.209483][ T6940] device bridge0 entered promiscuous mode [ 307.216371][ T6940] bridge0: port 1(bond0) entered blocking state [ 307.227413][ T6940] bridge0: port 1(bond0) entered disabled state [ 307.323770][ T6950] netlink: 144 bytes leftover after parsing attributes in process `syz.0.788'. [ 307.438292][ T6944] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.788'. [ 307.555739][ T6952] netlink: 39083 bytes leftover after parsing attributes in process `syz.2.793'. [ 307.783515][ T4301] wlan1: Trigger new scan to find an IBSS to join [ 307.826488][ T6967] netlink: 'syz.3.798': attribute type 10 has an invalid length. [ 307.941153][ T6963] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 311.427100][ T4294] wlan1: Creating new IBSS network, BSSID f6:d3:92:26:66:2b [ 311.633103][ T7002] netlink: 'syz.2.810': attribute type 10 has an invalid length. [ 311.798677][ T155] wlan1: Trigger new scan to find an IBSS to join [ 312.864194][ T7021] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 313.556191][ T4301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.478116][ T4301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.822635][ T144] wlan1: Trigger new scan to find an IBSS to join [ 317.056184][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.062562][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.701195][ T7044] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 317.967828][ T7061] netlink: 'syz.3.825': attribute type 10 has an invalid length. [ 318.226009][ T7080] netlink: 'syz.2.842': attribute type 10 has an invalid length. [ 319.772781][ T4301] wlan1: Trigger new scan to find an IBSS to join [ 321.772893][ T144] wlan1: Trigger new scan to find an IBSS to join [ 323.135026][ T4301] wlan1: Creating new IBSS network, BSSID 5a:c9:0c:a7:2b:c0 [ 323.346786][ T7102] __nla_validate_parse: 6 callbacks suppressed [ 323.346844][ T7102] netlink: 39083 bytes leftover after parsing attributes in process `syz.1.840'. [ 323.561659][ T7109] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 323.717508][ T7121] netlink: 'syz.1.848': attribute type 10 has an invalid length. [ 325.772610][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 325.772647][ T154] wlan1: Trigger new scan to find an IBSS to join [ 326.728361][ T155] wlan1: Creating new IBSS network, BSSID ea:7f:48:12:1c:ff [ 327.019357][ T7162] netlink: 39083 bytes leftover after parsing attributes in process `syz.0.859'. [ 327.203289][ T7165] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 327.273970][ T7170] netlink: 'syz.2.863': attribute type 10 has an invalid length. [ 327.288840][ T7172] netlink: 'syz.3.864': attribute type 10 has an invalid length. [ 327.489635][ T7180] netlink: 'syz.1.867': attribute type 10 has an invalid length. [ 327.829761][ T7190] netlink: 'syz.3.870': attribute type 10 has an invalid length. [ 328.565103][ T7200] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 328.686588][ T7206] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 328.738070][ T155] wlan1: Trigger new scan to find an IBSS to join [ 328.776196][ T7202] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 329.367109][ T7218] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 329.562765][ T7226] netlink: 'syz.2.881': attribute type 10 has an invalid length. [ 329.616239][ T7226] team0: Device ipvlan1 failed to register rx_handler [ 329.772910][ T6446] wlan1: Trigger new scan to find an IBSS to join [ 329.860064][ T7238] netlink: 'syz.1.887': attribute type 10 has an invalid length. [ 329.927197][ T7247] netlink: 'syz.0.890': attribute type 8 has an invalid length. [ 329.935220][ T7247] netlink: 156 bytes leftover after parsing attributes in process `syz.0.890'. [ 329.957991][ T7239] netlink: 'syz.4.886': attribute type 10 has an invalid length. [ 330.007465][ T7239] team0: Device ipvlan1 failed to register rx_handler [ 330.080459][ T7247] netlink: 40 bytes leftover after parsing attributes in process `syz.0.890'. [ 330.258654][ T7249] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 330.850497][ T7262] netlink: 'syz.4.895': attribute type 10 has an invalid length. [ 330.941237][ T7264] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 330.977658][ T7267] netlink: 'syz.3.898': attribute type 8 has an invalid length. [ 331.000099][ T7267] netlink: 156 bytes leftover after parsing attributes in process `syz.3.898'. [ 331.225512][ T7267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.898'. [ 331.334991][ T7273] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 331.516296][ T7277] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 331.553212][ T7282] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 331.585780][ T7285] netlink: 'syz.1.904': attribute type 10 has an invalid length. [ 331.601868][ T7286] netlink: 'syz.4.905': attribute type 10 has an invalid length. [ 331.632286][ T7286] netlink: 2 bytes leftover after parsing attributes in process `syz.4.905'. [ 331.716223][ T7286] device bond0 entered promiscuous mode [ 331.724834][ T7286] device bond_slave_0 entered promiscuous mode [ 331.757901][ T7286] device bond_slave_1 entered promiscuous mode [ 331.765100][ T7286] device bridge0 entered promiscuous mode [ 331.791683][ T7286] bridge0: port 1(bond0) entered blocking state [ 331.798622][ T7286] bridge0: port 1(bond0) entered disabled state [ 331.817379][ T7294] netlink: 'syz.3.908': attribute type 10 has an invalid length. [ 331.858722][ T7293] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 332.259784][ T7304] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 332.315573][ T7313] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 332.344814][ T7313] netlink: 2 bytes leftover after parsing attributes in process `syz.4.914'. [ 332.367121][ T7313] bridge0: port 1(bond0) entered blocking state [ 332.388883][ T7313] bridge0: port 1(bond0) entered disabled state [ 332.492207][ T7315] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 333.046423][ T7332] team0: Device ipvlan1 failed to register rx_handler [ 333.416617][ T7338] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 333.495279][ T7341] netlink: 2 bytes leftover after parsing attributes in process `syz.3.923'. [ 333.581160][ T7341] bridge0: port 1(bond0) entered blocking state [ 333.596829][ T7341] bridge0: port 1(bond0) entered disabled state [ 333.759879][ T7351] netlink: 156 bytes leftover after parsing attributes in process `syz.1.926'. [ 333.773024][ T144] wlan1: Trigger new scan to find an IBSS to join [ 333.878526][ T7351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.926'. [ 333.945043][ T7354] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 334.460099][ T7366] netlink: 2 bytes leftover after parsing attributes in process `syz.3.932'. [ 334.521095][ T7366] bridge0: port 1(bond0) entered blocking state [ 334.529629][ T7366] bridge0: port 1(bond0) entered disabled state [ 334.829365][ T154] wlan1: Trigger new scan to find an IBSS to join [ 334.829428][ T144] wlan1: Trigger new scan to find an IBSS to join [ 334.956295][ T7371] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 335.030342][ T7374] validate_nla: 6 callbacks suppressed [ 335.030375][ T7374] netlink: 'syz.4.935': attribute type 10 has an invalid length. [ 335.139304][ T7376] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 335.393709][ T7386] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 335.401805][ T7386] netlink: 2 bytes leftover after parsing attributes in process `syz.0.939'. [ 335.420950][ T7386] device bond0 entered promiscuous mode [ 335.427613][ T7386] device bond_slave_0 entered promiscuous mode [ 335.435263][ T7386] device bond_slave_1 entered promiscuous mode [ 335.441772][ T7386] device bridge0 entered promiscuous mode [ 335.451572][ T7386] bridge0: port 1(bond0) entered blocking state [ 335.458935][ T7386] bridge0: port 1(bond0) entered disabled state [ 335.483905][ T7382] netlink: 'syz.1.937': attribute type 10 has an invalid length. [ 335.662355][ T7388] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 335.774702][ T6446] wlan1: Trigger new scan to find an IBSS to join [ 335.829077][ T7393] netlink: 'syz.1.943': attribute type 10 has an invalid length. [ 335.845248][ T7393] netlink: 2 bytes leftover after parsing attributes in process `syz.1.943'. [ 335.882203][ T7393] device bond0 entered promiscuous mode [ 335.923013][ T7393] device bond_slave_0 entered promiscuous mode [ 335.993837][ T7393] device bond_slave_1 entered promiscuous mode [ 336.030204][ T7393] device bridge0 entered promiscuous mode [ 336.037646][ T7393] bridge0: port 1(bond0) entered blocking state [ 336.044690][ T7393] bridge0: port 1(bond0) entered disabled state [ 336.170857][ T7400] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 336.339362][ T7408] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 336.586430][ T7415] netlink: 'syz.2.949': attribute type 10 has an invalid length. [ 336.624935][ T7415] netlink: 2 bytes leftover after parsing attributes in process `syz.2.949'. [ 336.634804][ T7415] device bond0 entered promiscuous mode [ 336.640480][ T7415] device bond_slave_0 entered promiscuous mode [ 336.647502][ T7415] device bond_slave_1 entered promiscuous mode [ 336.657471][ T7415] device bridge0 entered promiscuous mode [ 336.665084][ T7415] bridge0: port 1(bond0) entered blocking state [ 336.671689][ T7415] bridge0: port 1(bond0) entered disabled state [ 336.732682][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 336.755105][ T7417] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 336.797702][ T7419] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 336.846531][ T7423] netlink: 'syz.0.952': attribute type 10 has an invalid length. [ 336.899918][ T7427] netlink: 'syz.2.954': attribute type 10 has an invalid length. [ 337.126811][ T7436] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 337.166483][ T7432] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 337.223114][ T7438] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 337.248290][ T7435] netlink: 'syz.3.956': attribute type 10 has an invalid length. [ 337.263091][ T7435] netlink: 2 bytes leftover after parsing attributes in process `syz.3.956'. [ 337.318514][ T7435] bridge0: port 1(bond0) entered blocking state [ 337.327244][ T7435] bridge0: port 1(bond0) entered disabled state [ 337.406599][ T7450] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 337.457017][ T7453] netlink: 'syz.0.961': attribute type 10 has an invalid length. [ 337.495048][ T7459] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 337.698358][ T7463] netlink: 'syz.3.964': attribute type 10 has an invalid length. [ 337.723038][ T7463] netlink: 2 bytes leftover after parsing attributes in process `syz.3.964'. [ 337.753259][ T7463] bridge0: port 1(bond0) entered blocking state [ 337.761032][ T7463] bridge0: port 1(bond0) entered disabled state [ 338.148536][ T7478] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.163096][ T7482] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.309043][ T7486] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.399587][ T7495] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.459241][ T7492] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.561098][ T7506] netlink: 2 bytes leftover after parsing attributes in process `syz.4.976'. [ 338.586273][ T7506] bridge0: port 1(bond0) entered blocking state [ 338.641270][ T7506] bridge0: port 1(bond0) entered disabled state [ 338.709043][ T7501] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.739993][ T7513] netlink: 2 bytes leftover after parsing attributes in process `syz.2.980'. [ 338.758801][ T7513] bridge0: port 1(bond0) entered blocking state [ 338.770631][ T7513] bridge0: port 1(bond0) entered disabled state [ 338.785810][ T7515] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.124047][ T7529] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.373946][ T7539] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.455759][ T7544] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.483276][ T7546] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.691241][ T7556] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.711945][ T7559] netlink: 2 bytes leftover after parsing attributes in process `syz.1.992'. [ 339.733041][ T7559] bridge0: port 1(bond0) entered blocking state [ 339.758722][ T7559] bridge0: port 1(bond0) entered disabled state [ 339.923493][ T7563] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.964514][ T7565] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.982857][ T7567] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1008'. [ 340.018021][ T7567] bridge0: port 1(bond0) entered blocking state [ 340.038339][ T7567] bridge0: port 1(bond0) entered disabled state [ 340.051107][ T7571] validate_nla: 11 callbacks suppressed [ 340.051149][ T7571] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 340.071707][ T7571] netlink: 2 bytes leftover after parsing attributes in process `syz.1.994'. [ 340.083553][ T7571] bridge0: port 1(bond0) entered blocking state [ 340.117764][ T7571] bridge0: port 1(bond0) entered disabled state [ 340.201139][ T7570] netlink: 'syz.3.995': attribute type 10 has an invalid length. [ 340.219325][ T7570] bridge0: port 1(bond0) entered blocking state [ 340.227406][ T7570] bridge0: port 1(bond0) entered disabled state [ 340.287131][ T7576] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 340.553847][ T7585] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 340.620764][ T7591] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 340.646605][ T7588] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 341.366050][ T7609] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 341.432694][ T7612] netlink: 'syz.0.1013': attribute type 10 has an invalid length. [ 341.461095][ T7612] __nla_validate_parse: 1 callbacks suppressed [ 341.461125][ T7612] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1013'. [ 341.480466][ T7612] bridge0: port 1(bond0) entered blocking state [ 341.487639][ T7612] bridge0: port 1(bond0) entered disabled state [ 341.752300][ T7618] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 341.794399][ T7621] netlink: 'syz.1.1015': attribute type 10 has an invalid length. [ 341.822369][ T7621] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1015'. [ 341.839985][ T7621] bridge0: port 1(bond0) entered blocking state [ 341.849760][ T7621] bridge0: port 1(bond0) entered disabled state [ 341.870344][ T7620] netlink: 'syz.0.1014': attribute type 10 has an invalid length. [ 341.894906][ T7620] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1014'. [ 341.927475][ T7620] bridge0: port 1(bond0) entered blocking state [ 341.934220][ T7620] bridge0: port 1(bond0) entered disabled state [ 342.222182][ T7632] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 342.355226][ T7636] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 342.444090][ T7641] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 342.482292][ T7643] netlink: 'syz.0.1023': attribute type 10 has an invalid length. [ 342.735139][ T6446] wlan1: Trigger new scan to find an IBSS to join [ 342.818119][ T6446] wlan1: Trigger new scan to find an IBSS to join [ 343.187731][ T7657] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 343.343542][ T7661] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 343.472020][ T7667] netlink: 'syz.0.1030': attribute type 10 has an invalid length. [ 343.497444][ T7667] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1030'. [ 343.509199][ T7667] bridge0: port 1(bond0) entered blocking state [ 343.517406][ T7667] bridge0: port 1(bond0) entered disabled state [ 343.756013][ T7675] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 344.108734][ T7683] netlink: 'syz.1.1037': attribute type 10 has an invalid length. [ 344.153239][ T7685] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 344.376582][ T7690] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 344.554854][ T7699] netlink: 'syz.3.1042': attribute type 10 has an invalid length. [ 344.812618][ T154] wlan1: Trigger new scan to find an IBSS to join [ 345.109018][ T7711] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 345.504861][ T7716] netlink: 'syz.2.1047': attribute type 10 has an invalid length. [ 345.512877][ T7716] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1047'. [ 345.521992][ T7716] bridge0: port 1(bond0) entered blocking state [ 345.528636][ T7716] bridge0: port 1(bond0) entered disabled state [ 345.551838][ T7725] netlink: 'syz.0.1050': attribute type 8 has an invalid length. [ 345.565074][ T7725] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1050'. [ 345.579864][ T7729] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 345.594525][ T7730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1050'. [ 