last executing test programs: 3m8.990919195s ago: executing program 2 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3m8.814109458s ago: executing program 2 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) 3m8.634657322s ago: executing program 2 (id=68): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 3m8.467647565s ago: executing program 2 (id=71): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000800000007"], 0x48) 3m8.276269219s ago: executing program 2 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x4, 0x4, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), 0x0}, 0x20) 3m8.055596483s ago: executing program 2 (id=76): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40398, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000810000000000000000000000000000000000adb9324260f7ba4afe1d4232ba8fd8c61a514bda4337e5c076fb1319bfcbea20a60528a360"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}, 0xa08, 0x0, 0x0, 0x3, 0x3, 0xa547}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m52.979635694s ago: executing program 32 (id=76): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40398, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000810000000000000000000000000000000000adb9324260f7ba4afe1d4232ba8fd8c61a514bda4337e5c076fb1319bfcbea20a60528a360"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}, 0xa08, 0x0, 0x0, 0x3, 0x3, 0xa547}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m50.441645033s ago: executing program 3 (id=109): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x9e, &(0x7f0000000980)=""/158, 0x40f00, 0x5a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000ec0)={0x4, 0x6, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000f40)=[{0x3, 0x1, 0x7}], 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7}, 0x0, 0x0, 0x3, 0x4, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21dc5484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m50.221798787s ago: executing program 1 (id=110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x2, 0x4, 0x1, 0x8, 0x0, 0x8, 0x40401, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf0000000, 0x4, @perf_config_ext={0x48, 0xdaf2}, 0x40, 0x4, 0xfd, 0x7, 0xffffffffffffff76, 0x0, 0xb, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x7, r0, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 2m49.920034543s ago: executing program 1 (id=111): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe58}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m49.764440256s ago: executing program 1 (id=112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 2m49.54565288s ago: executing program 1 (id=113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 2m48.564018969s ago: executing program 1 (id=117): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m48.359142853s ago: executing program 1 (id=118): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40398, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000004000000ffff0100000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000810000000000000000000000000000000000adb9324260f7ba4afe1d4232ba8fd8c61a514bda4337e5c076fb1319bfcbea20a60528a360"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}, 0xa08, 0x0, 0x0, 0x3, 0x3, 0xa547}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000000500000085000000a0000000950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m41.631460003s ago: executing program 3 (id=120): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) 2m41.383749047s ago: executing program 3 (id=121): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000f8ffffff00000000000020008b0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x16) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) 2m40.799170339s ago: executing program 3 (id=122): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'xfrm0\x00', @random="4f33e363a4b1"}) 2m40.396507916s ago: executing program 3 (id=123): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 2m40.245331689s ago: executing program 3 (id=124): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x430010e0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2m32.164514705s ago: executing program 33 (id=118): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40398, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000004000000ffff0100000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000810000000000000000000000000000000000adb9324260f7ba4afe1d4232ba8fd8c61a514bda4337e5c076fb1319bfcbea20a60528a360"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}, 0xa08, 0x0, 0x0, 0x3, 0x3, 0xa547}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000000500000085000000a0000000950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m24.930954035s ago: executing program 34 (id=124): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x430010e0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2m13.477112176s ago: executing program 4 (id=145): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180)}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r1, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007912280000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x10, 0x0, 0xa, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000500000000000000030000001858000000000000000000000000000018110000", @ANYRES32], &(0x7f00000004c0)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780), &(0x7f00000007c0)=[{0x2, 0x2, 0x3, 0x5}, {0x3, 0x3, 0xb, 0x3}, {0x4, 0x5, 0x10, 0x6}, {0x2, 0x4, 0x3, 0xb}, {0x4, 0x5, 0x2, 0x1}], 0x10, 0xb}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x2a020600, &(0x7f0000000440)="4e159d92ce4e466744ae3704fbcbecdf6d177309d6887a9d4f60bdd3c2aa9601456e3bdfd0d883f01ff4b38bc7e0302ffc3a39d616b8f204f4e6067102b48bf64b442ded12f27d5c1fefd49050ae9b46d11c86ae78e3f153dacb1199b2571171df725d2ec1048be9f8fdf137cdd9075084f34b", 0x73, &(0x7f0000000280), &(0x7f00000003c0), 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) 2m12.387657307s ago: executing program 4 (id=146): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2m12.021878683s ago: executing program 4 (id=147): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x16) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) 2m10.895626046s ago: executing program 4 (id=149): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2m10.515652683s ago: executing program 4 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b00000007000000000000009500000000000000a8da98bda06daec5be3b6f803915cab5f9832e778e6bac762375ec5e2090d06ed136c22408d6dcddba21068c317d8458d2a3617d6f52377128e7c6bb2e9652aa482c78d635ac0739f4a3bb243adc576ecf8dc695be091c45af4bd45f79fa28b06c081972ab53ac413e25bc9770605fea9ae1883f2ca6434a7efaef764249ed9d96abfc4dd863e18c8977354ca7ac217793e423cc634f5ffc95f38c4aa2861fc010fc6b0bd04ada2759638dd957b2fdc6"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000056000000000000000000672966377fa5cb80e9709320b28187144ac70b5b0708ae2e3e63906840529324c5cbd1dde7c202dfa67751e8145705510576c4563e64b63d644cd4de9c58c8e144ec3ac21d42686e9985c027dc5ee60d663c504748255e75b9e09346dcb78a5a", @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0xbf68eb84494a68e2, 0x49, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0)=0xe00000000000000, 0xfffffdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) 2m3.867864991s ago: executing program 4 (id=165): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000400000007010000080700007500fcff0000000095000000d3031a00041f8ea47c2eb2b7639c2ad3a4c89eb40634ab9b5ade7978eb59ff70cd62adbe9c31865cf39dc9e93813d9433f34dad576b1897b3533f883f9e873d9c435ab89afdd4ff0c24c0053f1721e9dc694f461734e10ea76584696317ca540336bc0e60e7d6d44484e01102b1c830d2630c3932755946ba8848b0d93caec1f4d89f99dcd2e9cb4d3646bc48d7ece5cbb87cdd67955cf5c813c05411a276d6afe065ac5849c"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x94) 1m48.747297083s ago: executing program 35 (id=165): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000400000007010000080700007500fcff0000000095000000d3031a00041f8ea47c2eb2b7639c2ad3a4c89eb40634ab9b5ade7978eb59ff70cd62adbe9c31865cf39dc9e93813d9433f34dad576b1897b3533f883f9e873d9c435ab89afdd4ff0c24c0053f1721e9dc694f461734e10ea76584696317ca540336bc0e60e7d6d44484e01102b1c830d2630c3932755946ba8848b0d93caec1f4d89f99dcd2e9cb4d3646bc48d7ece5cbb87cdd67955cf5c813c05411a276d6afe065ac5849c"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x94) 3.883455505s ago: executing program 5 (id=794): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc4}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x9, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x10, 0x5}, {0x5, 0x1}, {0xc, 0x1}]}, @fwd={0x8}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @struct={0x10, 0x4, 0x0, 0x4, 0x1, 0xfffffffb, [{0xb, 0x2, 0x825}, {0x8, 0x4, 0x2}, {0x3, 0x2, 0x3}, {0xa, 0x1, 0xfffffff8}]}, @struct={0xd, 0x7, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x1, 0x8}, {0x4, 0x4, 0x2}, {0x4, 0x4, 0x1}, {0x8, 0x0, 0xfffffff7}, {0xd, 0x2, 0x6806}, {0x8, 0x1, 0x7}, {0xb, 0x2}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x30, 0x71, 0x0, 0x0]}}, 0x0, 0x101, 0x0, 0x1, 0x6}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xefeb, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) openat$cgroup_devices(r4, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) 3.714318398s ago: executing program 6 (id=796): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r2, &(0x7f0000000140), 0x0}, 0x20) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x1) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000000)=@hci={0x1f, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x11a8}, 0x8800) close(r5) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000180), 0x2, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x22, &(0x7f0000000100), 0x120) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) socket$kcm(0xa, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001c00"/28], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.499241833s ago: executing program 0 (id=799): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x6}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x40, 0x4, 0x6, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x11, 0xffff, 0x6b, 0x4, 0xb823, 0x6, 0x2b7d, 0x0, 0x987b3f7, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x40, 0x4, 0x6, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x11, 0xffff, 0x6b, 0x4, 0xb823, 0x6, 0x2b7d, 0x0, 0x987b3f7, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000ff0f00000000000022cdf1c7f250a68749536c074d7d7b9cad5ef0634aeb9fc49d280cd5f2a741", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xce) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r4], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='}\x00') perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0xc, 0xff, 0x80, 0x0, 0x0, 0x0, 0x9020, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x10000000000055, 0x21c}, 0x550, 0x100000000, 0x4, 0x1, 0xfffffffffffffffc, 0x7, 0x9, 0x0, 0x7, 0x0, 0x40002}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0xc, 0xff, 0x80, 0x0, 0x0, 0x0, 0x9020, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x10000000000055, 0x21c}, 0x550, 0x100000000, 0x4, 0x1, 0xfffffffffffffffc, 0x7, 0x9, 0x0, 0x7, 0x0, 0x40002}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000000c0)='n!/$\x00') 3.455137644s ago: executing program 5 (id=800): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xc8}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2) 2.644365179s ago: executing program 7 (id=803): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad20409bbc7a46e39a8285dcdf12176679df069163ce955f070009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000000004080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0900000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00d\x00\x00\x00\x00\x00\x00'], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r1, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x42, 0x42, 0x4, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x1}, @const={0xa, 0x0, 0x0, 0xa, 0x3}, @datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x0, 0xfffffff8}], '@M'}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x61, 0x30]}}, &(0x7f00000009c0)=""/87, 0x60, 0x57, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x7f, 0x0, r1, 0x2, '\x00', r2, r3, 0x0, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000580), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10, 0x5}], 0x10, 0xfffffff7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af81301000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x2a, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xcaf33e1544d03717}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10001}, @generic={0x0, 0x2, 0x1, 0x1, 0x1b8}]}, &(0x7f0000000000)='syzkaller\x00', 0x3ff, 0x8a, &(0x7f0000000340)=""/138, 0x41100, 0xc, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x1, 0x6, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000080)=[r1, r7, r1], &(0x7f0000000400)=[{0x4, 0x3, 0x9, 0xb}, {0x0, 0x5, 0xe}], 0x10, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) 2.050044891s ago: executing program 7 (id=804): socket$kcm(0x28, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c48a570389e85e8182eab41a2f16", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000000c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 1.933154603s ago: executing program 6 (id=805): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x17, 0x2000}, 0x20) (fail_nth: 2) 1.828069585s ago: executing program 0 (id=806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) recvmsg$unix(r2, &(0x7f0000000700)={&(0x7f0000000100), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/46, 0x2e}, {&(0x7f00000005c0)=""/180, 0xb4}], 0x8}, 0x2000) ioctl$TUNSETOFFLOAD(r1, 0x4004743c, 0xf0ff1f00000000) 1.660167448s ago: executing program 7 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/81, 0x51}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000000ec0)=""/4086, 0xff6}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000000400)=""/186, 0xba}, {&(0x7f0000000380)=""/97, 0x61}], 0x7}, 0x100) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}, {&(0x7f0000000600)="452bc133df8c5abd716acc1b024517b7be4c248e4bf0d8a1471b76d6a5c6919e9bf594c9b7b29ca9a97fb5a099b206a888dc9c4d3e1730e0079d7682b740a4a1d7d2446a95cc7b54bd459098ebda9daf3508e82cacf06b3bf519c8175a160648fbcb90659cdf8a1ac3ee6e7951bb62c58e4c0b4e6a447075687b7528fc534b00c0ec3062972f8a5a811b93d171c5802d4afa843b92810608674285748e1015c73c8bd430dfa80c0dff359141ded30ff06f884a96f902b485c144321819e74a60d16c4ea477", 0xc5}, {&(0x7f00000002c0)="b47498d4452ee89730ef3b72bdad2fea302601172856a4b45ff70ae0e131a1774c33fbb5cd9c337024faed5e448d5ba5f2a74eb715abc5bad98c63e4bbe22c1aa90a86c5471c4044f6006bd989093292b192d7642e8e2cf48851bf88b3b20163f549316294e2a25d3ef6782b0421374e2304f84bbc095e69966eaea9591e295afc1347ee458ec69e4d0aaba4e1623934081c6b02898e7bfd777189f964bb", 0x9e}, {&(0x7f0000000080)="74b76aa1527a2f03862734e0ddb870985136d0", 0x13}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x4) sendmsg(r4, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="fd307a86d6f06335a26edc214bc31bb0af2cfa397bf979176c835e68ee3aba85835a04a8088160ca4eeae5583344d3d948c6971f2e4cb18539d235c94a4cc4b44705a09f00c9f8e8", 0x48}], 0x1}, 0x4000) 1.430848193s ago: executing program 6 (id=808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x4, 0xe, 0xfffffff7}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x61, 0x2e, 0x2e]}}, 0x0, 0x38, 0x0, 0x1, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) 1.200064957s ago: executing program 5 (id=809): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x17, 0x2000}, 0x20) 1.197383997s ago: executing program 0 (id=810): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf6}, 0x0, 0x3, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1ee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0xffffffffffffffb0, 0x40000}, 0x4000) (async) sendmsg$unix(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0xffffffffffffffb0, 0x40000}, 0x4000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0135014010ff"}) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup, 0x4, 0x1, 0x1, &(0x7f0000000380)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) close(0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) (async) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r5) (async) close(r5) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000), 0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffffff, 0xfffffffffffffe2b) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=0xffffffffffffffff, 0xfffffffffffffe2b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x20}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000040000850000001b000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.028024301s ago: executing program 5 (id=811): r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa71c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@datasec={0x6, 0x1, 0x0, 0xf, 0x1, [{}], '\t'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "e10418"}]}, {0x0, [0x0, 0x2e, 0x0, 0x0, 0x0, 0x5f, 0x1e]}}, &(0x7f0000000340)=""/173, 0x49, 0xad, 0x1}, 0x28) 1.019440151s ago: executing program 6 (id=812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0xa31, 0x8, 0x2, 0xffffffffffffffff, 0xcb02}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}}, &(0x7f0000000080)=""/159, 0x32, 0x9f, 0x1}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x22, &(0x7f0000000100)=r3, 0x120) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100) ioctl$SIOCSIFHWADDR(r4, 