last executing test programs: 2m43.677480215s ago: executing program 4 (id=3631): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x101, 0x80000001}, 0x11c002, 0x100000000ac60, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB="0000000000fe9c80c3bd29d8d1576873000000000500"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000c064e2e6000071123100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x26, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x40}, 0x106050, 0x4, 0xffffffff, 0x4, 0x1000000000000000, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000100"], 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffb3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x48}, 0x4008004) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000005c0)=0xfffffffffffffffc, 0x12) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m42.597880001s ago: executing program 4 (id=3635): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m42.286258728s ago: executing program 4 (id=3637): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000180100002020752500000000002020207b1af8ff00f8ffffffb702000008000000b7030000cb05000085000000060000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair(0x1a, 0x80000, 0x1, &(0x7f0000000080)) r3 = openat$cgroup_devices(r2, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="6200e6541828b60798ec205aab0200005e"], 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, 0x0}, 0x20) 2m39.981801617s ago: executing program 4 (id=3641): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m39.704800412s ago: executing program 4 (id=3645): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280082, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1e, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m36.411451344s ago: executing program 4 (id=3652): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x20000000}, 0x20) close(0x3) 2m21.115603823s ago: executing program 32 (id=3652): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x7e02, 0x0, 0x0, 0x0, 0x0, 0x8d3c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x20000000}, 0x20) close(0x3) 5.55648176s ago: executing program 3 (id=4318): ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f0000007600004a4a03538c6200"], 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0002, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.099165944s ago: executing program 3 (id=4325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.014343288s ago: executing program 0 (id=4326): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xd, &(0x7f00000000c0), 0x4f) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000006c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000850000000e00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x900c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100000, 0x9, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x51}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xd28, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x40) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000500)='memory.pressure\x00', 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 5.013813038s ago: executing program 2 (id=4327): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95e24fc60040068000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.901193004s ago: executing program 3 (id=4328): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000004c0)="a9", 0x1}], 0x1}, 0x4000810) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a0006", 0x1b}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x1, 0x0, 0x81, 0x0, 0x5ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff8, 0x2, 0x0, 0x0, 0x2, 0x0, 0x68d1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 4.758974162s ago: executing program 1 (id=4329): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a0006", 0x1b}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xb, 0x4, [@private, @private=0xa010101]}]}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703010000000000000000000000040014000d000a000d0000009ee517d34460bc24eab5561662251e0900949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x20010) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={0x0}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8921, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af"], 0x6) 4.758467902s ago: executing program 5 (id=4330): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00s/\x8br\bc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x90ih\xecd\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xf78}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 4.532148163s ago: executing program 0 (id=4331): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.522793363s ago: executing program 2 (id=4332): bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3e0002"], 0x9a) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={0xffffffffffffffff, r3}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0xce, 0x26, &(0x7f0000000040)="fe81f9e7fda3a21b0a4f0ecd752ec89537b8846c65b218efbc87ad4a6939538649374e61bd504ebbf56c7eea33719bd7a32a677a0dd7053c3a6ae42b433749be1cfc95f3e9ffd7b5b2f2e93e08c7861b0a41f3a1e90e7e2f5aa3c6d25b2ff254bc2b55d4dff57f5b0cd7228f29462f884927340361595f4a6851837d11e752f6fc2062282b178c4efba0531d0425cfaa0937e2c89ecfdac77059ad91721e40de232aa4117f6d61a095a5525934f56de94cc95a4c13a2ca5588064b8c20714017bf7579f060b5b7be6d0de38a6b4a", &(0x7f0000000140)=""/38, 0x2ee8, 0x0, 0xa7, 0x4c, &(0x7f0000000300)="3ae1163b5a1da6086172d59b2b8fb785bb5e1e4cba368ff173853535b7eb91ef25733bf2931ebd32a9877f18eca2df9afba854e1e47466db18c2da768e958a28de9f0bd21d612252d8b89dad93938dbc98f40ee8a426a4febda0594a88934e290329235f011d6d66598eef35561c25812eb6439871ad55c20ff953f7673dbba7f9d80deea9c3df367bb81d9f9195a315003d007812387b189e81a45c5a1843b62ecadc07499d1d", &(0x7f00000003c0)="376ac10c912067026b94584001c4d831f28e24f1095d0880918706ab1fa1adb54fe3710107b7db725e8328bcc6edd3600964f7b44522e054439cdb0956ea81fd80c9b46ba762c67879bdd0ec", 0x2, 0x0, 0xf}, 0x50) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b904020000000080200d00091500100014000000000009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 4.338302433s ago: executing program 5 (id=4333): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8902, 0x7ffffffff000) 4.191139691s ago: executing program 5 (id=4334): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x5, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.189924621s ago: executing program 2 (id=4344): r0 = getpid() perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8377, 0x0, @perf_config_ext={0x4, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\n', 0x1}], 0x1}, 0x5744935563dc1402) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000000, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x4000003, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x2}, r0, 0xe, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000801801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8902, 0x7ffffffff000) 1.267087403s ago: executing program 1 (id=4335): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6b, &(0x7f0000000000)=r3, 0x10) 1.006857437s ago: executing program 0 (id=4336): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0xd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000005c319500000000000018b4c6370cb06ba47df02c876b2e58e09b8c79c61b14e9d47e6c2c22af9c4883650f934762d490f20505016a1ba8926e757a000ce991c8fea257fdbb2675de2e58d85d02feaadc82c8a4d215e3ec21dd50259c4961213ab61398b89daa64ad790bca6c0dd74a80c6a0edf659f79e137a98be66b3f53b4ee55fe8ddce6b02", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611080000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x8c, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401040016000a00104006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f4d360000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x3c, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000500)={&(0x7f0000000000)=@can, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="5caa10f03d7a0efe8ee836277fd2c416eb2264670e9dfe94e850fcb63c714d5d23af18be765b3dd0856e35aae03c13b8459375deeeddb282a05826df4befa475e59548e967feedcd3cbbb4b52363cae1f8e50d7e036a0fb5d1d9e5a753a17ac4666632967bfb9d01c7a6c26445a70525855bc1bc8ec110429ee5ed5e7d759d0fdb9a24ef18e2f294985c3b8b4b555e7c10c2e4b1a2b2b483fb58", 0x9a}, {&(0x7f0000000280)="dce296c9779a7ec05c15c42178f18d9f5a096985c70fe3e837a944e80dd215bc55c27158172d3db798209fde81bade74b56cafd134f094235885f1c36a245f4bee3aafa47c84f9fca8113b59c9d101f707f3434eed242592cd8f9b3fd030719da4c84e9a4bb07b452798a79e7b", 0x6d}, {&(0x7f0000000340)="06e429f936a6dd42a74cb15f562c587ddaa693ce0f52ff83c4074e9d345f4e9102fb50a283ad49859095dd964f0d31e96f54de61f1e64aec4f6b332dee1d00d36ae349ead0fe0545d5ea11", 0x4b}], 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="480000000000000017010000030000009098db14dd204cb32dc2fd5fdfa2a722aa4a9b90319f084b1d1842ea3f26eb7169da7109a346209ce4d15a785d00"/77], 0x48}, 0x24000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) 978.183629ms ago: executing program 2 (id=4337): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80081, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x201000000000000, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x21b, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f0"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4084) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x25, 0x3, 0x6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d0018000000000000002806000028000000020000"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0x9, 0x0, 0x7fffffff, 0x3c7a62892778cf2a, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x10}, 0x2, 0x0, 0x7, 0x6, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x1) 977.647559ms ago: executing program 5 (id=4338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 883.628404ms ago: executing program 3 (id=4339): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 864.386235ms ago: executing program 1 (id=4340): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x101, 0x80000001}, 0x11c002, 0x100000000ac60, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB="0000000000fe9c80c3bd29d8d1576873000000000500"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x26, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1a00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x40}, 0x106050, 0x4, 0xffffffff, 0x4, 0x1000000000000000, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000100"], 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 715.002632ms ago: executing program 5 (id=4341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_config_ext={0x77fd0ba, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6", &(0x7f0000000900)=""/170, 