last executing test programs: 3.79546319s ago: executing program 0 (id=143): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xfffffffffffffffc, 0x43a1bd76, 0x7, 0xa, 0x6, 0x82, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180800000000000085f804c4ae22eb70"], 0x0, 0x1e, 0x0, 0x1}, 0x28) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) 3.540344143s ago: executing program 2 (id=144): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008050) 3.437327039s ago: executing program 1 (id=145): bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x8000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRESHEX=0x0, @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu&\t\t') write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids '], 0x6) 3.245402418s ago: executing program 0 (id=147): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008050) 3.009055211s ago: executing program 2 (id=148): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002}]}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) 2.789143603s ago: executing program 2 (id=149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 2.675287519s ago: executing program 0 (id=150): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, 0x0, 0x52cc) 2.65299238s ago: executing program 1 (id=151): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.497830188s ago: executing program 2 (id=153): bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x8000, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRESHEX=0x0, @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ffdd935517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu&\t\t') write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids '], 0x6) 2.46197218s ago: executing program 1 (id=154): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.390069614s ago: executing program 0 (id=155): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008050) 2.27326947s ago: executing program 3 (id=156): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="c1", 0x1}], 0x1}, 0x24008030) 2.256778491s ago: executing program 1 (id=157): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) 1.89609997s ago: executing program 3 (id=158): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) 1.88378778s ago: executing program 0 (id=159): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008050) 1.856380322s ago: executing program 1 (id=160): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.604446245s ago: executing program 3 (id=161): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(r0, 0x0, 0x24008030) 1.389899166s ago: executing program 2 (id=162): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0xfdef) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008050) 1.199133476s ago: executing program 0 (id=163): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.117761831s ago: executing program 3 (id=164): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc0000000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x2, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES64], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d}, 0xffffffffffffff3a) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xf, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff81}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0xffbf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) 774.547189ms ago: executing program 1 (id=165): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000e7eba5ea024a2ab2556a412c4b300"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, &(0x7f0000000000), 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5000}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x22) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000001000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 538.515651ms ago: executing program 3 (id=166): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) close(r0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 439.005996ms ago: executing program 2 (id=167): close(0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xa15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\a\x00'/15, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000030000000200"/28], 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 0s ago: executing program 3 (id=168): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc0000000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x2, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES64], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d}, 0xffffffffffffff3a) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xf, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff81}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0xffbf) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. syzkaller login: [ 69.534662][ T5752] cgroup: Unknown subsys name 'net' [ 69.665253][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.361335][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.851762][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.858467][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.482949][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.499672][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.502275][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.518388][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.519833][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.528039][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.540627][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.542340][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.555931][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.556552][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.563902][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.570521][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.577875][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.586166][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.593343][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.600541][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.607568][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.620408][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.621663][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.635500][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.636476][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.650571][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.663457][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.677293][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.042489][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 