0x891a, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) 905.258473ms ago: executing program 0 (id=813): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc4}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x9, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x10, 0x5}, {0x5, 0x1}, {0xc, 0x1}]}, @fwd={0x8}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @struct={0x10, 0x4, 0x0, 0x4, 0x1, 0xfffffffb, [{0xb, 0x2, 0x825}, {0x8, 0x4, 0x2}, {0x3, 0x2, 0x3}, {0xa, 0x1, 0xfffffff8}]}, @struct={0xd, 0x7, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x1, 0x8}, {0x4, 0x4, 0x2}, {0x4, 0x4, 0x1}, {0x8, 0x0, 0xfffffff7}, {0xd, 0x2, 0x6806}, {0x8, 0x1, 0x7}, {0xb, 0x2}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x30, 0x71, 0x0, 0x0]}}, 0x0, 0x101, 0x0, 0x1, 0x6}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xefeb, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) openat$cgroup_devices(r4, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) 864.032233ms ago: executing program 7 (id=814): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc4}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x9, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x10, 0x5}, {0x5, 0x1}, {0xc, 0x1}]}, @fwd={0x8}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @struct={0x10, 0x4, 0x0, 0x4, 0x1, 0xfffffffb, [{0xb, 0x2, 0x825}, {0x8, 0x4, 0x2}, {0x3, 0x2, 0x3}, {0xa, 0x1, 0xfffffff8}]}, @struct={0xd, 0x7, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x1, 0x8}, {0x4, 0x4, 0x2}, {0x4, 0x4, 0x1}, {0x8, 0x0, 0xfffffff7}, {0xd, 0x2, 0x6806}, {0x8, 0x1, 0x7}, {0xb, 0x2}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x30, 0x71, 0x0, 0x0]}}, 0x0, 0x101, 0x0, 0x1, 0x6}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xefeb, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) openat$cgroup_devices(r4, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) 858.470234ms ago: executing program 5 (id=815): socket$kcm(0x28, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c48a570389e85e8182eab41a2f16", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000000c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 704.623517ms ago: executing program 6 (id=816): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc4}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x9, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x10, 0x5}, {0x5, 0x1}, {0xc, 0x1}]}, @fwd={0x8}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @struct={0x10, 0x4, 0x0, 0x4, 0x1, 0xfffffffb, [{0xb, 0x2, 0x825}, {0x8, 0x4, 0x2}, {0x3, 0x2, 0x3}, {0xa, 0x1, 0xfffffff8}]}, @struct={0xd, 0x7, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x1, 0x8}, {0x4, 0x4, 0x2}, {0x4, 0x4, 0x1}, {0x8, 0x0, 0xfffffff7}, {0xd, 0x2, 0x6806}, {0x8, 0x1, 0x7}, {0xb, 0x2}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x30, 0x71, 0x0, 0x0]}}, 0x0, 0x101, 0x0, 0x1, 0x6}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xefeb, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) openat$cgroup_devices(r4, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) 616.486018ms ago: executing program 0 (id=817): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000), 0x10) 497.995321ms ago: executing program 5 (id=818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) recvmsg$unix(r2, &(0x7f0000000700)={&(0x7f0000000100), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/46, 0x2e}, {&(0x7f00000005c0)=""/180, 0xb4}], 0x8}, 0x2000) ioctl$TUNSETOFFLOAD(r1, 0x4004743c, 0xf0ff1f00000000) 497.63621ms ago: executing program 7 (id=819): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x108, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (fail_nth: 2) 496.78936ms ago: executing program 0 (id=826): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc4}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x9, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x10, 0x5}, {0x5, 0x1}, {0xc, 0x1}]}, @fwd={0x8}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @struct={0x10, 0x4, 0x0, 0x4, 0x1, 0xfffffffb, [{0xb, 0x2, 0x825}, {0x8, 0x4, 0x2}, {0x3, 0x2, 0x3}, {0xa, 0x1, 0xfffffff8}]}, @struct={0xd, 0x7, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x1, 0x8}, {0x4, 0x4, 0x2}, {0x4, 0x4, 0x1}, {0x8, 0x0, 0xfffffff7}, {0xd, 0x2, 0x6806}, {0x8, 0x1, 0x7}, {0xb, 0x2}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x30, 0x71, 0x0, 0x0]}}, 0x0, 0x101, 0x0, 0x1, 0x6}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x3000, 0x4, 0x0, 0x8, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xefeb, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) openat$cgroup_devices(r4, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) 111.666768ms ago: executing program 6 (id=820): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4ae002, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000380)=""/179, 0xb3, 0x0, &(0x7f0000000440)=""/232, 0xe8}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x8, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000500), 0x75, r4}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x800, 0x7, 0x1220, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x0, 0x2, 0x2, 0x1}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xee, 0xee, 0x9, [@datasec={0xa, 0x7, 0x0, 0xf, 0x2, [{0x5, 0xfffffff9, 0x8}, {0x3, 0xffff99a5, 0x6}, {0x5, 0xe, 0x7}, {0x5, 0x1, 0x4}, {0x4, 0xfffff800, 0x8}, {0x1, 0x5, 0xb8a2}, {0x5, 0x8}], "0672"}, @float={0x10, 0x0, 0x0, 0x10, 0x10}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x0, 0x7e, 0x1}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x73, 0x0, 0x7d, 0x2}, @union={0xc, 0x7, 0x0, 0x5, 0x1, 0x0, [{0x10, 0x0, 0x7fff}, {0x7, 0x1, 0x8}, {0xd, 0x1, 0xfffffffb}, {0x2, 0x5, 0x567}, {0x10, 0x2, 0x7}, {0x9, 0x4, 0x7fffffff}, {0xc, 0x5, 0xfffffffd}]}]}, {0x0, [0x61, 0x61, 0x2e, 0x5f, 0x30, 0x5f, 0x61]}}, &(0x7f0000000940)=""/137, 0x111, 0x89, 0x0, 0x5}, 0x28) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xee, 0xee, 0x9, [@datasec={0xa, 0x7, 0x0, 0xf, 0x2, [{0x5, 0xfffffff9, 0x8}, {0x3, 0xffff99a5, 0x6}, {0x5, 0xe, 0x7}, {0x5, 0x1, 0x4}, {0x4, 0xfffff800, 0x8}, {0x1, 0x5, 0xb8a2}, {0x5, 0x8}], "0672"}, @float={0x10, 0x0, 0x0, 0x10, 0x10}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x0, 0x7e, 0x1}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x73, 0x0, 0x7d, 0x2}, @union={0xc, 0x7, 0x0, 0x5, 0x1, 0x0, [{0x10, 0x0, 0x7fff}, {0x7, 0x1, 0x8}, {0xd, 0x1, 0xfffffffb}, {0x2, 0x5, 0x567}, {0x10, 0x2, 0x7}, {0x9, 0x4, 0x7fffffff}, {0xc, 0x5, 0xfffffffd}]}]}, {0x0, [0x61, 0x61, 0x2e, 0x5f, 0x30, 0x5f, 0x61]}}, &(0x7f0000000940)=""/137, 0x111, 0x89, 0x0, 0x5}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000cc0)={0x0, r4}, 0x8) (async) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000cc0)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xd, 0x1382, 0x5, 0x7fffffff, 0x10002, 0xffffffffffffffff, 0x60, '\x00', r8, r9, 0x4, 0x5, 0x4, 0x0, @void, @value, @value=r10}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xd, 0x1382, 0x5, 0x7fffffff, 0x10002, 0xffffffffffffffff, 0x60, '\x00', r8, r9, 0x4, 0x5, 0x4, 0x0, @void, @value, @value=r10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000001c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x61226b9f, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000200)='syzkaller\x00', 0x53, 0xb9, &(0x7f0000000240)=""/185, 0x100, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xe, 0x8, 0x5d}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f00000006c0)=[r4, r5, r6], &(0x7f0000000700)=[{0x5, 0x1, 0xa, 0x4}, {0x1, 0x3, 0x2}, {0x0, 0x4, 0xb, 0x9}, {0x1, 0x5, 0x6, 0x1}, {0x4, 0x5, 0x3, 0x3}], 0x10, 0x57}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000001c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x61226b9f, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000200)='syzkaller\x00', 0x53, 0xb9, &(0x7f0000000240)=""/185, 0x100, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xe, 0x8, 0x5d}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f00000006c0)=[r4, r5, r6], &(0x7f0000000700)=[{0x5, 0x1, 0xa, 0x4}, {0x1, 0x3, 0x2}, {0x0, 0x4, 0xb, 0x9}, {0x1, 0x5, 0x6, 0x1}, {0x4, 0x5, 0x3, 0x3}], 0x10, 0x57}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r5, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r12}, 0x10) (async) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r12}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x57020000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x70000}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x2f}, 0x94) r14 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0xb, 0x5, 0x4, 0x0, 0x8, 0x2008, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x994, 0x8, 0x3, 0x3, 0x1, 0xc}, r0, 0xf, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x2, 0x7f, 0x6, 0x0, 0x7, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7c, 0x1, @perf_config_ext={0x2, 0x9}, 0x60, 0x30000000, 0x7, 0x9, 0x9, 0x8000, 0x9, 0x0, 0x5}, r0, 0xc, r14, 0x1) r15 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r15, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r15, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x8915, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r13, 0xc008240a, &(0x7f0000000900)={0x3, 0x0, [0x0, 0x0, 0x0]}) 0s ago: executing program 7 (id=821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x4, 0xe, 0xfffffff7}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x61, 0x2e, 0x2e]}}, 0x0, 0x38, 0x0, 0x1, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.202' (ED25519) to the list of known hosts. [ 330.318471][ T5821] cgroup: Unknown subsys name 'net' [ 330.483354][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 332.175212][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 334.065207][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.085141][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.104251][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.112884][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.120933][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.134140][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.142512][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.151464][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.159683][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.169437][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.177306][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.184816][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.290158][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.304503][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.313623][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.322406][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.331496][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.339236][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.354331][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.364905][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.373399][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.382718][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.396551][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.404110][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.702923][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 334.875232][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 334.946412][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.953719][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.963448][ T5834] bridge_slave_0: entered allmulticast mode [ 334.971782][ T5834] bridge_slave_0: entered promiscuous mode [ 334.999852][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.007083][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.014775][ T5834] bridge_slave_1: entered allmulticast mode [ 335.021766][ T5834] bridge_slave_1: entered promiscuous mode [ 335.126848][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.136322][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 335.172751][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.211803][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.220542][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.230251][ T5830] bridge_slave_0: entered allmulticast mode [ 335.238224][ T5830] bridge_slave_0: entered promiscuous mode [ 335.269469][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.276771][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.284176][ T5830] bridge_slave_1: entered allmulticast mode [ 335.291215][ T5830] bridge_slave_1: entered promiscuous mode [ 335.324997][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 335.359173][ T5834] team0: Port device team_slave_0 added [ 335.368029][ T5834] team0: Port device team_slave_1 added [ 335.422027][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.453380][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.460639][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.487440][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.501876][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.536315][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.543530][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.551135][ T5839] bridge_slave_0: entered allmulticast mode [ 335.559022][ T5839] bridge_slave_0: entered promiscuous mode [ 335.567041][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.574613][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.600887][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.634563][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.641760][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.649487][ T5839] bridge_slave_1: entered allmulticast mode [ 335.657358][ T5839] bridge_slave_1: entered promiscuous mode [ 335.690808][ T5830] team0: Port device team_slave_0 added [ 335.699953][ T5830] team0: Port device team_slave_1 added [ 335.791910][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.809064][ T5834] hsr_slave_0: entered promiscuous mode [ 335.816399][ T5834] hsr_slave_1: entered promiscuous mode [ 335.826150][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.833232][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.860444][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.889920][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.913594][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.920901][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.947552][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.964647][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.971826][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.979427][ T5841] bridge_slave_0: entered allmulticast mode [ 335.987829][ T5841] bridge_slave_0: entered promiscuous mode [ 336.051956][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.059334][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.067854][ T5841] bridge_slave_1: entered allmulticast mode [ 336.075579][ T5841] bridge_slave_1: entered promiscuous mode [ 336.104640][ T5839] team0: Port device team_slave_0 added [ 336.112856][ T5839] team0: Port device team_slave_1 added [ 336.123017][ T5830] hsr_slave_0: entered promiscuous mode [ 336.129773][ T5830] hsr_slave_1: entered promiscuous mode [ 336.136303][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.144629][ T5830] Cannot create hsr debugfs directory [ 336.217746][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.227851][ T5101] Bluetooth: hci1: command tx timeout [ 336.227871][ T5833] Bluetooth: hci0: command tx timeout [ 336.260326][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.267652][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.294307][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.313059][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.348543][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.355983][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.382300][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.394005][ T5833] Bluetooth: hci2: command tx timeout [ 336.450214][ T5841] team0: Port device team_slave_0 added [ 336.460501][ T5841] team0: Port device team_slave_1 added [ 336.483995][ T5833] Bluetooth: hci3: command tx timeout [ 336.601470][ T5839] hsr_slave_0: entered promiscuous mode [ 336.608547][ T5839] hsr_slave_1: entered promiscuous mode [ 336.615115][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.622707][ T5839] Cannot create hsr debugfs directory [ 336.640570][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.647919][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.674735][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.687866][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.694997][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.721079][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.873553][ T5841] hsr_slave_0: entered promiscuous mode [ 336.881771][ T5841] hsr_slave_1: entered promiscuous mode [ 336.888702][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.897402][ T5841] Cannot create hsr debugfs directory [ 336.982212][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.019603][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.047914][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.071197][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.161217][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.190255][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.205967][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 337.218840][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 337.330566][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.342733][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.365128][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.378400][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 