0x0, &(0x7f0000000a40)="e748551b2d4f9b98b8077e0c7a822411abead558392df0781d1a0b6337211ab609fc68b1890406abd5588fb242ded48f22e7e91a1e23777a2dd34ff9a72c009f569bfae2d7a0d85e392318e3decd7786bb0342ddfed96fec2fbc5bde8b67ddea252fad2d0ed8c6fec4317315962e53", 0x80000001}, 0x38) mkdirat$cgroup(r1, &(0x7f0000000b80)='syz0\x00', 0x1ff) r2 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00), 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0xfffffffffffffddf) perf_event_open(&(0x7f00000012c0)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4004, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r3}) close(r4) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 685.560584ms ago: executing program 0 (id=4342): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95e24fc60040068000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 668.412985ms ago: executing program 2 (id=4343): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00s/\x8br\bc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x90ih\xecd\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xf78}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 619.970347ms ago: executing program 3 (id=4345): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x4, 0x0, 0x8000, 0x10, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5ae) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r5, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb2dcc009f476718ec977a2d4ba13e26370397a24064a8f4", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="5c00000015006b05a6bff1366a75ca44bb3c4f54a24da945c84e210300f32c6e0a7875f80e000100d495011f3a3752809a11d5400002007a17", 0x39}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) r7 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 619.134347ms ago: executing program 1 (id=4346): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x2001, 0x0, 0xfffffffc, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb646849cd6542b10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x5}, 0x90) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r4 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000200), 0xd}, 0x280, 0x0, 0xc2ba, 0x4}, r4, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800004c9dddca21ec1b26005000000002000000090000800000000e03000000010000000a0000000000000203000000000000000500000d0000000006000000010000000000000000000000000000000000000009000000000000000100000005"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'freezer'}, {0x0, 'net_prio'}, {0x2d, 'net'}]}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000080008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000690005"], 0xfe33) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0xa, 0x2, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x2) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711851000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x0, 0xaa, 0xd1, &(0x7f00000007c0)="93698b976da4135bf960880a8f23ed2ad9f5608e11fc4138dc4a17c2cf023326a0eec41610149d85dcb786a36567e0dd678b68b7795521729a9a3bd24396b95159f82cf9425515d72e78666a94313ef0faff395bb67551abc6dc713113e1704dc207516000d6ada2fc6c76fe7a2672c2e0b75c361075088655adb5d9188fdc37d3b343a85df87eaba1cdabf30636b49c68dd85f0856f081ec89337538a6f9c1f9f422e0c5261cb5c04e5", &(0x7f0000000980)=""/209, 0x40, 0x0, 0x88, 0x1d, &(0x7f0000000a80)="57886572bf935c47bfdeb34e42434f4f570a800b1ef25f46eb8bbf5466dc59c4ae0f5a910892b734e6274b80dadad124822c0152bb8eeb90f3aaaf244e841bff1774b3b7ec3ac701f6fa464cd94a2f7c0a9c915cc3100b9074804e7c8a29319bf7fd907dfedd54394899fc276f03fd0c709ef4ee7453d483c53aea813984e4700988660c2d2e3048", &(0x7f0000000b40)="f682ff55b2d911577dbfb6d465f2ef7d415d5089bb73f88bebf904e89f", 0x5, 0x0, 0x7ff}, 0x50) 378.86273ms ago: executing program 0 (id=4347): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x7, 0xc272}, 0x0, 0xac5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x50) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000002000000420000000300000041000000", @ANYRES32, @ANYBLOB="0008c9891e4dcb436300000000000000000000fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000040)="9c89cfadcf0ae121074ff65cf113de97323f19001a7e799ed7480a5c11665e3d7d39f728db66f90e9f62f6e01c8c335b23f3ee17a9d03c64b67d5259efe62db2888a05e7e94fa8587c52f10298aa7849060b4e709516b2d14a7c806fbb4869e56181b63381907c17095ee90ecef5b0576d5bc828383fc90b7893146ac221afb3c662f621d692b7ba06153499c4ba3b1226612879e6"}, 0x20) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/69, 0x45}], 0x1}, 0x20) sendmsg$inet(r3, 0x0, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x82020400, &(0x7f0000000140)="23932569cf5139177e32bb46fff2f0c70c98ba37434234370893a9dbc5c8ab9d12314f137a44295f8a3aabe8399782330f90996013bbdb6549b4dc6d971041849d54edd7c75d65fa99050681a6ec5b7fb62bb3c62c61b6b4011ad102975cae9383920fb7f932645c69bd42c982c8e40b8988f022a4d0abc67f3b8c1aa4f10f53e65508548307f5bb5139b8365ebd544d1f588b7985f65a43ce461d4e8bda02a17d317e95cc3b511b051c2b14b6bc56039aef39470f5671698281fa772e28288ea27198f2078677b8a83bd2cafc6c684560e43fd593c24c3a7db40e23d46a1a6a975cf0e4917bb1996cef3036f891", 0xee, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0)="146143c6d78246fbc01aa7504116f573f3c1cf7b5bf00197f0a938b35b083ad66dae9cb924a3039637ee283db999a0fc1528a5a732c5a8e85173dce0ea91871259b8377c3baf383f534a163bc8cf767391b37df14bc4dabe") sendmsg$inet(r3, 0x0, 0x4845) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000800)={&(0x7f0000000440)=@ll={0x11, 0xf3, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)="9db4b485eb45df79775d7f47f401238ee9c85a0f8456e91413cd0765790b5bfc26247b0a12ad6ae2312178611070efe3205942828b3a8feddfefd2e93062deb2b6db34c0dd88f478bb0732c4aa6b1d76e16a8c762e5a009849e47ae979640141c46b8228fb2aff711c7f6462d2d9dc8a549178408a6298abfc57f5aaf5500bd8070bf6dab806a80c5fa83235d6d5f8eeaf7c294b59eb5e684d665e0b4a7b3ae97faefe860ca09b25a4ad7381311d594c1d064f1c962ee1e7ad3a6e5fb69799a186991fe1690b9d301e7c8fbfccb159208e3f933043192332b406c00c4af44acec301ea4106e180d3166a3e7bbbfda8ad44b02945e7888491", 0xf8}, {&(0x7f00000006c0)="04852ec0d8090cc4", 0x8}], 0x2, &(0x7f0000000740)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x446a}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xde}}], 0xa8}, 0x4001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 360.106271ms ago: executing program 2 (id=4348): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 343.763312ms ago: executing program 1 (id=4349): r0 = getpid() perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8377, 0x0, @perf_config_ext={0x4, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\n', 0x1}], 0x1}, 0x5744935563dc1402) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000000, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x4000003, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x2}, r0, 0xe, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000801801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8902, 0x7ffffffff000) 249.298687ms ago: executing program 3 (id=4350): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x5, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 247.805517ms ago: executing program 5 (id=4360): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x2001, 0x0, 0xfffffffc, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb646849cd6542b10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x5}, 0x90) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r4 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000200), 0xd}, 0x280, 0x0, 0xc2ba, 0x4}, r4, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800004c9dddca21ec1b26005000000002000000090000800000000e03000000010000000a0000000000000203000000000000000500000d0000000006000000010000000000000000000000000000000000000009000000000000000100000005"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'freezer'}, {0x0, 'net_prio'}, {0x2d, 'net'}]}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000080008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000690005"], 0xfe33) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0xa, 0x2, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x2) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711851000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x0, 0xaa, 0xd1, &(0x7f00000007c0)="93698b976da4135bf960880a8f23ed2ad9f5608e11fc4138dc4a17c2cf023326a0eec41610149d85dcb786a36567e0dd678b68b7795521729a9a3bd24396b95159f82cf9425515d72e78666a94313ef0faff395bb67551abc6dc713113e1704dc207516000d6ada2fc6c76fe7a2672c2e0b75c361075088655adb5d9188fdc37d3b343a85df87eaba1cdabf30636b49c68dd85f0856f081ec89337538a6f9c1f9f422e0c5261cb5c04e5", &(0x7f0000000980)=""/209, 0x40, 0x0, 0x88, 0x1d, &(0x7f0000000a80)="57886572bf935c47bfdeb34e42434f4f570a800b1ef25f46eb8bbf5466dc59c4ae0f5a910892b734e6274b80dadad124822c0152bb8eeb90f3aaaf244e841bff1774b3b7ec3ac701f6fa464cd94a2f7c0a9c915cc3100b9074804e7c8a29319bf7fd907dfedd54394899fc276f03fd0c709ef4ee7453d483c53aea813984e4700988660c2d2e3048", &(0x7f0000000b40)="f682ff55b2d911577dbfb6d465f2ef7d415d5089bb73f88bebf904e89f", 0x5, 0x0, 0x7ff}, 0x50) 350.08µs ago: executing program 0 (id=4351): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6b, &(0x7f0000000000)=r3, 0x10) 0s ago: executing program 1 (id=4352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): socket, switching to perfect channel medium [ 753.499920][T13192] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 753.859374][T13199] netlink: 'syz.0.2855': attribute type 11 has an invalid length. [ 753.879754][T13199] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2855'. [ 753.971634][T13200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.821864][T13292] bond0: (slave dummy0): Error: Slave device does not support XDP [ 770.675633][T13365] bond0: (slave dummy0): Error: Slave device does not support XDP [ 774.442189][T13412] netlink: 'syz.1.2926': attribute type 15 has an invalid length. [ 774.492041][T13412] netlink: 'syz.1.2926': attribute type 5 has an invalid length. [ 774.530664][T13412] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2926'. [ 774.888731][T13417] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2928'. [ 774.924194][T13417] device batadv_slave_1 entered promiscuous mode [ 775.187584][T13425] device syzkaller0 entered promiscuous mode [ 775.306840][T13431] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 775.331482][T13431] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 775.344088][T13431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 775.357155][T13431] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 775.365508][T13431] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 775.373242][T13431] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 775.812488][ T7663] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.366042][ T7663] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.446983][T13431] Bluetooth: hci2: command 0x0409 tx timeout [ 777.551611][ T7663] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.618123][T13459] netlink: 'syz.2.2941': attribute type 33 has an invalid length. [ 777.626146][T13459] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2941'. [ 777.757910][ T7663] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.314622][T13429] chnl_net:caif_netlink_parms(): no params data found [ 779.526791][T13431] Bluetooth: hci2: command 0x041b tx timeout [ 781.512726][T13500] bond0: (slave dummy0): Error: Slave device does not support XDP [ 781.607153][T13431] Bluetooth: hci2: command 0x040f tx timeout [ 781.929166][T13527] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2953'. [ 781.941020][T13533] FAULT_INJECTION: forcing a failure. [ 781.941020][T13533] name failslab, interval 1, probability 0, space 0, times 0 [ 781.957981][T13527] bridge_slave_1: default FDB implementation only supports local addresses [ 781.962718][T13533] CPU: 1 PID: 13533 Comm: syz.4.2955 Not tainted syzkaller #0 [ 781.974125][T13533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 781.984219][T13533] Call Trace: [ 781.987549][T13533] [ 781.990528][T13533] dump_stack_lvl+0x188/0x24e [ 781.995313][T13533] ? show_regs_print_info+0x12/0x12 [ 781.997743][T13429] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.000574][T13533] ? load_image+0x400/0x400 [ 782.000604][T13533] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 782.018186][T13533] should_fail_ex+0x399/0x4d0 [ 782.022919][T13533] should_failslab+0x5/0x20 [ 782.023218][T13429] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.027447][T13533] slab_pre_alloc_hook+0x59/0x310 [ 782.027481][T13533] kmem_cache_alloc+0x56/0x2f0 [ 782.027504][T13533] ? __build_skb+0x2a/0x3c0 [ 782.027541][T13533] __build_skb+0x2a/0x3c0 [ 782.050071][T13429] device bridge_slave_0 entered promiscuous mode [ 782.053280][T13533] build_skb+0x1e/0x230 [ 782.053320][T13533] bpf_prog_test_run_skb+0x37e/0x12a0 [ 782.069301][T13533] ? __fget_files+0x28/0x4b0 [ 782.073948][T13533] ? __fget_files+0x43d/0x4b0 [ 782.078690][T13533] ? cpu_online+0xa0/0xa0 [ 782.083155][T13533] bpf_prog_test_run+0x31e/0x390 [ 782.088150][T13533] __sys_bpf+0x62b/0x780 [ 782.092452][T13533] ? bpf_link_show_fdinfo+0x380/0x380 [ 782.098069][T13533] ? lock_chain_count+0x20/0x20 [ 782.102989][T13533] __x64_sys_bpf+0x78/0x90 [ 782.107475][T13533] do_syscall_64+0x4c/0xa0 [ 782.111953][T13533] ? clear_bhb_loop+0x60/0xb0 [ 782.116681][T13533] ? clear_bhb_loop+0x60/0xb0 [ 782.121418][T13533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 782.127376][T13533] RIP: 0033:0x7fa25599c819 [ 782.131826][T13533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.134179][T13429] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.151456][T13533] RSP: 002b:00007fa2568b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 782.151487][T13533] RAX: ffffffffffffffda RBX: 00007fa255c15fa0 RCX: 00007fa25599c819 [ 782.151503][T13533] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 782.151518][T13533] RBP: 00007fa2568b1090 R08: 0000000000000000 R09: 0000000000000000 [ 782.151532][T13533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.151546][T13533] R13: 00007fa255c16038 R14: 00007fa255c15fa0 R15: 00007ffe21749ef8 [ 782.207125][T13533] [ 782.229300][T13429] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.257985][T13429] device bridge_slave_1 entered promiscuous mode [ 782.444347][T13545] netlink: 'syz.4.2960': attribute type 3 has an invalid length. [ 782.461625][T13429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.487064][T13429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.499701][T13545] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2960'. [ 782.903303][ T7663] device gretap0 left promiscuous mode [ 782.915377][ T7663] Ÿë: port 1(gretap0) entered disabled state [ 783.424727][T13429] team0: Port device team_slave_0 added [ 783.443999][T13429] team0: Port device team_slave_1 added [ 783.551639][T13563] device syzkaller0 entered promiscuous mode [ 783.686779][T13431] Bluetooth: hci2: command 0x0419 tx timeout [ 787.593915][T13429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.601121][T13429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.627233][T13429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.669579][T13595] netlink: 'syz.1.2968': attribute type 2 has an invalid length. [ 787.680495][T13595] netlink: 'syz.1.2968': attribute type 8 has an invalid length. [ 787.688795][T13595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2968'. [ 787.707230][T13429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.717655][T13429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.788362][T13429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.158253][T13429] device hsr_slave_0 entered promiscuous mode [ 788.188188][T13429] device hsr_slave_1 entered promiscuous mode [ 788.198676][T13429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.206306][T13429] Cannot create hsr debugfs directory [ 792.271416][ T7663] device veth0_to_team left promiscuous mode [ 792.341081][ T7663] Ÿë: port 2(veth0_to_team) entered disabled state [ 792.412064][ T7663] device hsr_slave_0 left promiscuous mode [ 792.463305][ T7663] device hsr_slave_1 left promiscuous mode [ 792.490765][ T7663] device bridge_slave_1 left promiscuous mode [ 792.498434][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.523053][ T7663] device bridge_slave_0 left promiscuous mode [ 792.543236][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.613156][ T7663] device veth1_macvtap left promiscuous mode [ 792.621633][ T7663] device veth0_macvtap left promiscuous mode [ 793.943704][ T7663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.983698][ T7663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.205653][ T7663] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 794.237246][ T7663] bond0 (unregistering): Released all slaves [ 797.576463][T13724] FAULT_INJECTION: forcing a failure. [ 797.576463][T13724] name failslab, interval 1, probability 0, space 0, times 0 [ 797.589545][T13724] CPU: 1 PID: 13724 Comm: syz.0.2999 Not tainted syzkaller #0 [ 797.597044][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 797.607128][T13724] Call Trace: [ 797.610452][T13724] [ 797.613415][T13724] dump_stack_lvl+0x188/0x24e [ 797.618153][T13724] ? lock_chain_count+0x20/0x20 [ 797.623042][T13724] ? show_regs_print_info+0x12/0x12 [ 797.628273][T13724] ? load_image+0x400/0x400 [ 797.632809][T13724] ? lockdep_hardirqs_on+0x94/0x140 [ 797.638062][T13724] should_fail_ex+0x399/0x4d0 [ 797.642778][T13724] should_failslab+0x5/0x20 [ 797.647309][T13724] slab_pre_alloc_hook+0x59/0x310 [ 797.652362][T13724] ? switchdev_deferred_enqueue+0x2d/0x240 [ 797.658197][T13724] __kmem_cache_alloc_node+0x4f/0x260 [ 797.663614][T13724] ? switchdev_deferred_enqueue+0x2d/0x240 [ 797.669457][T13724] ? switchdev_deferred_enqueue+0x240/0x240 [ 797.675387][T13724] __kmalloc+0xa0/0x240 [ 797.679604][T13724] switchdev_deferred_enqueue+0x2d/0x240 [ 797.685319][T13724] switchdev_port_attr_set+0xf5/0x2d0 [ 797.690728][T13724] ? switchdev_deferred_process+0x290/0x290 [ 797.696663][T13724] ? mark_lock+0x94/0x320 [ 797.701049][T13724] br_set_state+0x36b/0x700 [ 797.705600][T13724] ? br_ioctl_stub+0xcf0/0xcf0 [ 797.710422][T13724] ? do_raw_spin_lock+0x128/0x2f0 [ 797.715494][T13724] ? __rwlock_init+0x140/0x140 [ 797.720296][T13724] ? br_become_designated_port+0x1c/0x250 [ 797.726049][T13724] br_stp_disable_port+0x72/0x1c0 [ 797.731110][T13724] br_stp_disable_bridge+0x7d/0x150 [ 797.736362][T13724] br_dev_stop+0x29/0x170 [ 797.740730][T13724] ? br_dev_open+0x140/0x140 [ 797.745363][T13724] __dev_close_many+0x1d1/0x2b0 [ 797.750253][T13724] ? dev_close_many+0x410/0x410 [ 797.755155][T13724] __dev_change_flags+0x2d8/0x6a0 [ 797.760232][T13724] ? dev_get_flags+0x1c0/0x1c0 [ 797.765031][T13724] ? perf_trace_preemptirq_template+0xa8/0x320 [ 797.771230][T13724] ? rcu_is_watching+0x11/0xa0 [ 797.776033][T13724] ? trace_contention_end+0x5f/0x170 [ 797.781366][T13724] dev_change_flags+0x84/0x1a0 [ 797.786177][T13724] dev_ifsioc+0x130/0xd40 [ 797.790536][T13724] ? dev_ioctl+0xe80/0xe80 [ 797.794976][T13724] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 797.801187][T13724] ? dev_load+0x15e/0x1e0 [ 797.805550][T13724] dev_ioctl+0x55e/0xe80 [ 797.809826][T13724] sock_do_ioctl+0x245/0x320 [ 797.814454][T13724] ? sock_show_fdinfo+0xb0/0xb0 [ 797.819352][T13724] sock_ioctl+0x4d2/0x710 [ 797.823729][T13724] ? sock_poll+0x410/0x410 [ 797.828238][T13724] ? bpf_lsm_file_ioctl+0x5/0x10 [ 797.833227][T13724] ? security_file_ioctl+0x7c/0xa0 [ 797.838390][T13724] ? sock_poll+0x410/0x410 [ 797.842837][T13724] __se_sys_ioctl+0xfa/0x170 [ 797.847474][T13724] do_syscall_64+0x4c/0xa0 [ 797.851923][T13724] ? clear_bhb_loop+0x60/0xb0 [ 797.856648][T13724] ? clear_bhb_loop+0x60/0xb0 [ 797.861366][T13724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.867288][T13724] RIP: 0033:0x7f1ad199c819 [ 797.871742][T13724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.891389][T13724] RSP: 002b:00007f1ad286f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.899826][T13724] RAX: ffffffffffffffda RBX: 00007f1ad1c16090 RCX: 00007f1ad199c819 [ 797.907844][T13724] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000007 [ 797.915853][T13724] RBP: 00007f1ad286f090 R08: 0000000000000000 R09: 0000000000000000 [ 797.923847][T13724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.931832][T13724] R13: 00007f1ad1c16128 R14: 00007f1ad1c16090 R15: 00007ffc1a9d5768 [ 797.939838][T13724] [ 797.943003][T13724] bridge0: error setting offload STP state on port 2(bridge_slave_1) [ 797.952108][T13724] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.182968][T13429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 798.233069][T13429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 798.329722][T13429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 798.343521][T13429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 798.357848][T13745] netlink: 'syz.4.3001': attribute type 39 has an invalid length. [ 798.451737][T13744] netlink: 'syz.4.3001': attribute type 39 has an invalid length. [ 798.760638][T13429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.848446][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 798.864506][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 798.905282][T13429] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.943037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 798.979016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 