last executing test programs: 5.763873435s ago: executing program 4 (id=6569): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000000000800000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000164cdf88c6aefc03e42bcf2d2519335521bc993c4a69c4eacdb3c56dcaabcfd4893eaa7e4fab9aaf6bae1ff6ba99f170ea27ab0282fbdc69edfaef4d806949ac8f2bd009671570c6383caf82748e7f37af53305f843127b5a5f0b58e5c9f2746cfd08a45558faad5b5dcb02772af7a0e140a9cc1581964f84ac247b1baa7882653d43acf"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r1], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xd2ce26a9b5453268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1}, 0x40000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040)=0x2c, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x17, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="2e3d36c4a4109849642e05c865bf4103a298e0adaa4023d8a5d0496f52378a63ccbb5c290285a8f6a2749a33125c6c89091266c3739993c9e7a48dfa5b396bc63fe109b8ab781a42777571ea25c9bd18a1816ddc5e0f59eaeeba352b79fdbde32c38fb2aafaae1742f83578724b6c6f22e5f4ff1e2c3267c8b1f892d7bda83e0cc1769", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.252912782s ago: executing program 2 (id=6572): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x62a, 0xac5b, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 4.486656113s ago: executing program 0 (id=6574): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000000000800000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000164cdf88c6aefc03e42bcf2d2519335521bc993c4a69c4eacdb3c56dcaabcfd4893eaa7e4fab9aaf6bae1ff6ba99f170ea27ab0282fbdc69edfaef4d806949ac8f2bd009671570c6383caf82748e7f37af53305f843127b5a5f0b58e5c9f2746cfd08a45558faad5b5dcb02772af7a0e140a9cc1581964f84ac247b1baa7882653d43acf"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xd2ce26a9b5453268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1}, 0x40000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040)=0x2c, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x17, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.474856163s ago: executing program 2 (id=6575): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000000000800000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000164cdf88c6aefc03e42bcf2d2519335521bc993c4a69c4eacdb3c56dcaabcfd4893eaa7e4fab9aaf6bae1ff6ba99f170ea27ab0282fbdc69edfaef4d806949ac8f2bd009671570c6383caf82748e7f37af53305f843127b5a5f0b58e5c9f2746cfd08a45558faad5b5dcb02772af7a0e140a9cc1581964f84ac247b1baa7882653d43acf"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xd2ce26a9b5453268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b02", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1}, 0x40000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040)=0x2c, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x17, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="2e3d36c4a4109849642e05c865bf4103a298e0adaa4023d8a5d0496f52378a63ccbb5c290285a8f6a2749a33125c6c89091266c3739993c9e7a48dfa5b396bc63fe109b8ab781a42777571ea25c9bd18a1816ddc5e0f59eaeeba352b79fdbde32c38fb2aafaae1742f83578724b6c6f22e5f4ff1e2c3267c8b1f892d7bda83e0cc1769", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.279504834s ago: executing program 4 (id=6577): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000000000800000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000164cdf88c6aefc03e42bcf2d2519335521bc993c4a69c4eacdb3c56dcaabcfd4893eaa7e4fab9aaf6bae1ff6ba99f170ea27ab0282fbdc69edfaef4d806949ac8f2bd009671570c6383caf82748e7f37af53305f843127b5a5f0b58e5c9f2746cfd08a45558faad5b5dcb02772af7a0e140a9cc1581964f84ac247b1baa7882653d43acf"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r1], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xd2ce26a9b5453268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1}, 0x40000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040)=0x2c, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x17, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="2e3d36c4a4109849642e05c865bf4103a298e0adaa4023d8a5d0496f52378a63ccbb5c290285a8f6a2749a33125c6c89091266c3739993c9e7a48dfa5b396bc63fe109b8ab781a42777571ea25c9bd18a1816ddc5e0f59eaeeba352b79fdbde32c38fb2aafaae1742f83578724b6c6f22e5f4ff1e2c3267c8b1f892d7bda83e0cc1769", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.76963137s ago: executing program 1 (id=6580): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x10, 0x0, 0x0, 0x0, 0x5a004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x9176b22ad76442ed, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030000000000000000000000850000001800000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2ff030060010002009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, 0x0, 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000}, 0x0, 0x400000, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x7}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="1c00000033000b12d25a80648c2594f90124fc60100c03400200000000", 0x1d}], 0x1}, 0x0) 3.39555226s ago: executing program 0 (id=6582): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000000000800000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000164cdf88c6aefc03e42bcf2d2519335521bc993c4a69c4eacdb3c56dcaabcfd4893eaa7e4fab9aaf6bae1ff6ba99f170ea27ab0282fbdc69edfaef4d806949ac8f2bd009671570c6383caf82748e7f37af53305f843127b5a5f0b58e5c9f2746cfd08a45558faad5b5dcb02772af7a0e140a9cc1581964f84ac247b1baa7882653d43acf"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xd2ce26a9b5453268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1}, 0x40000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040)=0x2c, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r4, 0x0, 0x0) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x17, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="2e3d36c4a4109849642e05c865bf4103a298e0adaa4023d8a5d0496f52378a63ccbb5c290285a8f6a2749a33125c6c89091266c3739993c9e7a48dfa5b396bc63fe109b8ab781a42777571ea25c9bd18a1816ddc5e0f59eaeeba352b79fdbde32c38fb2aafaae1742f83578724b6c6f22e5f4ff1e2c3267c8b1f892d7bda83e0cc1769", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.387544141s ago: executing program 3 (id=6583): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4556, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x3}, 0x18, 0x0, 0xfffffffe, 0x1, 0x5, 0x2, 0x103, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 3.370420892s ago: executing program 1 (id=6584): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e28, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) 3.350432653s ago: executing program 4 (id=6585): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x10c002, 0xac5d, 0x0, 0x7, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000089}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) close(0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xa15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="00000000030000000200"/28], 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, 0x0, 0x20000811) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x2000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000008"}) 3.337503824s ago: executing program 2 (id=6586): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x10, 0x0, 0x0, 0x0, 0x5a004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x9176b22ad76442ed, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030000000000000000000000850000001800000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2ff030060010002009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, 0x0, 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000}, 0x0, 0x400000, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x7}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="1c00000033000b12d25a80648c2594f90124fc60100c03400200000000", 0x1d}], 0x1}, 0x0) 3.118073995s ago: executing program 3 (id=6587): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x62a, 0xac5b, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 2.995514731s ago: executing program 0 (id=6588): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x10, 0x0, 0x0, 0x0, 0x5a004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x9176b22ad76442ed, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030000000000000000000000850000001800000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2ff030060010002009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, 0x0, 0x120) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000140), 0x16) 2.960148933s ago: executing program 1 (id=6598): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000000000800000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000164cdf88c6aefc03e42bcf2d2519335521bc993c4a69c4eacdb3c56dcaabcfd4893eaa7e4fab9aaf6bae1ff6ba99f170ea27ab0282fbdc69edfaef4d806949ac8f2bd009671570c6383caf82748e7f37af53305f843127b5a5f0b58e5c9f2746cfd08a45558faad5b5dcb02772af7a0e140a9cc1581964f84ac247b1baa7882653d43acf"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xd2ce26a9b5453268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1}, 0x40000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040)=0x2c, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r4, 0x0, 0x0) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x17, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="2e3d36c4a4109849642e05c865bf4103a298e0adaa4023d8a5d0496f52378a63ccbb5c290285a8f6a2749a33125c6c89091266c3739993c9e7a48dfa5b396bc63fe109b8ab781a42777571ea25c9bd18a1816ddc5e0f59eaeeba352b79fdbde32c38fb2aafaae1742f83578724b6c6f22e5f4ff1e2c3267c8b1f892d7bda83e0cc1769", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.783351773s ago: executing program 4 (id=6589): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x10, 0x0, 0x0, 0x0, 0x5a004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x9176b22ad76442ed, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030000000000000000000000850000001800000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r0, 0x0, 0x120) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000140), 0x16) 2.64759091s ago: executing program 3 (id=6590): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x10c002, 0xac5d, 0x0, 0x7, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000089}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xa15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="00000000030000000200"/28], 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, 0x0, 0x20000811) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x2000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, 0x0, 0x22044880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000008"}) 2.605256202s ago: executing program 2 (id=6591): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000000000800000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000164cdf88c6aefc03e42bcf2d2519335521bc993c4a69c4eacdb3c56dcaabcfd4893eaa7e4fab9aaf6bae1ff6ba99f170ea27ab0282fbdc69edfaef4d806949ac8f2bd009671570c6383caf82748e7f37af53305f843127b5a5f0b58e5c9f2746cfd08a45558faad5b5dcb02772af7a0e140a9cc1581964f84ac247b1baa7882653d43acf"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r1], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xd2ce26a9b5453268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1}, 0x40000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040)=0x2c, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x17, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="2e3d36c4a4109849642e05c865bf4103a298e0adaa4023d8a5d0496f52378a63ccbb5c290285a8f6a2749a33125c6c89091266c3739993c9e7a48dfa5b396bc63fe109b8ab781a42777571ea25c9bd18a1816ddc5e0f59eaeeba352b79fdbde32c38fb2aafaae1742f83578724b6c6f22e5f4ff1e2c3267c8b1f892d7bda83e0cc1769", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.520262016s ago: executing program 1 (id=6592): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000000000800000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000164cdf88c6aefc03e42bcf2d2519335521bc993c4a69c4eacdb3c56dcaabcfd4893eaa7e4fab9aaf6bae1ff6ba99f170ea27ab0282fbdc69edfaef4d806949ac8f2bd009671570c6383caf82748e7f37af53305f843127b5a5f0b58e5c9f2746cfd08a45558faad5b5dcb02772af7a0e140a9cc1581964f84ac247b1baa7882653d43acf"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xd2ce26a9b5453268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1}, 0x40000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040)=0x2c, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x17, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.459131399s ago: executing program 0 (id=6593): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x10, 0x0, 0x0, 0x0, 0x5a004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x9176b22ad76442ed, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 2.335869387s ago: executing program 4 (id=6594): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x10, 0x0, 0x0, 0x0, 0x5a004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x9176b22ad76442ed, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030000000000000000000000850000001800000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2ff030060010002009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, 0x0, 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, &(0x7f0000000140)=r3, 0x16) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000}, 0x0, 0x400000, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="1c00000033000b12d25a80648c2594f90124fc60100c03400200000000", 0x1d}], 0x1}, 0x0) 2.028484113s ago: executing program 0 (id=6595): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x10, 0x0, 0x0, 0x0, 0x5a004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x9176b22ad76442ed, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030000000000000000000000850000001800000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2ff030060010002009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, 0x0, 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000}, 0x0, 0x400000, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x7}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="1c00000033000b12d25a80648c2594f90124fc60100c03400200000000", 0x1d}], 0x1}, 0x0) 1.577181087s ago: executing program 4 (id=6596): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000000000800000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000164cdf88c6aefc03e42bcf2d2519335521bc993c4a69c4eacdb3c56dcaabcfd4893eaa7e4fab9aaf6bae1ff6ba99f170ea27ab0282fbdc69edfaef4d806949ac8f2bd009671570c6383caf82748e7f37af53305f843127b5a5f0b58e5c9f2746cfd08a45558faad5b5dcb02772af7a0e140a9cc1581964f84ac247b1baa7882653d43acf"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r1], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xd2ce26a9b5453268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1}, 0x40000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040)=0x2c, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x17, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="2e3d36c4a4109849642e05c865bf4103a298e0adaa4023d8a5d0496f52378a63ccbb5c290285a8f6a2749a33125c6c89091266c3739993c9e7a48dfa5b396bc63fe109b8ab781a42777571ea25c9bd18a1816ddc5e0f59eaeeba352b79fdbde32c38fb2aafaae1742f83578724b6c6f22e5f4ff1e2c3267c8b1f892d7bda83e0cc1769", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.528181279s ago: executing program 3 (id=6607): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e28, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) 1.462599753s ago: executing program 1 (id=6597): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4556, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x3}, 0x18, 0x0, 0xfffffffe, 0x1, 0x5, 0x2, 0x103, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 1.374156358s ago: executing program 2 (id=6599): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e28, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) 1.070349984s ago: executing program 3 (id=6600): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x10, 0x0, 0x0, 0x0, 0x5a004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x9176b22ad76442ed, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030000000000000000000000850000001800000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2ff030060010002009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, 