337.461822][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 337.473782][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 337.490780][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.516076][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.551828][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.626970][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.655231][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.662531][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.690971][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.703644][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.710871][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.779324][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.822449][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.829677][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.858213][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.865383][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.888360][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.963432][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.027310][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.048719][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.082706][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.089952][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.106981][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.114215][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.141965][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.149224][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.189244][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.196516][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.306473][ T5833] Bluetooth: hci0: command tx timeout [ 338.306484][ T5101] Bluetooth: hci1: command tx timeout [ 338.446552][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.467160][ T5101] Bluetooth: hci2: command tx timeout [ 338.509734][ T5830] veth0_vlan: entered promiscuous mode [ 338.525088][ T5830] veth1_vlan: entered promiscuous mode [ 338.545048][ T5101] Bluetooth: hci3: command tx timeout [ 338.619687][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.673800][ T5830] veth0_macvtap: entered promiscuous mode [ 338.712126][ T5830] veth1_macvtap: entered promiscuous mode [ 338.806739][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.820162][ T5834] veth0_vlan: entered promiscuous mode [ 338.840739][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.888429][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.899623][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.909700][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.918618][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.963078][ T5834] veth1_vlan: entered promiscuous mode [ 339.000631][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.022149][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.113139][ T5834] veth0_macvtap: entered promiscuous mode [ 339.143032][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.152684][ T5834] veth1_macvtap: entered promiscuous mode [ 339.158649][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.230123][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.238527][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.241651][ T5841] veth0_vlan: entered promiscuous mode [ 339.257277][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.269551][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.282589][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.310501][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.328721][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.340893][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.354512][ T5841] veth1_vlan: entered promiscuous mode [ 339.373343][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.382881][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.392896][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.402980][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.440997][ T5839] veth0_vlan: entered promiscuous mode [ 339.512938][ T5839] veth1_vlan: entered promiscuous mode [ 339.631773][ T5841] veth0_macvtap: entered promiscuous mode [ 339.676101][ T5841] veth1_macvtap: entered promiscuous mode [ 339.693143][ T5910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.708026][ T5839] veth0_macvtap: entered promiscuous mode [ 339.716666][ T5910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.754521][ T5839] veth1_macvtap: entered promiscuous mode [ 339.794292][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.802188][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.839401][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.850111][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.860972][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.871976][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.893040][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.902484][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.915751][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.925683][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.936252][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.946319][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.956905][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.968860][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.983641][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.996613][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.008997][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.019581][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.035316][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.047810][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.056949][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.073247][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.083657][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.101454][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.130501][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.149240][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.161639][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.171578][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.182302][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.195124][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.211192][ T5922] netlink: 'syz.1.5': attribute type 10 has an invalid length. [ 340.225719][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5'. [ 340.237862][ T5922] batadv0: entered promiscuous mode [ 340.243207][ T5922] batadv0: entered allmulticast mode [ 340.251501][ T5922] bridge0: port 3(batadv0) entered blocking state [ 340.261883][ T5922] bridge0: port 3(batadv0) entered disabled state [ 340.279164][ T5922] bridge0: port 3(batadv0) entered blocking state [ 340.287086][ T5922] bridge0: port 3(batadv0) entered forwarding state [ 340.306611][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.317046][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.326951][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.336234][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.340392][ T5868] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 340.355377][ T5868] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 340.355979][ T5921] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 340.380259][ T5921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 340.384784][ T5101] Bluetooth: hci0: command tx timeout [ 340.394888][ T5101] Bluetooth: hci1: command tx timeout [ 340.401422][ T5921] batadv0: entered promiscuous mode [ 340.417170][ T5921] batadv0: entered allmulticast mode [ 340.423911][ C0] hrtimer: interrupt took 72049 ns [ 340.435267][ T5921] bridge0: port 3(batadv0) entered blocking state [ 340.442846][ T5921] bridge0: port 3(batadv0) entered disabled state [ 340.468801][ T5921] bridge0: port 3(batadv0) entered blocking state [ 340.476176][ T5921] bridge0: port 3(batadv0) entered forwarding state [ 340.529110][ T5921] syz.0.10 (5921) used greatest stack depth: 20968 bytes left [ 340.544726][ T5101] Bluetooth: hci2: command tx timeout [ 340.546971][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 340.559507][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 340.624818][ T5101] Bluetooth: hci3: command tx timeout [ 340.705729][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.725624][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.738927][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.756689][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.817626][ T5897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.828428][ T5897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.853326][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.887521][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.292175][ T5937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 341.301949][ T5937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 341.312483][ T5936] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 341.327404][ T5937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 341.707111][ T5942] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16'. [ 341.744846][ T5943] Illegal XDP return value 4294967294 on prog (id 7) dev N/A, expect packet loss! [ 341.962053][ T5952] FAULT_INJECTION: forcing a failure. [ 341.962053][ T5952] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 342.041120][ T5952] CPU: 0 PID: 5952 Comm: syz.3.9 Not tainted syzkaller #0 [ 342.048333][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.058445][ T5952] Call Trace: [ 342.061764][ T5952] [ 342.064739][ T5952] dump_stack_lvl+0x16c/0x230 [ 342.069473][ T5952] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.075683][ T5952] ? show_regs_print_info+0x20/0x20 [ 342.080935][ T5952] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.087144][ T5952] should_fail_ex+0x39d/0x4d0 [ 342.091855][ T5952] _copy_from_user+0x2f/0xe0 [ 342.096465][ T5952] ___sys_sendmsg+0x159/0x290 [ 342.101165][ T5952] ? __sys_sendmsg+0x270/0x270 [ 342.105978][ T5952] ? seqcount_lockdep_reader_access+0x160/0x1c0 [ 342.112254][ T5952] __se_sys_sendmsg+0x1a5/0x270 [ 342.117133][ T5952] ? __x64_sys_sendmsg+0x80/0x80 [ 342.122110][ T5952] ? syscall_enter_from_user_mode+0x2e/0x80 [ 342.128031][ T5952] do_syscall_64+0x55/0xb0 [ 342.132463][ T5952] ? clear_bhb_loop+0x40/0x90 [ 342.137160][ T5952] ? clear_bhb_loop+0x40/0x90 [ 342.141976][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.147893][ T5952] RIP: 0033:0x7f500578ebe9 [ 342.152329][ T5952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.171954][ T5952] RSP: 002b:00007f50066d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.180386][ T5952] RAX: ffffffffffffffda RBX: 00007f50059c5fa0 RCX: 00007f500578ebe9 [ 342.188496][ T5952] RDX: 0000000000000840 RSI: 00002000000000c0 RDI: 0000000000000004 [ 342.196498][ T5952] RBP: 00007f50066d3090 R08: 0000000000000000 R09: 0000000000000000 [ 342.204484][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.212469][ T5952] R13: 00007f50059c6038 R14: 00007f50059c5fa0 R15: 00007ffe4c28e978 [ 342.220464][ T5952] [ 342.259922][ T5958] FAULT_INJECTION: forcing a failure. [ 342.259922][ T5958] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 342.302749][ T5958] CPU: 0 PID: 5958 Comm: syz.1.14 Not tainted syzkaller #0 [ 342.310130][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.320236][ T5958] Call Trace: [ 342.323551][ T5958] [ 342.326518][ T5958] dump_stack_lvl+0x16c/0x230 [ 342.331270][ T5958] ? show_regs_print_info+0x20/0x20 [ 342.336511][ T5958] ? load_image+0x3b0/0x3b0 [ 342.341056][ T5958] ? __might_fault+0xaa/0x120 [ 342.345777][ T5958] ? __lock_acquire+0x7c80/0x7c80 [ 342.350853][ T5958] should_fail_ex+0x39d/0x4d0 [ 342.355647][ T5958] _copy_from_user+0x2f/0xe0 [ 342.360291][ T5958] ___sys_sendmsg+0x159/0x290 [ 342.365029][ T5958] ? __sys_sendmsg+0x270/0x270 [ 342.369883][ T5958] ? __lock_acquire+0x7c80/0x7c80 [ 342.374987][ T5958] __se_sys_sendmsg+0x1a5/0x270 [ 342.379900][ T5958] ? __x64_sys_sendmsg+0x80/0x80 [ 342.384908][ T5958] ? lockdep_hardirqs_on+0x98/0x150 [ 342.390177][ T5958] do_syscall_64+0x55/0xb0 [ 342.394651][ T5958] ? clear_bhb_loop+0x40/0x90 [ 342.399384][ T5958] ? clear_bhb_loop+0x40/0x90 [ 342.404129][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.410076][ T5958] RIP: 0033:0x7f894778ebe9 [ 342.414531][ T5958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.434202][ T5958] RSP: 002b:00007f8948668038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.442668][ T5958] RAX: ffffffffffffffda RBX: 00007f89479c5fa0 RCX: 00007f894778ebe9 [ 342.450678][ T5958] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 342.458686][ T5958] RBP: 00007f8948668090 R08: 0000000000000000 R09: 0000000000000000 [ 342.466783][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.474787][ T5958] R13: 00007f89479c6038 R14: 00007f89479c5fa0 R15: 00007ffd6ff61148 [ 342.482807][ T5958] [ 342.488039][ T5101] Bluetooth: hci1: command tx timeout [ 342.495669][ T5101] Bluetooth: hci0: command tx timeout [ 342.644821][ T5101] Bluetooth: hci2: command tx timeout [ 342.705954][ T5101] Bluetooth: hci3: command tx timeout [ 342.811907][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 343.139312][ T5963] bridge0: port 3(team0) entered blocking state [ 343.180755][ T5963] bridge0: port 3(team0) entered disabled state [ 343.230631][ T5963] team0: entered allmulticast mode [ 343.240356][ T5963] team_slave_0: entered allmulticast mode [ 343.257399][ T5963] team_slave_1: entered allmulticast mode [ 343.383462][ T5963] team0: entered promiscuous mode [ 343.414055][ T5963] team_slave_0: entered promiscuous mode [ 343.422995][ T5963] team_slave_1: entered promiscuous mode [ 343.468130][ T5963] bridge0: port 3(team0) entered blocking state [ 343.480006][ T5963] bridge0: port 3(team0) entered forwarding state [ 343.618809][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.644449][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.654709][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.671127][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.716484][ T5973] bridge0: port 3(batadv0) entered disabled state [ 343.856943][ T5973] bridge0: port 3(batadv0) entered disabled state [ 344.480469][ T5981] lo: entered allmulticast mode [ 344.540285][ T5982] lo: entered promiscuous mode [ 344.618784][ T5982] lo: left allmulticast mode [ 344.679110][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.702876][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.832471][ T5973] syz.1.19 (5973) used greatest stack depth: 20648 bytes left [ 344.852947][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.922742][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.257122][ T5990] tun0: tun_chr_ioctl cmd 21731 [ 346.465103][ T6029] warning: `syz.0.