799.049969][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.057249][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.089162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 799.124748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 799.161255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 799.194504][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.201746][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.314574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 799.356514][T13779] netlink: 'syz.4.3010': attribute type 3 has an invalid length. [ 799.537001][T13779] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3010'. [ 799.554746][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 799.614307][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 799.716567][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 799.846406][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 799.922262][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 799.993014][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 800.042417][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 800.070516][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 800.096380][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 800.133376][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 800.179717][T13429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 801.555022][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 801.564329][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 801.604717][T13429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.723482][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 801.743437][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 801.849139][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 801.883096][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 801.911656][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 801.942797][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 801.985992][T13429] device veth0_vlan entered promiscuous mode [ 802.062297][T13429] device veth1_vlan entered promiscuous mode [ 802.193379][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 802.208787][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 802.221220][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 802.274226][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 802.318021][T13429] device veth0_macvtap entered promiscuous mode [ 802.348488][T13429] device veth1_macvtap entered promiscuous mode [ 802.405575][T13429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.437846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 802.459270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 802.483497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 802.530890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 802.548807][T13429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.560425][T13805] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3013'. [ 802.580672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 802.607923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 802.650339][T13429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.674015][T13429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.713025][T13429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.748758][T13429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.066558][T13824] netlink: 'syz.2.3020': attribute type 3 has an invalid length. [ 803.075314][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.096583][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.105984][T13824] netlink: 'syz.2.3020': attribute type 1 has an invalid length. [ 803.118404][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 803.142922][T13824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3020'. [ 803.320241][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.338612][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.402642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 803.783178][T13843] netlink: 'syz.0.3023': attribute type 3 has an invalid length. [ 803.830887][T13843] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3023'. [ 807.751037][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 807.760533][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 807.769426][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 807.781264][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 807.789001][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 807.796365][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 808.455838][T13909] Ÿë: port 1(gretap0) entered blocking state [ 808.477073][T13909] Ÿë: port 1(gretap0) entered disabled state [ 808.504574][T13909] device gretap0 entered promiscuous mode [ 808.571655][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.578300][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.664708][T13924] netlink: 'syz.1.3037': attribute type 3 has an invalid length. [ 808.701270][T13924] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3037'. [ 810.167440][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 811.853897][ T5141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.891332][T13897] chnl_net:caif_netlink_parms(): no params data found [ 811.943073][ T5141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.068680][ T5141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.256902][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 812.263658][ T5141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.386017][T13897] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.449370][T13897] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.463590][T13897] device bridge_slave_0 entered promiscuous mode [ 812.483623][T13897] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.501858][T13897] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.514373][T13897] device bridge_slave_1 entered promiscuous mode [ 812.561183][T13897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.577922][T13897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.622842][T13897] team0: Port device team_slave_0 added [ 812.636116][T13897] team0: Port device team_slave_1 added [ 812.678368][T13897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.693511][T13897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.726777][T13897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.744715][T13897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.752141][T13897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.783476][T13897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.162198][T13897] device hsr_slave_0 entered promiscuous mode [ 814.173996][T13897] device hsr_slave_1 entered promiscuous mode [ 814.180955][T13897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 814.189995][T13897] Cannot create hsr debugfs directory [ 814.327036][T13431] Bluetooth: hci5: command 0x040f tx timeout [ 815.015549][T13993] netlink: 'syz.0.3049': attribute type 3 has an invalid length. [ 815.048226][T13993] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3049'. [ 816.406783][T13431] Bluetooth: hci5: command 0x0419 tx timeout [ 820.225265][T13897] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 820.304941][T13897] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 820.504304][T14080] bond0: (slave dummy0): Error: Slave device does not support XDP [ 823.216078][ T5141] device gretap0 left promiscuous mode [ 823.227625][ T5141] Ÿë: port 1(gretap0) entered disabled state [ 823.240470][T13897] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 823.292517][T13897] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 826.551111][T14096] netlink: 'syz.1.3066': attribute type 1 has an invalid length. [ 826.695802][T13897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.800749][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 826.830366][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 829.279413][T13897] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.357215][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 829.370671][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 829.420343][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.427666][ T6709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.534561][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 829.612111][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 829.651437][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 829.673377][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.680590][ T4531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.726235][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 829.745865][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 830.600825][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 830.631799][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 830.686450][T14184] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3079'. [ 830.730097][T14201] FAULT_INJECTION: forcing a failure. [ 830.730097][T14201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.758123][T14201] CPU: 0 PID: 14201 Comm: syz.0.3080 Not tainted syzkaller #0 [ 830.765642][T14201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 830.775731][T14201] Call Trace: [ 830.779048][T14201] [ 830.782026][T14201] dump_stack_lvl+0x188/0x24e [ 830.786767][T14201] ? show_regs_print_info+0x12/0x12 [ 830.792018][T14201] ? load_image+0x400/0x400 [ 830.796584][T14201] ? __lock_acquire+0x7d10/0x7d10 [ 830.801658][T14201] should_fail_ex+0x399/0x4d0 [ 830.806371][T14201] _copy_from_user+0x2c/0x170 [ 830.811097][T14201] ___sys_sendmsg+0x1c3/0x360 [ 830.815827][T14201] ? __sys_sendmsg+0x290/0x290 [ 830.820654][T14201] ? __lock_acquire+0x7d10/0x7d10 [ 830.825760][T14201] __se_sys_sendmsg+0x1bb/0x2a0 [ 830.830670][T14201] ? __x64_sys_sendmsg+0x80/0x80 [ 830.835674][T14201] ? lockdep_hardirqs_on+0x94/0x140 [ 830.840916][T14201] do_syscall_64+0x4c/0xa0 [ 830.845379][T14201] ? clear_bhb_loop+0x60/0xb0 [ 830.850107][T14201] ? clear_bhb_loop+0x60/0xb0 [ 830.854921][T14201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 830.861036][T14201] RIP: 0033:0x7f1ad199c819 [ 830.865584][T14201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.885229][T14201] RSP: 002b:00007f1ad2890028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.893696][T14201] RAX: ffffffffffffffda RBX: 00007f1ad1c15fa0 RCX: 00007f1ad199c819 [ 830.901732][T14201] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 830.909860][T14201] RBP: 00007f1ad2890090 R08: 0000000000000000 R09: 0000000000000000 [ 830.917872][T14201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.925882][T14201] R13: 00007f1ad1c16038 R14: 00007f1ad1c15fa0 R15: 00007ffc1a9d5768 [ 