0x0, 0x120) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000}, 0x0, 0x400000, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x7}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="1c00000033000b12d25a80648c2594f90124fc60100c03400200000000", 0x1d}], 0x1}, 0x0) 927.715331ms ago: executing program 0 (id=6601): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x62a, 0xac5b, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 892.920643ms ago: executing program 1 (id=6602): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x10, 0x0, 0x0, 0x0, 0x5a004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x9176b22ad76442ed, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030000000000000000000000850000001800000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2ff030060010002009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, 0x0, 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000}, 0x0, 0x400000, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x7}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="1c00000033000b12d25a80648c2594f90124fc60100c03400200000000", 0x1d}], 0x1}, 0x0) 478.669255ms ago: executing program 2 (id=6603): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000000000800000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000164cdf88c6aefc03e42bcf2d2519335521bc993c4a69c4eacdb3c56dcaabcfd4893eaa7e4fab9aaf6bae1ff6ba99f170ea27ab0282fbdc69edfaef4d806949ac8f2bd009671570c6383caf82748e7f37af53305f843127b5a5f0b58e5c9f2746cfd08a45558faad5b5dcb02772af7a0e140a9cc1581964f84ac247b1baa7882653d43acf"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xd2ce26a9b5453268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1}, 0x40000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) write$cgroup_int(r6, &(0x7f0000000040)=0x2c, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r3, 0x0, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x17, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000), 0x8) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 3 (id=6604): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x10, 0x0, 0x0, 0x0, 0x5a004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x9176b22ad76442ed, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030000000000000000000000850000001800000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2ff030060010002009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, 0x0, 0x120) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000140), 0x16) kernel console output (not intermixed with test programs): [T24816] RBP: 00007f1296a11090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.685490][T24816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.693499][T24816] R13: 00007f1295e16038 R14: 00007f1295e15fa0 R15: 00007ffc49ce2b18 [ 1070.701513][T24816] [ 1070.981314][T24829] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1071.079776][T24836] FAULT_INJECTION: forcing a failure. [ 1071.079776][T24836] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.153835][T24836] CPU: 0 PID: 24836 Comm: syz.0.5818 Not tainted syzkaller #0 [ 1071.161383][T24836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1071.171482][T24836] Call Trace: [ 1071.174814][T24836] [ 1071.177788][T24836] dump_stack_lvl+0x188/0x24e [ 1071.182533][T24836] ? show_regs_print_info+0x12/0x12 [ 1071.187788][T24836] ? load_image+0x400/0x400 [ 1071.192361][T24836] ? __might_sleep+0xd0/0xd0 [ 1071.197103][T24836] ? __lock_acquire+0x7d10/0x7d10 [ 1071.202207][T24836] should_fail_ex+0x399/0x4d0 [ 1071.207037][T24836] should_failslab+0x5/0x20 [ 1071.211585][T24836] slab_pre_alloc_hook+0x59/0x310 [ 1071.216666][T24836] ? sctp_transport_hold+0x145/0x1c0 [ 1071.222018][T24836] ? sctp_datamsg_from_user+0x84/0xee0 [ 1071.227537][T24836] __kmem_cache_alloc_node+0x4f/0x260 [ 1071.233005][T24836] ? sctp_datamsg_from_user+0x84/0xee0 [ 1071.238520][T24836] kmalloc_trace+0x26/0xe0 [ 1071.243005][T24836] sctp_datamsg_from_user+0x84/0xee0 [ 1071.248351][T24836] ? sctp_hash_obj+0x250/0x250 [ 1071.253227][T24836] ? rhltable_lookup+0x698/0x770 [ 1071.258313][T24836] ? sctp_hash_obj+0x250/0x250 [ 1071.263113][T24836] ? sctp_hash_transport+0x1990/0x1990 [ 1071.268727][T24836] sctp_sendmsg_to_asoc+0x107b/0x1830 [ 1071.274278][T24836] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 1071.280135][T24836] ? __local_bh_enable_ip+0x136/0x1c0 [ 1071.285545][T24836] ? _local_bh_enable+0xa0/0xa0 [ 1071.290432][T24836] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1071.296280][T24836] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1071.302119][T24836] ? sctp_sendmsg_check_sflags+0x18d/0x2d0 [ 1071.308056][T24836] sctp_sendmsg+0x1984/0x2940 [ 1071.312783][T24836] ? aa_sk_perm+0x771/0x950 [ 1071.317330][T24836] ? sctp_getsockopt+0x8a0/0x8a0 [ 1071.322310][T24836] ? __might_fault+0xa6/0x120 [ 1071.327024][T24836] ? aa_af_perm+0x340/0x340 [ 1071.331569][T24836] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1071.338096][T24836] ? inet_sendmsg+0x78/0x2f0 [ 1071.342731][T24836] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1071.348057][T24836] ? security_socket_sendmsg+0x7c/0xa0 [ 1071.353564][T24836] ? inet_send_prepare+0x260/0x260 [ 1071.358714][T24836] ____sys_sendmsg+0x5be/0x970 [ 1071.363530][T24836] ? __sys_sendmsg_sock+0x30/0x30 [ 1071.368611][T24836] ? __import_iovec+0x315/0x500 [ 1071.373526][T24836] ? import_iovec+0x6f/0xa0 [ 1071.378075][T24836] ___sys_sendmsg+0x2a2/0x360 [ 1071.382808][T24836] ? __sys_sendmsg+0x290/0x290 [ 1071.387728][T24836] ? __lock_acquire+0x7d10/0x7d10 [ 1071.392822][T24836] __se_sys_sendmsg+0x1bb/0x2a0 [ 1071.397726][T24836] ? __x64_sys_sendmsg+0x80/0x80 [ 1071.402714][T24836] ? lockdep_hardirqs_on+0x94/0x140 [ 1071.407950][T24836] do_syscall_64+0x4c/0xa0 [ 1071.412406][T24836] ? clear_bhb_loop+0x60/0xb0 [ 1071.417117][T24836] ? clear_bhb_loop+0x60/0xb0 [ 1071.421840][T24836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1071.427803][T24836] RIP: 0033:0x7f493bb9cdd9 [ 1071.432267][T24836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.452024][T24836] RSP: 002b:00007f493caa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1071.460473][T24836] RAX: ffffffffffffffda RBX: 00007f493be16090 RCX: 00007f493bb9cdd9 [ 1071.468474][T24836] RDX: 0000000000000480 RSI: 0000200000003480 RDI: 0000000000000003 [ 1071.476559][T24836] RBP: 00007f493caa1090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.484554][T24836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.492813][T24836] R13: 00007f493be16128 R14: 00007f493be16090 R15: 00007ffe7cb38058 [ 1071.500832][T24836] [ 1071.977760][T24847] netlink: 'syz.4.5821': attribute type 10 has an invalid length. [ 1071.989768][T24847] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5821'. [ 1072.722745][T24865] netlink: 'syz.3.5829': attribute type 9 has an invalid length. [ 1072.984602][ T4331] wlan1: Trigger new scan to find an IBSS to join [ 1073.016930][T24873] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5833'. [ 1073.956585][ T9] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1077.111339][T24985] FAULT_INJECTION: forcing a failure. [ 1077.111339][T24985] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.219708][T24985] CPU: 0 PID: 24985 Comm: syz.4.5871 Not tainted syzkaller #0 [ 1077.227298][T24985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1077.237473][T24985] Call Trace: [ 1077.241264][T24985] [ 1077.244268][T24985] dump_stack_lvl+0x188/0x24e [ 1077.249051][T24985] ? show_regs_print_info+0x12/0x12 [ 1077.254352][T24985] ? load_image+0x400/0x400 [ 1077.258963][T24985] ? __lock_acquire+0x7d10/0x7d10 [ 1077.264181][T24985] ? switchdev_port_obj_add+0x215/0x320 [ 1077.269842][T24985] should_fail_ex+0x399/0x4d0 [ 1077.274626][T24985] should_failslab+0x5/0x20 [ 1077.279204][T24985] slab_pre_alloc_hook+0x59/0x310 [ 1077.284337][T24985] ? vlan_vid_add+0x30f/0x750 [ 1077.289110][T24985] __kmem_cache_alloc_node+0x4f/0x260 [ 1077.294571][T24985] ? vlan_vid_add+0x30f/0x750 [ 1077.299322][T24985] kmalloc_trace+0x26/0xe0 [ 1077.303856][T24985] vlan_vid_add+0x30f/0x750 [ 1077.308568][T24985] __vlan_add+0x2b2/0x26e0 [ 1077.313161][T24985] nbp_vlan_add+0x25e/0x3b0 [ 1077.317793][T24985] br_vlan_info+0xfd/0x460 [ 1077.322310][T24985] ? br_process_vlan_info+0x7f0/0x7f0 [ 1077.327777][T24985] ? __lock_acquire+0x13cf/0x7d10 [ 1077.332933][T24985] br_process_vlan_info+0x287/0x7f0 [ 1077.338258][T24985] br_afspec+0x1fd/0x5d0 [ 1077.342589][T24985] ? verify_lock_unused+0x140/0x140 [ 1077.347904][T24985] ? br_setport+0x1110/0x1110 [ 1077.352707][T24985] br_setlink+0x2d5/0x880 [ 1077.357142][T24985] ? br_vlan_info+0x460/0x460 [ 1077.362028][T24985] ? rtnetlink_rcv_msg+0x824/0xfc0 [ 1077.367325][T24985] ? rcu_read_unlock+0x8c/0xa0 [ 1077.372199][T24985] ? mutex_lock_nested+0x10/0x10 [ 1077.377249][T24985] ? mutex_is_locked+0xe/0x40 [ 1077.382038][T24985] rtnl_bridge_setlink+0x4ba/0x720 [ 1077.387266][T24985] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 1077.392566][T24985] ? rtnl_bridge_dellink+0x680/0x680 [ 1077.398039][T24985] rtnetlink_rcv_msg+0x87c/0xfc0 [ 1077.403106][T24985] ? rtnetlink_bind+0x80/0x80 [ 1077.407879][T24985] ? __local_bh_enable_ip+0x136/0x1c0 [ 1077.413348][T24985] ? migrate_enable+0x148/0x220 [ 1077.418317][T24985] ? trace_call_bpf+0xbf/0x6b0 [ 1077.423196][T24985] ? trace_call_bpf+0xbf/0x6b0 [ 1077.428068][T24985] ? trace_call_bpf+0x5d6/0x6b0 [ 1077.433016][T24985] ? trace_call_bpf+0xbf/0x6b0 [ 1077.437871][T24985] ? __dev_queue_xmit+0x26b/0x37c0 [ 1077.443078][T24985] ? __dev_queue_xmit+0x26b/0x37c0 [ 1077.448301][T24985] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1077.454341][T24985] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1077.460268][T24985] ? perf_trace_lock+0x301/0x390 [ 1077.465308][T24985] ? __copy_skb_header+0x3ba/0x4f0 [ 1077.470632][T24985] ? trace_event_raw_event_lock+0x250/0x250 [ 1077.476644][T24985] ? __skb_clone+0x480/0x790 [ 1077.481363][T24985] netlink_rcv_skb+0x1fb/0x450 [ 1077.486225][T24985] ? rtnetlink_bind+0x80/0x80 [ 1077.491011][T24985] ? netlink_ack+0x1170/0x1170 [ 1077.495957][T24985] ? netlink_deliver_tap+0x2e/0x1b0 [ 1077.501269][T24985] netlink_unicast+0x74d/0x8d0 [ 1077.506231][T24985] netlink_sendmsg+0x8ad/0xbd0 [ 1077.511297][T24985] ? netlink_getsockopt+0x550/0x550 [ 1077.516609][T24985] ? aa_sock_msg_perm+0x94/0x150 [ 1077.521726][T24985] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1077.527093][T24985] ? security_socket_sendmsg+0x7c/0xa0 [ 1077.532655][T24985] ? netlink_getsockopt+0x550/0x550 [ 1077.537951][T24985] ____sys_sendmsg+0x5be/0x970 [ 1077.542842][T24985] ? __sys_sendmsg_sock+0x30/0x30 [ 1077.547995][T24985] ? __import_iovec+0x315/0x500 [ 1077.552970][T24985] ? import_iovec+0x6f/0xa0 [ 1077.557577][T24985] ___sys_sendmsg+0x2a2/0x360 [ 1077.562374][T24985] ? __sys_sendmsg+0x290/0x290 [ 1077.567316][T24985] ? __lock_acquire+0x7d10/0x7d10 [ 1077.572548][T24985] __se_sys_sendmsg+0x1bb/0x2a0 [ 1077.577507][T24985] ? __x64_sys_sendmsg+0x80/0x80 [ 1077.582600][T24985] ? lockdep_hardirqs_on+0x94/0x140 [ 1077.587897][T24985] do_syscall_64+0x4c/0xa0 [ 1077.592408][T24985] ? clear_bhb_loop+0x60/0xb0 [ 1077.597179][T24985] ? clear_bhb_loop+0x60/0xb0 [ 1077.601960][T24985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1077.607942][T24985] RIP: 0033:0x7f1295b9cdd9 [ 1077.612436][T24985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.632130][T24985] RSP: 002b:00007f1296a11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1077.640642][T24985] RAX: ffffffffffffffda RBX: 00007f1295e15fa0 RCX: 00007f1295b9cdd9 [ 1077.648695][T24985] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1077.656757][T24985] RBP: 00007f1296a11090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.664803][T24985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.672930][T24985] R13: 00007f1295e16038 R14: 00007f1295e15fa0 R15: 00007ffc49ce2b18 [ 1077.681131][T24985] [ 1078.832218][T24983] netlink: 'syz.0.5869': attribute type 41 has an invalid length. [ 1079.593094][T25012] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5880'. [ 1079.890259][T25016] FAULT_INJECTION: forcing a failure. [ 1079.890259][T25016] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.981569][T25016] CPU: 1 PID: 25016 Comm: syz.2.5881 Not tainted syzkaller #0 [ 1079.989226][T25016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1079.999345][T25016] Call Trace: [ 1080.002681][T25016] [ 1080.005661][T25016] dump_stack_lvl+0x188/0x24e [ 1080.010417][T25016] ? show_regs_print_info+0x12/0x12 [ 1080.015686][T25016] ? load_image+0x400/0x400 [ 1080.020252][T25016] ? __might_sleep+0xd0/0xd0 [ 1080.024910][T25016] ? __lock_acquire+0x7d10/0x7d10 [ 1080.030000][T25016] ? rcu_is_watching+0x11/0xa0 [ 1080.034830][T25016] should_fail_ex+0x399/0x4d0 [ 1080.039580][T25016] should_failslab+0x5/0x20 [ 1080.044135][T25016] slab_pre_alloc_hook+0x59/0x310 [ 1080.049220][T25016] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1080.055177][T25016] __kmem_cache_alloc_node+0x4f/0x260 [ 1080.060611][T25016] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1080.066581][T25016] kmalloc_trace+0x26/0xe0 [ 1080.071068][T25016] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 1080.076876][T25016] sctp_association_new+0x15e5/0x25d0 [ 1080.082402][T25016] sctp_connect_new_asoc+0x2da/0x6a0 [ 1080.087725][T25016] ? __sctp_connect+0xd80/0xd80 [ 1080.092609][T25016] ? __local_bh_enable_ip+0x136/0x1c0 [ 1080.098111][T25016] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1080.103696][T25016] ? security_sctp_bind_connect+0x85/0xb0 [ 1080.109543][T25016] sctp_sendmsg+0x15b0/0x2940 [ 1080.114362][T25016] ? trace_event_raw_event_lock+0x250/0x250 [ 1080.120295][T25016] ? aa_sk_perm+0x771/0x950 [ 1080.124840][T25016] ? sctp_getsockopt+0x8a0/0x8a0 [ 1080.129823][T25016] ? __might_fault+0xa6/0x120 [ 1080.134543][T25016] ? aa_af_perm+0x340/0x340 [ 1080.139077][T25016] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1080.145544][T25016] ? inet_sendmsg+0xe5/0x2f0 [ 1080.150186][T25016] ? inet_send_prepare+0x260/0x260 [ 1080.155356][T25016] ____sys_sendmsg+0x5be/0x970 [ 1080.160187][T25016] ? __sys_sendmsg_sock+0x30/0x30 [ 1080.165241][T25016] ? __import_iovec+0x315/0x500 [ 1080.170137][T25016] ? import_iovec+0x6f/0xa0 [ 1080.174676][T25016] ___sys_sendmsg+0x2a2/0x360 [ 1080.179404][T25016] ? __sys_sendmsg+0x290/0x290 [ 1080.184232][T25016] ? __lock_acquire+0x7d10/0x7d10 [ 1080.189311][T25016] __se_sys_sendmsg+0x1bb/0x2a0 [ 1080.194219][T25016] ? __x64_sys_sendmsg+0x80/0x80 [ 1080.199222][T25016] ? lockdep_hardirqs_on+0x94/0x140 [ 1080.204463][T25016] do_syscall_64+0x4c/0xa0 [ 1080.208954][T25016] ? clear_bhb_loop+0x60/0xb0 [ 1080.213677][T25016] ? clear_bhb_loop+0x60/0xb0 [ 1080.218408][T25016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1080.224435][T25016] RIP: 0033:0x7f490319cdd9 [ 1080.228883][T25016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.248534][T25016] RSP: 002b:00007f4903fe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.257168][T25016] RAX: ffffffffffffffda RBX: 00007f4903415fa0 RCX: 00007f490319cdd9 [ 1080.265182][T25016] RDX: 0000000004000040 RSI: 00002000000010c0 RDI: 0000000000000005 [ 1080.273191][T25016] RBP: 00007f4903fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.281219][T25016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.289223][T25016] R13: 00007f4903416038 R14: 00007f4903415fa0 R15: 00007ffcb62c4288 [ 1080.297253][T25016] [ 1080.557038][T25026] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1080.572825][T25026] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1080.582534][T25026] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1080.591134][T25026] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1080.616398][T25026] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1080.626170][T25026] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1081.020686][ T4331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.247429][ T4331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.424843][ T4331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.456405][T25037] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1081.566561][ T4331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.795571][T25024] chnl_net:caif_netlink_parms(): no params data found [ 1082.570767][T25024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.592797][T25024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.635942][T25024] device bridge_slave_0 entered promiscuous mode [ 1082.664265][T25026] Bluetooth: hci2: command 0x0409 tx timeout [ 1082.672820][T25024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.701957][T25024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.711245][T25024] device bridge_slave_1 entered promiscuous mode [ 1082.780270][T25024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.826995][T25024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.010605][T25024] team0: Port device team_slave_0 added [ 1083.117166][T25024] team0: Port device team_slave_1 added [ 1083.243006][T25024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.269621][T25024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.333798][T25024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.408545][T25024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.423976][T25024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.512968][T25024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.753507][T25024] device hsr_slave_0 entered promiscuous mode [ 1083.782777][T25024] device hsr_slave_1 entered promiscuous mode [ 1083.801899][T25024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1083.831398][T25024] Cannot create hsr debugfs directory [ 1083.909538][T25098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1083.946283][ T75] wlan1: Trigger new scan to find an IBSS to join [ 1084.063005][T25094] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1084.743964][T25026] Bluetooth: hci2: command 0x041b tx timeout [ 1084.870254][ T4331] device hsr_slave_0 left promiscuous mode [ 1084.879825][ T4331] device hsr_slave_1 left promiscuous mode [ 1084.901251][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.944221][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.983129][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.001307][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.018429][ T4331] bridge0: port 3(team0) entered disabled state [ 1085.049435][ T4331] device bridge_slave_1 left promiscuous mode [ 1085.069215][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.119947][ T4331] device bridge_slave_0 left promiscuous mode [ 1085.126853][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.659763][ T4331] device veth1_macvtap left promiscuous mode [ 1085.676854][ T4331] device veth0_macvtap left promiscuous mode [ 1086.648611][ T4331] device team_slave_1 left promiscuous mode [ 1086.657933][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 1086.703211][ T4331] device team_slave_0 left promiscuous mode [ 1086.713552][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 1086.755498][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.803157][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.827160][T25026] Bluetooth: hci2: command 0x040f tx timeout [ 1086.915029][T15835] wlan1: Trigger new scan to find an IBSS to join [ 1087.149150][ T4331] bond0 (unregistering): Released all slaves [ 1087.508696][T25135] netlink: 'syz.0.5910': attribute type 6 has an invalid length. [ 1087.546399][T15835] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1087.569281][T25135] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5910'. [ 1087.995767][T25153] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1088.272489][T25163] netlink: 'syz.1.5913': attribute type 2 has an invalid length. [ 1088.293975][T25163] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5913'. [ 1088.903872][T14501] Bluetooth: hci2: command 0x0419 tx timeout [ 1089.946185][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1091.043399][T15839] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1091.272453][T25024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1091.346859][T25024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1091.359662][T25176] netlink: 'syz.0.5915': attribute type 10 has an invalid length. [ 1091.406013][T25176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5915'. [ 1091.466921][T25176] netlink: 'syz.0.5915': attribute type 10 has an invalid length. [ 1091.509596][T25176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5915'. [ 1091.530385][T25024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1091.557562][T25024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1091.821790][T25024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.848306][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1091.864451][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1091.905174][T25024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.932264][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1091.944014][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1091.974131][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.981315][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.011778][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1092.034494][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1092.054626][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.061808][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.088974][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1092.138524][T25192] netlink: 'syz.0.5915': attribute type 10 has an invalid length. [ 1092.182948][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1092.200570][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1092.211407][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1092.304322][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1092.335931][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1092.386549][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1092.406634][T25197] FAULT_INJECTION: forcing a failure. [ 1092.406634][T25197] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.465258][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1092.480945][T25197] CPU: 1 PID: 25197 Comm: syz.3.5923 Not tainted syzkaller #0 [ 1092.488578][T25197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1092.498682][T25197] Call Trace: [ 1092.502008][T25197] [ 1092.505046][T25197] dump_stack_lvl+0x188/0x24e [ 1092.509790][T25197] ? show_regs_print_info+0x12/0x12 [ 1092.515056][T25197] ? load_image+0x400/0x400 [ 1092.519619][T25197] ? __might_sleep+0xd0/0xd0 [ 1092.524252][T25197] ? __lock_acquire+0x7d10/0x7d10 [ 1092.529338][T25197] should_fail_ex+0x399/0x4d0 [ 1092.534068][T25197] should_failslab+0x5/0x20 [ 1092.538616][T25197] slab_pre_alloc_hook+0x59/0x310 [ 1092.543774][T25197] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1092.549115][T25197] __kmem_cache_alloc_node+0x4f/0x260 [ 1092.554540][T25197] ? memset+0x1e/0x40 [ 1092.558574][T25197] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1092.563907][T25197] kmalloc_trace+0x26/0xe0 [ 1092.568381][T25197] __xdp_reg_mem_model+0x1e0/0x5c0 [ 1092.573541][T25197] ? kvmalloc_node+0x6c/0x180 [ 1092.578276][T25197] ? kvmalloc_node+0x6c/0x180 [ 1092.583010][T25197] ? xdp_reg_mem_model+0x30/0x30 [ 1092.588000][T25197] xdp_reg_mem_model+0x1e/0x30 [ 1092.592821][T25197] bpf_test_run_xdp_live+0x299/0x1a90 [ 1092.598243][T25197] ? 0xffffffffa00041c0 [ 1092.602443][T25197] ? text_poke_copy+0x79/0x90 [ 1092.607174][T25197] ? 0xffffffffa00041c0 [ 1092.611369][T25197] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1092.617317][T25197] ? 0xffffffffa00041c0 [ 1092.621515][T25197] ? xdp_convert_md_to_buff+0x330/0x330 [ 1092.627145][T25197] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1092.633708][T25197] ? bpf_test_init+0x119/0x140 [ 1092.638567][T25197] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1092.644090][T25197] bpf_prog_test_run_xdp+0x736/0xf10 [ 1092.649441][T25197] ? dev_put+0x80/0x80 [ 1092.653565][T25197] ? dev_put+0x80/0x80 [ 1092.657681][T25197] bpf_prog_test_run+0x31e/0x390 [ 1092.662673][T25197] __sys_bpf+0x62b/0x780 [ 1092.666964][T25197] ? bpf_link_show_fdinfo+0x380/0x380 [ 1092.672393][T25197] ? lock_chain_count+0x20/0x20 [ 1092.677303][T25197] __x64_sys_bpf+0x78/0x90 [ 1092.681872][T25197] do_syscall_64+0x4c/0xa0 [ 1092.686344][T25197] ? clear_bhb_loop+0x60/0xb0 [ 1092.691073][T25197] ? clear_bhb_loop+0x60/0xb0 [ 1092.695800][T25197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1092.701824][T25197] RIP: 0033:0x7f5f5159cdd9 [ 1092.706277][T25197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.726028][T25197] RSP: 002b:00007f5f523d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1092.734580][T25197] RAX: ffffffffffffffda RBX: 00007f5f51815fa0 RCX: 00007f5f5159cdd9 [ 1092.742617][T25197] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 000000000000000a [ 1092.750634][T25197] RBP: 00007f5f523d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.758650][T25197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.766748][T25197] R13: 00007f5f51816038 R14: 00007f5f51815fa0 R15: 00007ffd563cde78 [ 1092.774795][T25197] [ 1092.805626][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1092.818496][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1092.835022][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1092.855053][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1092.888392][T25024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1093.481366][T25216] netlink: 'syz.0.5924': attribute type 3 has an invalid length. [ 1093.500774][T25216] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5924'. [ 1094.077895][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1094.114684][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1094.142038][T25024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.984558][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1095.083419][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5932'. [ 1095.434022][T25262] FAULT_INJECTION: forcing a failure. [ 1095.434022][T25262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.477951][T25262] CPU: 1 PID: 25262 Comm: syz.0.5933 Not tainted syzkaller #0 [ 1095.485497][T25262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1095.495699][T25262] Call Trace: [ 1095.499016][T25262] [ 1095.501985][T25262] dump_stack_lvl+0x188/0x24e [ 1095.506725][T25262] ? show_regs_print_info+0x12/0x12 [ 1095.512020][T25262] ? load_image+0x400/0x400 [ 1095.516588][T25262] ? __lock_acquire+0x7d10/0x7d10 [ 1095.521683][T25262] ? __rcu_read_unlock+0x78/0xd0 [ 1095.526684][T25262] should_fail_ex+0x399/0x4d0 [ 1095.531415][T25262] _copy_to_user+0x2c/0x130 [ 1095.535972][T25262] bpf_test_finish+0x266/0x600 [ 1095.540780][T25262] ? convert___skb_to_skb+0x580/0x580 [ 1095.546191][T25262] ? convert_skb_to___skb+0x420/0x420 [ 1095.551592][T25262] ? __build_skb+0x257/0x3c0 [ 1095.556228][T25262] bpf_prog_test_run_skb+0xc99/0x12a0 [ 1095.561651][T25262] ? cpu_online+0xa0/0xa0 [ 1095.566104][T25262] bpf_prog_test_run+0x31e/0x390 [ 1095.571084][T25262] __sys_bpf+0x62b/0x780 [ 1095.575365][T25262] ? bpf_link_show_fdinfo+0x380/0x380 [ 1095.581044][T25262] ? lock_chain_count+0x20/0x20 [ 1095.585939][T25262] __x64_sys_bpf+0x78/0x90 [ 1095.590398][T25262] do_syscall_64+0x4c/0xa0 [ 1095.594959][T25262] ? clear_bhb_loop+0x60/0xb0 [ 1095.599673][T25262] ? clear_bhb_loop+0x60/0xb0 [ 1095.604383][T25262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1095.610315][T25262] RIP: 0033:0x7f493bb9cdd9 [ 1095.614751][T25262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.634386][T25262] RSP: 002b:00007f493cac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1095.642828][T25262] RAX: ffffffffffffffda RBX: 00007f493be15fa0 RCX: 00007f493bb9cdd9 [ 1095.650827][T25262] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 000000000000000a [ 1095.658818][T25262] RBP: 00007f493cac2090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.666814][T25262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.674811][T25262] R13: 00007f493be16038 R14: 00007f493be15fa0 R15: 00007ffe7cb38058 [ 1095.682820][T25262] [ 1096.052783][ T4331] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1096.258483][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1096.275049][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1096.296228][T25024] device veth0_vlan entered promiscuous mode [ 1096.316072][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1096.343433][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1096.371972][T25024] device veth1_vlan entered promiscuous mode [ 1096.414773][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1096.433255][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1096.472532][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1096.521203][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1096.771513][T25024] device veth0_macvtap entered promiscuous mode [ 1096.833963][T25284] netlink: 'syz.3.5935': attribute type 10 has an invalid length. [ 1097.190159][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1097.207592][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1097.229532][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1097.256247][T25024] device veth1_macvtap entered promiscuous mode [ 1097.327497][T25024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.347991][T25024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.361569][T25024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.372577][T25024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.389461][T25024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.400379][T25024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.417367][T25024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.439449][T25024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.463459][T25024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.565139][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1097.586262][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1097.614454][T25024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.660512][T25024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.681853][T25024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.700448][T25024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.711350][T25024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.728489][T25024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.743541][T25024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.760334][T25024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.780260][T25024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.830071][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1097.847531][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1097.865646][T25024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.880942][T25024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.893421][T25024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.908773][T25024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.254046][T25312] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1098.361299][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.374996][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.450318][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1098.469980][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.485518][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.581124][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1099.142419][T25332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5947'. [ 1099.892931][T25347] netlink: 'syz.1.5950': attribute type 10 has an invalid length. [ 1099.936671][T25347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5950'. [ 1100.162867][T25347] netlink: 'syz.1.5950': attribute type 10 has an invalid length. [ 1100.203970][T25347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5950'. [ 1100.373014][T25347] netlink: 'syz.1.5950': attribute type 10 has an invalid length. [ 1100.476309][T25362] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1100.630782][T25365] netlink: 'syz.2.5954': attribute type 10 has an invalid length. [ 