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 347.950222][ T6078] syzkaller0: entered promiscuous mode [ 347.969169][ T6078] syzkaller0: entered allmulticast mode [ 351.575331][ T6096] veth1_macvtap: left promiscuous mode [ 351.581548][ T6096] macsec0: entered allmulticast mode [ 356.717186][ T6125] syzkaller0: entered promiscuous mode [ 356.722848][ T6125] syzkaller0: entered allmulticast mode [ 359.697284][ T6127] bridge0: port 3(team0) entered disabled state [ 359.704156][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.712536][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.723453][ T6127] bridge0: entered allmulticast mode [ 359.739819][ T6128] team0: left allmulticast mode [ 359.746372][ T6128] team_slave_0: left allmulticast mode [ 359.756876][ T6128] team_slave_1: left allmulticast mode [ 359.762445][ T6128] team0: left promiscuous mode [ 359.805134][ T6128] team_slave_0: left promiscuous mode [ 359.810845][ T6128] team_slave_1: left promiscuous mode [ 359.819028][ T6128] bridge0: port 3(team0) entered disabled state [ 359.832285][ T6128] bridge_slave_1: left allmulticast mode [ 359.839671][ T6128] bridge_slave_1: left promiscuous mode [ 359.845654][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.855635][ T6128] bridge_slave_0: left allmulticast mode [ 359.861380][ T6128] bridge_slave_0: left promiscuous mode [ 359.869641][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.723387][ T6131] syzkaller0: entered promiscuous mode [ 360.729036][ T6131] syzkaller0: entered allmulticast mode [ 365.519683][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.528559][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.537197][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.547319][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.557685][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 365.565439][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.910870][ T6186] veth0_vlan: entered allmulticast mode [ 366.475901][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.731506][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.913335][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.075548][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.401353][ T6179] chnl_net:caif_netlink_parms(): no params data found [ 367.688300][ T5833] Bluetooth: hci4: command tx timeout [ 368.105825][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.113120][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.124373][ T6179] bridge_slave_0: entered allmulticast mode [ 368.131863][ T6179] bridge_slave_0: entered promiscuous mode [ 368.155409][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.162708][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.184949][ T6179] bridge_slave_1: entered allmulticast mode [ 368.192479][ T6179] bridge_slave_1: entered promiscuous mode [ 368.739957][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.872775][ T6224] veth0_vlan: entered allmulticast mode [ 369.877286][ T5833] Bluetooth: hci4: command tx timeout [ 370.162866][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.937643][ T6179] team0: Port device team_slave_0 added [ 370.970345][ T6179] team0: Port device team_slave_1 added [ 371.603717][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.610906][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.638188][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.655667][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.662665][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.691261][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.914548][ T5833] Bluetooth: hci4: command tx timeout [ 372.539710][ T6179] hsr_slave_0: entered promiscuous mode [ 372.628142][ T6179] hsr_slave_1: entered promiscuous mode [ 372.681688][ T6179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.714044][ T6179] Cannot create hsr debugfs directory [ 373.989183][ T5833] Bluetooth: hci4: command tx timeout [ 375.648668][ T6262] xfrm0: entered promiscuous mode [ 375.655234][ T6262] xfrm0: entered allmulticast mode [ 376.382018][ T11] hsr_slave_0: left promiscuous mode [ 376.417227][ T11] hsr_slave_1: left promiscuous mode [ 376.457445][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.465591][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.479158][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.487047][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.496451][ T11] bridge_slave_1: left allmulticast mode [ 376.502153][ T11] bridge_slave_1: left promiscuous mode [ 376.509267][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.531908][ T11] bridge_slave_0: left allmulticast mode [ 376.538075][ T11] bridge_slave_0: left promiscuous mode [ 376.548588][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.630047][ T11] veth1_macvtap: left promiscuous mode [ 376.639852][ T11] veth0_macvtap: left promiscuous mode [ 376.645772][ T11] veth1_vlan: left promiscuous mode [ 376.651705][ T11] veth0_vlan: left promiscuous mode [ 377.949347][ T11] team0 (unregistering): Port device team_slave_1 removed [ 377.991839][ T11] team0 (unregistering): Port device team_slave_0 removed [ 378.031432][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.073357][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.463956][ T11] bond0 (unregistering): Released all slaves [ 378.603831][ T6179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 378.794903][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.801648][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.996605][ T6179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 379.007513][ T6179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 379.022861][ T6179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.823319][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.181526][ T6179] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.200260][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.207586][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.284113][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.296304][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.310156][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.320583][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.331027][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 385.339291][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.882149][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.890167][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.431669][ T5101] Bluetooth: hci1: command tx timeout [ 388.803674][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.820320][ T6296] chnl_net:caif_netlink_parms(): no params data found [ 389.510234][ T5101] Bluetooth: hci1: command tx timeout [ 389.632483][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.683590][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.707920][ T6296] bridge_slave_0: entered allmulticast mode [ 389.744113][ T6296] bridge_slave_0: entered promiscuous mode [ 389.771867][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.799982][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.830463][ T6296] bridge_slave_1: entered allmulticast mode [ 389.846143][ T6296] bridge_slave_1: entered promiscuous mode [ 390.028013][ T6296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.053743][ T6296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.236767][ T6296] team0: Port device team_slave_0 added [ 390.316345][ T6296] team0: Port device team_slave_1 added [ 390.417428][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.424572][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.451010][ T6296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.465487][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.472584][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.506192][ T6296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.534533][ T6179] veth0_vlan: entered promiscuous mode [ 390.611589][ T6296] hsr_slave_0: entered promiscuous mode [ 390.620881][ T6296] hsr_slave_1: entered promiscuous mode [ 390.627343][ T6296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.635758][ T6296] Cannot create hsr debugfs directory [ 390.645184][ T6179] veth1_vlan: entered promiscuous mode [ 390.718915][ T6179] veth0_macvtap: entered promiscuous mode [ 391.022262][ T6179] veth1_macvtap: entered promiscuous mode [ 391.317916][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.344437][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.375902][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.419870][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.458635][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.479636][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.553661][ T6179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.588461][ T5101] Bluetooth: hci1: command tx timeout [ 391.674614][ T6179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.683405][ T6179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.713986][ T6179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.114280][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.122181][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.150977][ T6296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 392.176233][ T6296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 392.368104][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.374239][ T6296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.384652][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.392711][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.402717][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.418570][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 392.430276][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.433623][ T6296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 392.497240][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.552190][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.988129][ T6375] ÿ: renamed from bond_slave_0 (while UP) [ 393.495297][ T6296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.664336][ T5833] Bluetooth: hci1: command tx timeout [ 393.942855][ T6296] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.095007][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.102348][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.355957][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.363230][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.507155][ T5833] Bluetooth: hci3: command tx timeout [ 394.860142][ T6364] chnl_net:caif_netlink_parms(): no params data found [ 395.881000][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.916448][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.965544][ T6364] bridge_slave_0: entered allmulticast mode [ 395.972756][ T6364] bridge_slave_0: entered promiscuous mode [ 396.097724][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.107653][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.119823][ T6364] bridge_slave_1: entered allmulticast mode [ 396.136937][ T6364] bridge_slave_1: entered promiscuous mode [ 396.416905][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.499313][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.556477][ T5833] Bluetooth: hci3: command tx timeout [ 396.602441][ T6364] team0: Port device team_slave_0 added [ 396.611763][ T6364] team0: Port device team_slave_1 added [ 396.825440][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.832524][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.862831][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.974744][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.981943][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.021294][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.143795][ T6296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.299663][ T6364] hsr_slave_0: entered promiscuous mode [ 397.311932][ T6364] hsr_slave_1: entered promiscuous mode [ 397.320200][ T6364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.328450][ T6364] Cannot create hsr debugfs directory [ 398.659572][ T5833] Bluetooth: hci3: command tx timeout [ 399.324379][ T6296] veth0_vlan: entered promiscuous mode [ 399.371583][ T6296] veth1_vlan: entered promiscuous mode [ 399.863972][ T6364] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 399.890629][ T6296] veth0_macvtap: entered promiscuous mode [ 399.926490][ T6364] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 399.993449][ T6364] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 400.039110][ T6296] veth1_macvtap: entered promiscuous mode [ 400.099555][ T6364] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.210494][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.484209][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.540138][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.597029][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.644954][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.705324][ T5833] Bluetooth: hci3: command tx timeout [ 400.766561][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.808811][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.882543][ T6296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.953690][ T6296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.982411][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.030628][ T6296] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.120489][ T6296] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.138824][ T6296] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.154000][ T6296] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.257097][ T6468] veth1_to_bond: entered allmulticast mode [ 401.869451][ T6473] ÿ: renamed from bond_slave_0 (while UP) [ 404.014313][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.022201][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.244358][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.252250][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.298232][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.826307][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.863673][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.870979][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.913290][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.920578][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.308806][ T6364] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 405.319280][ T6364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.526377][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.797056][ T6364] veth0_vlan: entered promiscuous mode [ 411.057286][ T6364] veth1_vlan: entered promiscuous mode [ 411.321353][ T6364] veth0_macvtap: entered promiscuous mode [ 411.421268][ T6364] veth1_macvtap: entered promiscuous mode [ 411.507009][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.534003][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.557129][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.578983][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.613939][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.643635][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.676384][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.726831][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.759568][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.782148][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.833929][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.859741][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.884617][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.916173][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.952238][ T6364] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.961794][ T6364] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.970667][ T6364] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.980598][ T6364] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.327185][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.350039][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.764938][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.935156][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.461504][ T6596] syzkaller0: entered promiscuous mode [ 416.499615][ T6596] syzkaller0: entered allmulticast mode [ 421.205084][ T6741] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 426.575226][ T6924] $Hÿ: renamed from bond0 (while UP) [ 426.643416][ T6924] $Hÿ: entered promiscuous mode [ 426.670053][ T6924] bond_slave_0: entered promiscuous mode [ 426.687557][ T6924] bond_slave_1: entered promiscuous mode [ 428.493355][ T6992] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 428.567963][ T5101] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.584800][ T5101] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.593587][ T5101] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.601999][ T5101] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.610257][ T5101] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 428.621003][ T5101] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.704188][ T5833] Bluetooth: hci5: command tx timeout [ 432.151878][ T6999] chnl_net:caif_netlink_parms(): no params data found [ 432.629117][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.650358][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.674419][ T6999] bridge_slave_0: entered allmulticast mode [ 432.702054][ T6999] bridge_slave_0: entered promiscuous mode [ 432.741847][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.780166][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.788030][ T5833] Bluetooth: hci5: command tx timeout [ 432.850888][ T6999] bridge_slave_1: entered allmulticast mode [ 432.875635][ T6999] bridge_slave_1: entered promiscuous mode [ 433.093492][ T6999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.140994][ T6999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.371901][ T6999] team0: Port device team_slave_0 added [ 433.403128][ T6999] team0: Port device team_slave_1 added [ 433.633055][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.641783][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.668425][ T6999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.681952][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.696696][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.761034][ T6999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.951777][ T6999] hsr_slave_0: entered promiscuous mode [ 434.005146][ T6999] hsr_slave_1: entered promiscuous mode [ 434.044199][ T6999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.053394][ T6999] Cannot create hsr debugfs directory [ 434.726305][ T6999] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 434.767466][ T6999] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 434.841449][ T6999] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 434.864651][ T5833] Bluetooth: hci5: command tx timeout [ 434.911718][ T6999] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 435.246929][ T6999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.277812][ T6999] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.305780][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.312980][ T5897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.357489][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.365007][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.120610][ T6999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.947971][ T5833] Bluetooth: hci5: command tx timeout [ 437.027541][ T6999] veth0_vlan: entered promiscuous mode [ 437.059011][ T6999] veth1_vlan: entered promiscuous mode [ 437.198850][ T6999] veth0_macvtap: entered promiscuous mode [ 437.230442][ T6999] veth1_macvtap: entered promiscuous mode [ 437.254684][ T7198] sit0: entered allmulticast mode [ 437.314027][ T7201] sit0: entered promiscuous mode [ 