830.933910][T14201] [ 830.969837][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 830.989732][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 831.014045][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 831.052515][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 831.071345][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 831.092663][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 831.116944][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 831.135986][T13897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 831.662442][T14226] netlink: 'syz.1.3083': attribute type 3 has an invalid length. [ 831.690584][T14226] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3083'. [ 834.482713][ T5141] device veth0_to_team left promiscuous mode [ 834.508018][ T5141] Ÿë: port 2(veth0_to_team) entered disabled state [ 834.563315][ T5141] device hsr_slave_0 left promiscuous mode [ 834.609145][ T5141] device hsr_slave_1 left promiscuous mode [ 834.631189][ T5141] device bridge_slave_1 left promiscuous mode [ 834.660325][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.673681][ T5141] device bridge_slave_0 left promiscuous mode [ 834.692738][ T5141] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.702837][ T5141] device veth1_macvtap left promiscuous mode [ 836.709949][ T5141] device veth0_macvtap left promiscuous mode [ 837.389290][ T5141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.433222][ T5141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.673121][ T5141] bond0 (unregistering): Released all slaves [ 837.777679][T13897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.785107][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 837.807652][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 837.863325][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 837.898922][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 837.932925][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 837.967824][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 837.983575][T13897] device veth0_vlan entered promiscuous mode [ 837.996353][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 838.057836][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 838.085637][T13897] device veth1_vlan entered promiscuous mode [ 838.130892][T14259] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3091'. [ 838.168426][T14251] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3091'. [ 838.215726][T14259] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3091'. [ 838.232678][T14259] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 838.253343][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 838.266101][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 838.309824][T13897] device veth0_macvtap entered promiscuous mode [ 838.346868][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 838.365369][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 838.401131][T13897] device veth1_macvtap entered promiscuous mode [ 838.438084][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 838.451659][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 838.486150][T13897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.510165][T13897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.528524][T13897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.536371][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 838.558529][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 838.593842][T13897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.614502][T13897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.636287][T13897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.645056][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 838.672014][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 838.715686][T13897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.735371][T13897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.759445][T13897] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.783367][T13897] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.818896][T14271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.826517][T14271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.863512][T14272] netlink: 'syz.3.3096': attribute type 3 has an invalid length. [ 838.882502][T14272] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3096'. [ 838.972051][T14271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.039752][T14271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.758273][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.775269][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.797469][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 841.870332][ T5417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.878913][ T5417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.904485][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 842.192692][T14298] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3104'. [ 845.272365][T14310] netlink: 'syz.1.3107': attribute type 3 has an invalid length. [ 845.311409][T14310] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3107'. [ 846.073482][T13431] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 846.083598][T13431] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 846.091714][T13431] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 846.103170][T13431] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 846.112012][T13431] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 846.119451][T13431] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 846.550289][T14332] chnl_net:caif_netlink_parms(): no params data found [ 846.712151][T14332] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.733037][T14332] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.753515][T14332] device bridge_slave_0 entered promiscuous mode [ 846.774665][T14332] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.794997][T14332] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.818209][T14332] device bridge_slave_1 entered promiscuous mode [ 846.875325][T14332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.895337][T14332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.966129][T14332] team0: Port device team_slave_0 added [ 847.009403][T14332] team0: Port device team_slave_1 added [ 848.167173][T13431] Bluetooth: hci1: command 0x0409 tx timeout [ 849.142798][T14346] device wlan1 entered promiscuous mode [ 849.251120][ T1223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.315093][T14332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.328557][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.355493][T14332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.405906][ T1223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.552595][T14332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.580074][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.631148][T14332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.698363][ T1223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.788148][T14332] device hsr_slave_0 entered promiscuous mode [ 849.802129][T14332] device hsr_slave_1 entered promiscuous mode [ 849.843174][ T1223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.247046][T13431] Bluetooth: hci1: command 0x041b tx timeout [ 852.326795][T13431] Bluetooth: hci1: command 0x040f tx timeout [ 852.381533][T14421] @: port 1(gretap0) entered blocking state [ 852.396923][T14421] @: port 1(gretap0) entered disabled state [ 852.429416][T14421] device gretap0 entered promiscuous mode [ 852.450731][T14422] Ÿë: port 2(veth0_to_team) entered blocking state [ 852.457596][T14422] Ÿë: port 2(veth0_to_team) entered disabled state [ 852.489709][T14422] device veth0_to_team entered promiscuous mode [ 852.668153][T14332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 852.724497][ T1223] device gretap0 left promiscuous mode [ 852.741716][ T1223] @: port 1(gretap0) entered disabled state [ 852.772032][T14332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 852.793293][T14332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 852.883082][T14332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 854.406893][T13431] Bluetooth: hci1: command 0x0419 tx timeout [ 856.338658][T14468] netlink: 'syz.4.3147': attribute type 22 has an invalid length. [ 856.355491][T14332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.599735][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 856.624755][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 856.639278][T14332] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.686219][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 856.716552][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 856.735094][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.742262][ T7663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.759505][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 856.945905][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 856.964137][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 856.997945][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.005079][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.013387][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 857.022458][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 857.050255][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 857.066346][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 857.092034][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 857.117164][ T1223] device veth0_to_team left promiscuous mode [ 857.139392][ T1223] Ÿë: port 1(veth0_to_team) entered disabled state [ 857.157399][ T1223] device hsr_slave_0 left promiscuous mode [ 857.163957][ T1223] device hsr_slave_1 left promiscuous mode [ 857.171132][ T1223] bridge0: port 3(dummy0) entered disabled state [ 857.179602][ T1223] device bridge_slave_1 left promiscuous mode [ 857.185953][ T1223] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.195183][ T1223] device bridge_slave_0 left promiscuous mode [ 857.201627][ T1223] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.255879][ T1223] device veth1_macvtap left promiscuous mode [ 857.262682][ T1223] device veth0_macvtap left promiscuous mode [ 857.544751][T14503] netlink: 'syz.3.3158': attribute type 3 has an invalid length. [ 857.553774][T14503] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3158'. [ 857.965815][ T1223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.310198][ T1223] bond0 (unregistering): Released all slaves [ 858.401838][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 858.410589][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 858.440587][T14332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 