1100.649061][T25365] team0: Device bridge0 is already an upper device of the team interface [ 1100.913916][T15835] wlan1: Trigger new scan to find an IBSS to join [ 1101.315984][T25380] FAULT_INJECTION: forcing a failure. [ 1101.315984][T25380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.359761][T25380] CPU: 1 PID: 25380 Comm: syz.4.5959 Not tainted syzkaller #0 [ 1101.367314][T25380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1101.377419][T25380] Call Trace: [ 1101.380745][T25380] [ 1101.383729][T25380] dump_stack_lvl+0x188/0x24e [ 1101.388491][T25380] ? show_regs_print_info+0x12/0x12 [ 1101.393758][T25380] ? load_image+0x400/0x400 [ 1101.398321][T25380] ? __might_fault+0xa6/0x120 [ 1101.403153][T25380] should_fail_ex+0x399/0x4d0 [ 1101.407915][T25380] copyin+0x1b/0x120 [ 1101.411866][T25380] _copy_from_iter+0x447/0x1130 [ 1101.416796][T25380] ? copyout_mc+0x110/0x110 [ 1101.421359][T25380] ? __virt_addr_valid+0x188/0x540 [ 1101.426532][T25380] ? __virt_addr_valid+0x188/0x540 [ 1101.431739][T25380] ? __virt_addr_valid+0x465/0x540 [ 1101.436918][T25380] ? __check_object_size+0x500/0xa40 [ 1101.442254][T25380] tcp_sendmsg_locked+0x1850/0x3a90 [ 1101.447578][T25380] ? tcp_set_state+0x520/0x520 [ 1101.452413][T25380] tcp_sendmsg+0x2b/0x40 [ 1101.456704][T25380] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1101.461960][T25380] ____sys_sendmsg+0x5be/0x970 [ 1101.466813][T25380] ? __sys_sendmsg_sock+0x30/0x30 [ 1101.471895][T25380] ? __import_iovec+0x315/0x500 [ 1101.476803][T25380] ? import_iovec+0x6f/0xa0 [ 1101.481379][T25380] ___sys_sendmsg+0x2a2/0x360 [ 1101.486128][T25380] ? __sys_sendmsg+0x290/0x290 [ 1101.491009][T25380] ? ktime_get_real_ts64+0x440/0x440 [ 1101.496384][T25380] __se_sys_sendmsg+0x1bb/0x2a0 [ 1101.501399][T25380] ? __x64_sys_sendmsg+0x80/0x80 [ 1101.506414][T25380] ? lockdep_hardirqs_on+0x94/0x140 [ 1101.511666][T25380] do_syscall_64+0x4c/0xa0 [ 1101.516155][T25380] ? clear_bhb_loop+0x60/0xb0 [ 1101.520892][T25380] ? clear_bhb_loop+0x60/0xb0 [ 1101.525635][T25380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1101.531678][T25380] RIP: 0033:0x7fd03ef9cdd9 [ 1101.536144][T25380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.555898][T25380] RSP: 002b:00007fd03ff05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1101.564374][T25380] RAX: ffffffffffffffda RBX: 00007fd03f215fa0 RCX: 00007fd03ef9cdd9 [ 1101.572404][T25380] RDX: 0000000000040001 RSI: 00002000000008c0 RDI: 0000000000000003 [ 1101.580435][T25380] RBP: 00007fd03ff05090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.588453][T25380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.596512][T25380] R13: 00007fd03f216038 R14: 00007fd03f215fa0 R15: 00007fff76f31638 [ 1101.604559][T25380] [ 1102.352483][T25397] netlink: 'syz.0.5964': attribute type 2 has an invalid length. [ 1102.684058][T25408] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1102.801741][T25026] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1102.811149][T25026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1102.819384][T25026] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1102.828187][T25026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1102.836213][T25026] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1102.843732][T25026] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1102.943012][T15839] wlan1: Trigger new scan to find an IBSS to join [ 1103.062665][T25414] netlink: 'syz.4.5968': attribute type 3 has an invalid length. [ 1103.070710][T25414] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5968'. [ 1103.126558][T15839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.290382][T15839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.359357][T25418] netlink: 'syz.4.5969': attribute type 10 has an invalid length. [ 1103.394371][T25418] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5969'. [ 1103.448845][T25418] netlink: 'syz.4.5969': attribute type 10 has an invalid length. [ 1103.503210][T25418] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5969'. [ 1103.552350][T25417] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1103.670092][T15839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.812316][T25427] netlink: 'syz.4.5969': attribute type 10 has an invalid length. [ 1104.212963][T15839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.316483][T25410] chnl_net:caif_netlink_parms(): no params data found [ 1104.656402][T25438] FAULT_INJECTION: forcing a failure. [ 1104.656402][T25438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.681461][T25438] CPU: 1 PID: 25438 Comm: syz.4.5972 Not tainted syzkaller #0 [ 1104.689006][T25438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1104.699220][T25438] Call Trace: [ 1104.702584][T25438] [ 1104.705562][T25438] dump_stack_lvl+0x188/0x24e [ 1104.710307][T25438] ? show_regs_print_info+0x12/0x12 [ 1104.715571][T25438] ? load_image+0x400/0x400 [ 1104.720135][T25438] ? __lock_acquire+0x7d10/0x7d10 [ 1104.725234][T25438] should_fail_ex+0x399/0x4d0 [ 1104.730004][T25438] _copy_from_user+0x2c/0x170 [ 1104.734741][T25438] iovec_from_user+0x143/0x360 [ 1104.739557][T25438] __import_iovec+0x6d/0x500 [ 1104.744212][T25438] import_iovec+0x6f/0xa0 [ 1104.748598][T25438] ___sys_sendmsg+0x252/0x360 [ 1104.753342][T25438] ? __sys_sendmsg+0x290/0x290 [ 1104.758229][T25438] ? __lock_acquire+0x7d10/0x7d10 [ 1104.763357][T25438] __se_sys_sendmsg+0x1bb/0x2a0 [ 1104.768277][T25438] ? __x64_sys_sendmsg+0x80/0x80 [ 1104.773318][T25438] ? lockdep_hardirqs_on+0x94/0x140 [ 1104.778659][T25438] do_syscall_64+0x4c/0xa0 [ 1104.783132][T25438] ? clear_bhb_loop+0x60/0xb0 [ 1104.787879][T25438] ? clear_bhb_loop+0x60/0xb0 [ 1104.792809][T25438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1104.798754][T25438] RIP: 0033:0x7fd03ef9cdd9 [ 1104.803227][T25438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.822888][T25438] RSP: 002b:00007fd03ff05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.831345][T25438] RAX: ffffffffffffffda RBX: 00007fd03f215fa0 RCX: 00007fd03ef9cdd9 [ 1104.839364][T25438] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1104.847387][T25438] RBP: 00007fd03ff05090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.855411][T25438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.863430][T25438] R13: 00007fd03f216038 R14: 00007fd03f215fa0 R15: 00007fff76f31638 [ 1104.871445][T25438] [ 1104.904111][T25026] Bluetooth: hci1: command 0x0409 tx timeout [ 1104.925521][T25440] netlink: 'syz.3.5973': attribute type 1 has an invalid length. [ 1104.964980][T25440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5973'. [ 1105.017115][T25410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.036252][T25410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.055023][T25410] device bridge_slave_0 entered promiscuous mode [ 1105.092261][T25410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.137519][T25410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.184949][T25410] device bridge_slave_1 entered promiscuous mode [ 1105.264455][T25444] netlink: 'syz.3.5976': attribute type 3 has an invalid length. [ 1105.312959][T25444] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5976'. [ 1105.434566][T25410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.484265][T25410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.944438][ T4331] wlan1: Trigger new scan to find an IBSS to join [ 1106.170642][T25410] team0: Port device team_slave_0 added [ 1106.296938][T25410] team0: Port device team_slave_1 added [ 1106.304394][T25466] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1106.670301][T25410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.708985][T25410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.756181][T25410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.812010][T25410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.839527][T25410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.917345][T25410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.984038][T25026] Bluetooth: hci1: command 0x041b tx timeout [ 1107.125910][T25410] device hsr_slave_0 entered promiscuous mode [ 1107.164969][T25410] device hsr_slave_1 entered promiscuous mode [ 1107.183946][T25410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.198614][T25410] Cannot create hsr debugfs directory [ 1107.745105][T25499] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5987'. [ 1107.874656][T25499] team0: Port device team_slave_0 removed [ 1107.914552][T25499] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1107.943999][ T4318] wlan1: Trigger new scan to find an IBSS to join [ 1108.337713][T15839] device hsr_slave_0 left promiscuous mode [ 1108.344547][T15839] device hsr_slave_1 left promiscuous mode [ 1108.351196][T15839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.389971][T15839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.434878][T15839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.479772][T15839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.534681][T15839] bridge0: port 3(team0) entered disabled state [ 1108.578339][T15839] device bridge_slave_1 left promiscuous mode [ 1108.605511][T15839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.670752][T15839] device bridge_slave_0 left promiscuous mode [ 1108.683926][T15839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.826958][T15839] device veth1_macvtap left promiscuous mode [ 1108.855475][T15839] device veth0_macvtap left promiscuous mode [ 1108.986718][ T4318] wlan1: Trigger new scan to find an IBSS to join [ 1109.006134][ T4318] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1109.064520][T25026] Bluetooth: hci1: command 0x040f tx timeout [ 1109.967478][T25530] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1110.427282][T15839] device team_slave_1 left promiscuous mode [ 1110.437740][T15839] team0 (unregistering): Port device team_slave_1 removed [ 1110.479404][T15839] device team_slave_0 left promiscuous mode [ 1110.488336][T15839] team0 (unregistering): Port device team_slave_0 removed [ 1110.533585][T15839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.580934][T15839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.937490][T15839] bond0 (unregistering): Released all slaves [ 1111.029430][T25515] netlink: 'syz.0.5990': attribute type 10 has an invalid length. [ 1111.041209][T25515] bridge0: port 3(team0) entered disabled state [ 1111.047922][T25515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.055357][T25515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.081714][T25515] team0: Device bridge0 is already an upper device of the team interface [ 1111.148621][T25026] Bluetooth: hci1: command 0x0419 tx timeout [ 1111.954878][ T4331] wlan1: Trigger new scan to find an IBSS to join [ 1112.069574][T25567] netlink: 'syz.1.6004': attribute type 21 has an invalid length. [ 1112.084965][T25567] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6004'. [ 1112.109726][T25567] netlink: 'syz.1.6004': attribute type 4 has an invalid length. [ 1112.142759][T25567] netlink: 'syz.1.6004': attribute type 5 has an invalid length. [ 1112.209327][T25567] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6004'. [ 1112.418554][T25410] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1112.485406][T25410] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1112.536506][T25410] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1112.632554][T25410] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1113.068729][T25410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.105410][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1113.126701][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1113.156761][T25410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.191300][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1113.221101][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1113.264444][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.271613][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.320316][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1113.335616][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1113.358291][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1113.371873][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.379130][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.393329][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1113.482092][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1113.507226][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1113.529488][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1113.538764][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1113.553483][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1113.572853][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1113.590485][T25598] delete_channel: no stack [ 1113.619652][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1113.637532][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1113.662590][T25410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1113.696070][T25410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1113.714516][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1113.724677][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1113.873564][T25611] netlink: 'syz.3.6016': attribute type 21 has an invalid length. [ 1113.900823][T25611] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6016'. [ 1113.926969][T25611] netlink: 'syz.3.6016': attribute type 4 has an invalid length. [ 1113.957157][T25611] netlink: 'syz.3.6016': attribute type 5 has an invalid length. [ 1113.983164][T25611] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6016'. [ 1114.465657][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1114.496350][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1114.518907][T25410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.599214][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1114.617095][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1114.686693][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1114.706110][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1114.734562][T25410] device veth0_vlan entered promiscuous mode [ 1114.741948][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1114.769007][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1114.808994][T25410] device veth1_vlan entered promiscuous mode [ 1114.931750][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1114.948550][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1114.959946][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1114.980090][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1115.038280][T25410] device veth0_macvtap entered promiscuous mode [ 1115.073512][T25642] device virt_wifi0 entered promiscuous mode [ 1115.096665][T25410] device veth1_macvtap entered promiscuous mode [ 1115.170572][T25410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.194404][T25410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.223802][T25410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.273704][T25410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.308087][T25410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.339252][T25410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.366788][T25410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.410627][T25410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.445651][T25410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.463277][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1115.475241][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1115.504490][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1115.524295][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1115.544526][T25653] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6026'. [ 