437.465581][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.490004][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.533908][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.561815][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.591374][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.623116][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.644338][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.667567][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.704300][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.791630][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.817953][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.841403][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.869948][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.926039][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.970929][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.981119][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.992342][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.011114][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.042396][ T6999] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.058216][ T6999] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.067683][ T6999] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.077385][ T6999] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.337327][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.369420][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.423085][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.459499][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.846400][ T7238] pim6reg1: entered promiscuous mode [ 438.870680][ T7238] pim6reg1: entered allmulticast mode [ 440.149213][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.161177][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.680919][ T7322] pim6reg1: entered promiscuous mode [ 443.687604][ T7322] pim6reg1: entered allmulticast mode [ 444.408497][ T7345] pim6reg1: entered promiscuous mode [ 444.423964][ T7345] pim6reg1: entered allmulticast mode [ 448.830915][ T7398] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 449.063399][ T7408] $Hÿ: renamed from bond0 (while UP) [ 449.098210][ T7408] $Hÿ: entered promiscuous mode [ 449.105238][ T7408] bond_slave_0: entered promiscuous mode [ 449.111216][ T7408] bond_slave_1: entered promiscuous mode [ 449.953550][ T7433] ÿÿÿÿÿÿ: renamed from vlan1 [ 450.021433][ T7435] $Hÿ: renamed from bond0 (while UP) [ 450.051976][ T7435] $Hÿ: entered promiscuous mode [ 450.057823][ T7435] bond_slave_0: entered promiscuous mode [ 450.066418][ T7435] bond_slave_1: entered promiscuous mode [ 453.364437][ T7471] $Hÿ: renamed from bond0 (while UP) [ 453.407566][ T7471] $Hÿ: entered promiscuous mode [ 453.431398][ T7471] ÿ: entered promiscuous mode [ 453.439500][ T7471] bond_slave_1: entered promiscuous mode [ 456.073147][ T5900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.276992][ T5900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.628017][ T5900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.804570][ T7500] ÿ: renamed from bond_slave_0 (while UP) [ 457.147918][ T5900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.322838][ T7502] ÿ: renamed from bond_slave_0 (while UP) [ 457.824387][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 457.830650][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 459.627962][ T7516] veth1_macvtap: left promiscuous mode [ 459.633618][ T7516] macsec0: entered promiscuous mode [ 462.001278][ T7548] ÿ: renamed from bond_slave_0 (while UP) [ 469.790333][ T7605] syzkaller0: entered promiscuous mode [ 469.796644][ T7605] syzkaller0: entered allmulticast mode [ 469.928067][ T5900] hsr_slave_0: left promiscuous mode [ 469.938531][ T5900] hsr_slave_1: left promiscuous mode [ 469.955608][ T5900] bridge_slave_1: left allmulticast mode [ 469.961321][ T5900] bridge_slave_1: left promiscuous mode [ 469.996611][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.013684][ T5900] bridge_slave_0: left allmulticast mode [ 470.019930][ T5900] bridge_slave_0: left promiscuous mode [ 470.032051][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.114787][ T5900] veth1_macvtap: left promiscuous mode [ 470.120479][ T5900] veth0_macvtap: left promiscuous mode [ 470.128653][ T5900] veth1_vlan: left promiscuous mode [ 470.134517][ T5900] veth0_vlan: left promiscuous mode [ 470.775883][ T5900] team0 (unregistering): Port device team_slave_1 removed [ 470.827177][ T5900] team0 (unregistering): Port device team_slave_0 removed [ 470.882882][ T5900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.932233][ T5900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.393315][ T5900] bond0 (unregistering): Released all slaves [ 476.478708][ T7682] pim6reg1: entered promiscuous mode [ 476.492186][ T7682] pim6reg1: entered allmulticast mode [ 476.865828][ T7695] veth0_vlan: entered allmulticast mode [ 479.202453][ T7699] syzkaller0: entered promiscuous mode [ 479.210747][ T7699] syzkaller0: entered allmulticast mode [ 481.913528][ T7732] pim6reg1: entered promiscuous mode [ 481.919625][ T7732] pim6reg1: entered allmulticast mode [ 483.964797][ T7791] sctp: [Deprecated]: syz.5.582 (pid 7791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.964797][ T7791] Use struct sctp_sack_info instead [ 484.676574][ T7797] lo: entered allmulticast mode [ 484.866951][ T7809] lo: entered promiscuous mode [ 484.871858][ T7809] lo: left allmulticast mode [ 485.112496][ T7815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.120396][ T7815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.155416][ T7815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.162969][ T7815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.324175][ T7842] sctp: [Deprecated]: syz.6.594 (pid 7842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.324175][ T7842] Use struct sctp_sack_info instead [ 486.354349][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.361881][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.415393][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.434367][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.752825][ T7854] FAULT_INJECTION: forcing a failure. [ 486.752825][ T7854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.822230][ T7854] CPU: 1 PID: 7854 Comm: syz.5.600 Not tainted syzkaller #0 [ 486.829595][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.839688][ T7854] Call Trace: [ 486.843006][ T7854] [ 486.845979][ T7854] dump_stack_lvl+0x16c/0x230 [ 486.850797][ T7854] ? show_regs_print_info+0x20/0x20 [ 486.856038][ T7854] ? load_image+0x3b0/0x3b0 [ 486.860582][ T7854] ? __might_fault+0xaa/0x120 [ 486.865296][ T7854] ? __lock_acquire+0x7c80/0x7c80 [ 486.870367][ T7854] should_fail_ex+0x39d/0x4d0 [ 486.875098][ T7854] _copy_from_user+0x2f/0xe0 [ 486.879740][ T7854] ___sys_sendmsg+0x159/0x290 [ 486.884460][ T7854] ? __sys_sendmsg+0x270/0x270 [ 486.889294][ T7854] ? __lock_acquire+0x7c80/0x7c80 [ 486.894364][ T7854] __se_sys_sendmsg+0x1a5/0x270 [ 486.899264][ T7854] ? __x64_sys_sendmsg+0x80/0x80 [ 486.904254][ T7854] ? lockdep_hardirqs_on+0x98/0x150 [ 486.909475][ T7854] do_syscall_64+0x55/0xb0 [ 486.913968][ T7854] ? clear_bhb_loop+0x40/0x90 [ 486.918659][ T7854] ? clear_bhb_loop+0x40/0x90 [ 486.923348][ T7854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.929373][ T7854] RIP: 0033:0x7fac4ad8ebe9 [ 486.933806][ T7854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.953440][ T7854] RSP: 002b:00007fac4bb42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.961874][ T7854] RAX: ffffffffffffffda RBX: 00007fac4afc5fa0 RCX: 00007fac4ad8ebe9 [ 486.969883][ T7854] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 486.977869][ T7854] RBP: 00007fac4bb42090 R08: 0000000000000000 R09: 0000000000000000 [ 486.985850][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.993828][ T7854] R13: 00007fac4afc6038 R14: 00007fac4afc5fa0 R15: 00007ffea1dbd498 [ 487.001833][ T7854] [ 487.585764][ T7859] netlink: 10 bytes leftover after parsing attributes in process `syz.6.601'. [ 487.733622][ T7877] sctp: [Deprecated]: syz.7.607 (pid 7877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.733622][ T7877] Use struct sctp_sack_info instead [ 488.080750][ T7890] FAULT_INJECTION: forcing a failure. [ 488.080750][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.114496][ T7887] netlink: 'syz.6.609': attribute type 10 has an invalid length. [ 488.123928][ T7890] CPU: 1 PID: 7890 Comm: syz.0.611 Not tainted syzkaller #0 [ 488.131293][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 488.141398][ T7890] Call Trace: [ 488.144718][ T7890] [ 488.147681][ T7890] dump_stack_lvl+0x16c/0x230 [ 488.152406][ T7890] ? show_regs_print_info+0x20/0x20 [ 488.157658][ T7890] ? load_image+0x3b0/0x3b0 [ 488.162186][ T7890] ? __might_fault+0xaa/0x120 [ 488.166889][ T7890] ? __lock_acquire+0x7c80/0x7c80 [ 488.171935][ T7890] ? perf_trace_lock_acquire+0x32a/0x3e0 [ 488.177607][ T7890] should_fail_ex+0x39d/0x4d0 [ 488.182325][ T7890] _copy_from_user+0x2f/0xe0 [ 488.186944][ T7890] ___sys_sendmsg+0x159/0x290 [ 488.191680][ T7890] ? __sys_sendmsg+0x270/0x270 [ 488.196512][ T7890] ? __lock_acquire+0x7c80/0x7c80 [ 488.201650][ T7890] __se_sys_sendmsg+0x1a5/0x270 [ 488.206562][ T7890] ? __x64_sys_sendmsg+0x80/0x80 [ 488.211558][ T7890] ? lockdep_hardirqs_on+0x98/0x150 [ 488.216792][ T7890] do_syscall_64+0x55/0xb0 [ 488.221263][ T7890] ? clear_bhb_loop+0x40/0x90 [ 488.225980][ T7890] ? clear_bhb_loop+0x40/0x90 [ 488.230689][ T7890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.236633][ T7890] RIP: 0033:0x7f52d738ebe9 [ 488.241084][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.260757][ T7890] RSP: 002b:00007f52d82f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.269297][ T7890] RAX: ffffffffffffffda RBX: 00007f52d75c5fa0 RCX: 00007f52d738ebe9 [ 488.277317][ T7890] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 488.285342][ T7890] RBP: 00007f52d82f5090 R08: 0000000000000000 R09: 0000000000000000 [ 488.293394][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.301430][ T7890] R13: 00007f52d75c6038 R14: 00007f52d75c5fa0 R15: 00007ffe18c93638 [ 488.309451][ T7890] [ 488.345974][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.389882][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 488.446987][ T7887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.518952][ T7887] batadv_slave_0: entered promiscuous mode [ 488.572812][ T7887] $Hÿ: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 489.766811][ T7914] sctp: [Deprecated]: syz.0.619 (pid 7914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.766811][ T7914] Use struct sctp_sack_info instead [ 489.912420][ T7922] netlink: 60 bytes leftover after parsing attributes in process `syz.5.622'. [ 489.949793][ T7920] FAULT_INJECTION: forcing a failure. [ 489.949793][ T7920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.963263][ T7922] netlink: 60 bytes leftover after parsing attributes in process `syz.5.622'. [ 489.978390][ T7919] netlink: 60 bytes leftover after parsing attributes in process `syz.5.622'. [ 489.993671][ T7926] netlink: 60 bytes leftover after parsing attributes in process `syz.5.622'. [ 490.032270][ T7920] CPU: 1 PID: 7920 Comm: syz.6.621 Not tainted syzkaller #0 [ 490.039641][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.049741][ T7920] Call Trace: [ 490.053040][ T7920] [ 490.056016][ T7920] dump_stack_lvl+0x16c/0x230 [ 490.060730][ T7920] ? show_regs_print_info+0x20/0x20 [ 490.065984][ T7920] ? load_image+0x3b0/0x3b0 [ 490.070514][ T7920] ? __might_fault+0xaa/0x120 [ 490.075213][ T7920] ? __lock_acquire+0x7c80/0x7c80 [ 490.080275][ T7920] should_fail_ex+0x39d/0x4d0 [ 490.084989][ T7920] _copy_from_user+0x2f/0xe0 [ 490.089789][ T7920] ___sys_recvmsg+0x12f/0x510 [ 490.094503][ T7920] ? __sys_recvmsg+0x270/0x270 [ 490.099304][ T7920] ? ksys_write+0x1c1/0x250 [ 490.103852][ T7920] ? __fget_files+0x44a/0x4d0 [ 490.108574][ T7920] __x64_sys_recvmsg+0x1f2/0x2c0 [ 490.113537][ T7920] ? ___sys_recvmsg+0x510/0x510 [ 490.118426][ T7920] ? lockdep_hardirqs_on+0x98/0x150 [ 490.123646][ T7920] do_syscall_64+0x55/0xb0 [ 490.128083][ T7920] ? clear_bhb_loop+0x40/0x90 [ 490.132778][ T7920] ? clear_bhb_loop+0x40/0x90 [ 490.137480][ T7920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.143398][ T7920] RIP: 0033:0x7f909cf8ebe9 [ 490.147914][ T7920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.167631][ T7920] RSP: 002b:00007f909dec8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 490.176067][ T7920] RAX: ffffffffffffffda RBX: 00007f909d1c6090 RCX: 00007f909cf8ebe9 [ 490.184139][ T7920] RDX: 0000000000000123 RSI: 0000200000000300 RDI: 0000000000000003 [ 490.192119][ T7920] RBP: 00007f909dec8090 R08: 0000000000000000 R09: 0000000000000000 [ 490.200106][ T7920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.208109][ T7920] R13: 00007f909d1c6128 R14: 00007f909d1c6090 R15: 00007ffe06c66218 [ 490.216123][ T7920] [ 490.568108][ T7936] netlink: 'syz.5.627': attribute type 10 has an invalid length. [ 490.657614][ T7936] netlink: 'syz.5.627': attribute type 21 has an invalid length. [ 490.869630][ T7947] FAULT_INJECTION: forcing a failure. [ 490.869630][ T7947] name failslab, interval 1, probability 0, space 0, times 1 [ 490.914111][ T7947] CPU: 0 PID: 7947 Comm: syz.6.630 Not tainted syzkaller #0 [ 490.921484][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.931578][ T7947] Call Trace: [ 490.934893][ T7947] [ 490.937871][ T7947] dump_stack_lvl+0x16c/0x230 [ 490.942603][ T7947] ? show_regs_print_info+0x20/0x20 [ 490.947844][ T7947] ? load_image+0x3b0/0x3b0 [ 490.952390][ T7947] ? __might_sleep+0xe0/0xe0 [ 490.957027][ T7947] ? __lock_acquire+0x7c80/0x7c80 [ 490.962107][ T7947] should_fail_ex+0x39d/0x4d0 [ 490.966844][ T7947] should_failslab+0x9/0x20 [ 490.971397][ T7947] slab_pre_alloc_hook+0x59/0x310 [ 490.976564][ T7947] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 490.982338][ T7947] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 490.988108][ T7947] __kmem_cache_alloc_node+0x53/0x260 [ 490.993538][ T7947] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 490.999319][ T7947] __kmalloc+0xa4/0x240 [ 491.003534][ T7947] tomoyo_realpath_from_path+0xe3/0x5d0 [ 491.009146][ T7947] tomoyo_path_number_perm+0x1ea/0x590 [ 491.014657][ T7947] ? tomoyo_path_number_perm+0x1ba/0x590 [ 491.020347][ T7947] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 491.025856][ T7947] ? hrtimer_interrupt+0x597/0x9c0 [ 491.031024][ T7947] ? ktime_get+0x7f/0x280 [ 491.035440][ T7947] ? __fget_files+0x28/0x4d0 [ 491.040191][ T7947] security_file_ioctl+0x70/0xa0 [ 491.045192][ T7947] __se_sys_ioctl+0x48/0x170 [ 491.049838][ T7947] do_syscall_64+0x55/0xb0 [ 491.054305][ T7947] ? clear_bhb_loop+0x40/0x90 [ 491.059030][ T7947] ? clear_bhb_loop+0x40/0x90 [ 491.063756][ T7947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.069706][ T7947] RIP: 0033:0x7f909cf8ebe9 [ 491.074160][ T7947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.093821][ T7947] RSP: 002b:00007f909dee9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.102292][ T7947] RAX: ffffffffffffffda RBX: 00007f909d1c5fa0 RCX: 00007f909cf8ebe9 [ 491.110338][ T7947] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000005 [ 491.118353][ T7947] RBP: 00007f909dee9090 R08: 0000000000000000 R09: 0000000000000000 [ 491.126368][ T7947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.134380][ T7947] R13: 00007f909d1c6038 R14: 00007f909d1c5fa0 R15: 00007ffe06c66218 [ 491.142413][ T7947] [ 491.290490][ T7947] ERROR: Out of memory at tomoyo_realpath_from_path. [ 492.527634][ T7967] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 492.535799][ T7967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.604768][ T7967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.726817][ T7967] batadv_slave_0: entered promiscuous mode [ 492.747251][ T7967] $Hÿ: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 493.023287][ T7982] FAULT_INJECTION: forcing a failure. [ 493.023287][ T7982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.094104][ T7982] CPU: 0 PID: 7982 Comm: syz.0.640 Not tainted syzkaller #0 [ 493.101491][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.111588][ T7982] Call Trace: [ 493.115035][ T7982] [ 493.117999][ T7982] dump_stack_lvl+0x16c/0x230 [ 493.122726][ T7982] ? show_regs_print_info+0x20/0x20 [ 493.127976][ T7982] ? load_image+0x3b0/0x3b0 [ 493.132534][ T7982] ? __might_fault+0xaa/0x120 [ 493.137275][ T7982] ? __lock_acquire+0x7c80/0x7c80 [ 493.142431][ T7982] should_fail_ex+0x39d/0x4d0 [ 493.147160][ T7982] _copy_from_user+0x2f/0xe0 [ 493.151801][ T7982] ___sys_sendmsg+0x159/0x290 [ 493.156571][ T7982] ? __sys_sendmsg+0x270/0x270 [ 493.161507][ T7982] ? __lock_acquire+0x7c80/0x7c80 [ 493.166613][ T7982] __se_sys_sendmsg+0x1a5/0x270 [ 493.171509][ T7982] ? __x64_sys_sendmsg+0x80/0x80 [ 493.176582][ T7982] ? lockdep_hardirqs_on+0x98/0x150 [ 493.181830][ T7982] do_syscall_64+0x55/0xb0 [ 493.186290][ T7982] ? clear_bhb_loop+0x40/0x90 [ 493.191056][ T7982] ? clear_bhb_loop+0x40/0x90 [ 493.195771][ T7982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.201716][ T7982] RIP: 0033:0x7f52d738ebe9 [ 493.206175][ T7982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.226266][ T7982] RSP: 002b:00007f52d82f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.234726][ T7982] RAX: ffffffffffffffda RBX: 00007f52d75c5fa0 RCX: 00007f52d738ebe9 [ 493.242768][ T7982] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 493.250786][ T7982] RBP: 00007f52d82f5090 R08: 0000000000000000 R09: 0000000000000000 [ 493.258797][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.266794][ T7982] R13: 00007f52d75c6038 R14: 00007f52d75c5fa0 R15: 00007ffe18c93638 [ 493.274861][ T7982] [ 493.445203][ T7988] netlink: 60 bytes leftover after parsing attributes