858.495353][T14332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.525510][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 858.573901][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 858.600320][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 858.619488][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 858.656229][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 858.754066][T14514] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3161'. [ 858.817711][T14514] device batadv_slave_1 entered promiscuous mode [ 859.181751][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 859.192622][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 859.210486][T14332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.239874][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 859.254288][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 859.283741][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 859.294284][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 859.307568][T14332] device veth0_vlan entered promiscuous mode [ 859.317585][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 859.326391][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 859.340543][T14332] device veth1_vlan entered promiscuous mode [ 859.399041][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 859.417471][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 859.425735][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 859.436457][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 859.448206][T14332] device veth0_macvtap entered promiscuous mode [ 859.463940][T14332] device veth1_macvtap entered promiscuous mode [ 859.515191][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.535920][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.547750][T14332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.555608][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 859.567768][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 859.587034][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 859.605645][T14332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.627472][T14332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.640988][T14332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.649309][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 859.667292][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 859.681240][T14332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.690336][T14332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.699379][T14332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.710499][T14332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.836913][ T7665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.862635][ T7665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.885624][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 861.956846][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.970096][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.000673][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 862.262414][T14551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.279321][T14551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.293092][T14555] netlink: 'syz.2.3171': attribute type 3 has an invalid length. [ 862.306863][T14555] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3171'. [ 862.791990][T14551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.838451][T14551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.459030][T14567] @: port 1(gretap0) entered blocking state [ 863.527301][T14567] @: port 1(gretap0) entered disabled state [ 863.555749][T14567] device gretap0 entered promiscuous mode [ 863.582862][T14572] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3177'. [ 863.593914][T14572] device batadv_slave_1 entered promiscuous mode [ 864.080843][T13431] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 864.094064][T13431] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 864.102572][T13431] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 864.112449][T13431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 864.124838][T13431] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 864.133412][T13431] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 864.310845][ T7665] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.449679][ T7665] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.582156][ T7665] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.847287][T14611] netlink: 'syz.3.3193': attribute type 3 has an invalid length. [ 864.855199][T14608] Ÿë: port 1(veth0_to_team) entered blocking state [ 864.876642][T14611] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3193'. [ 864.876902][T14608] Ÿë: port 1(veth0_to_team) entered disabled state [ 864.894527][T14608] device veth0_to_team entered promiscuous mode [ 865.543358][ T7665] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.167308][T13431] Bluetooth: hci3: command 0x0409 tx timeout [ 867.505357][T14619] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3194'. [ 867.519273][T14619] device batadv_slave_1 entered promiscuous mode [ 867.698258][T14588] chnl_net:caif_netlink_parms(): no params data found [ 867.869955][ T7665] tipc: Left network mode [ 868.026496][T14588] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.078484][T14588] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.091962][T14588] device bridge_slave_0 entered promiscuous mode [ 868.106853][T14588] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.114242][T14588] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.132656][T14588] device bridge_slave_1 entered promiscuous mode [ 868.246661][T13431] Bluetooth: hci3: command 0x041b tx timeout [ 868.367883][T14588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.459887][T14588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.648651][T14588] team0: Port device team_slave_0 added [ 868.674867][T14588] team0: Port device team_slave_1 added [ 868.914284][T14588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.941004][T14588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.029890][T14666] netlink: 'syz.2.3208': attribute type 3 has an invalid length. [ 869.047852][T14666] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3208'. [ 869.084470][T14588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.010361][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.016747][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.326773][T13431] Bluetooth: hci3: command 0x040f tx timeout [ 871.887439][T14588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.894448][T14588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.921490][T14588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.158987][ T7665] device gretap0 left promiscuous mode [ 872.164573][ T7665] Ÿë: port 1(gretap0) entered disabled state [ 872.197438][T14588] device hsr_slave_0 entered promiscuous mode [ 872.224750][T14588] device hsr_slave_1 entered promiscuous mode [ 872.233985][T14588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.242152][T14588] Cannot create hsr debugfs directory [ 872.406627][T13431] Bluetooth: hci3: command 0x0419 tx timeout [ 873.004818][T14708] netlink: 'syz.1.3220': attribute type 3 has an invalid length. [ 873.022104][T14708] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3220'. [ 873.336749][ T7665] team0: Port device wlan1 removed [ 874.488775][ T7665] device veth0_to_team left promiscuous mode [ 874.526970][ T7665] Ÿë: port 2(veth0_to_team) entered disabled state [ 874.573904][ T7665] device hsr_slave_0 left promiscuous mode [ 874.617316][ T7665] device hsr_slave_1 left promiscuous mode [ 874.644519][ T7665] bridge0: port 3(team0) entered disabled state [ 874.665162][ T7665] device bridge_slave_1 left promiscuous mode [ 874.679686][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.690662][ T7665] device bridge_slave_0 left promiscuous mode [ 874.698455][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.724049][ T7665] device veth1_macvtap left promiscuous mode [ 874.731881][ T7665] device veth0_macvtap left promiscuous mode [ 877.666129][ T7665] device team_slave_1 left promiscuous mode [ 877.674200][ T7665] team0 (unregistering): Port device team_slave_1 removed [ 877.714598][ T7665] device team_slave_0 left promiscuous mode [ 877.722198][ T7665] team0 (unregistering): Port device team_slave_0 removed [ 878.131652][T14588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 878.198595][T14588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 878.228947][T14588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 878.268200][T14588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 878.278218][T14757] FAULT_INJECTION: forcing a failure. [ 878.278218][T14757] name failslab, interval 1, probability 0, space 0, times 0 [ 878.347820][T14757] CPU: 1 PID: 14757 Comm: syz.0.3236 Not tainted syzkaller #0 [ 878.355448][T14757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 878.365534][T14757] Call Trace: [ 878.368934][T14757] [ 878.371902][T14757] dump_stack_lvl+0x188/0x24e [ 878.376647][T14757] ? show_regs_print_info+0x12/0x12 [ 878.381902][T14757] ? load_image+0x400/0x400 [ 878.386459][T14757] ? __might_sleep+0xd0/0xd0 [ 878.391103][T14757] ? __lock_acquire+0x7d10/0x7d10 [ 878.396170][T14757] should_fail_ex+0x399/0x4d0 [ 878.400885][T14757] should_failslab+0x5/0x20 [ 878.405412][T14757] slab_pre_alloc_hook+0x59/0x310 [ 878.410464][T14757] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 878.416036][T14757] __kmem_cache_alloc_node+0x4f/0x260 [ 878.421427][T14757] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 878.426992][T14757] __kmalloc+0xa0/0x240 [ 878.431176][T14757] bpf_prog_test_run_skb+0x234/0x12a0 [ 878.436572][T14757] ? __fget_files+0x28/0x4b0 [ 878.441189][T14757] ? __fget_files+0x28/0x4b0 [ 878.445802][T14757] ? __fget_files+0x43d/0x4b0 [ 878.450521][T14757] ? cpu_online+0xa0/0xa0 [ 878.454865][T14757] bpf_prog_test_run+0x31e/0x390 [ 878.459833][T14757] __sys_bpf+0x62b/0x780 [ 878.464104][T14757] ? bpf_link_show_fdinfo+0x380/0x380 [ 878.469518][T14757] ? lock_chain_count+0x20/0x20 [ 878.474405][T14757] __x64_sys_bpf+0x78/0x90 [ 878.478853][T14757] do_syscall_64+0x4c/0xa0 [ 878.483298][T14757] ? clear_bhb_loop+0x60/0xb0 [ 878.487994][T14757] ? clear_bhb_loop+0x60/0xb0 [ 878.492695][T14757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.498613][T14757] RIP: 0033:0x7fe13a59c819 [ 878.503049][T14757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.522770][T14757] RSP: 002b:00007fe13b3e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 878.531211][T14757] RAX: ffffffffffffffda RBX: 00007fe13a815fa0 RCX: 