1115.565112][T25410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.584904][T25410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.606460][T25410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.628749][T25410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.650533][T25410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.672546][T25410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.704253][T25410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.738607][T25410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.775539][T25410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.811250][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1115.832046][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1115.852225][T25665] netlink: 'syz.4.6028': attribute type 3 has an invalid length. [ 1115.872881][T25665] netlink: 'syz.4.6028': attribute type 1 has an invalid length. [ 1115.887101][T25410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.900615][T25410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.917444][T25665] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.6028'. [ 1115.930951][T25410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.946079][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.952522][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.972403][T25410] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.217003][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.273859][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.284683][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1116.352635][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.374396][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.531344][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1116.550502][T25673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6031'. [ 1116.794603][T25678] FAULT_INJECTION: forcing a failure. [ 1116.794603][T25678] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.898810][T25678] CPU: 1 PID: 25678 Comm: syz.0.6030 Not tainted syzkaller #0 [ 1116.906369][T25678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1116.916471][T25678] Call Trace: [ 1116.919806][T25678] [ 1116.922809][T25678] dump_stack_lvl+0x188/0x24e [ 1116.927568][T25678] ? show_regs_print_info+0x12/0x12 [ 1116.932918][T25678] ? load_image+0x400/0x400 [ 1116.937475][T25678] ? __might_sleep+0xd0/0xd0 [ 1116.942130][T25678] ? __lock_acquire+0x7d10/0x7d10 [ 1116.947355][T25678] should_fail_ex+0x399/0x4d0 [ 1116.952092][T25678] should_failslab+0x5/0x20 [ 1116.956637][T25678] slab_pre_alloc_hook+0x59/0x310 [ 1116.961709][T25678] ? tomoyo_encode+0x27e/0x540 [ 1116.966543][T25678] __kmem_cache_alloc_node+0x4f/0x260 [ 1116.971993][T25678] ? tomoyo_encode+0x27e/0x540 [ 1116.976822][T25678] __kmalloc+0xa0/0x240 [ 1116.981043][T25678] tomoyo_encode+0x27e/0x540 [ 1116.985697][T25678] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1116.991406][T25678] ? tomoyo_path_number_perm+0x205/0x650 [ 1116.997133][T25678] tomoyo_path_number_perm+0x22f/0x650 [ 1117.002656][T25678] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1117.008184][T25678] ? perf_trace_preemptirq_template+0x268/0x320 [ 1117.014485][T25678] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1117.020569][T25678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1117.026820][T25678] security_file_ioctl+0x6c/0xa0 [ 1117.031811][T25678] __se_sys_ioctl+0x48/0x170 [ 1117.036482][T25678] do_syscall_64+0x4c/0xa0 [ 1117.041129][T25678] ? clear_bhb_loop+0x60/0xb0 [ 1117.045948][T25678] ? clear_bhb_loop+0x60/0xb0 [ 1117.050689][T25678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.056635][T25678] RIP: 0033:0x7f493bb9cdd9 [ 1117.061094][T25678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.080754][T25678] RSP: 002b:00007f493cac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.089242][T25678] RAX: ffffffffffffffda RBX: 00007f493be15fa0 RCX: 00007f493bb9cdd9 [ 1117.097277][T25678] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002f [ 1117.105296][T25678] RBP: 00007f493cac2090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.113319][T25678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.121358][T25678] R13: 00007f493be16038 R14: 00007f493be15fa0 R15: 00007ffe7cb38058 [ 1117.129479][T25678] [ 1117.315030][T25678] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1117.454548][T25690] netlink: 'syz.4.6034': attribute type 10 has an invalid length. [ 1117.524680][T25690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.532272][T25690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.682459][T25690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.689993][T25690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.698986][T25690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.706205][T25690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.908740][T25690] team0: Port device bridge0 added [ 1118.565619][T14501] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1118.578826][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1118.586778][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1118.594920][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1118.604849][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1118.613131][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1119.329087][ T4331] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.696388][ T4331] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.776110][T25739] netlink: 'syz.2.6044': attribute type 21 has an invalid length. [ 1119.815160][T25739] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6044'. [ 1119.863115][T25739] netlink: 'syz.2.6044': attribute type 4 has an invalid length. [ 1119.919785][T25739] netlink: 'syz.2.6044': attribute type 5 has an invalid length. [ 1119.947591][T25739] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6044'. [ 1120.032485][T25745] netlink: 'syz.0.6045': attribute type 29 has an invalid length. [ 1120.094157][ T4331] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.146046][T25745] netlink: 'syz.0.6045': attribute type 29 has an invalid length. [ 1120.249792][ T4331] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.291916][T25742] netlink: 'syz.0.6045': attribute type 29 has an invalid length. [ 1120.334300][T25706] chnl_net:caif_netlink_parms(): no params data found [ 1120.393880][T25748] netlink: 'syz.0.6045': attribute type 29 has an invalid length. [ 1120.533367][T25755] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1120.664028][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 1120.732207][T25706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.745017][T25706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.767390][T25706] device bridge_slave_0 entered promiscuous mode [ 1120.843469][T25706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.851093][T25706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.868185][T25706] device bridge_slave_1 entered promiscuous mode [ 1120.989424][T25706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.054580][T25706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.548950][T25706] team0: Port device team_slave_0 added [ 1121.816346][T25706] team0: Port device team_slave_1 added [ 1122.096039][T25706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.103069][T25706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.194146][T25706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.494724][T25706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.501794][T25706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.623702][T25706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.744955][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 1122.803082][T25797] netlink: 'syz.4.6054': attribute type 19 has an invalid length. [ 1123.044624][T25802] netlink: 'syz.4.6054': attribute type 1 has an invalid length. [ 1123.565972][T25817] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1123.690573][T25706] device hsr_slave_0 entered promiscuous mode [ 1123.724582][T25706] device hsr_slave_1 entered promiscuous mode [ 1123.751740][T25706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1123.781958][T25706] Cannot create hsr debugfs directory [ 1123.944011][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1124.823780][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 1125.943973][ T31] wlan1: Trigger new scan to find an IBSS to join [ 1126.085477][ T4331] device hsr_slave_0 left promiscuous mode [ 1126.103283][ T4331] device hsr_slave_1 left promiscuous mode [ 1126.114561][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.122046][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.144809][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.173390][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.190323][ T4331] device bridge_slave_1 left promiscuous mode [ 1126.213937][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.264166][ T4331] device bridge_slave_0 left promiscuous mode [ 1126.273592][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.545018][ T4331] device veth1_macvtap left promiscuous mode [ 1126.551155][ T4331] device veth0_macvtap left promiscuous mode [ 1126.596015][ T4331] device veth1_vlan left promiscuous mode [ 1126.903748][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 1127.680606][ T4331] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1128.905440][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1129.753282][ T4331] device team_slave_1 left promiscuous mode [ 1129.772657][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 1129.849136][T15835] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1129.904264][ T4331] device team_slave_0 left promiscuous mode [ 1129.920940][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 1130.059862][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.198920][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.903789][T15839] wlan1: Trigger new scan to find an IBSS to join [ 1130.956622][ T4331] device bridge0 left promiscuous mode [ 1130.974804][ T4331] team0 (unregistering): Port device bridge0 removed [ 1131.012794][ T4331] bond0 (unregistering): Released all slaves [ 1131.209129][T25874] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1131.826209][ T31] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1132.092878][T25706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1132.192443][T25706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1132.214935][T25706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1132.255101][T25706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1132.533738][T25932] netlink: 'syz.4.6086': attribute type 29 has an invalid length. [ 1132.563206][T25932] netlink: 'syz.4.6086': attribute type 29 has an invalid length. [ 1132.597091][T25706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.682621][T25932] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6086'. [ 1132.702974][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1132.750681][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1132.834490][T25706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.878711][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1132.888849][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1132.903536][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.910741][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.928883][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1132.965687][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1132.999279][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1133.012751][T15835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.019998][T15835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.085356][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1133.120442][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1133.146239][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1133.174883][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1133.208900][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1133.259069][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1133.305324][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1133.319534][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1133.339953][T25953] netlink: 'syz.2.6090': attribute type 29 has an invalid length. [ 1133.346432][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1133.396116][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1133.422532][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1133.460004][T25953] netlink: 'syz.2.6090': attribute type 29 has an invalid length. [ 1133.498650][T25951] netlink: 'syz.2.6090': attribute type 29 has an invalid length. [ 1133.519195][T25706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1133.744435][T25959] netlink: 'syz.0.6091': attribute type 19 has an invalid length. [ 1133.947937][T15839] wlan1: Trigger new scan to find an IBSS to join [ 1133.963913][T25960] netlink: 'syz.0.6091': attribute type 1 has an invalid length. [ 1134.022141][T25963] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1134.502462][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1134.524358][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1134.554093][T25706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.687790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1134.715195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1134.812563][T25706] device veth0_vlan entered promiscuous mode [ 1134.852434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1134.864204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1134.887706][T25706] device veth1_vlan entered promiscuous mode [ 1134.906575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1134.918089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1134.927047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1134.972359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1134.986871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1135.010308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1135.038673][T25987] netlink: 139024 bytes leftover after parsing attributes in process `syz.1.6101'. [ 1135.060823][T25706] device veth0_macvtap entered promiscuous mode [ 1135.096254][T25706] device veth1_macvtap entered promiscuous mode [ 1135.213823][T25706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.258707][T25706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.287907][T25706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.298995][T25706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.309794][T25706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.320937][T25706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.331369][T25706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.342573][T25706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.357760][T25706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.492704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1135.514334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1135.522777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1135.537480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1135.557462][T25706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.579655][T25706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.599832][T25706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.633913][T25706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.647458][T25706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.663750][T25706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.689569][T25706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.705499][T25706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.717875][T25706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.731107][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1135.747799][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1135.765906][T25706] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.775370][T25706] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.785200][T25706] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.794682][T25706] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.103548][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.127043][T26003] netlink: 'syz.4.6106': attribute type 29 has an invalid length. [ 1136.143105][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.151938][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1136.174929][T26003] netlink: 