in process `syz.7.641'. [ 493.472009][ T7988] netlink: 60 bytes leftover after parsing attributes in process `syz.7.641'. [ 493.508284][ T7986] netlink: 60 bytes leftover after parsing attributes in process `syz.7.641'. [ 493.546367][ T7989] netlink: 60 bytes leftover after parsing attributes in process `syz.7.641'. [ 494.410422][ T7999] netlink: 60 bytes leftover after parsing attributes in process `syz.7.642'. [ 494.459785][ T7999] netlink: 60 bytes leftover after parsing attributes in process `syz.7.642'. [ 494.526119][ T7996] netlink: 60 bytes leftover after parsing attributes in process `syz.7.642'. [ 494.723612][ T8004] netlink: 60 bytes leftover after parsing attributes in process `syz.7.642'. [ 500.619174][ T8026] netlink: 60 bytes leftover after parsing attributes in process `syz.7.647'. [ 500.642190][ T8026] netlink: 60 bytes leftover after parsing attributes in process `syz.7.647'. [ 500.671402][ T8025] netlink: 60 bytes leftover after parsing attributes in process `syz.7.647'. [ 500.700164][ T8026] netlink: 60 bytes leftover after parsing attributes in process `syz.7.647'. [ 501.591810][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.602640][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.835684][ T8046] netlink: 'syz.7.649': attribute type 10 has an invalid length. [ 501.849567][ T8050] netlink: 60 bytes leftover after parsing attributes in process `syz.6.650'. [ 501.861192][ T8046] batadv_slave_0: entered promiscuous mode [ 501.884584][ T8046] $Hÿ: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 501.904658][ T8050] netlink: 60 bytes leftover after parsing attributes in process `syz.6.650'. [ 501.922924][ T8045] netlink: 60 bytes leftover after parsing attributes in process `syz.6.650'. [ 501.935297][ T8053] netlink: 60 bytes leftover after parsing attributes in process `syz.6.650'. [ 502.290669][ T8060] netlink: 60 bytes leftover after parsing attributes in process `syz.5.652'. [ 502.400021][ T8060] netlink: 60 bytes leftover after parsing attributes in process `syz.5.652'. [ 502.689658][ T8064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 503.163537][ T8070] team0: Port device team_slave_0 removed [ 503.196194][ T8070] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 503.613362][ T8098] FAULT_INJECTION: forcing a failure. [ 503.613362][ T8098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.666628][ T8098] CPU: 0 PID: 8098 Comm: syz.7.663 Not tainted syzkaller #0 [ 503.674007][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.684105][ T8098] Call Trace: [ 503.687427][ T8098] [ 503.690396][ T8098] dump_stack_lvl+0x16c/0x230 [ 503.695123][ T8098] ? show_regs_print_info+0x20/0x20 [ 503.700370][ T8098] ? load_image+0x3b0/0x3b0 [ 503.704963][ T8098] ? __might_fault+0xaa/0x120 [ 503.709689][ T8098] ? __lock_acquire+0x7c80/0x7c80 [ 503.714769][ T8098] should_fail_ex+0x39d/0x4d0 [ 503.719512][ T8098] _copy_from_user+0x2f/0xe0 [ 503.724155][ T8098] __sys_bpf+0x1e9/0x800 [ 503.727409][ T8100] netlink: 'syz.0.662': attribute type 39 has an invalid length. [ 503.728422][ T8098] ? bpf_link_show_fdinfo+0x350/0x350 [ 503.728470][ T8098] ? lock_chain_count+0x20/0x20 [ 503.746490][ T8098] __x64_sys_bpf+0x7c/0x90 [ 503.750958][ T8098] do_syscall_64+0x55/0xb0 [ 503.755417][ T8098] ? clear_bhb_loop+0x40/0x90 [ 503.760137][ T8098] ? clear_bhb_loop+0x40/0x90 [ 503.764858][ T8098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.770814][ T8098] RIP: 0033:0x7ff3f118ebe9 [ 503.775284][ T8098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.794950][ T8098] RSP: 002b:00007ff3f1fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 503.803511][ T8098] RAX: ffffffffffffffda RBX: 00007ff3f13c5fa0 RCX: 00007ff3f118ebe9 [ 503.811552][ T8098] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 503.819576][ T8098] RBP: 00007ff3f1fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 503.827611][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.835629][ T8098] R13: 00007ff3f13c6038 R14: 00007ff3f13c5fa0 R15: 00007ffe3aeefa78 [ 503.843665][ T8098] [ 504.955031][ T8130] team0: Port device team_slave_0 removed [ 504.961483][ T8130] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 505.818931][ T8162] __nla_validate_parse: 6 callbacks suppressed [ 505.818974][ T8162] netlink: 60 bytes leftover after parsing attributes in process `syz.5.685'. [ 505.853622][ T8162] netlink: 60 bytes leftover after parsing attributes in process `syz.5.685'. [ 505.892049][ T8164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.678'. [ 505.901488][ T8155] netlink: 60 bytes leftover after parsing attributes in process `syz.5.685'. [ 505.901827][ T8165] netlink: 60 bytes leftover after parsing attributes in process `syz.5.685'. [ 505.961546][ T8164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.678'. [ 506.017912][ T8168] netlink: 'syz.6.679': attribute type 39 has an invalid length. [ 506.085927][ T8172] netlink: 60 bytes leftover after parsing attributes in process `syz.7.680'. [ 506.290387][ T8163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.678'. [ 506.303252][ T8172] netlink: 60 bytes leftover after parsing attributes in process `syz.7.680'. [ 506.325687][ T8170] netlink: 60 bytes leftover after parsing attributes in process `syz.7.680'. [ 508.044389][ T8231] netlink: 'syz.5.694': attribute type 39 has an invalid length. [ 508.511481][ T8249] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 508.781698][ T8256] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 508.784102][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 509.181785][ T8267] netlink: 'syz.5.712': attribute type 29 has an invalid length. [ 509.191806][ T8267] netlink: 'syz.5.712': attribute type 29 has an invalid length. [ 509.213509][ T8267] netlink: 'syz.5.712': attribute type 29 has an invalid length. [ 509.225030][ T8267] netlink: 'syz.5.712': attribute type 29 has an invalid length. [ 510.121272][ T8294] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 510.908680][ T8312] FAULT_INJECTION: forcing a failure. [ 510.908680][ T8312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.959426][ T8312] CPU: 1 PID: 8312 Comm: syz.6.714 Not tainted syzkaller #0 [ 510.966819][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.976952][ T8312] Call Trace: [ 510.980288][ T8312] [ 510.983265][ T8312] dump_stack_lvl+0x16c/0x230 [ 510.988014][ T8312] ? show_regs_print_info+0x20/0x20 [ 510.993273][ T8312] ? load_image+0x3b0/0x3b0 [ 510.997843][ T8312] ? __might_fault+0xaa/0x120 [ 511.002597][ T8312] ? __lock_acquire+0x7c80/0x7c80 [ 511.007681][ T8312] ? perf_trace_lock_acquire+0x32a/0x3e0 [ 511.013470][ T8312] should_fail_ex+0x39d/0x4d0 [ 511.018220][ T8312] _copy_from_user+0x2f/0xe0 [ 511.022875][ T8312] ___sys_sendmsg+0x159/0x290 [ 511.027635][ T8312] ? __sys_sendmsg+0x270/0x270 [ 511.032509][ T8312] ? __lock_acquire+0x7c80/0x7c80 [ 511.037628][ T8312] __se_sys_sendmsg+0x1a5/0x270 [ 511.042528][ T8312] ? __x64_sys_sendmsg+0x80/0x80 [ 511.047528][ T8312] ? lockdep_hardirqs_on+0x98/0x150 [ 511.052765][ T8312] do_syscall_64+0x55/0xb0 [ 511.057214][ T8312] ? clear_bhb_loop+0x40/0x90 [ 511.062002][ T8312] ? clear_bhb_loop+0x40/0x90 [ 511.066724][ T8312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.072850][ T8312] RIP: 0033:0x7f909cf8ebe9 [ 511.077304][ T8312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.096949][ T8312] RSP: 002b:00007f909dee9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.105412][ T8312] RAX: ffffffffffffffda RBX: 00007f909d1c5fa0 RCX: 00007f909cf8ebe9 [ 511.113432][ T8312] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000004 [ 511.121429][ T8312] RBP: 00007f909dee9090 R08: 0000000000000000 R09: 0000000000000000 [ 511.129435][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.137429][ T8312] R13: 00007f909d1c6038 R14: 00007f909d1c5fa0 R15: 00007ffe06c66218 [ 511.145447][ T8312] [ 512.028130][ T8344] __nla_validate_parse: 10 callbacks suppressed [ 512.028147][ T8344] netlink: 60 bytes leftover after parsing attributes in process `syz.0.721'. [ 512.091020][ T8344] netlink: 60 bytes leftover after parsing attributes in process `syz.0.721'. [ 512.139684][ T8348] FAULT_INJECTION: forcing a failure. [ 512.139684][ T8348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.231308][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.0.721'. [ 512.251874][ T8348] CPU: 0 PID: 8348 Comm: syz.7.720 Not tainted syzkaller #0 [ 512.259238][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.269328][ T8348] Call Trace: [ 512.272649][ T8348] [ 512.275613][ T8348] dump_stack_lvl+0x16c/0x230 [ 512.280338][ T8348] ? show_regs_print_info+0x20/0x20 [ 512.285599][ T8348] ? load_image+0x3b0/0x3b0 [ 512.290171][ T8348] ? __lock_acquire+0x7c80/0x7c80 [ 512.295241][ T8348] ? snprintf+0xdb/0x120 [ 512.299545][ T8348] should_fail_ex+0x39d/0x4d0 [ 512.304276][ T8348] _copy_to_user+0x2f/0xa0 [ 512.308740][ T8348] simple_read_from_buffer+0xe7/0x150 [ 512.314188][ T8348] proc_fail_nth_read+0x1e3/0x250 [ 512.319266][ T8348] ? proc_fault_inject_write+0x340/0x340 [ 512.324944][ T8348] ? fsnotify_perm+0x271/0x5e0 [ 512.329753][ T8348] ? proc_fault_inject_write+0x340/0x340 [ 512.335442][ T8348] vfs_read+0x27e/0x920 [ 512.339641][ T8348] ? kernel_read+0x1e0/0x1e0 [ 512.344271][ T8348] ? __fget_files+0x28/0x4d0 [ 512.348919][ T8348] ? __fget_files+0x44a/0x4d0 [ 512.353648][ T8348] ? __fdget_pos+0x2a3/0x330 [ 512.358276][ T8348] ? ksys_read+0x75/0x250 [ 512.362646][ T8348] ksys_read+0x147/0x250 [ 512.366934][ T8348] ? vfs_write+0x940/0x940 [ 512.371395][ T8348] ? lockdep_hardirqs_on+0x98/0x150 [ 512.376642][ T8348] do_syscall_64+0x55/0xb0 [ 512.381093][ T8348] ? clear_bhb_loop+0x40/0x90 [ 512.385827][ T8348] ? clear_bhb_loop+0x40/0x90 [ 512.390533][ T8348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.396497][ T8348] RIP: 0033:0x7ff3f118d5fc [ 512.400956][ T8348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 512.421213][ T8348] RSP: 002b:00007ff3f1f93030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.429678][ T8348] RAX: ffffffffffffffda RBX: 00007ff3f13c6090 RCX: 00007ff3f118d5fc [ 512.437687][ T8348] RDX: 000000000000000f RSI: 00007ff3f1f930a0 RDI: 0000000000000004 [ 512.445697][ T8348] RBP: 00007ff3f1f93090 R08: 0000000000000000 R09: 0000000000000000 [ 512.453714][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.461783][ T8348] R13: 00007ff3f13c6128 R14: 00007ff3f13c6090 R15: 00007ffe3aeefa78 [ 512.468908][ T8345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.721'. [ 512.469794][ T8348] [ 515.861178][ T8368] netlink: 'syz.5.726': attribute type 10 has an invalid length. [ 515.869599][ T8368] netlink: 40 bytes leftover after parsing attributes in process `syz.5.726'. [ 515.880618][ T8369] netlink: 60 bytes leftover after parsing attributes in process `syz.7.725'. [ 515.905866][ T8369] netlink: 60 bytes leftover after parsing attributes in process `syz.7.725'. [ 515.919231][ T8366] netlink: 60 bytes leftover after parsing attributes in process `syz.7.725'. [ 515.938158][ T8369] netlink: 60 bytes leftover after parsing attributes in process `syz.7.725'. [ 516.381591][ T8375] netlink: 'syz.0.724': attribute type 21 has an invalid length. [ 516.488244][ T8374] team0: Port device team_slave_0 removed [ 516.513700][ T8374] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 516.534147][ T8377] FAULT_INJECTION: forcing a failure. [ 516.534147][ T8377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.549433][ T8377] CPU: 1 PID: 8377 Comm: syz.5.728 Not tainted syzkaller #0 [ 516.556775][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.566863][ T8377] Call Trace: [ 516.570171][ T8377] [ 516.573132][ T8377] dump_stack_lvl+0x16c/0x230 [ 516.577853][ T8377] ? show_regs_print_info+0x20/0x20 [ 516.583088][ T8377] ? load_image+0x3b0/0x3b0 [ 516.587620][ T8377] ? __might_fault+0xaa/0x120 [ 516.592310][ T8377] ? __lock_acquire+0x7c80/0x7c80 [ 516.597358][ T8377] should_fail_ex+0x39d/0x4d0 [ 516.602061][ T8377] _copy_from_user+0x2f/0xe0 [ 516.606680][ T8377] ___sys_sendmsg+0x159/0x290 [ 516.611377][ T8377] ? __sys_sendmsg+0x270/0x270 [ 516.616177][ T8377] ? __lock_acquire+0x7c80/0x7c80 [ 516.621226][ T8377] __se_sys_sendmsg+0x1a5/0x270 [ 516.626099][ T8377] ? __x64_sys_sendmsg+0x80/0x80 [ 516.631067][ T8377] ? lockdep_hardirqs_on+0x98/0x150 [ 516.636284][ T8377] do_syscall_64+0x55/0xb0 [ 516.640800][ T8377] ? clear_bhb_loop+0x40/0x90 [ 516.645492][ T8377] ? clear_bhb_loop+0x40/0x90 [ 516.650184][ T8377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.656113][ T8377] RIP: 0033:0x7fac4ad8ebe9 [ 516.660560][ T8377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.680267][ T8377] RSP: 002b:00007fac4bb42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.688716][ T8377] RAX: ffffffffffffffda RBX: 00007fac4afc5fa0 RCX: 00007fac4ad8ebe9 [ 516.696697][ T8377] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 516.704679][ T8377] RBP: 00007fac4bb42090 R08: 0000000000000000 R09: 0000000000000000 [ 516.712671][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.720657][ T8377] R13: 00007fac4afc6038 R14: 00007fac4afc5fa0 R15: 00007ffea1dbd498 [ 516.728655][ T8377] [ 517.231171][ T8391] FAULT_INJECTION: forcing a failure. [ 517.231171][ T8391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.353944][ T8391] CPU: 1 PID: 8391 Comm: syz.0.734 Not tainted syzkaller #0 [ 517.361402][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.371502][ T8391] Call Trace: [ 517.374816][ T8391] [ 517.377782][ T8391] dump_stack_lvl+0x16c/0x230 [ 517.382506][ T8391] ? show_regs_print_info+0x20/0x20 [ 517.387832][ T8391] ? load_image+0x3b0/0x3b0 [ 517.392369][ T8391] ? __might_fault+0xaa/0x120 [ 517.397083][ T8391] ? __lock_acquire+0x7c80/0x7c80 [ 517.402156][ T8391] should_fail_ex+0x39d/0x4d0 [ 517.406882][ T8391] _copy_from_user+0x2f/0xe0 [ 517.411508][ T8391] ___sys_sendmsg+0x159/0x290 [ 517.416227][ T8391] ? __sys_sendmsg+0x270/0x270 [ 517.421050][ T8391] ? __lock_acquire+0x7c80/0x7c80 [ 517.426170][ T8391] __se_sys_sendmsg+0x1a5/0x270 [ 517.431077][ T8391] ? __x64_sys_sendmsg+0x80/0x80 [ 517.436073][ T8391] ? lockdep_hardirqs_on+0x98/0x150 [ 517.441318][ T8391] do_syscall_64+0x55/0xb0 [ 517.445771][ T8391] ? clear_bhb_loop+0x40/0x90 [ 517.450483][ T8391] ? clear_bhb_loop+0x40/0x90 [ 517.455199][ T8391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.461134][ T8391] RIP: 0033:0x7f52d738ebe9 [ 517.465621][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.485301][ T8391] RSP: 002b:00007f52d82f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.493758][ T8391] RAX: ffffffffffffffda RBX: 00007f52d75c5fa0 RCX: 00007f52d738ebe9 [ 517.501758][ T8391] RDX: 0000000000004040 RSI: 0000200000002b00 RDI: 0000000000000003 [ 517.509769][ T8391] RBP: 00007f52d82f5090 R08: 0000000000000000 R09: 0000000000000000 [ 517.517774][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.525800][ T8391] R13: 00007f52d75c6038 R14: 00007f52d75c5fa0 R15: 00007ffe18c93638 [ 517.533822][ T8391] [ 518.119773][ T8400] netlink: 'syz.7.736': attribute type 6 has an invalid length. [ 518.181274][ T8400] netlink: 'syz.7.736': attribute type 3 has an invalid length. [ 518.230911][ T8400] netlink: 153952 bytes leftover after parsing attributes in process `syz.7.736'. [ 518.607695][ T8409] netlink: 'syz.5.737': attribute type 21 has an invalid length. [ 518.715564][ T8414] netlink: 60 bytes leftover after parsing attributes in process `syz.6.739'. [ 518.889863][ T8414] netlink: 60 bytes leftover after parsing attributes in process `syz.6.739'. [ 519.049152][ T8420] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 519.123903][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 519.130885][ T8411] netlink: 60 bytes leftover after parsing attributes in process `syz.6.739'. [ 519.171296][ T8416] netlink: 60 bytes leftover after parsing attributes in process `syz.6.739'. [ 520.875237][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.5.749'. [ 520.909930][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.5.749'. [ 520.921772][ T8442] netlink: 60 bytes leftover after parsing attributes in process `syz.5.749'. [ 520.944623][ T8445] FAULT_INJECTION: forcing a failure. [ 520.944623][ T8445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.972593][ T8445] CPU: 0 PID: 8445 Comm: syz.5.749 Not tainted syzkaller #0 [ 520.979963][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.990064][ T8445] Call Trace: [ 520.993382][ T8445] [ 520.996353][ T8445] dump_stack_lvl+0x16c/0x230 [ 521.001084][ T8445] ? show_regs_print_info+0x20/0x20 [ 521.006327][ T8445] ? load_image+0x3b0/0x3b0 [ 521.010873][ T8445] ? __might_fault+0xaa/0x120 [ 521.015587][ T8445] ? __lock_acquire+0x7c80/0x7c80 [ 521.020661][ T8445] should_fail_ex+0x39d/0x4d0 [ 521.025388][ T8445] _copy_from_user+0x2f/0xe0 [ 521.030019][ T8445] ___sys_recvmsg+0x12f/0x510 [ 521.034748][ T8445] ? __sys_recvmsg+0x270/0x270 [ 521.039576][ T8445] ? ksys_write+0x1c1/0x250 [ 521.044138][ T8445] ? __fget_files+0x44a/0x4d0 [ 521.048873][ T8445] __x64_sys_recvmsg+0x1f2/0x2c0 [ 521.053868][ T8445] ? ___sys_recvmsg+0x510/0x510 [ 521.058794][ T8445] ? lockdep_hardirqs_on+0x98/0x150 [ 521.064053][ T8445] do_syscall_64+0x55/0xb0 [ 521.068518][ T8445] ? clear_bhb_loop+0x40/0x90 [ 521.073232][ T8445] ? clear_bhb_loop+0x40/0x90 [ 521.077932][ T8445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.083936][ T8445] RIP: 0033:0x7fac4ad8ebe9 [ 521.088380][ T8445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.108024][ T8445] RSP: 002b:00007fac4bb21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 521.116465][ T8445] RAX: ffffffffffffffda RBX: 00007fac4afc6090 RCX: 00007fac4ad8ebe9 [ 521.124457][ T8445] RDX: 0000000040000002 RSI: 0000200000000e80 RDI: 0000000000000003 [ 521.132441][ T8445] RBP: 00007fac4bb21090 R08: 0000000000000000 R09: 0000000000000000 [ 521.140421][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.148415][ T8445] R13: 00007fac4afc6128 R14: 00007fac4afc6090 R15: 00007ffea1dbd498 [ 521.156422][ T8445] [ 521.180868][ T8447] netlink: 'syz.7.751': attribute type 10 has an invalid length. [ 521.260475][ T8450] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 521.488587][ T8457] netlink: 60 bytes leftover after parsing attributes in process `syz.5.753'. [ 521.529009][ T8457] netlink: 60 bytes leftover after parsing attributes in process `syz.5.753'. [ 521.889530][ T8458] netlink: 'syz.6.756': attribute type 21 has an invalid length. [ 522.566417][ T8470] FAULT_INJECTION: forcing a failure. [ 522.566417][ T8470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.722332][ T8470] CPU: 1 PID: 8470 Comm: syz.5.761 Not tainted syzkaller #0 [ 522.729708][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.739798][ T8470] Call Trace: [ 522.743115][ T8470] [ 522.746076][ T8470] dump_stack_lvl+0x16c/0x230 [ 522.750809][ T8470] ? show_regs_print_info+0x20/0x20 [ 522.756064][ T8470] ? load_image+0x3b0/0x3b0 [ 522.760617][ T8470] ? __might_fault+0xaa/0x120 [ 522.765335][ T8470] ? __lock_acquire+0x7c80/0x7c80 [ 522.770418][ T8470] should_fail_ex+0x39d/0x4d0 [ 522.775156][ T8470] _copy_from_user+0x2f/0xe0 [ 522.779795][ T8470] __sys_bpf+0x1e9/0x800 [ 522.784093][ T8470] ? bpf_link_show_fdinfo+0x350/0x350 [ 522.789536][ T8470] ? lock_chain_count+0x20/0x20 [ 522.794437][ T8470] __x64_sys_bpf+0x7c/0x90 [ 522.798890][ T8470] do_syscall_64+0x55/0xb0 [ 522.803342][ T8470] ? clear_bhb_loop+0x40/0x90 [ 522.808057][ T8470] ? clear_bhb_loop+0x40/0x90 [ 522.812775][ T8470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.818775][ T8470] RIP: 0033:0x7fac4ad8ebe9 [ 522.823248][ T8470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.842894][ T8470] RSP: 002b:00007fac4bb42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.851352][ T8470] RAX: ffffffffffffffda RBX: 00007fac4afc5fa0 RCX: 00007fac4ad8ebe9 [ 522.859360][ T8470] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 522.867362][ T8470] RBP: 00007fac4bb42090 R08: 0000000000000000 R09: 0000000000000000 [ 522.875368][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.883374][ T8470] R13: 00007fac4afc6038 R14: 00007fac4afc5fa0 R15: 00007ffea1dbd498 [ 522.891403][ T8470] [ 523.818870][ T8475] netlink: 'syz.5.762': attribute type 10 has an invalid length. [ 523.885174][ T8475] team0: Port device geneve1 added [ 523.891049][ T8479] netlink: 'syz.7.764': attribute type 10 has an invalid length. [ 523.950470][ T8483] netlink: 'syz.0.763': attribute type 10 has an invalid length. [ 523.966170][ T8483] bridge0: port 3(batadv0) entered disabled state [ 523.973455][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.981287][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.034834][ T8483] bridge0: port 3(batadv0) entered blocking state [ 524.041484][ T8483] bridge0: port 3(batadv0) entered forwarding state [ 524.048577][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.055849][ T8483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.063402][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.070741][ T8483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.101464][ T8483] bridge0: entered promiscuous mode [ 524.121458][ T8483] $Hÿ: (slave bridge0): Enslaving as an active interface with an up link [ 524.197975][ T8489] __nla_validate_parse: 2 callbacks suppressed [ 524.197992][ T8489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.767'. [ 524.266374][ T8489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.767'. [ 524.299304][ T8487] netlink: 60 bytes leftover after parsing attributes in process `syz.5.767'. [ 524.421587][ T8491] netlink: 60 bytes leftover after parsing attributes in process `syz.5.767'. [ 524.612343][ T8497] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 525.281392][ T8511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.781'. [ 525.294057][ T8511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.781'. [ 525.319928][ T8504] netlink: 60 bytes leftover after parsing attributes in process `syz.0.781'. [ 525.335994][ T8511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.781'. [ 526.133378][ T8518] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 526.155107][ T8514] netlink: 'syz.6.775': attribute type 10 has an invalid length. [ 526.539789][ T8525] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.779'. [ 526.587527][ T8528] FAULT_INJECTION: forcing a failure. [ 526.587527][ T8528] name failslab, interval 1, probability 0, space 0, times 0 [ 526.610958][ T8525] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 526.624002][ T8528] CPU: 1 PID: 8528 Comm: syz.5.778 Not tainted syzkaller #0 [ 526.631356][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 526.641446][ T8528] Call Trace: [ 526.644765][ T8528] [ 526.647729][ T8528] dump_stack_lvl+0x16c/0x230 [ 526.652462][ T8528] ? show_regs_print_info+0x20/0x20 [ 526.657697][ T8528] ? load_image+0x3b0/0x3b0 [ 526.662243][ T8528] ? __might_sleep+0xe0/0xe0 [ 526.666877][ T8528] ? __lock_acquire+0x7c80/0x7c80 [ 526.671945][ T8528] should_fail_ex+0x39d/0x4d0 [ 526.676671][ T8528] should_failslab+0x9/0x20 [ 526.681227][ T8528] slab_pre_alloc_hook+0x59/0x310 [ 526.686292][ T8528] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 526.692054][ T8528] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 526.697819][ T8528] __kmem_cache_alloc_node+0x53/0x260 [ 526.703247][ T8528] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 526.709015][ T8528] __kmalloc+0xa4/0x240 [ 526.713237][ T8528] tomoyo_realpath_from_path+0xe3/0x5d0 [ 526.718875][ T8528] tomoyo_path_number_perm+0x1ea/0x590 [ 526.724401][ T8528] ? tomoyo_path_number_perm+0x1ba/0x590 [ 526.730089][ T8528] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 526.735593][ T8528] ? ksys_write+0x1c1/0x250 [ 526.740192][ T8528] ? __fget_files+0x28/0x4d0 [ 526.744843][ T8528] security_file_ioctl+0x70/0xa0 [ 526.749826][ T8528] __se_sys_ioctl+0x48/0x170 [ 526.754465][ T8528] do_syscall_64+0x55/0xb0 [ 526.758916][ T8528] ? clear_bhb_loop+0x40/0x90 [ 526.763622][ T8528] ? clear_bhb_loop+0x40/0x90 [ 526.768335][ T8528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.774281][ T8528] RIP: 0033:0x7fac4ad8ebe9 [ 526.778736][ T8528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.798373][ T8528] RSP: 002b:00007fac4bb42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.806829][ T8528] RAX: ffffffffffffffda RBX: 00007fac4afc5fa0 RCX: 00007fac4ad8ebe9 [ 526.814834][ T8528] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000004 [ 526.822850][ T8528] RBP: 00007fac4bb42090 R08: 0000000000000000 R09: 0000000000000000 [ 526.830854][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.838855][ T8528] R13: 00007fac4afc6038 R14: 00007fac4afc5fa0 R15: 00007ffea1dbd498 [ 526.846888][ T8528] [ 528.970597][ T8527] netlink: 'syz.0.777': attribute type 10 has an invalid length. [ 530.035138][ T8528] ERROR: Out of memory at tomoyo_realpath_from_path. [ 530.456345][ T8527] team0: Port device geneve1 added [ 530.662477][ T8519] netlink: 'syz.7.774': attribute type 21 has an invalid length. [ 530.793203][ T8541] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 530.900655][ T8544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.787'. [ 530.934236][ T8544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.787'. [ 530.966209][ T8543] netlink: 60 bytes leftover after parsing attributes in process `syz.0.787'. [ 531.004790][ T8544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.787'. [ 532.028881][ T8554] team0: Port device team_slave_0 removed [ 532.062092][ T8554] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 532.107992][ T8559] netlink: 'syz.0.791': attribute type 10 has an invalid length. [ 532.455506][ T8563] syz.7.793 (8563) used obsolete PPPIOCDETACH ioctl [ 532.695155][ T8574] FAULT_INJECTION: forcing a failure. [ 532.695155][ T8574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.779017][ T8574] CPU: 1 PID: 8574 Comm: syz.7.797 Not tainted syzkaller #0 [ 532.786382][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.796478][ T8574] Call Trace: [ 532.799793][ T8574] [ 532.802760][ T8574] dump_stack_lvl+0x16c/0x230 [ 532.807483][ T8574] ? show_regs_print_info+0x20/0x20 [ 532.812717][ T8574] ? load_image+0x3b0/0x3b0 [ 532.817241][ T8574] ? __might_fault+0xaa/0x120 [ 532.821936][ T8574] ? __lock_acquire+0x7c80/0x7c80 [ 532.827021][ T8574] should_fail_ex+0x39d/0x4d0 [ 532.831749][ T8574] _copy_from_user+0x2f/0xe0 [ 532.836383][ T8574] __sys_bpf+0x1e9/0x800 [ 532.840648][ T8574] ? bpf_link_show_fdinfo+0x350/0x350 [ 532.846049][ T8574] ? lock_chain_count+0x20/0x20 [ 532.850925][ T8574] __x64_sys_bpf+0x7c/0x90 [ 532.855356][ T8574] do_syscall_64+0x55/0xb0 [ 532.859788][ T8574] ? clear_bhb_loop+0x40/0x90 [ 532.864477][ T8574] ? clear_bhb_loop+0x40/0x90 [ 532.869165][ T8574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.875083][ T8574] RIP: 0033:0x7ff3f118ebe9 [ 532.879508][ T8574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.899131][ T8574] RSP: 002b:00007ff3f1fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.907558][ T8574] RAX: ffffffffffffffda RBX: 00007ff3f13c5fa0 RCX: 00007ff3f118ebe9 [ 532.915544][ T8574] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 532.923523][ T8574] RBP: 00007ff3f1fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 532.931505][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.939574][ T8574] R13: 00007ff3f13c6038 R14: 00007ff3f13c5fa0 R15: 00007ffe3aeefa78 [ 532.947600][ T8574] [ 533.004312][ T8579] FAULT_INJECTION: forcing a failure. [ 533.004312][ T8579] name failslab, interval 1, probability 0, space 0, times 0 [ 533.057711][ T8569] netlink: 'syz.6.796': attribute type 10 has an invalid length. [ 533.074070][ T8579] CPU: 1 PID: 8579 Comm: syz.5.800 Not tainted syzkaller #0 [ 533.081408][ T8579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.091478][ T8579] Call Trace: [ 533.094772][ T8579] [ 533.097714][ T8579] dump_stack_lvl+0x16c/0x230 [ 533.102411][ T8579] ? show_regs_print_info+0x20/0x20 [ 533.107710][ T8579] ? load_image+0x3b0/0x3b0 [ 533.112230][ T8579] ? __might_sleep+0xe0/0xe0 [ 533.116841][ T8579] ? __lock_acquire+0x7c80/0x7c80 [ 533.121893][ T8579] ? mark_lock+0x94/0x320 [ 533.126241][ T8579] should_fail_ex+0x39d/0x4d0 [ 533.130943][ T8579] should_failslab+0x9/0x20 [ 533.135478][ T8579] slab_pre_alloc_hook+0x59/0x310 [ 533.140533][ T8579] ? __get_vm_area_node+0x125/0x370 [ 533.145788][ T8579] __kmem_cache_alloc_node+0x53/0x260 [ 533.151181][ T8579] ? __get_vm_area_node+0x125/0x370 [ 533.156399][ T8579] kmalloc_node_trace+0x26/0xe0 [ 533.161270][ T8579] __get_vm_area_node+0x125/0x370 [ 533.166314][ T8579] __vmalloc_node_range+0x36e/0x1320 [ 533.171619][ T8579] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 533.177179][ T8579] ? mark_lock+0x94/0x320 [ 533.181522][ T8579] ? __lock_acquire+0x1334/0x7c80 [ 533.186576][ T8579] ? verify_lock_unused+0x140/0x140 [ 533.191794][ T8579] ? free_vm_area+0x50/0x50 [ 533.196339][ T8579] ? end_current_label_crit_section+0x170/0x170 [ 533.202605][ T8579] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 533.208191][ T8579] __vmalloc+0x7a/0x90 [ 533.212299][ T8579] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 533.217869][ T8579] bpf_prog_alloc_no_stats+0x47/0x440 [ 533.223264][ T8579] ? bpf_prog_alloc+0x2b/0x1b0 [ 533.228048][ T8579] bpf_prog_alloc+0x3d/0x1b0 [ 533.232655][ T8579] bpf_prog_load+0x6b8/0x16d0 [ 533.237377][ T8579] ? map_freeze+0x420/0x420 [ 533.241900][ T8579] ? __might_fault+0xaa/0x120 [ 533.246602][ T8579] ? __lock_acquire+0x7c80/0x7c80 [ 533.251646][ T8579] ? __might_fault+0xaa/0x120 [ 533.256334][ T8579] ? __might_fault+0xc6/0x120 [ 533.261016][ T8579] ? __might_fault+0xaa/0x120 [ 533.265707][ T8579] ? bpf_lsm_bpf+0x9/0x10 [ 533.270057][ T8579] ? security_bpf+0x7e/0xa0 [ 533.274580][ T8579] __sys_bpf+0x55a/0x800 [ 533.278840][ T8579] ? bpf_link_show_fdinfo+0x350/0x350 [ 533.284236][ T8579] ? lock_chain_count+0x20/0x20 [ 533.289108][ T8579] __x64_sys_bpf+0x7c/0x90 [ 533.293558][ T8579] do_syscall_64+0x55/0xb0 [ 533.298005][ T8579] ? clear_bhb_loop+0x40/0x90 [ 533.302698][ T8579] ? clear_bhb_loop+0x40/0x90 [ 533.307385][ T8579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.313314][ T8579] RIP: 0033:0x7fac4ad8ebe9 [ 533.317741][ T8579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.337366][ T8579] RSP: 002b:00007fac4bb42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.345816][ T8579] RAX: ffffffffffffffda RBX: 00007fac4afc5fa0 RCX: 00007fac4ad8ebe9 [ 533.353807][ T8579] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 533.361793][ T8579] RBP: 00007fac4bb42090 R08: 0000000000000000 R09: 0000000000000000 [ 533.369788][ T8579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.377794][ T8579] R13: 00007fac4afc6038 R14: 00007fac4afc5fa0 R15: 00007ffea1dbd498 [ 533.385792][ T8579] [ 533.395363][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.410449][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.487001][ T8579] syz.5.800: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 533.540052][ T8579] CPU: 1 PID: 8579 Comm: syz.5.800 Not tainted syzkaller #0 [ 533.547426][ T8579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.557776][ T8579] Call Trace: [ 533.561171][ T8579] [ 533.564133][ T8579] dump_stack_lvl+0x16c/0x230 [ 533.568854][ T8579] ? show_regs_print_info+0x20/0x20 [ 533.574102][ T8579] ? load_image+0x3b0/0x3b0 [ 533.578654][ T8579] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 533.585104][ T8579] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 533.591644][ T8579] warn_alloc+0x210/0x300 [ 533.596010][ T8579] ? __get_vm_area_node+0x125/0x370 [ 533.601243][ T8579] ? zone_watermark_ok_safe+0x230/0x230 [ 533.606835][ T8579] ? rcu_is_watching+0x15/0xb0 [ 533.611650][ T8579] ? __get_vm_area_node+0x356/0x370 [ 533.616898][ T8579] __vmalloc_node_range+0x393/0x1320 [ 533.622227][ T8579] ? mark_lock+0x94/0x320 [ 533.626580][ T8579] ? __lock_acquire+0x1334/0x7c80 [ 533.631618][ T8579] ? verify_lock_unused+0x140/0x140 [ 533.636853][ T8579] ? free_vm_area+0x50/0x50 [ 533.641370][ T8579] ? end_current_label_crit_section+0x170/0x170 [ 533.647634][ T8579] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 533.653196][ T8579] __vmalloc+0x7a/0x90 [ 533.657320][ T8579] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 533.662880][ T8579] bpf_prog_alloc_no_stats+0x47/0x440 [ 533.668265][ T8579] ? bpf_prog_alloc+0x2b/0x1b0 [ 533.673043][ T8579] bpf_prog_alloc+0x3d/0x1b0 [ 533.677654][ T8579] bpf_prog_load+0x6b8/0x16d0 [ 533.682356][ T8579] ? map_freeze+0x420/0x420 [ 533.686874][ T8579] ? __might_fault+0xaa/0x120 [ 533.691560][ T8579] ? __lock_acquire+0x7c80/0x7c80 [ 533.696602][ T8579] ? __might_fault+0xaa/0x120 [ 533.701290][ T8579] ? __might_fault+0xc6/0x120 [ 533.705972][ T8579] ? __might_fault+0xaa/0x120 [ 533.710674][ T8579] ? bpf_lsm_bpf+0x9/0x10 [ 533.715019][ T8579] ? security_bpf+0x7e/0xa0 [ 533.719536][ T8579] __sys_bpf+0x55a/0x800 [ 533.723804][ T8579] ? bpf_link_show_fdinfo+0x350/0x350 [ 533.729216][ T8579] ? lock_chain_count+0x20/0x20 [ 533.734115][ T8579] __x64_sys_bpf+0x7c/0x90 [ 533.738557][ T8579] do_syscall_64+0x55/0xb0 [ 533.743005][ T8579] ? clear_bhb_loop+0x40/0x90 [ 533.747697][ T8579] ? clear_bhb_loop+0x40/0x90 [ 533.752405][ T8579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.758323][ T8579] RIP: 0033:0x7fac4ad8ebe9 [ 533.762818][ T8579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.782440][ T8579] RSP: 002b:00007fac4bb42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.790866][ T8579] RAX: ffffffffffffffda RBX: 00007fac4afc5fa0 RCX: 00007fac4ad8ebe9 [ 533.798855][ T8579] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 533.806833][ T8579] RBP: 00007fac4bb42090 R08: 0000000000000000 R09: 0000000000000000 [ 533.814816][ T8579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.822800][ T8579] R13: 00007fac4afc6038 R14: 00007fac4afc5fa0 R15: 00007ffea1dbd498 [ 533.830800][ T8579] [ 533.920706][ T8579] Mem-Info: [ 533.929063][ T8579] active_anon:5026 inactive_anon:0 isolated_anon:0 [ 533.929063][ T8579] active_file:14164 inactive_file:39928 isolated_file:0 [ 533.929063][ T8579] unevictable:768 dirty:497 writeback:0 [ 533.929063][ T8579] slab_reclaimable:10539 slab_unreclaimable:99265 [ 533.929063][ T8579] mapped:35631 shmem:1385 pagetables:486 [ 533.929063][ T8579] sec_pagetables:0 bounce:0 [ 533.929063][ T8579] kernel_misc_reclaimable:0 [ 533.929063][ T8579] free:1323776 free_pcp:11271 free_cma:0 [ 533.966669][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.983446][ T8569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.992065][ T8579] Node 0 active_anon:20104kB inactive_anon:0kB active_file:56656kB inactive_file:159508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142524kB dirty:1984kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11208kB pagetables:1944kB sec_pagetables:0kB all_unreclaimable? no [ 534.013509][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.034588][ T8569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.083077][ T8579] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 534.117623][ T8569] bridge0: entered promiscuous mode [ 534.120221][ T8579] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.136923][ T8569] $Hÿ: (slave bridge0): Enslaving as an active interface with an up link [ 534.171697][ T8579] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 534.188098][ T8579] Node 0 DMA32 free:1385200kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:20068kB inactive_anon:0kB active_file:56656kB inactive_file:158188kB unevictable:1536kB writepending:1992kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:25808kB local_pcp:5692kB free_cma:0kB [ 534.193902][ T8577] netlink: 'syz.0.799': attribute type 2 has an invalid length. [ 534.237263][ T8579] lowmem_reserve[]: 0 0 1 1 1 [ 534.241884][ T8569] syz.6.796 (8569) used greatest stack depth: 20456 bytes left [ 534.251356][ T8577] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 534.259963][ T8579] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 534.330943][ T8579] lowmem_reserve[]: 0 0 0 0 0 [ 534.331022][ T8590] netlink: 'syz.7.804': attribute type 10 has an invalid length. [ 534.335825][ T8579] Node 1 Normal free:3894532kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19616kB local_pcp:10976kB free_cma:0kB [ 534.335887][ T8579] lowmem_reserve[]: 0 0 0 0 0 [ 534.335932][ T8579] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 534.400812][ T8592] FAULT_INJECTION: forcing a failure. [ 534.400812][ T8592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.431701][ T8592] CPU: 1 PID: 8592 Comm: syz.6.805 Not tainted syzkaller #0 [ 534.435304][ T8579] Node 0 [ 534.439126][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.439141][ T8592] Call Trace: [ 534.439151][ T8592] [ 534.442089][ T8579] DMA32: 870*4kB [ 534.452140][ T8592] dump_stack_lvl+0x16c/0x230 [ 534.452174][ T8592] ? show_regs_print_info+0x20/0x20 [ 534.452199][ T8592] ? load_image+0x3b0/0x3b0 [ 534.452220][ T8592] ? __lock_acquire+0x7c80/0x7c80 [ 534.452244][ T8592] ? snprintf+0xdb/0x120 [ 534.452277][ T8592] should_fail_ex+0x39d/0x4d0 [ 534.452310][ T8592] _copy_to_user+0x2f/0xa0 [ 534.452333][ T8592] simple_read_from_buffer+0xe7/0x150 [ 534.487634][ T8579] (UME) [ 534.490566][ T8592] proc_fail_nth_read+0x1e3/0x250 [ 534.507855][ T8579] 775*8kB [ 534.508257][ T8592] ? proc_fault_inject_write+0x340/0x340 [ 534.511307][ T8579] (UME) 702*16kB [ 534.516936][ T8592] ? fsnotify_perm+0x271/0x5e0 [ 534.516968][ T8592] ? proc_fault_inject_write+0x340/0x340 [ 534.516993][ T8592] vfs_read+0x27e/0x920 [ 534.535290][ T8592] ? kernel_read+0x1e0/0x1e0 [ 534.539937][ T8592] ? __fget_files+0x28/0x4d0 [ 534.544738][ T8592] ? __fget_files+0x44a/0x4d0 [ 534.549446][ T8592] ? __fdget_pos+0x2a3/0x330 [ 534.554054][ T8592] ? ksys_read+0x75/0x250 [ 534.558405][ T8592] ksys_read+0x147/0x250 [ 534.562664][ T8592] ? vfs_write+0x940/0x940 [ 534.567098][ T8592] ? lockdep_hardirqs_on+0x98/0x150 [ 534.572323][ T8592] do_syscall_64+0x55/0xb0 [ 534.576755][ T8592] ? clear_bhb_loop+0x40/0x90 [ 534.581443][ T8592] ? clear_bhb_loop+0x40/0x90 [ 534.586130][ T8592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.592056][ T8592] RIP: 0033:0x7f909cf8d5fc [ 534.596482][ T8592] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 534.616125][ T8592] RSP: 002b:00007f909dee9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.624549][ T8592] RAX: ffffffffffffffda RBX: 00007f909d1c5fa0 RCX: 00007f909cf8d5fc [ 534.632546][ T8592] RDX: 000000000000000f RSI: 00007f909dee90a0 RDI: 0000000000000003 [ 534.640531][ T8592] RBP: 00007f909dee9090 R08: 0000000000000000 R09: 0000000000000000 [ 534.648519][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.656498][ T8592] R13: 00007f909d1c6038 R14: 00007f909d1c5fa0 R15: 00007ffe06c66218 [ 534.664499][ T8592] [ 534.699314][ T8579] (UME) 984*32kB (UME) 475*64kB (UME) 49*128kB (UME) 29*256kB (UM) 73*512kB (UME) 68*1024kB (UME) 3*2048kB (M) 287*4096kB (UM) = 1385200kB [ 534.723367][ T8579] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 534.735953][ T8579] Node 1 Normal: 271*4kB (UME) 67*8kB (UME) 43*16kB (UME) 98*32kB (UME) 23*64kB (UE) 12*128kB (UME) 0*256kB 2*512kB (ME) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3894532kB [ 534.765172][ T8579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.777127][ T8579] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 534.788056][ T8579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.798318][ T8579] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 534.807641][ T8596] netlink: 60 bytes leftover after parsing attributes in process `syz.7.807'. [ 534.807727][ T8596] netlink: 60 bytes leftover after parsing attributes in process `syz.7.807'. [ 534.823969][ T8579] 55477 total pagecache pages [ 534.847264][ T8579] 0 pages in swap cache [ 534.857402][ T8579] Free swap = 124996kB [ 534.862126][ T8597] netlink: 60 bytes leftover after parsing attributes in process `syz.7.807'. [ 534.874095][ T8579] Total swap = 124996kB [ 534.879379][ T8579] 2097051 pages RAM [ 534.883317][ T8579] 0 pages HighMem/MovableOnly [ 534.888733][ T8579] 416139 pages reserved [ 534.893229][ T8579] 0 pages cma reserved [ 534.909781][ T8598] netlink: 60 bytes leftover after parsing attributes in process `syz.7.807'. [ 535.337886][ T8611] syz.6.812 uses obsolete (PF_INET,SOCK_PACKET) [ 535.440592][ T8617] netlink: 'syz.5.815': attribute type 10 has an invalid length. [ 535.510738][ T8617] batadv_slave_0: entered promiscuous mode [ 535.557425][ T8617] $Hÿ: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 535.782806][ T8626] FAULT_INJECTION: forcing a failure. [ 535.782806][ T8626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.821637][ T8626] CPU: 1 PID: 8626 Comm: syz.7.819 Not tainted syzkaller #0 [ 535.829253][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.839421][ T8626] Call Trace: [ 535.842717][ T8626] [ 535.845668][ T8626] dump_stack_lvl+0x16c/0x230 [ 535.850382][ T8626] ? show_regs_print_info+0x20/0x20 [ 535.855610][ T8626] ? load_image+0x3b0/0x3b0 [ 535.860131][ T8626] ? __lock_acquire+0x7c80/0x7c80 [ 535.865177][ T8626] ? snprintf+0xdb/0x120 [ 535.869453][ T8626] should_fail_ex+0x39d/0x4d0 [ 535.874156][ T8626] _copy_to_user+0x2f/0xa0 [ 535.878606][ T8626] simple_read_from_buffer+0xe7/0x150 [ 535.884016][ T8626] proc_fail_nth_read+0x1e3/0x250 [ 535.889076][ T8626] ? proc_fault_inject_write+0x340/0x340 [ 535.894731][ T8626] ? fsnotify_perm+0x271/0x5e0 [ 535.899536][ T8626] ? proc_fault_inject_write+0x340/0x340 [ 535.905208][ T8626] vfs_read+0x27e/0x920 [ 535.909403][ T8626] ? kernel_read+0x1e0/0x1e0 [ 535.914015][ T8626] ? __fget_files+0x28/0x4d0 [ 535.918621][ T8626] ? __fget_files+0x44a/0x4d0 [ 535.923321][ T8626] ? __fdget_pos+0x2a3/0x330 [ 535.927929][ T8626] ? ksys_read+0x75/0x250 [ 535.932278][ T8626] ksys_read+0x147/0x250 [ 535.936540][ T8626] ? vfs_write+0x940/0x940 [ 535.940976][ T8626] ? lockdep_hardirqs_on+0x98/0x150 [ 535.946201][ T8626] do_syscall_64+0x55/0xb0 [ 535.950659][ T8626] ? clear_bhb_loop+0x40/0x90 [ 535.955360][ T8626] ? clear_bhb_loop+0x40/0x90 [ 535.960052][ T8626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.965976][ T8626] RIP: 0033:0x7ff3f118d5fc [ 535.970405][ T8626] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 535.990029][ T8626] RSP: 002b:00007ff3f1fb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.998460][ T8626] RAX: ffffffffffffffda RBX: 00007ff3f13c5fa0 RCX: 00007ff3f118d5fc [ 536.006534][ T8626] RDX: 000000000000000f RSI: 00007ff3f1fb40a0 RDI: 0000000000000004 [ 536.014520][ T8626] RBP: 00007ff3f1fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 536.022504][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.030502][ T8626] R13: 00007ff3f13c6038 R14: 00007ff3f13c5fa0 R15: 00007ffe3aeefa78 [ 536.038521][ T8626] [ 536.148780][ T29] INFO: task syz.3.124:6266 blocked for more than 144 seconds. [ 536.156550][ T29] Not tainted syzkaller #0 [ 536.161619][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.192877][ T29] task:syz.3.124 state:D stack:22056 pid:6266 ppid:5839 flags:0x00004006 [ 536.220141][ T29] Call Trace: [ 536.223568][ T29] [ 536.228573][ T29] __schedule+0x14d2/0x44d0 [ 536.233174][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 536.239699][ T29] ? lock_chain_count+0x20/0x20 [ 536.244775][ T29] ? asan.module_dtor+0x20/0x20 [ 536.249910][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.256232][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 536.261739][ T29] schedule+0xbd/0x170 [ 536.265915][ T29] ? _free_event+0xfe/0xf30 [ 536.274366][ T29] _free_event+0x174/0xf30 [ 536.279006][ T29] perf_event_release_kernel+0x836/0x8c0 [ 536.290742][ T29] ? __might_sleep+0xe0/0xe0 [ 536.296946][ T29] ? calc_timer_values+0x400/0x400 [ 536.302306][ T29] ? perf_mmap+0x1630/0x1630 [ 536.311038][ T29] perf_release+0x3b/0x40 [ 536.315947][ T29] __fput+0x234/0x970 [ 536.320088][ T29] task_work_run+0x1ce/0x250 [ 536.328513][ T29] ? task_work_cancel+0x240/0x240 [ 536.336061][ T29] ? kernel_clone+0x235/0x840 [ 536.341765][ T29] get_signal+0x1235/0x1400 [ 536.347541][ T29] ? create_io_thread+0x140/0x140 [ 536.352847][ T29] ? __might_sleep+0xe0/0xe0 [ 536.361007][ T29] arch_do_signal_or_restart+0x96/0x780 [ 536.367963][ T29] ? get_sigframe_size+0x20/0x20 [ 536.372993][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 536.378716][ T29] exit_to_user_mode_loop+0x70/0x110 [ 536.384780][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 536.390481][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 536.398793][ T29] do_syscall_64+0x61/0xb0 [ 536.403324][ T29] ? clear_bhb_loop+0x40/0x90 [ 536.408120][ T29] ? clear_bhb_loop+0x40/0x90 [ 536.415244][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.421335][ T29] RIP: 0033:0x7f500578ebe9 [ 536.425824][ T29] RSP: 002b:00007f50066d2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 536.434312][ T29] RAX: fffffffffffffff4 RBX: 00007f50059c5fa0 RCX: 00007f500578ebe9 [ 536.442320][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 536.450403][ T29] RBP: 00007f5005811e19 R08: 0000000000000000 R09: 0000000000000000 [ 536.458464][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 536.466630][ T29] R13: 00007f50059c6038 R14: 00007f50059c5fa0 R15: 00007ffe4c28e978 [ 536.474730][ T29] [ 536.478138][ T29] [ 536.478138][ T29] Showing all locks held in the system: [ 536.501332][ T29] 1 lock held by khungtaskd/29: [ 536.525345][ T29] #0: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 536.536927][ T29] 3 locks held by kworker/1:2/54: [ 536.541996][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 536.553436][ T29] #1: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x161/0x6f0 [ 536.566684][ T29] #2: ffffffff8cd78308 (tracepoint_srcu_srcu_usage.lock){....}-{2:2}, at: srcu_reschedule+0x44/0x170 [ 536.591316][ T29] 3 locks held by kworker/u4:5/60: [ 536.596949][ T29] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 536.609507][ T29] #1: ffffc900015c7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 536.622829][ T29] #2: ffffffff8cd35bb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 536.634411][ T29] 2 locks held by kworker/0:2/1186: [ 536.639749][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 536.651398][ T29] #1: ffffc90004b5fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 536.664441][ T29] 2 locks held by getty/5552: [ 536.669195][ T29] #0: ffff888030ff20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 536.679291][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 536.689868][ T29] 3 locks held by kworker/u4:4/5900: [ 536.695592][ T29] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 536.707486][ T29] #1: ffffc90004d4fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 536.720330][ T29] #2: ffffffff8cd35a80 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 536.730599][ T29] 3 locks held by kworker/u4:9/7610: [ 536.735984][ T29] #0: ffff8880b8f3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 536.749323][ T29] #1: ffffc90004e5fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 536.762580][ T29] #2: ffff8880b8f297d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 536.772018][ T29] 2 locks held by syz.0.826/8622: [ 536.777108][ T29] #0: ffffffff8cd85f68 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 536.786861][ T29] #1: ffffffff8cd35bb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830 [ 536.798134][ T29] 1 lock held by syz.7.821/8634: [ 536.803112][ T29] #0: ffffffff8cd85f68 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 536.813090][ T29] [ 536.816394][ T29] ============================================= [ 536.816394][ T29] [ 536.826590][ T29] NMI backtrace for cpu 1 [ 536.830952][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 536.838166][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.848231][ T29] Call Trace: [ 536.851521][ T29] [ 536.854468][ T29] dump_stack_lvl+0x16c/0x230 [ 536.859178][ T29] ? show_regs_print_info+0x20/0x20 [ 536.864398][ T29] ? load_image+0x3b0/0x3b0 [ 536.868936][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 536.873898][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 536.880082][ T29] ? _printk+0xd0/0x110 [ 536.884258][ T29] ? load_image+0x3b0/0x3b0 [ 536.888783][ T29] ? load_image+0x3b0/0x3b0 [ 536.893418][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 536.899519][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 536.905538][ T29] watchdog+0xf41/0xf80 [ 536.909751][ T29] ? watchdog+0x1e1/0xf80 [ 536.914195][ T29] kthread+0x2fa/0x390 [ 536.918311][ T29] ? hungtask_pm_notify+0x90/0x90 [ 536.923369][ T29] ? kthread_blkcg+0xd0/0xd0 [ 536.928034][ T29] ret_from_fork+0x48/0x80 [ 536.932485][ T29] ? kthread_blkcg+0xd0/0xd0 [ 536.937080][ T29] ret_from_fork_asm+0x11/0x20 [ 536.941866][ T29] [ 536.946480][ T29] Sending NMI from CPU 1 to CPUs 0: [ 536.952522][ C0] NMI backtrace for cpu 0 [ 536.952532][ C0] CPU: 0 PID: 2917 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 536.952549][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.952560][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 536.952587][ C0] RIP: 0010:lock_is_held_type+0x1b/0x190 [ 536.952614][ C0] Code: e2 f6 0f 0b eb bf e8 84 fc ff ff 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 <48> 89 44 24 08 bd ff ff ff ff 83 3d 20 c8 dc 03 00 0f 84 03 01 00 [ 536.952629][ C0] RSP: 0018:ffffc9000bd174f8 EFLAGS: 00000282 [ 536.952643][ C0] RAX: 025ac9a332bb2600 RBX: 0000000000000001 RCX: 0000000000000000 [ 536.952654][ C0] RDX: ffff88802b43bc00 RSI: 00000000ffffffff RDI: ffff88805d2fcd40 [ 536.952666][ C0] RBP: ffffc9000bd17810 R08: 0000000000000000 R09: 0000000000000004 [ 536.952677][ C0] R10: ffffc9000bd1734c R11: fffff520017a2e6c R12: dffffc0000000000 [ 536.952689][ C0] R13: ffff888079611800 R14: ffff888079611830 R15: ffff88805d2fcc80 [ 536.952702][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 536.952716][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.952727][ C0] CR2: 00007f909dea6f98 CR3: 000000004dbc8000 CR4: 00000000003506f0 [ 536.952742][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.952752][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 536.952762][ C0] Call Trace: [ 536.952768][ C0] [ 536.952777][ C0] ieee80211_ibss_process_chanswitch+0xc7/0xb60 [ 536.952805][ C0] ? trace_drv_return_int+0x1c0/0x1c0 [ 536.952839][ C0] ? ieee80211_bss_info_update+0x361/0x930 [ 536.952857][ C0] ? ieee80211_bss_info_update+0x75d/0x930 [ 536.952885][ C0] ? ieee80211_inform_bss+0x1060/0x1060 [ 536.952907][ C0] ? ieee80211_mandatory_rates+0x1cc/0x230 [ 536.952935][ C0] ieee80211_ibss_rx_queued_mgmt+0x19bb/0x2ac0 [ 536.952966][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xe05/0x2ac0 [ 536.952990][ C0] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 536.953016][ C0] ? mark_lock+0x94/0x320 [ 536.953036][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 536.953056][ C0] ? lock_chain_count+0x20/0x20 [ 536.953072][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 536.953102][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 536.953127][ C0] ? skb_dequeue+0x10e/0x140 [ 536.953155][ C0] ieee80211_iface_work+0x717/0xc70 [ 536.953178][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.953206][ C0] cfg80211_wiphy_work+0x225/0x260 [ 536.953231][ C0] ? process_scheduled_works+0x957/0x15b0 [ 536.953251][ C0] process_scheduled_works+0xa45/0x15b0 [ 536.953286][ C0] ? assign_work+0x400/0x400 [ 536.953308][ C0] ? assign_work+0x39e/0x400 [ 536.953330][ C0] worker_thread+0xa55/0xfc0 [ 536.953363][ C0] kthread+0x2fa/0x390 [ 536.953377][ C0] ? pr_cont_work+0x560/0x560 [ 536.953397][ C0] ? kthread_blkcg+0xd0/0xd0 [ 536.953412][ C0] ret_from_fork+0x48/0x80 [ 536.953431][ C0] ? kthread_blkcg+0xd0/0xd0 [ 536.953446][ C0] ret_from_fork_asm+0x11/0x20 [ 536.953477][ C0] [ 537.263341][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 537.270274][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 537.277539][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.287613][ T29] Call Trace: [ 537.290907][ T29] [ 537.293851][ T29] dump_stack_lvl+0x16c/0x230 [ 537.298653][ T29] ? show_regs_print_info+0x20/0x20 [ 537.303881][ T29] ? load_image+0x3b0/0x3b0 [ 537.308422][ T29] panic+0x2c0/0x710 [ 537.312347][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 537.318018][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 537.322546][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 537.328136][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 537.334319][ T29] watchdog+0xf80/0xf80 [ 537.338507][ T29] ? watchdog+0x1e1/0xf80 [ 537.342858][ T29] kthread+0x2fa/0x390 [ 537.346934][ T29] ? hungtask_pm_notify+0x90/0x90 [ 537.351980][ T29] ? kthread_blkcg+0xd0/0xd0 [ 537.356580][ T29] ret_from_fork+0x48/0x80 [ 537.361012][ T29] ? kthread_blkcg+0xd0/0xd0 [ 537.365615][ T29] ret_from_fork_asm+0x11/0x20 [ 537.370412][ T29] [ 537.373739][ T29] Kernel Offset: disabled [ 537.378090][ T29] Rebooting in 86400 seconds..