00007fe13a59c819 [ 878.539204][T14757] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 878.547192][T14757] RBP: 00007fe13b3e5090 R08: 0000000000000000 R09: 0000000000000000 [ 878.555176][T14757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.563160][T14757] R13: 00007fe13a816038 R14: 00007fe13a815fa0 R15: 00007ffd66675338 [ 878.571155][T14757] [ 878.984613][T14588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.061372][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 879.095537][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 879.140442][T14588] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.171163][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 879.201670][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 879.240615][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.247832][ T6709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.325108][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 879.354853][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 879.378855][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 879.390879][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.398071][ T6709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.418618][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 879.474282][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 879.492051][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 879.522276][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 879.542848][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 879.570479][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 879.595280][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 879.616108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 879.655314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 879.710837][T14588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 879.731175][T14588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 879.741590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 879.752068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 880.244167][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 880.260921][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 880.298114][T14588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.457950][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 881.473690][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 881.522523][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 881.539724][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 881.580672][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 881.597693][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 881.611228][T14588] device veth0_vlan entered promiscuous mode [ 881.650056][T14588] device veth1_vlan entered promiscuous mode [ 881.700866][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 881.719319][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 881.739136][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 881.754532][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 881.766731][T14588] device veth0_macvtap entered promiscuous mode [ 881.778050][T14588] device veth1_macvtap entered promiscuous mode [ 881.819675][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.854287][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.879275][T14588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.887083][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 881.907047][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 881.915277][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 881.946340][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 881.980853][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.998929][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.024468][T14588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.051724][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 882.068527][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 882.086409][T14588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.095802][T14588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.110992][T14588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.119936][T14588] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.314916][ T7663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.339130][ T7663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.384838][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 882.416363][ T7663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.458630][ T7663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.576020][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 884.113917][ T6709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.131750][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 884.141250][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 884.149323][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 884.161921][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 884.187605][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 884.195518][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 884.319453][ T6709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.588605][ T6709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.246701][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 887.314313][T14888] chnl_net:caif_netlink_parms(): no params data found [ 887.355148][ T6709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.689520][T14888] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.706985][T14888] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.715111][T14888] device bridge_slave_0 entered promiscuous mode [ 887.925555][T14888] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.946855][T14888] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.970790][T14888] device bridge_slave_1 entered promiscuous mode [ 888.058590][ T6709] tipc: Left network mode [ 888.111638][T14888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.326752][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 888.350774][T14955] netlink: 'syz.0.3280': attribute type 3 has an invalid length. [ 888.363011][T14955] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3280'. [ 888.442979][T14888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.470392][T14944] device syzkaller0 entered promiscuous mode [ 888.625902][T14888] team0: Port device team_slave_0 added [ 888.649237][T14888] team0: Port device team_slave_1 added [ 888.744756][T14888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.765338][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.889377][T14888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.120169][T14888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.149584][T14888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.235712][T14888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.416709][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 890.502593][T14888] device hsr_slave_0 entered promiscuous mode [ 890.608774][T14888] device hsr_slave_1 entered promiscuous mode [ 891.844895][T14888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 891.867581][T14888] Cannot create hsr debugfs directory [ 892.479202][ T6709] device gretap0 left promiscuous mode [ 892.486664][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 892.502088][ T6709] Ÿë: port 1(gretap0) entered disabled state [ 892.586022][T15018] netlink: 'syz.4.3295': attribute type 5 has an invalid length. [ 892.663680][T15015] netlink: 'syz.3.3297': attribute type 3 has an invalid length. [ 892.687259][T15015] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3297'. [ 893.714129][T15047] netlink: 'syz.3.3307': attribute type 11 has an invalid length. [ 893.976369][T15049] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 894.093663][ T6709] device veth0_to_team left promiscuous mode [ 894.119277][ T6709] Ÿë: port 2(veth0_to_team) entered disabled state [ 894.151358][ T6709] device hsr_slave_0 left promiscuous mode [ 894.178229][ T6709] device hsr_slave_1 left promiscuous mode [ 894.280990][ T6709] device veth1_macvtap left promiscuous mode [ 894.289431][ T6709] device veth0_macvtap left promiscuous mode [ 894.539711][T15063] netlink: 'syz.4.3313': attribute type 3 has an invalid length. [ 894.556924][T15063] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3313'. [ 894.996280][ T6709] device macvlan0 left promiscuous mode [ 895.015710][ T6709] team0 (unregistering): Port device macvlan0 removed [ 895.333131][ T6709] device team_slave_1 left promiscuous mode [ 895.340428][ T6709] team0 (unregistering): Port device team_slave_1 removed [ 895.375314][ T6709] device team_slave_0 left promiscuous mode [ 895.382965][ T6709] team0 (unregistering): Port device team_slave_0 removed [ 895.421280][ T6709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.461816][ T6709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.658460][ T6709] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 895.701631][ T6709] bond0 (unregistering): Released all slaves [ 895.782041][T14888] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 895.826984][T14888] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 895.870639][T14888] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 895.942491][T14888] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 896.103544][T15076] FAULT_INJECTION: forcing a failure. [ 896.103544][T15076] name failslab, interval 1, probability 0, space 0, times 0 [ 896.140095][T15076] CPU: 1 PID: 15076 Comm: syz.0.3315 Not tainted syzkaller #0 [ 896.147621][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 896.157717][T15076] Call Trace: [ 896.161038][T15076] [ 896.164035][T15076] dump_stack_lvl+0x188/0x24e [ 896.168775][T15076] ? show_regs_print_info+0x12/0x12 [ 896.174024][T15076] ? load_image+0x400/0x400 [ 896.178572][T15076] ? __might_sleep+0xd0/0xd0 [ 896.183215][T15076] ? __lock_acquire+0x7d10/0x7d10 [ 896.188300][T15076] should_fail_ex+0x399/0x4d0 [ 896.193019][T15076] should_failslab+0x5/0x20 [ 896.197545][T15076] slab_pre_alloc_hook+0x59/0x310 [ 896.202593][T15076] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 896.208346][T15076] __kmem_cache_alloc_node+0x4f/0x260 [ 896.213747][T15076] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 896.219491][T15076] __kmalloc+0xa0/0x240 [ 896.223693][T15076] tomoyo_realpath_from_path+0xdf/0x5d0 [ 896.229289][T15076] ? tomoyo_path_number_perm+0x205/0x650 [ 896.234975][T15076] tomoyo_path_number_perm+0x22f/0x650 [ 896.240465][T15076] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 896.245948][T15076] ? ksys_write+0x1c0/0x250 [ 896.250483][T15076] ? common_file_perm+0x171/0x1c0 [ 896.255554][T15076] ? __fget_files+0x28/0x4b0 [ 