'syz.4.6106': attribute type 29 has an invalid length. [ 1136.206911][T26000] netlink: 'syz.4.6106': attribute type 29 has an invalid length. [ 1136.228544][T15839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.245692][T15839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.285284][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1137.037326][T26027] netlink: 139024 bytes leftover after parsing attributes in process `syz.0.6116'. [ 1137.068416][T26027] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1137.626401][T26044] netlink: 'syz.0.6121': attribute type 29 has an invalid length. [ 1137.654084][T26044] netlink: 'syz.0.6121': attribute type 29 has an invalid length. [ 1137.674011][T26041] netlink: 'syz.0.6121': attribute type 29 has an invalid length. [ 1138.437000][T26066] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1138.523210][T26069] netlink: 139024 bytes leftover after parsing attributes in process `syz.4.6133'. [ 1138.597207][T26069] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1139.681272][T25026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1139.700089][T25026] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1139.708386][T25026] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1139.728874][T25026] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1139.737461][T25026] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1139.753860][T25026] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1140.402985][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.627942][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.847919][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.973589][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.984486][T15835] wlan1: Trigger new scan to find an IBSS to join [ 1141.258655][T26129] netlink: 'syz.3.6154': attribute type 2 has an invalid length. [ 1141.277496][T26129] netlink: 'syz.3.6154': attribute type 1 has an invalid length. [ 1141.299233][T26129] netlink: 'syz.3.6154': attribute type 4 has an invalid length. [ 1141.366220][T26129] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.6154'. [ 1141.426174][T26092] chnl_net:caif_netlink_parms(): no params data found [ 1141.478772][T26124] delete_channel: no stack [ 1141.631699][T26092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.639077][T26092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.669312][T26092] device bridge_slave_0 entered promiscuous mode [ 1141.785948][T14501] Bluetooth: hci4: command 0x0409 tx timeout [ 1141.946673][T26092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.961981][T26092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.006352][T26092] device bridge_slave_1 entered promiscuous mode [ 1142.203111][T26092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.351840][T26092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.591765][T26167] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6163'. [ 1142.608200][T26092] team0: Port device team_slave_0 added [ 1142.716764][T26092] team0: Port device team_slave_1 added [ 1142.850743][T26092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.870197][T26092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.967535][T26092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.022584][T26178] netlink: 'syz.4.6165': attribute type 41 has an invalid length. [ 1143.043221][T26092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.051861][T26092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.130903][T26092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.317268][T26092] device hsr_slave_0 entered promiscuous mode [ 1143.335394][T26092] device hsr_slave_1 entered promiscuous mode [ 1143.342953][T26092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.351030][T26092] Cannot create hsr debugfs directory [ 1143.873847][T14501] Bluetooth: hci4: command 0x041b tx timeout [ 1143.943978][T15839] wlan1: Trigger new scan to find an IBSS to join [ 1144.235894][ T31] device hsr_slave_0 left promiscuous mode [ 1144.255686][ T31] device hsr_slave_1 left promiscuous mode [ 1144.276352][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.293115][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.310711][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.321848][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.335334][ T31] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 1144.342498][ T31] batman_adv: batadv0: Removing interface: ipvlan1 [ 1144.360705][ T31] bridge0: port 3(team0) entered disabled state [ 1144.389701][ T31] device bridge_slave_1 left promiscuous mode [ 1144.399111][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.418105][ T31] device bridge_slave_0 left promiscuous mode [ 1144.435042][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.521332][ T31] device veth1_macvtap left promiscuous mode [ 1144.534285][ T31] device veth0_macvtap left promiscuous mode [ 1144.551131][ T31] device veth1_vlan left promiscuous mode [ 1144.581284][ T31] device veth0_vlan left promiscuous mode [ 1145.098817][ T31] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1145.305992][T26235] netlink: 'syz.4.6180': attribute type 2 has an invalid length. [ 1145.331757][T26235] netlink: 'syz.4.6180': attribute type 1 has an invalid length. [ 1145.362856][T26235] netlink: 'syz.4.6180': attribute type 4 has an invalid length. [ 1145.387456][T26235] netlink: 208312 bytes leftover after parsing attributes in process `syz.4.6180'. [ 1145.954006][T14501] Bluetooth: hci4: command 0x040f tx timeout [ 1145.971039][ T31] device team_slave_1 left promiscuous mode [ 1145.988084][ T31] team0 (unregistering): Port device team_slave_1 removed [ 1146.030012][ T31] device team_slave_0 left promiscuous mode [ 1146.038521][ T31] team0 (unregistering): Port device team_slave_0 removed [ 1146.088892][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.159729][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.685831][ T31] bond0 (unregistering): Released all slaves [ 1146.847680][T26258] netlink: 'syz.3.6188': attribute type 10 has an invalid length. [ 1147.104988][T26258] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1147.367816][T26265] netlink: 'syz.4.6199': attribute type 10 has an invalid length. [ 1147.621257][T26265] team0: Device veth1_vlan failed to register rx_handler [ 1148.024152][T14501] Bluetooth: hci4: command 0x0419 tx timeout [ 1148.294447][T26092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1148.317784][T26092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1148.343085][T26092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1148.396104][T26092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1148.621675][T26092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.667542][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1148.679665][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1148.697216][T26092] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.822681][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1148.842720][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1148.874792][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.882027][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.901585][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1148.918647][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1148.927934][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1148.984084][ T31] wlan1: Trigger new scan to find an IBSS to join [ 1148.991425][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.998602][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.066175][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1149.094575][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1149.114797][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1149.136675][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1149.222933][T26308] netlink: 'syz.4.6203': attribute type 10 has an invalid length. [ 1149.314453][T26308] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1149.323154][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1149.341962][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1149.374518][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1149.444863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1149.456123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1149.495671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1149.526743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1149.562926][T26092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1150.249203][T26338] netlink: 'syz.4.6211': attribute type 41 has an invalid length. [ 1150.417662][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1150.459125][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1150.492769][T26092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.634673][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1150.656297][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1150.740512][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1150.750864][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1150.768813][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1150.786868][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1150.809759][T26092] device veth0_vlan entered promiscuous mode [ 1150.857185][T26092] device veth1_vlan entered promiscuous mode [ 1150.914201][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1150.927828][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1150.988725][T26092] device veth0_macvtap entered promiscuous mode [ 1151.016668][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1151.034127][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1151.054451][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1151.080462][T26092] device veth1_macvtap entered promiscuous mode [ 1151.141265][T26092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.185048][T26092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.219387][T26092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.268322][T26092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.289051][T26092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.358417][T26092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.371347][T26092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.389579][T26092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.404753][T26092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.412739][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1151.437930][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1151.479048][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1151.512573][T26092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.551256][T26092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.584733][T26092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.617989][T26092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.643759][T26092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.678115][T26092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.708188][T26092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.726914][T26092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.753440][T26092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.823938][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1151.849877][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1151.887583][T26092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.906716][T26092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.939883][T26092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.960071][T26092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.220107][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.253789][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.274743][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1152.317658][T26391] netlink: 'syz.3.6224': attribute type 10 has an invalid length. [ 1152.405013][T26393] netlink: 'syz.1.6225': attribute type 46 has an invalid length. [ 1152.450166][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.482734][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.613333][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1152.654382][T26391] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6224'. [ 1153.090100][T26413] netlink: 'syz.0.6231': attribute type 10 has an invalid length. [ 1153.350856][T26413] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1153.944102][ T31] wlan1: Trigger new scan to find an IBSS to join [ 1154.157058][T26445] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.6237'. [ 1154.791080][T26465] netlink: 'syz.1.6241': attribute type 10 has an invalid length. [ 1156.682034][T26504] FAULT_INJECTION: forcing a failure. [ 1156.682034][T26504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.744126][T26504] CPU: 0 PID: 26504 Comm: syz.2.6254 Not tainted syzkaller #0 [ 1156.751689][T26504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1156.761884][T26504] Call Trace: [ 1156.765303][T26504] [ 1156.768277][T26504] dump_stack_lvl+0x188/0x24e [ 1156.773034][T26504] ? show_regs_print_info+0x12/0x12 [ 1156.778478][T26504] ? load_image+0x400/0x400 [ 1156.783049][T26504] ? __lock_acquire+0x7d10/0x7d10 [ 1156.788137][T26504] ? snprintf+0xe5/0x140 [ 1156.792693][T26504] should_fail_ex+0x399/0x4d0 [ 1156.797433][T26504] _copy_to_user+0x2c/0x130 [ 1156.802082][T26504] simple_read_from_buffer+0xe3/0x150 [ 1156.807596][T26504] proc_fail_nth_read+0x1a6/0x220 [ 1156.812670][T26504] ? proc_fault_inject_write+0x310/0x310 [ 1156.818347][T26504] ? fsnotify_perm+0x248/0x550 [ 1156.823146][T26504] ? proc_fault_inject_write+0x310/0x310 [ 1156.828827][T26504] vfs_read+0x2de/0xa00 [ 1156.833119][T26504] ? kernel_read+0x1e0/0x1e0 [ 1156.837746][T26504] ? __fget_files+0x28/0x4b0 [ 1156.842372][T26504] ? __fget_files+0x28/0x4b0 [ 1156.847008][T26504] ? __fget_files+0x43d/0x4b0 [ 1156.851734][T26504] ? __fdget_pos+0x2ae/0x360 [ 1156.856363][T26504] ? ksys_read+0x71/0x250 [ 1156.860730][T26504] ksys_read+0x14c/0x250 [ 1156.865021][T26504] ? vfs_write+0xa30/0xa30 [ 1156.869478][T26504] ? lockdep_hardirqs_on+0x94/0x140 [ 1156.874708][T26504] do_syscall_64+0x4c/0xa0 [ 1156.879163][T26504] ? clear_bhb_loop+0x60/0xb0 [ 1156.883875][T26504] ? clear_bhb_loop+0x60/0xb0 [ 1156.888688][T26504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1156.894616][T26504] RIP: 0033:0x7fa2d9f5d60e [ 1156.899065][T26504] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1156.918722][T26504] RSP: 002b:00007fa2daf21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1156.927178][T26504] RAX: ffffffffffffffda RBX: 00007fa2daf226c0 RCX: 00007fa2d9f5d60e [ 1156.935187][T26504] RDX: 000000000000000f RSI: 00007fa2daf220a0 RDI: 0000000000000024 [ 1156.943183][T26504] RBP: 00007fa2daf22090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.951203][T26504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.959206][T26504] R13: 00007fa2da216038 R14: 00007fa2da215fa0 R15: 00007ffd7e5d35e8 [ 1156.967223][T26504] [ 1157.518845][T26518] device wlan1 entered promiscuous mode [ 1157.545643][T26517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6259'. [ 1157.579233][T26517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6259'. [ 1157.627907][T26518] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6259'. [ 1158.575503][T26545] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1158.984278][ T31] wlan1: Trigger new scan to find an IBSS to join [ 1160.020987][ T4326] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1160.490752][T26585] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1160.743510][T26599] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1161.275292][T26610] device wlan1 entered promiscuous mode [ 1161.302222][T26610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6291'. [ 1161.334099][T26610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6291'. [ 1161.352301][T26610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6291'. [ 1162.139909][T26640] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1162.167530][T26640] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1162.203773][T26640] device