345.772989][ T6446] wlan1: Trigger new scan to find an IBSS to join [ 345.784943][ T7738] netlink: 'syz.4.1052': attribute type 10 has an invalid length. [ 345.923530][ T7749] netlink: 'syz.1.1058': attribute type 10 has an invalid length. [ 345.951003][ T7749] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1058'. [ 346.007528][ T7749] bridge0: port 1(bond0) entered blocking state [ 346.038203][ T7749] bridge0: port 1(bond0) entered disabled state [ 346.090859][ T7751] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 346.394309][ T7758] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 347.729232][ T7768] netlink: 'syz.4.1065': attribute type 10 has an invalid length. [ 347.750065][ T7768] team0: Device ipvlan1 failed to register rx_handler [ 347.776487][ T7774] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 347.780121][ T4301] wlan1: Trigger new scan to find an IBSS to join [ 347.806372][ T7777] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 347.821426][ T7788] netlink: 'syz.2.1069': attribute type 8 has an invalid length. [ 347.837067][ T7788] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1069'. [ 347.849071][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1069'. [ 348.078861][ T7802] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 348.089152][ T7801] netlink: 'syz.2.1072': attribute type 10 has an invalid length. [ 348.237034][ T7808] netlink: 'syz.3.1087': attribute type 10 has an invalid length. [ 348.246625][ T7808] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1087'. [ 348.267580][ T7808] bridge0: port 1(bond0) entered blocking state [ 348.276272][ T7808] bridge0: port 1(bond0) entered disabled state [ 348.307807][ T7811] netlink: 'syz.2.1075': attribute type 10 has an invalid length. [ 348.318262][ T7811] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1075'. [ 348.351169][ T7811] bridge0: port 1(bond0) entered blocking state [ 348.375821][ T7811] bridge0: port 1(bond0) entered disabled state [ 348.583941][ T7813] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 348.737726][ T6446] wlan1: Trigger new scan to find an IBSS to join [ 349.222033][ T7824] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 349.251094][ T7840] netlink: 'syz.0.1088': attribute type 10 has an invalid length. [ 349.371421][ T7846] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1089'. [ 349.590403][ T7853] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 349.721363][ T7860] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 349.770385][ T7861] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 350.234657][ T7879] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1099'. [ 350.258117][ T7879] bridge0: port 1(bond0) entered blocking state [ 350.284644][ T7879] bridge0: port 1(bond0) entered disabled state [ 350.732744][ T154] wlan1: Trigger new scan to find an IBSS to join [ 351.281539][ T7896] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 351.477608][ T7901] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 351.558383][ T7907] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 351.718048][ T7921] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1116'. [ 351.806851][ T144] wlan1: Trigger new scan to find an IBSS to join [ 351.833389][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 352.860514][ T7938] validate_nla: 3 callbacks suppressed [ 352.860551][ T7938] netlink: 'syz.1.1120': attribute type 10 has an invalid length. [ 352.972809][ T7941] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 353.195981][ T7952] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 353.773905][ T144] wlan1: Trigger new scan to find an IBSS to join [ 354.186301][ T7972] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 354.344183][ T7981] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1135'. [ 355.309997][ T7998] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 355.432207][ T8005] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 355.465336][ T8008] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 355.773423][ T154] wlan1: Trigger new scan to find an IBSS to join [ 356.144198][ T8040] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1153'. [ 356.495522][ T8039] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 356.815547][ T8055] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 357.058091][ T8057] netlink: 'syz.1.1158': attribute type 10 has an invalid length. [ 357.400470][ T8057] team0: Device ipvlan1 failed to register rx_handler [ 357.807514][ T144] wlan1: Trigger new scan to find an IBSS to join [ 357.807710][ T155] wlan1: Trigger new scan to find an IBSS to join [ 358.121950][ T8093] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1173'. [ 358.217708][ T8094] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 358.274922][ T8057] syz.1.1158 (8057) used greatest stack depth: 19224 bytes left [ 358.318997][ T8095] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 358.467961][ T8100] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 359.382298][ T8127] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 359.714258][ T8135] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 359.902163][ T8147] netlink: 'syz.2.1187': attribute type 10 has an invalid length. [ 359.944648][ T8147] team0: Device ipvlan1 failed to register rx_handler [ 360.219321][ T8154] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1193'. [ 360.592736][ T8148] netlink: 'syz.1.1189': attribute type 10 has an invalid length. [ 360.600804][ T8148] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1189'. [ 360.613180][ T8148] bridge0: port 1(bond0) entered blocking state [ 360.626300][ T8148] bridge0: port 1(bond0) entered disabled state [ 360.812795][ T154] wlan1: Trigger new scan to find an IBSS to join [ 360.819589][ T6446] wlan1: Trigger new scan to find an IBSS to join [ 361.772673][ T155] wlan1: Trigger new scan to find an IBSS to join [ 361.784158][ T6446] wlan1: Trigger new scan to find an IBSS to join [ 362.698868][ T8167] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 362.822907][ T154] wlan1: Trigger new scan to find an IBSS to join [ 362.915582][ T8176] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 363.216541][ T8193] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1207'. [ 363.777954][ T155] wlan1: Trigger new scan to find an IBSS to join [ 363.785082][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 364.490340][ T8211] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 364.762623][ T144] wlan1: Trigger new scan to find an IBSS to join [ 364.816221][ T541] wlan1: Trigger new scan to find an IBSS to join [ 365.936206][ T144] wlan1: Creating new IBSS network, BSSID b2:65:25:37:13:6a [ 365.947082][ T155] wlan1: Creating new IBSS network, BSSID d2:aa:f0:bc:71:7e [ 366.495658][ T4301] wlan1: Creating new IBSS network, BSSID ee:ce:1e:9c:f5:6a [ 366.534758][ T8224] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 366.812615][ T6446] wlan1: Trigger new scan to find an IBSS to join [ 366.989577][ T8243] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.245116][ T8260] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1230'. [ 367.455966][ T8265] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.476779][ T8271] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 368.814803][ T8234] wlan1: Trigger new scan to find an IBSS to join [ 369.363196][ T8299] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 369.597937][ T8306] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 369.690967][ T8310] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 369.783660][ T8321] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1249'. [ 369.999759][ T8234] wlan1: Creating new IBSS network, BSSID a2:22:f4:51:44:79 [ 370.977103][ T8338] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 371.779109][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 371.779151][ T154] wlan1: Trigger new scan to find an IBSS to join [ 371.785742][ T8234] wlan1: Trigger new scan to find an IBSS to join [ 373.273383][ T4301] wlan1: Creating new IBSS network, BSSID 32:ff:6d:47:4e:24 [ 373.425454][ T8353] netlink: 'syz.4.1259': attribute type 10 has an invalid length. [ 373.483095][ T8357] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 373.784759][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 373.914810][ T8371] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 373.983821][ T8376] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1267'. [ 375.779900][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 376.173354][ T8403] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 376.812726][ T154] wlan1: Trigger new scan to find an IBSS to join [ 377.636460][ T8411] netlink: 'syz.0.1278': attribute type 10 has an invalid length. [ 377.779029][ T8418] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 377.831518][ T8425] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1283'. [ 377.904179][ T8427] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 378.519642][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.526029][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.550888][ T8452] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 378.744480][ T144] wlan1: Trigger new scan to find an IBSS to join [ 379.096291][ T8464] netlink: 'syz.1.1298': attribute type 10 has an invalid length. [ 379.105660][ T8464] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1298'. [ 379.121112][ T8464] bridge0: port 1(bond0) entered blocking state [ 379.128369][ T8464] bridge0: port 1(bond0) entered disabled state [ 379.773066][ T144] wlan1: Trigger new scan to find an IBSS to join [ 380.648578][ T8470] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 380.669239][ T8472] netlink: 'syz.2.1301': attribute type 10 has an invalid length. [ 380.708633][ T8234] wlan1: Creating new IBSS network, BSSID 9a:c5:ea:a0:c9:7f [ 380.801165][ T8487] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1306'. [ 380.860989][ T8491] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 381.208065][ T8505] netlink: 'syz.2.1312': attribute type 10 has an invalid length. [ 381.246072][ T8505] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1312'. [ 381.256803][ T8505] bridge0: port 1(bond0) entered blocking state [ 381.264416][ T8505] bridge0: port 1(bond0) entered disabled state [ 381.836845][ T4301] wlan1: Trigger new scan to find an IBSS to join [ 382.441195][ T8524] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 382.555530][ T8532] netlink: 'syz.3.1321': attribute type 10 has an invalid length. [ 384.129212][ T8534] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 384.824307][ T144] wlan1: Trigger new scan to find an IBSS to join [ 385.073193][ T8554] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1328'. [ 385.216828][ T8561] netlink: 'syz.3.1330': attribute type 10 has an invalid length. [ 385.233510][ T8561] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1330'. [ 385.267439][ T8561] bridge0: port 1(bond0) entered blocking state [ 385.289444][ T8561] bridge0: port 1(bond0) entered disabled state [ 385.354292][ T8565] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 385.670375][ T8571] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 385.810215][ T8579] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 386.735883][ T8234] wlan1: Trigger new scan to find an IBSS to join [ 387.773184][ T154] wlan1: Trigger new scan to find an IBSS to join [ 387.894733][ T155] wlan1: Creating new IBSS network, BSSID 82:47:a7:03:6d:94 [ 388.153432][ T8609] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 388.224721][ T8612] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 388.276370][ T8619] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 388.563704][ T8635] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1355'. [ 388.570810][ T8629] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 389.068446][ T8651] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 389.173436][ T8653] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 390.814553][ T154] wlan1: Trigger new scan to find an IBSS to join [ 391.772723][ T155] wlan1: Trigger new scan to find an IBSS to join [ 391.779299][ T155] wlan1: Trigger new scan to find an IBSS to join [ 392.059740][ T8669] netlink: 'syz.1.1367': attribute type 8 has an invalid length. [ 392.102630][ T8669] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1367'. [ 392.221711][ T8676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1367'. [ 392.554275][ T8682] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 392.838623][ T155] wlan1: Trigger new scan to find an IBSS to join [ 393.224672][ T8696] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 393.434369][ T8707] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1379'. [ 395.772905][ T8234] wlan1: Creating new IBSS network, BSSID 36:8f:fd:35:d1:f0 [ 395.780417][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 395.787379][ T144] wlan1: Trigger new scan to find an IBSS to join [ 396.029555][ T8721] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 396.388560][ T8735] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 396.476487][ T8739] netlink: 'syz.4.1389': attribute type 8 has an invalid length. [ 396.508830][ T8739] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1389'. [ 396.647791][ T8739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1389'. [ 396.728338][ T8234] wlan1: Creating new IBSS network, BSSID 42:c8:59:5d:ef:91 [ 396.736233][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 396.742862][ T155] wlan1: Trigger new scan to find an IBSS to join [ 396.846732][ T8748] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 397.668649][ T8234] wlan1: Creating new IBSS network, BSSID 8e:d2:d8:e3:e0:c0 [ 397.763176][ T8758] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1395'. [ 397.787958][ T8761] netlink: 'syz.3.1396': attribute type 10 has an invalid length. [ 398.733151][ T8234] wlan1: Trigger new scan to find an IBSS to join [ 398.763891][ T8779] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 399.775149][ T144] wlan1: Trigger new scan to find an IBSS to join [ 400.732611][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 400.751875][ T144] wlan1: Creating new IBSS network, BSSID 06:de:89:3d:9b:ec [ 401.801442][ T8807] netlink: 'syz.0.1412': attribute type 10 has an invalid length. [ 402.015430][ T8819] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1415'. [ 402.240682][ T8823] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 402.580499][ T8835] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 402.813941][ T144] wlan1: Trigger new scan to find an IBSS to join [ 402.826322][ T154] wlan1: Trigger new scan to find an IBSS to join [ 403.129168][ T8859] netlink: 'syz.2.1427': attribute type 8 has an invalid length. [ 403.167219][ T8859] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1427'. [ 403.283426][ T8862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1427'. [ 403.774633][ T4301] wlan1: Trigger new scan to find an IBSS to join [ 403.818716][ T8234] wlan1: Creating new IBSS network, BSSID 86:48:a5:42:91:64 [ 403.843221][ T8870] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 404.029160][ T8878] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1433'. [ 405.776800][ T155] wlan1: Trigger new scan to find an IBSS to join [ 406.863151][ T8883] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 406.873619][ T144] wlan1: Creating new IBSS network, BSSID ae:10:58:c9:c3:b6 [ 406.874168][ T8234] wlan1: Creating new IBSS network, BSSID 4e:7c:68:a5:2a:b9 [ 407.759779][ T8901] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 407.836279][ T8906] netlink: 'syz.1.1441': attribute type 8 has an invalid length. [ 407.878235][ T8906] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1441'. [ 407.960857][ T8906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1441'. [ 408.100174][ T8915] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 408.340064][ T8919] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 408.461620][ T8930] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1448'. [ 409.773812][ T155] wlan1: Trigger new scan to find an IBSS to join [ 410.734798][ T8234] wlan1: Trigger new scan to find an IBSS to join [ 410.735104][ T154] wlan1: Trigger new scan to find an IBSS to join [ 411.642293][ T8951] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 411.865833][ T8953] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 412.992851][ T8993] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1464'. [ 413.192777][ T8979] netlink: 'syz.0.1458': attribute type 10 has an invalid length. [ 413.220585][ T8979] team0: Device ipvlan1 failed to register rx_handler [ 413.260689][ T8977] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 