74.184275][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.192595][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.200053][ T5766] bridge_slave_0: entered allmulticast mode [ 74.206949][ T5766] bridge_slave_0: entered promiscuous mode [ 74.228602][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 74.246917][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.254255][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.261894][ T5766] bridge_slave_1: entered allmulticast mode [ 74.268938][ T5766] bridge_slave_1: entered promiscuous mode [ 74.340829][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.388265][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.453866][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 74.464588][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.473229][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.480885][ T5764] bridge_slave_0: entered allmulticast mode [ 74.487704][ T5764] bridge_slave_0: entered promiscuous mode [ 74.503715][ T5766] team0: Port device team_slave_0 added [ 74.517425][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.525748][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.533323][ T5764] bridge_slave_1: entered allmulticast mode [ 74.540871][ T5764] bridge_slave_1: entered promiscuous mode [ 74.547714][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 74.561080][ T5766] team0: Port device team_slave_1 added [ 74.654689][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.685768][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.695981][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.705765][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.732868][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.776584][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.783664][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.810327][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.861851][ T5764] team0: Port device team_slave_0 added [ 74.878546][ T5764] team0: Port device team_slave_1 added [ 74.884628][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.894980][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.902387][ T5768] bridge_slave_0: entered allmulticast mode [ 74.910321][ T5768] bridge_slave_0: entered promiscuous mode [ 74.936534][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.943803][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.953859][ T5765] bridge_slave_0: entered allmulticast mode [ 74.960871][ T5765] bridge_slave_0: entered promiscuous mode [ 74.970868][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.978255][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.985791][ T5765] bridge_slave_1: entered allmulticast mode [ 74.992834][ T5765] bridge_slave_1: entered promiscuous mode [ 75.000889][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.008208][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.015395][ T5768] bridge_slave_1: entered allmulticast mode [ 75.023039][ T5768] bridge_slave_1: entered promiscuous mode [ 75.040044][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.047040][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.073274][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.085754][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.092831][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.119035][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.181987][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.213099][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.224431][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.248986][ T5766] hsr_slave_0: entered promiscuous mode [ 75.255307][ T5766] hsr_slave_1: entered promiscuous mode [ 75.265869][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.306867][ T5768] team0: Port device team_slave_0 added [ 75.339248][ T5764] hsr_slave_0: entered promiscuous mode [ 75.345597][ T5764] hsr_slave_1: entered promiscuous mode [ 75.352036][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.360195][ T5764] Cannot create hsr debugfs directory [ 75.375449][ T5768] team0: Port device team_slave_1 added [ 75.412122][ T5765] team0: Port device team_slave_0 added [ 75.421254][ T5765] team0: Port device team_slave_1 added [ 75.500102][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.507328][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.533638][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.545830][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.553283][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.580220][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.593354][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.600736][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.626833][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.663496][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.670707][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.688960][ T5772] Bluetooth: hci2: command tx timeout [ 75.698233][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.702998][ T5082] Bluetooth: hci3: command tx timeout [ 75.769073][ T5082] Bluetooth: hci0: command tx timeout [ 75.769887][ T5772] Bluetooth: hci1: command tx timeout [ 75.818762][ T5765] hsr_slave_0: entered promiscuous mode [ 75.825240][ T5765] hsr_slave_1: entered promiscuous mode [ 75.832784][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.840467][ T5765] Cannot create hsr debugfs directory [ 75.861693][ T5768] hsr_slave_0: entered promiscuous mode [ 75.870817][ T5768] hsr_slave_1: entered promiscuous mode [ 75.877017][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.884861][ T5768] Cannot create hsr debugfs directory [ 