veth0_to_bridge entered promiscuous mode [ 1162.218892][T26640] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1162.241530][T26640] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1162.249209][T26640] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 1162.596883][T26653] device wlan1 entered promiscuous mode [ 1162.617713][T26649] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1162.627555][T26649] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1162.643248][T26649] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1162.984250][ T4318] wlan1: Trigger new scan to find an IBSS to join [ 1163.030134][T26664] FAULT_INJECTION: forcing a failure. [ 1163.030134][T26664] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.047683][T26664] CPU: 1 PID: 26664 Comm: syz.2.6311 Not tainted syzkaller #0 [ 1163.055207][T26664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1163.065311][T26664] Call Trace: [ 1163.068628][T26664] [ 1163.071599][T26664] dump_stack_lvl+0x188/0x24e [ 1163.076341][T26664] ? show_regs_print_info+0x12/0x12 [ 1163.081597][T26664] ? load_image+0x400/0x400 [ 1163.086154][T26664] ? __might_sleep+0xd0/0xd0 [ 1163.090790][T26664] ? __lock_acquire+0x7d10/0x7d10 [ 1163.095897][T26664] should_fail_ex+0x399/0x4d0 [ 1163.100623][T26664] should_failslab+0x5/0x20 [ 1163.105176][T26664] slab_pre_alloc_hook+0x59/0x310 [ 1163.110254][T26664] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1163.116042][T26664] __kmem_cache_alloc_node+0x4f/0x260 [ 1163.121468][T26664] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1163.127253][T26664] __kmalloc+0xa0/0x240 [ 1163.131495][T26664] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1163.137109][T26664] ? tomoyo_path_number_perm+0x205/0x650 [ 1163.142800][T26664] tomoyo_path_number_perm+0x22f/0x650 [ 1163.148316][T26664] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1163.153829][T26664] ? ksys_write+0x1c0/0x250 [ 1163.158406][T26664] ? common_file_perm+0x171/0x1c0 [ 1163.163510][T26664] ? __fget_files+0x28/0x4b0 [ 1163.168241][T26664] ? __fget_files+0x28/0x4b0 [ 1163.172879][T26664] security_file_ioctl+0x6c/0xa0 [ 1163.177860][T26664] __se_sys_ioctl+0x48/0x170 [ 1163.182494][T26664] do_syscall_64+0x4c/0xa0 [ 1163.186943][T26664] ? clear_bhb_loop+0x60/0xb0 [ 1163.191650][T26664] ? clear_bhb_loop+0x60/0xb0 [ 1163.196363][T26664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1163.202293][T26664] RIP: 0033:0x7fa2d9f9cdd9 [ 1163.206733][T26664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.226373][T26664] RSP: 002b:00007fa2daf22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1163.234813][T26664] RAX: ffffffffffffffda RBX: 00007fa2da215fa0 RCX: 00007fa2d9f9cdd9 [ 1163.242824][T26664] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 0000000000000003 [ 1163.250941][T26664] RBP: 00007fa2daf22090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.258942][T26664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.266942][T26664] R13: 00007fa2da216038 R14: 00007fa2da215fa0 R15: 00007ffd7e5d35e8 [ 1163.274958][T26664] [ 1163.364242][T26664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1164.918318][T15839] wlan1: Trigger new scan to find an IBSS to join [ 1165.590587][T26720] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1166.442508][T26738] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1166.557551][T26748] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.6337'. [ 1166.847516][T26754] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1167.650319][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1167.660211][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1167.669751][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1167.677899][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1167.685968][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1167.693339][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1167.880900][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.934547][T26780] FAULT_INJECTION: forcing a failure. [ 1167.934547][T26780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.944635][ T31] wlan1: Trigger new scan to find an IBSS to join [ 1167.970391][T26780] CPU: 1 PID: 26780 Comm: syz.2.6349 Not tainted syzkaller #0 [ 1167.977932][T26780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1167.988038][T26780] Call Trace: [ 1167.991347][T26780] [ 1167.994306][T26780] dump_stack_lvl+0x188/0x24e [ 1167.999026][T26780] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1168.005219][T26780] ? show_regs_print_info+0x12/0x12 [ 1168.010472][T26780] ? load_image+0x400/0x400 [ 1168.015027][T26780] should_fail_ex+0x399/0x4d0 [ 1168.019752][T26780] _copy_from_user+0x2c/0x170 [ 1168.024469][T26780] ___sys_sendmsg+0x1c3/0x360 [ 1168.029294][T26780] ? __sys_sendmsg+0x290/0x290 [ 1168.034122][T26780] ? ktime_get_real_ts64+0x440/0x440 [ 1168.039457][T26780] __se_sys_sendmsg+0x1bb/0x2a0 [ 1168.044476][T26780] ? __x64_sys_sendmsg+0x80/0x80 [ 1168.049566][T26780] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1168.055587][T26780] do_syscall_64+0x4c/0xa0 [ 1168.060047][T26780] ? clear_bhb_loop+0x60/0xb0 [ 1168.064772][T26780] ? clear_bhb_loop+0x60/0xb0 [ 1168.069504][T26780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1168.075443][T26780] RIP: 0033:0x7fa2d9f9cdd9 [ 1168.079905][T26780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.099755][T26780] RSP: 002b:00007fa2daf22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.108304][T26780] RAX: ffffffffffffffda RBX: 00007fa2da215fa0 RCX: 00007fa2d9f9cdd9 [ 1168.116306][T26780] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1168.124320][T26780] RBP: 00007fa2daf22090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.132332][T26780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.140436][T26780] R13: 00007fa2da216038 R14: 00007fa2da215fa0 R15: 00007ffd7e5d35e8 [ 1168.148507][T26780] [ 1168.289970][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.379359][T26773] chnl_net:caif_netlink_parms(): no params data found [ 1168.497306][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.684314][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.820733][T26773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.840948][T26773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.873917][T26773] device bridge_slave_0 entered promiscuous mode [ 1168.914511][T26773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.923217][T26773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.943279][T26773] device bridge_slave_1 entered promiscuous mode [ 1169.235997][T26773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.315708][T26773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.480919][T26773] team0: Port device team_slave_0 added [ 1169.703786][T26773] team0: Port device team_slave_1 added [ 1169.787501][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 1169.945260][T15835] wlan1: Trigger new scan to find an IBSS to join [ 1170.131707][T26773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.146904][T26773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.218558][T26773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.274518][T26773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.281656][T26773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.348509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.359696][T26773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.361597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.383630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.396042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.408435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.420907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.433245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.445714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.458071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.470478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.761331][T26839] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1170.789670][T26773] device hsr_slave_0 entered promiscuous mode [ 1170.818489][T26773] device hsr_slave_1 entered promiscuous mode [ 1170.898629][T26773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1170.914293][ T4318] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1170.933725][T26773] Cannot create hsr debugfs directory [ 1171.134629][T26849] FAULT_INJECTION: forcing a failure. [ 1171.134629][T26849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.205438][T26849] CPU: 0 PID: 26849 Comm: syz.4.6367 Not tainted syzkaller #0 [ 1171.212986][T26849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1171.223094][T26849] Call Trace: [ 1171.226410][T26849] [ 1171.229390][T26849] dump_stack_lvl+0x188/0x24e [ 1171.234132][T26849] ? show_regs_print_info+0x12/0x12 [ 1171.239392][T26849] ? load_image+0x400/0x400 [ 1171.243955][T26849] ? __lock_acquire+0x7d10/0x7d10 [ 1171.249043][T26849] should_fail_ex+0x399/0x4d0 [ 1171.253771][T26849] _copy_from_user+0x2c/0x170 [ 1171.258507][T26849] ___sys_sendmsg+0x1c3/0x360 [ 1171.263265][T26849] ? __sys_sendmsg+0x290/0x290 [ 1171.268117][T26849] ? __lock_acquire+0x7d10/0x7d10 [ 1171.273240][T26849] __se_sys_sendmsg+0x1bb/0x2a0 [ 1171.278202][T26849] ? __x64_sys_sendmsg+0x80/0x80 [ 1171.283247][T26849] ? lockdep_hardirqs_on+0x94/0x140 [ 1171.288599][T26849] do_syscall_64+0x4c/0xa0 [ 1171.293080][T26849] ? clear_bhb_loop+0x60/0xb0 [ 1171.297815][T26849] ? clear_bhb_loop+0x60/0xb0 [ 1171.302553][T26849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1171.308495][T26849] RIP: 0033:0x7fd03ef9cdd9 [ 1171.313019][T26849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.332676][T26849] RSP: 002b:00007fd03ff05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1171.341136][T26849] RAX: ffffffffffffffda RBX: 00007fd03f215fa0 RCX: 00007fd03ef9cdd9 [ 1171.349157][T26849] RDX: 0000000000000090 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1171.357219][T26849] RBP: 00007fd03ff05090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.365247][T26849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.373274][T26849] R13: 00007fd03f216038 R14: 00007fd03f215fa0 R15: 00007fff76f31638 [ 1171.381322][T26849] [ 1171.903969][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 1172.215881][T26861] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1172.928513][T26883] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1172.983705][ T4318] wlan1: Trigger new scan to find an IBSS to join [ 1173.447464][T26895] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1173.953798][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 1173.977356][T26903] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1174.392752][T26773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1174.504609][T26773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1174.530634][T26773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1174.725068][T26773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1174.779535][T26919] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1174.984263][ T4318] wlan1: Trigger new scan to find an IBSS to join [ 1175.195097][T26773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.268377][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1175.282018][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1175.322140][T26773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.370049][ C1] net_ratelimit: 7079 callbacks suppressed [ 1175.370070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.388657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.401083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.413509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.426047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.438469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.451012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.463488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.475931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.488362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.507959][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1175.524657][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1175.557244][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.564495][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.579614][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1175.688328][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1175.785763][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.792990][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.914581][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1176.007160][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1176.024889][T14501] Bluetooth: hci0: command 0x0419 tx timeout [ 1176.064484][T26948] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1176.131611][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1176.162746][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1176.245322][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1176.294827][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1176.334256][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1176.344490][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1176.402829][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1176.417811][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1176.453080][T26773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1176.505152][T26773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1176.555778][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1176.574538][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1176.614574][T26955] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1176.976364][T26969] netlink: 'syz.0.6397': attribute type 19 has an invalid length. [ 1177.401002][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.407667][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.628100][T26984] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1177.803013][T26990] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1177.979591][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1177.990877][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1178.082121][T26773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.191798][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1178.211322][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1178.303989][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1178.343813][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1178.405945][T26773] device veth0_vlan entered promiscuous mode [ 1178.416626][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1178.441231][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1178.516054][T26773] device veth1_vlan entered promiscuous mode [ 1178.556462][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1178.686395][T26773] device veth0_macvtap entered promiscuous mode [ 1178.702093][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1178.724806][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1178.780390][T26773] device veth1_macvtap entered promiscuous mode [ 1178.792796][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1178.825936][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1178.878234][T26773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.923820][T26773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.944859][T26773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.967131][T26773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.984619][T15839] wlan1: Trigger new scan to find an IBSS to join [ 