413.272485][ T8982] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 413.822752][ T155] wlan1: Trigger new scan to find an IBSS to join [ 413.822832][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 413.837378][ T154] wlan1: Trigger new scan to find an IBSS to join [ 414.584669][ T9025] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1477'. [ 414.950028][ T4241] wlan1: Creating new IBSS network, BSSID e2:08:27:b1:4c:d2 [ 415.401571][ T8234] wlan1: Creating new IBSS network, BSSID aa:ca:a8:89:81:68 [ 415.409666][ T9034] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 415.768038][ T9044] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 415.793981][ T154] wlan1: Trigger new scan to find an IBSS to join [ 415.830824][ T9042] netlink: 'syz.3.1480': attribute type 10 has an invalid length. [ 416.359528][ T9042] team0: Device ipvlan1 failed to register rx_handler [ 417.570223][ T9042] syz.3.1480 (9042) used greatest stack depth: 18992 bytes left [ 417.784845][ T155] wlan1: Trigger new scan to find an IBSS to join [ 417.791513][ T155] wlan1: Trigger new scan to find an IBSS to join [ 417.799265][ T144] wlan1: Trigger new scan to find an IBSS to join [ 417.874139][ T9082] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1492'. [ 418.523948][ T9085] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 418.539622][ T9093] netlink: 'syz.0.1494': attribute type 10 has an invalid length. [ 418.551097][ T9093] team0: Device ipvlan1 failed to register rx_handler [ 419.267914][ T9112] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 419.783426][ T144] wlan1: Trigger new scan to find an IBSS to join [ 419.808393][ T9119] netlink: 'syz.2.1504': attribute type 10 has an invalid length. [ 419.875081][ T9119] team0: Device ipvlan1 failed to register rx_handler [ 419.930724][ T9126] netlink: 'syz.4.1507': attribute type 10 has an invalid length. [ 420.045338][ T9135] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1510'. [ 420.207239][ T9138] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 420.813659][ T4294] wlan1: Trigger new scan to find an IBSS to join [ 421.783019][ T8234] wlan1: Trigger new scan to find an IBSS to join [ 422.338515][ T9162] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 422.732795][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 423.410675][ T9191] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1525'. [ 423.643785][ T9199] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 423.741161][ T9202] netlink: 'syz.0.1530': attribute type 10 has an invalid length. [ 423.774437][ T155] wlan1: Trigger new scan to find an IBSS to join [ 423.908791][ T9207] netlink: 'syz.1.1532': attribute type 10 has an invalid length. [ 424.004106][ T9210] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 424.060566][ T9214] netlink: 'syz.4.1531': attribute type 10 has an invalid length. [ 424.129253][ T9214] team0: Device ipvlan1 failed to register rx_handler [ 424.707815][ T9235] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 424.990753][ T9246] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 425.299906][ T9250] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 425.313233][ T9255] netlink: 'syz.2.1545': attribute type 10 has an invalid length. [ 425.783276][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 426.432846][ T9263] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1548'. [ 426.458366][ T9261] netlink: 'syz.0.1546': attribute type 10 has an invalid length. [ 426.732822][ T155] wlan1: Trigger new scan to find an IBSS to join [ 426.739388][ T144] wlan1: Trigger new scan to find an IBSS to join [ 426.756861][ T8234] wlan1: Creating new IBSS network, BSSID 86:cc:d7:63:f4:0e [ 427.008967][ T9270] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 427.285480][ T9283] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 427.500210][ T9292] netlink: 'syz.4.1560': attribute type 10 has an invalid length. [ 427.788364][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 428.140587][ T9305] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 428.192193][ T9308] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 428.418336][ T9324] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1569'. [ 428.593792][ T9330] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 429.298537][ T9344] netlink: 'syz.3.1576': attribute type 10 has an invalid length. [ 430.095865][ T9362] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.322235][ T9374] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.750987][ T9378] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1587'. [ 430.812668][ T154] wlan1: Trigger new scan to find an IBSS to join [ 430.857561][ T9380] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 431.537375][ T9381] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 431.779221][ T154] wlan1: Trigger new scan to find an IBSS to join [ 432.451656][ T9398] netlink: 'syz.4.1592': attribute type 10 has an invalid length. [ 432.883622][ T155] wlan1: Trigger new scan to find an IBSS to join [ 433.772890][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 434.002113][ T9430] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1602'. [ 434.734328][ T8234] wlan1: Trigger new scan to find an IBSS to join [ 434.812926][ T144] wlan1: Trigger new scan to find an IBSS to join [ 435.639024][ T154] wlan1: Creating new IBSS network, BSSID 0a:81:77:3c:41:c9 [ 435.648212][ T9421] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 435.659187][ T4294] ------------[ cut here ]------------ [ 435.665280][ T4294] WARNING: CPU: 1 PID: 4294 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 435.678230][ T9422] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 435.725004][ T4294] Modules linked in: [ 435.728968][ T4294] CPU: 1 PID: 4294 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 435.766463][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.779625][ T4294] Workqueue: cfg80211 cfg80211_event_work [ 435.785724][ T4241] wlan1: Trigger new scan to find an IBSS to join [ 435.797475][ T4294] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 435.806373][ T4294] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a1 b7 43 f8 0f 0b eb bb e8 98 b7 43 f8 <0f> 0b eb b2 e8 8f b7 43 f8 0f 0b e9 77 fd ff ff e8 83 b7 43 f8 0f [ 435.834726][ T4294] RSP: 0018:ffffc9000478faa0 EFLAGS: 00010293 [ 435.840848][ T4294] RAX: ffffffff89356978 RBX: dffffc0000000000 RCX: ffff88801d993b80 [ 435.848955][ T4294] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 435.857086][ T4294] RBP: ffffc9000478fb70 R08: ffffffff901d412f R09: 1ffffffff203a825 [ 435.865437][ T4294] R10: dffffc0000000000 R11: fffffbfff203a826 R12: ffff88802ab435f0 [ 435.874393][ T4294] R13: 1ffff920008f1f5c R14: 000000000000001f R15: ffff88805e330c90 [ 435.882530][ T4294] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 435.891473][ T4294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.898220][ T4294] CR2: 00007f6fd14762f8 CR3: 0000000072fab000 CR4: 00000000003506e0 [ 435.907063][ T4294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 435.915214][ T4294] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 435.923260][ T4294] Call Trace: [ 435.926695][ T4294] [ 435.929812][ T4294] ? trace_rdev_return_void+0x1c0/0x1c0 [ 435.935637][ T4294] ? cfg80211_event_work+0x23/0x40 [ 435.940770][ T4294] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 435.946948][ T4294] cfg80211_process_rdev_events+0x9d/0x110 [ 435.952836][ T4294] cfg80211_event_work+0x2b/0x40 [ 435.957881][ T4294] process_one_work+0x85f/0x1010 [ 435.962887][ T4294] ? worker_detach_from_pool+0x240/0x240 [ 435.968521][ T4294] ? lockdep_hardirqs_off+0x70/0x100 [ 435.973926][ T4294] ? _raw_spin_lock_irq+0xb7/0xf0 [ 435.978954][ T4294] ? _raw_spin_lock_irqsave+0x100/0x100 [ 435.984576][ T4294] ? wq_worker_running+0x97/0x170 [ 435.989615][ T4294] worker_thread+0xaa6/0x1290 [ 435.994354][ T4294] ? lockdep_hardirqs_on+0x94/0x140 [ 435.999583][ T4294] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 436.005546][ T4294] kthread+0x436/0x520 [ 436.009646][ T4294] ? rcu_lock_release+0x20/0x20 [ 436.015219][ T4294] ? kthread_blkcg+0xd0/0xd0 [ 436.019826][ T4294] ret_from_fork+0x1f/0x30 [ 436.024325][ T4294] [ 436.027527][ T4294] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 436.034795][ T4294] CPU: 1 PID: 4294 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 436.042316][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.052361][ T4294] Workqueue: cfg80211 cfg80211_event_work [ 436.058226][ T4294] Call Trace: [ 436.061497][ T4294] [ 436.064413][ T4294] dump_stack_lvl+0x188/0x250 [ 436.069075][ T4294] ? show_regs_print_info+0x20/0x20 [ 436.074262][ T4294] ? load_image+0x400/0x400 [ 436.078758][ T4294] panic+0x2e5/0x810 [ 436.082649][ T4294] ? bpf_jit_dump+0xd0/0xd0 [ 436.087173][ T4294] ? ret_from_fork+0x1f/0x30 [ 436.091777][ T4294] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 436.097314][ T4294] __warn+0x248/0x2b0 [ 436.101289][ T4294] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 436.106817][ T4294] report_bug+0x1b7/0x2e0 [ 436.111138][ T4294] handle_bug+0x3a/0x70 [ 436.115280][ T4294] exc_invalid_op+0x16/0x40 [ 436.119793][ T4294] asm_exc_invalid_op+0x16/0x20 [ 436.124662][ T4294] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 436.130810][ T4294] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a1 b7 43 f8 0f 0b eb bb e8 98 b7 43 f8 <0f> 0b eb b2 e8 8f b7 43 f8 0f 0b e9 77 fd ff ff e8 83 b7 43 f8 0f [ 436.150406][ T4294] RSP: 0018:ffffc9000478faa0 EFLAGS: 00010293 [ 436.156462][ T4294] RAX: ffffffff89356978 RBX: dffffc0000000000 RCX: ffff88801d993b80 [ 436.164418][ T4294] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 436.172378][ T4294] RBP: ffffc9000478fb70 R08: ffffffff901d412f R09: 1ffffffff203a825 [ 436.180602][ T4294] R10: dffffc0000000000 R11: fffffbfff203a826 R12: ffff88802ab435f0 [ 436.188564][ T4294] R13: 1ffff920008f1f5c R14: 000000000000001f R15: ffff88805e330c90 [ 436.196526][ T4294] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 436.202065][ T4294] ? trace_rdev_return_void+0x1c0/0x1c0 [ 436.207609][ T4294] ? cfg80211_event_work+0x23/0x40 [ 436.212794][ T4294] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 436.218676][ T4294] cfg80211_process_rdev_events+0x9d/0x110 [ 436.224471][ T4294] cfg80211_event_work+0x2b/0x40 [ 436.229427][ T4294] process_one_work+0x85f/0x1010 [ 436.234365][ T4294] ? worker_detach_from_pool+0x240/0x240 [ 436.239992][ T4294] ? lockdep_hardirqs_off+0x70/0x100 [ 436.245265][ T4294] ? _raw_spin_lock_irq+0xb7/0xf0 [ 436.250273][ T4294] ? _raw_spin_lock_irqsave+0x100/0x100 [ 436.255820][ T4294] ? wq_worker_running+0x97/0x170 [ 436.260859][ T4294] worker_thread+0xaa6/0x1290 [ 436.265525][ T4294] ? lockdep_hardirqs_on+0x94/0x140 [ 436.270706][ T4294] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 436.276591][ T4294] kthread+0x436/0x520 [ 436.280645][ T4294] ? rcu_lock_release+0x20/0x20 [ 436.285475][ T4294] ? kthread_blkcg+0xd0/0xd0 [ 436.290042][ T4294] ret_from_fork+0x1f/0x30 [ 436.294449][ T4294] [ 436.297557][ T4294] Kernel Offset: disabled [ 436.302000][ T4294] Rebooting in 86400 seconds..