76.201478][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.226018][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.253305][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.270571][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.312017][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.328404][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.342453][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.357451][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.421237][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.451378][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.461381][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.485169][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.587600][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.601957][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.622215][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.639951][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.711666][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.753136][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.772461][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.820665][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.828146][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.850486][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.857623][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.873637][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.887399][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.910836][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.918080][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.943074][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.973234][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.980492][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.015789][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.022989][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.039728][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.046870][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.066026][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.201304][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.253493][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.260830][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.289483][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.297053][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.411120][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.655495][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.716917][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.769532][ T5772] Bluetooth: hci2: command tx timeout [ 77.777635][ T5772] Bluetooth: hci3: command tx timeout [ 77.842027][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.849796][ T5772] Bluetooth: hci0: command tx timeout [ 77.858464][ T5772] Bluetooth: hci1: command tx timeout [ 77.887781][ T5766] veth0_vlan: entered promiscuous mode [ 77.904468][ T5764] veth0_vlan: entered promiscuous mode [ 77.929707][ T5766] veth1_vlan: entered promiscuous mode [ 77.941077][ T5764] veth1_vlan: entered promiscuous mode [ 77.967765][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.059504][ T5764] veth0_macvtap: entered promiscuous mode [ 78.084484][ T5764] veth1_macvtap: entered promiscuous mode [ 78.097329][ T5768] veth0_vlan: entered promiscuous mode [ 78.105202][ T5766] veth0_macvtap: entered promiscuous mode [ 78.122399][ T5766] veth1_macvtap: entered promiscuous mode [ 78.141486][ T5765] veth0_vlan: entered promiscuous mode [ 78.160510][ T5768] veth1_vlan: entered promiscuous mode [ 78.173961][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.190195][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.213986][ T5765] veth1_vlan: entered promiscuous mode [ 78.226653][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.237452][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.246664][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.256857][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.272962][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.284439][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.295509][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.309490][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.322558][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.335142][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.358754][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.367613][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.376498][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.385597][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.435738][ T5768] veth0_macvtap: entered promiscuous mode [ 78.492171][ T5768] veth1_macvtap: entered promiscuous mode [ 78.535009][ T5765] veth0_macvtap: entered promiscuous mode [ 78.582278][ T5765] veth1_macvtap: entered promiscuous mode [ 78.590687][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.603250][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.605781][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.621952][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.633384][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.644030][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.656329][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.704400][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.719478][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.731759][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.745404][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.755616][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.766409][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.779513][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.807046][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.816937][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.826322][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.835950][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.845189][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.854215][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.872740][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.883471][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.895155][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.906178][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.916329][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.927144][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.939639][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.958863][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.969472][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.991335][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.002782][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.013228][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.026570][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.037126][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.051290][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.063474][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.097015][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.106850][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.116528][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.125472][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.358338][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.366336][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.477453][ T5832] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 79.487962][ C1] hrtimer: interrupt took 