1179.011035][T26773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.043225][T26773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.083640][T26773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.118460][T26773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.138240][T26773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.178240][T26773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.230156][T26773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.268487][T26773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.293716][T26773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.368191][T26773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.430148][T26773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.494038][T26773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.520530][T26773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.557165][T26773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.581044][T26773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.618228][T26773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.667314][T26773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.753971][T26773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.890379][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1179.931029][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1179.944257][ T31] wlan1: Trigger new scan to find an IBSS to join [ 1179.971013][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1180.008337][T15835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1180.087229][T27029] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1180.412789][ C1] net_ratelimit: 3605 callbacks suppressed [ 1180.412808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1180.431107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1180.443522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.455895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.469176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1180.481530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1180.494033][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.506420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.519572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1180.531944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1180.557144][T26773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.571838][T26773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.580760][T26773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.590424][T26773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.668196][T27050] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1180.765312][T27056] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1180.789955][T15835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.806053][T15835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.852249][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1180.929064][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.946899][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.995548][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1181.908148][T27087] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1182.482767][T27101] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1183.807489][T27118] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1184.983850][T15835] wlan1: Trigger new scan to find an IBSS to join [ 1185.414477][ C1] net_ratelimit: 4762 callbacks suppressed [ 1185.414497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1185.432891][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1185.445281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.457759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.470900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1185.483389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1185.495999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.508418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.521601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1185.533988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1186.105919][T27160] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1186.599976][T27171] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1187.061555][ T9] device hsr_slave_0 left promiscuous mode [ 1187.072274][ T9] device hsr_slave_1 left promiscuous mode [ 1187.222472][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.259473][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.277014][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.284527][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.301074][ T9] bridge0: port 3(team0) entered disabled state [ 1187.340491][ T9] device bridge_slave_1 left promiscuous mode [ 1187.352922][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.389809][ T9] device bridge_slave_0 left promiscuous mode [ 1187.402547][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.488174][ T9] device veth1_macvtap left promiscuous mode [ 1187.499296][ T9] device veth0_macvtap left promiscuous mode [ 1188.909006][ T4318] wlan1: Trigger new scan to find an IBSS to join [ 1189.346107][ T9] device team_slave_1 left promiscuous mode [ 1189.368017][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1189.481656][ T9] device team_slave_0 left promiscuous mode [ 1189.501128][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1189.620578][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.778002][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1189.943770][ T4318] wlan1: Trigger new scan to find an IBSS to join [ 1190.424108][ C1] net_ratelimit: 7610 callbacks suppressed [ 1190.424129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1190.442441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1190.454856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.467249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.480823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1190.493219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1190.505610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.517999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.531082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1190.543574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1190.726809][ T9] bond0 (unregistering): Released all slaves [ 1190.889268][ T4331] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1190.936244][T27179] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1190.973346][T27201] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1192.010496][T27227] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1192.626066][T27237] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1194.280493][T27280] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1194.940044][ T4318] wlan1: Trigger new scan to find an IBSS to join [ 1195.474692][ C1] net_ratelimit: 5151 callbacks suppressed [ 1195.474712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1195.493091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.505518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.518653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1195.531117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1195.543526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.555897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.569032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1195.581432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1195.593973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1196.356718][T27320] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1196.987226][T15839] wlan1: Trigger new scan to find an IBSS to join [ 1198.119474][T27362] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1198.427437][T27372] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1199.005696][T15839] wlan1: Trigger new scan to find an IBSS to join [ 1200.198590][T27412] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1200.490478][ C1] net_ratelimit: 5009 callbacks suppressed [ 1200.490499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1200.508929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1200.521405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.533811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.546950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1200.559342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1200.571724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.584090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.597254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1200.609694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1201.947460][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1202.913972][ T4331] wlan1: Trigger new scan to find an IBSS to join [ 1202.959145][ T4331] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1203.670924][T27489] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1203.952549][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1204.218918][ T9] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1205.076402][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 1205.511854][ C1] net_ratelimit: 5466 callbacks suppressed [ 1205.511875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1205.530209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1205.542614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.554988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.568138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1205.580554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1205.593068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.605463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.618524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1205.630975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1206.179755][T27548] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1207.164561][T27572] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1207.739497][T27584] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1207.947684][ T31] wlan1: Trigger new scan to find an IBSS to join [ 1207.954308][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1208.949863][ T31] wlan1: Trigger new scan to find an IBSS to join [ 1209.435939][T15839] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1210.117769][ T4318] ------------[ cut here ]------------ [ 1210.124016][ T4318] WARNING: CPU: 0 PID: 4318 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 1210.134014][ T4318] Modules linked in: [ 1210.137964][ T4318] CPU: 0 PID: 4318 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1210.145635][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1210.155822][ T4318] Workqueue: cfg80211 cfg80211_event_work [ 1210.161666][ T4318] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1210.168193][ T4318] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 7b ed f7 0f 0b eb bb e8 d8 7b ed f7 <0f> 0b eb b2 e8 cf 7b ed f7 0f 0b e9 77 fd ff ff e8 c3 7b ed f7 0f [ 1210.187979][ T4318] RSP: 0018:ffffc900044d7aa0 EFLAGS: 00010293 [ 1210.194169][ T4318] RAX: ffffffff8994f978 RBX: dffffc0000000000 RCX: ffff88802fb09dc0 [ 1210.202198][ T4318] RDX: 0000000000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0 [ 1210.210340][ T4318] RBP: ffffc900044d7b70 R08: ffffffff90af92a7 R09: 1ffffffff215f254 [ 1210.218455][ T4318] R10: dffffc0000000000 R11: fffffbfff215f255 R12: ffff8880656335b8 [ 1210.226769][ T4318] R13: 1ffff9200089af5c R14: 000000000000001f R15: ffff8880781c0c90 [ 1210.234851][ T4318] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1210.243921][ T4318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1210.250576][ T4318] CR2: 00007fa2daf01d58 CR3: 0000000076dbc000 CR4: 00000000003506f0 [ 1210.258702][ T4318] DR0: 0000000000000000 DR1: 0100000000000000 DR2: 0000000000000000 [ 1210.267431][ T4318] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1210.275535][ T4318] Call Trace: [ 1210.278859][ T4318] [ 1210.281835][ T4318] ? mutex_lock_nested+0x10/0x10 [ 1210.286894][ T4318] ? trace_rdev_return_void+0x240/0x240 [ 1210.292510][ T4318] cfg80211_process_wdev_events+0x3ad/0x550 [ 1210.298535][ T4318] cfg80211_process_rdev_events+0x9d/0x110 [ 1210.304483][ T4318] ? process_one_work+0x7b0/0x1160 [ 1210.309661][ T4318] cfg80211_event_work+0x2b/0x40 [ 1210.314716][ T4318] process_one_work+0x8a2/0x1160 [ 1210.319741][ T4318] ? worker_detach_from_pool+0x240/0x240 [ 1210.325709][ T4318] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1210.330794][ T4318] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1210.336467][ T4318] ? kthread_data+0x4b/0xc0 [ 1210.341056][ T4318] worker_thread+0xaa2/0x1270 [ 1210.345882][ T4318] ? __kthread_parkme+0x162/0x1c0 [ 1210.350999][ T4318] kthread+0x29d/0x330 [ 1210.355172][ T4318] ? worker_clr_flags+0x1a0/0x1a0 [ 1210.360447][ T4318] ? kthread_blkcg+0xd0/0xd0 [ 1210.365169][ T4318] ret_from_fork+0x1f/0x30 [ 1210.369690][ T4318] [ 1210.372766][ T4318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1210.380090][ T4318] CPU: 0 PID: 4318 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1210.387696][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1210.397894][ T4318] Workqueue: cfg80211 cfg80211_event_work [ 1210.403776][ T4318] Call Trace: [ 1210.407099][ T4318] [ 1210.410119][ T4318] dump_stack_lvl+0x188/0x24e [ 1210.414861][ T4318] ? memcpy+0x3c/0x60 [ 1210.418893][ T4318] ? show_regs_print_info+0x12/0x12 [ 1210.424198][ T4318] ? load_image+0x400/0x400 [ 1210.428826][ T4318] panic+0x2e5/0x730 [ 1210.432799][ T4318] ? bpf_jit_dump+0xd0/0xd0 [ 1210.437409][ T4318] ? ret_from_fork+0x1f/0x30 [ 1210.442081][ T4318] __warn+0x2f8/0x4f0 [ 1210.446123][ T4318] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1210.451725][ T4318] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1210.457325][ T4318] report_bug+0x2ba/0x4f0 [ 1210.461721][ T4318] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1210.467325][ T4318] handle_bug+0x3a/0x70 [ 1210.471542][ T4318] exc_invalid_op+0x16/0x40 [ 1210.476101][ T4318] asm_exc_invalid_op+0x16/0x20 [ 1210.481004][ T4318] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1210.487225][ T4318] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 7b ed f7 0f 0b eb bb e8 d8 7b ed f7 <0f> 0b eb b2 e8 cf 7b ed f7 0f 0b e9 77 fd ff ff e8 c3 7b ed f7 0f [ 1210.506902][ T4318] RSP: 0018:ffffc900044d7aa0 EFLAGS: 00010293 [ 1210.513074][ T4318] RAX: ffffffff8994f978 RBX: dffffc0000000000 RCX: ffff88802fb09dc0 [ 1210.521105][ T4318] RDX: 0000000000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0 [ 1210.529137][ T4318] RBP: ffffc900044d7b70 R08: ffffffff90af92a7 R09: 1ffffffff215f254 [ 1210.537168][ T4318] R10: dffffc0000000000 R11: fffffbfff215f255 R12: ffff8880656335b8 [ 1210.545193][ T4318] R13: 1ffff9200089af5c R14: 000000000000001f R15: ffff8880781c0c90 [ 1210.553232][ T4318] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1210.558852][ T4318] ? mutex_lock_nested+0x10/0x10 [ 1210.563866][ T4318] ? trace_rdev_return_void+0x240/0x240 [ 1210.569495][ T4318] cfg80211_process_wdev_events+0x3ad/0x550 [ 1210.575482][ T4318] cfg80211_process_rdev_events+0x9d/0x110 [ 1210.581363][ T4318] ? process_one_work+0x7b0/0x1160 [ 1210.586552][ T4318] cfg80211_event_work+0x2b/0x40 [ 1210.591606][ T4318] process_one_work+0x8a2/0x1160 [ 1210.596632][ T4318] ? worker_detach_from_pool+0x240/0x240 [ 1210.602419][ T4318] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1210.603478][ C1] net_ratelimit: 3862 callbacks suppressed [ 1210.603521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1210.604489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1210.605550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.606184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.609798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1210.610448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1210.611446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.612147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.614977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:0c:d9:67:80:5a, vlan:0) [ 1210.615610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1210.732719][ T4318] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1210.738305][ T4318] ? kthread_data+0x4b/0xc0 [ 1210.742851][ T4318] worker_thread+0xaa2/0x1270 [ 1210.747576][ T4318] ? __kthread_parkme+0x162/0x1c0 [ 1210.752647][ T4318] kthread+0x29d/0x330 [ 1210.756736][ T4318] ? worker_clr_flags+0x1a0/0x1a0 [ 1210.761790][ T4318] ? kthread_blkcg+0xd0/0xd0 [ 1210.766410][ T4318] ret_from_fork+0x1f/0x30 [ 1210.770971][ T4318] [ 1210.774523][ T4318] Kernel Offset: disabled [ 1210.778923][ T4318] Rebooting in 86400 seconds..