43076 ns [ 79.506369][ T5832] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.563786][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.599994][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.658221][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.694459][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.834770][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.849709][ T5772] Bluetooth: hci3: command tx timeout [ 79.855184][ T5772] Bluetooth: hci2: command tx timeout [ 79.870318][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.913049][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.927579][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.928695][ T5082] Bluetooth: hci0: command tx timeout [ 79.940525][ T5772] Bluetooth: hci1: command tx timeout [ 79.965108][ T5838] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 79.984846][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.993353][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.481006][ T5839] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6'. [ 80.617246][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.736874][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.761997][ T5839] bond0 (unregistering): Released all slaves [ 81.124705][ T5850] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.273991][ T5850] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 81.390564][ T5849] netlink: 'syz.2.7': attribute type 2 has an invalid length. [ 81.424447][ T5849] netlink: 119 bytes leftover after parsing attributes in process `syz.2.7'. [ 81.818978][ T5858] netlink: 'syz.0.9': attribute type 2 has an invalid length. [ 81.847459][ T5858] netlink: 119 bytes leftover after parsing attributes in process `syz.0.9'. [ 81.948595][ T5772] Bluetooth: hci2: command tx timeout [ 81.954377][ T5082] Bluetooth: hci3: command tx timeout [ 82.009051][ T5082] Bluetooth: hci1: command tx timeout [ 82.014698][ T5772] Bluetooth: hci0: command tx timeout [ 83.379645][ T50] wlan1: Trigger new scan to find an IBSS to join [ 87.259044][ T27] cfg80211: failed to load regulatory.db [ 88.361307][ T4443] wlan1: Trigger new scan to find an IBSS to join [ 88.413257][ T5993] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 89.744985][ T6003] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 89.747503][ T6000] Zero length message leads to an empty skb [ 90.038443][ T6007] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 90.126207][ T6011] netlink: 'syz.1.51': attribute type 2 has an invalid length. [ 90.148808][ T6011] netlink: 119 bytes leftover after parsing attributes in process `syz.1.51'. [ 90.342095][ T6012] netlink: 'syz.3.50': attribute type 2 has an invalid length. [ 90.350489][ T6012] netlink: 119 bytes leftover after parsing attributes in process `syz.3.50'. [ 90.402917][ T6015] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 91.225116][ T6026] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 91.274074][ T6024] netlink: 'syz.2.55': attribute type 2 has an invalid length. [ 91.322106][ T6024] netlink: 164 bytes leftover after parsing attributes in process `syz.2.55'. [ 91.574055][ T6031] netlink: 'syz.0.59': attribute type 2 has an invalid length. [ 91.598809][ T6031] netlink: 164 bytes leftover after parsing attributes in process `syz.0.59'. [ 91.740295][ T6036] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 91.849874][ T6039] netlink: 'syz.3.61': attribute type 25 has an invalid length. [ 92.097267][ T6041] netlink: 'syz.0.62': attribute type 2 has an invalid length. [ 92.114126][ T6041] netlink: 164 bytes leftover after parsing attributes in process `syz.0.62'. [ 92.229007][ T6046] netlink: 'syz.3.64': attribute type 2 has an invalid length. [ 92.242307][ T6046] netlink: 164 bytes leftover after parsing attributes in process `syz.3.64'. [ 92.577065][ T6051] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 92.595322][ T6050] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 92.932560][ T6056] netlink: 'syz.1.67': attribute type 25 has an invalid length. [ 93.486225][ T6060] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 94.050029][ T6068] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 94.069164][ T6073] netlink: 140 bytes leftover after parsing attributes in process `syz.3.74'. [ 94.079089][ T6073] netlink: 10 bytes leftover after parsing attributes in process `syz.3.74'. [ 94.091533][ T6073] bond0: (slave bond_slave_0): Releasing backup interface [ 94.115679][ T6073] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 94.232027][ T6071] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 95.156314][ T6085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.77'. [ 95.174288][ T6087] netlink: 156 bytes leftover after parsing attributes in process `syz.1.78'. [ 95.202225][ T6089] netlink: 156 bytes leftover after parsing attributes in process `syz.0.79'. [ 95.289513][ T3486] wlan1: Trigger new scan to find an IBSS to join [ 95.418142][ T6097] netlink: 'syz.1.83': attribute type 4 has an invalid length. [ 95.462850][ T5082] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 96.328153][ T49] wlan1: Trigger new scan to find an IBSS to join [ 97.292240][ T4443] wlan1: Trigger new scan to find an IBSS to join [ 99.294784][ T49] wlan1: Trigger new scan to find an IBSS to join [ 100.354132][ T4443] wlan1: Trigger new scan to find an IBSS to join [ 100.371632][ T34] wlan1: Trigger new scan to find an IBSS to join [ 100.464024][ T5772] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 100.495080][ T49] wlan1: Creating new IBSS network, BSSID 2a:10:81:68:c1:b3 [ 101.000762][ T6224] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 101.058632][ T6220] netlink: 'syz.0.119': attribute type 2 has an invalid length. [ 101.083981][ T6220] netlink: 119 bytes leftover after parsing attributes in process `syz.0.119'. [ 101.328062][ T6230] netlink: 'syz.1.121': attribute type 2 has an invalid length. [ 101.398323][ T6230] netlink: 119 bytes leftover after parsing attributes in process `syz.1.121'. [ 101.585468][ T6236] netlink: 'syz.2.123': attribute type 2 has an invalid length. [ 101.623791][ T6236] netlink: 119 bytes leftover after parsing attributes in process `syz.2.123'. [ 101.725844][ T6240] netlink: 'syz.1.124': attribute type 25 has an invalid length. [ 101.756537][ T6242] netlink: 'syz.3.125': attribute type 25 has an invalid length. [ 101.970951][ T6244] netlink: 'syz.2.126': attribute type 2 has an invalid length. [ 101.996507][ T6244] netlink: 119 bytes leftover after parsing attributes in process `syz.2.126'. [ 102.038642][ T6248] netlink: 'syz.1.128': attribute type 25 has an invalid length. [ 102.333013][ T4443] wlan1: Creating new IBSS network, BSSID d6:2f:2c:75:ae:3b [ 103.382176][ T49] wlan1: Trigger new scan to find an IBSS to join [ 103.716224][ T6288] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 103.816142][ T6287] netlink: 'syz.2.139': attribute type 2 has an invalid length. [ 103.829555][ T6287] netlink: 119 bytes leftover after parsing attributes in process `syz.2.139'. [ 104.792383][ T6284] netlink: 'syz.0.138': attribute type 2 has an invalid length. [ 104.800478][ T6284] netlink: 119 bytes leftover after parsing attributes in process `syz.0.138'. [ 105.015736][ T6298] netlink: 'syz.2.141': attribute type 2 has an invalid length. [ 105.032799][ T6298] netlink: 119 bytes leftover after parsing attributes in process `syz.2.141'. [ 105.339472][ T6309] netlink: 119 bytes leftover after parsing attributes in process `syz.0.143'. [ 106.328547][ T11] wlan1: Trigger new scan to find an IBSS to join [ 106.343039][ T34] wlan1: Trigger new scan to find an IBSS to join [ 108.305504][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 108.539483][ T3486] wlan1: Trigger new scan to find an IBSS to join [ 108.573750][ T3486] wlan1: Trigger new scan to find an IBSS to join [ 108.924943][ T986] wlan1: Creating new IBSS network, BSSID 42:bf:85:de:ee:a2 [ 108.949403][ T6378] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 108.950077][ T34] ------------[ cut here ]------------ [ 108.964318][ T34] WARNING: CPU: 1 PID: 34 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 108.977849][ T34] Modules linked in: [ 108.982890][ T34] CPU: 1 PID: 34 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 108.990354][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.000750][ T34] Workqueue: cfg80211 cfg80211_event_work [ 109.006527][ T34] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 109.012779][ T34] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 b0 a0 f7 0f 0b eb bb e8 ae b0 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 a0 b0 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 109.033027][ T34] RSP: 0018:ffffc90000aafa20 EFLAGS: 00010293 [ 109.039208][ T34] RAX: ffffffff89e67152 RBX: dffffc0000000000 RCX: ffff8880182f9e00 [ 109.047573][ T34] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 109.055755][ T34] RBP: ffffc90000aafaf8 R08: ffffffff911c556f R09: 1ffffffff2238aad [ 109.063817][ T34] R10: dffffc0000000000 R11: fffffbfff2238aae R12: ffff88805b328c90 [ 109.071936][ T34] R13: 1ffff92000155f4c R14: ffff88801bf435f8 R15: 000000000000001f [ 109.080437][ T34] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 109.089694][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.096341][ T34] CR2: 0000000000000004 CR3: 000000002ba35000 CR4: 00000000003506e0 [ 109.104429][ T34] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.112887][ T34] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 109.121438][ T34] Call Trace: [ 109.124769][ T34] [ 109.127749][ T34] ? mutex_lock_nested+0x20/0x20 [ 109.132893][ T34] ? trace_rdev_return_void+0x1c0/0x1c0 [ 109.138535][ T34] cfg80211_process_wdev_events+0x3bc/0x550 [ 109.145108][ T34] cfg80211_process_rdev_events+0xa1/0x110 [ 109.151143][ T34] cfg80211_event_work+0x2f/0x40 [ 109.156135][ T34] ? process_scheduled_works+0x96f/0x15d0 [ 109.161990][ T34] process_scheduled_works+0xa5d/0x15d0 [ 109.167621][ T34] ? worker_attach_to_pool+0x380/0x380 [ 109.173254][ T34] ? assign_work+0x3d2/0x5d0 [ 109.178250][ T34] worker_thread+0xa55/0xfc0 [ 109.182953][ T34] kthread+0x2fa/0x390 [ 109.187075][ T34] ? pr_cont_work+0x560/0x560 [ 109.191889][ T34] ? kthread_blkcg+0xd0/0xd0 [ 109.196529][ T34] ret_from_fork+0x48/0x80 [ 109.201052][ T34] ? kthread_blkcg+0xd0/0xd0 [ 109.205718][ T34] ret_from_fork_asm+0x11/0x20 [ 109.210598][ T34] [ 109.213657][ T34] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.220966][ T34] CPU: 1 PID: 34 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 109.228385][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.238505][ T34] Workqueue: cfg80211 cfg80211_event_work [ 109.244353][ T34] Call Trace: [ 109.247723][ T34] [ 109.250675][ T34] dump_stack_lvl+0x18c/0x250 [ 109.255382][ T34] ? show_regs_print_info+0x20/0x20 [ 109.260792][ T34] ? load_image+0x420/0x420 [ 109.265310][ T34] panic+0x2dc/0x730 [ 109.269229][ T34] ? bpf_jit_dump+0xd0/0xd0 [ 109.273888][ T34] ? ret_from_fork_asm+0x11/0x20 [ 109.278854][ T34] __warn+0x2e0/0x470 [ 109.282899][ T34] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 109.288476][ T34] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 109.294067][ T34] report_bug+0x2be/0x4f0 [ 109.298413][ T34] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 109.304070][ T34] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 109.309655][ T34] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 109.315249][ T34] handle_bug+0xcf/0x120 [ 109.319517][ T34] exc_invalid_op+0x1a/0x50 [ 109.324027][ T34] asm_exc_invalid_op+0x1a/0x20 [ 109.328920][ T34] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 109.335089][ T34] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 b0 a0 f7 0f 0b eb bb e8 ae b0 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 a0 b0 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 109.354888][ T34] RSP: 0018:ffffc90000aafa20 EFLAGS: 00010293 [ 109.360971][ T34] RAX: ffffffff89e67152 RBX: dffffc0000000000 RCX: ffff8880182f9e00 [ 109.368952][ T34] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 109.377039][ T34] RBP: ffffc90000aafaf8 R08: ffffffff911c556f R09: 1ffffffff2238aad [ 109.385039][ T34] R10: dffffc0000000000 R11: fffffbfff2238aae R12: ffff88805b328c90 [ 109.393128][ T34] R13: 1ffff92000155f4c R14: ffff88801bf435f8 R15: 000000000000001f [ 109.401128][ T34] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 109.406734][ T34] ? mutex_lock_nested+0x20/0x20 [ 109.411689][ T34] ? trace_rdev_return_void+0x1c0/0x1c0 [ 109.417263][ T34] cfg80211_process_wdev_events+0x3bc/0x550 [ 109.423209][ T34] cfg80211_process_rdev_events+0xa1/0x110 [ 109.429046][ T34] cfg80211_event_work+0x2f/0x40 [ 109.434093][ T34] ? process_scheduled_works+0x96f/0x15d0 [ 109.439859][ T34] process_scheduled_works+0xa5d/0x15d0 [ 109.445469][ T34] ? worker_attach_to_pool+0x380/0x380 [ 109.451041][ T34] ? assign_work+0x3d2/0x5d0 [ 109.455674][ T34] worker_thread+0xa55/0xfc0 [ 109.460332][ T34] kthread+0x2fa/0x390 [ 109.464473][ T34] ? pr_cont_work+0x560/0x560 [ 109.469179][ T34] ? kthread_blkcg+0xd0/0xd0 [ 109.473818][ T34] ret_from_fork+0x48/0x80 [ 109.478273][ T34] ? kthread_blkcg+0xd0/0xd0 [ 109.482934][ T34] ret_from_fork_asm+0x11/0x20 [ 109.487746][ T34] [ 109.491354][ T34] Kernel Offset: disabled [ 109.495753][ T34] Rebooting in 86400 seconds..