896.260176][T15076] ? __fget_files+0x28/0x4b0 [ 896.264799][T15076] security_file_ioctl+0x6c/0xa0 [ 896.269762][T15076] __se_sys_ioctl+0x48/0x170 [ 896.274376][T15076] do_syscall_64+0x4c/0xa0 [ 896.278837][T15076] ? clear_bhb_loop+0x60/0xb0 [ 896.283538][T15076] ? clear_bhb_loop+0x60/0xb0 [ 896.288247][T15076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.294178][T15076] RIP: 0033:0x7fe13a59c819 [ 896.298631][T15076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.318268][T15076] RSP: 002b:00007fe13b3a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 896.326728][T15076] RAX: ffffffffffffffda RBX: 00007fe13a816180 RCX: 00007fe13a59c819 [ 896.334719][T15076] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000009 [ 896.342803][T15076] RBP: 00007fe13b3a3090 R08: 0000000000000000 R09: 0000000000000000 [ 896.351150][T15076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.359142][T15076] R13: 00007fe13a816218 R14: 00007fe13a816180 R15: 00007ffd66675338 [ 896.367172][T15076] [ 896.425676][T15076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 896.475361][T14888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.590766][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 896.609695][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 896.628371][T14888] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.719291][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 896.733222][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 896.838588][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.845760][ T7665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.914980][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 897.006831][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 897.015802][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 897.056120][ T1223] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.063349][ T1223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.114190][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 897.139486][T15096] netlink: 'syz.3.3321': attribute type 1 has an invalid length. [ 897.177640][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 897.210849][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 897.235432][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 897.240438][T15096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3321'. [ 897.286939][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 897.325332][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 897.368065][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 897.417884][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 897.447573][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 897.486516][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 897.511073][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 897.532249][T14888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 897.687002][T13431] Bluetooth: hci2: command 0x0406 tx timeout [ 897.896179][T15120] netlink: 'syz.2.3327': attribute type 3 has an invalid length. [ 897.935798][T15120] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3327'. [ 898.671032][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 898.683330][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 898.710519][T14888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.718823][ T4287] Bluetooth: hci1: ACL packet too small [ 898.752973][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 898.764915][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 898.797077][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 898.808406][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 898.820277][T14888] device veth0_vlan entered promiscuous mode [ 898.830073][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 898.838947][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 898.860614][T14888] device veth1_vlan entered promiscuous mode [ 898.888347][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 898.897532][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 898.915815][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 898.935078][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 898.957864][T14888] device veth0_macvtap entered promiscuous mode [ 898.976489][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 899.001613][T14888] device veth1_macvtap entered promiscuous mode [ 899.054636][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.065554][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.084570][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.095568][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.119046][T14888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.143318][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 899.164791][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 899.201263][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.224168][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.251071][T14888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.278947][T14888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.311883][T14888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.326172][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 899.347123][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 899.373917][T14888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.388837][T14888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.413905][T14888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.436601][T14888] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.380980][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.402532][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.450050][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 901.502362][ T1223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.534458][ T1223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.555948][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 902.126057][T15193] netlink: 'syz.4.3343': attribute type 3 has an invalid length. [ 902.149399][T15193] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3343'. [ 903.508452][T15225] @: port 1(gretap0) entered blocking state [ 903.524676][T15225] @: port 1(gretap0) entered disabled state [ 903.550561][T15225] device gretap0 entered promiscuous mode [ 905.609999][T15227] netlink: 'syz.3.3354': attribute type 5 has an invalid length. [ 906.123865][T15240] netlink: 'syz.0.3360': attribute type 3 has an invalid length. [ 906.242655][T15240] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3360'. [ 908.187783][T15255] netlink: 'syz.0.3364': attribute type 10 has an invalid length. [ 908.195670][T15255] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3364'. [ 908.205247][T15255] device hsr0 entered promiscuous mode [ 908.211193][T15255] bridge0: port 3(hsr0) entered blocking state [ 908.236741][T15255] bridge0: port 3(hsr0) entered disabled state [ 908.245198][T15255] bridge0: port 3(hsr0) entered blocking state [ 908.251499][T15255] bridge0: port 3(hsr0) entered forwarding state [ 909.553638][T15290] netlink: 'syz.1.3375': attribute type 3 has an invalid length. [ 909.576633][T15290] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3375'. [ 911.597207][T15312] netlink: 'syz.4.3380': attribute type 10 has an invalid length. [ 911.701865][T15312] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3380'. [ 911.778205][T15312] device hsr0 entered promiscuous mode [ 911.797169][T15312] bridge0: port 3(hsr0) entered blocking state [ 911.834126][T15312] bridge0: port 3(hsr0) entered disabled state [ 911.875446][T15312] bridge0: port 3(hsr0) entered blocking state [ 911.881812][T15312] bridge0: port 3(hsr0) entered forwarding state [ 912.306010][T15336] netlink: 'syz.0.3389': attribute type 3 has an invalid length. [ 912.316674][T15336] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3389'. [ 913.875975][T15375] netlink: 'syz.2.3402': attribute type 10 has an invalid length. [ 914.039828][T15375] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3402'. [ 914.111727][T15375] device hsr0 entered promiscuous mode [ 914.144959][T15375] bridge0: port 3(hsr0) entered blocking state [ 914.229713][T15380] netlink: 'syz.4.3405': attribute type 3 has an invalid length. [ 914.243103][T15375] bridge0: port 3(hsr0) entered disabled state [ 914.257247][T15380] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3405'. [ 914.335235][T15375] bridge0: port 3(hsr0) entered blocking state [ 914.341805][T15375] bridge0: port 3(hsr0) entered forwarding state [ 915.739233][T15417] netlink: 'syz.2.3418': attribute type 3 has an invalid length. [ 915.775961][T15417] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3418'. [ 916.824142][T15447] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.3428'. [ 917.141552][T15455] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3431'. [ 917.525621][T15459] netlink: 'syz.1.3432': attribute type 3 has an invalid length. [ 917.560125][T15459] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3432'. [ 919.933295][T15479] bridge0: port 3(team0) entered blocking state [ 919.955768][T15479] bridge0: port 3(team0) entered disabled state [ 919.973371][T15479] device team0 entered promiscuous mode [ 919.982354][T15479] device team_slave_0 entered promiscuous mode [ 919.991179][T15479] device team_slave_1 entered promiscuous mode [ 920.002936][T15479] bridge0: port 3(team0) entered blocking state [ 920.009376][T15479] bridge0: port 3(team0) entered forwarding state [ 920.046300][T15479] netlink: 'syz.1.3440': attribute type 10 has an invalid length. [ 920.410370][T15479] bond0: (slave bond_slave_0): Releasing backup interface [ 922.820031][T15519] netlink: 'syz.4.3448': attribute type 3 has an invalid length. [ 922.834671][T15519] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3448'. [ 924.418708][T15555] netlink: 'syz.3.3465': attribute type 3 has an invalid length. [ 924.440175][T15554] netlink: 'syz.2.3464': attribute type 3 has an invalid length. [ 924.442724][T15555] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3465'. [ 924.476063][T15554] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3464'. [ 927.540233][T15573] netlink: 'syz.1.3468': attribute type 3 has an invalid length. [ 927.551994][T15573] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3468'. [ 927.810206][T15585] Ÿë: port 1(veth0_to_team) entered blocking state [ 927.848897][T15585] Ÿë: port 1(veth0_to_team) entered disabled state [ 927.997836][T15587] netlink: 'syz.0.3476': attribute type 29 has an invalid length. [ 928.007225][T15585] device veth0_to_team entered promiscuous mode [ 928.037433][T15587] netlink: 'syz.0.3476': attribute type 29 has an invalid length. [ 928.381745][T15601] netlink: 'syz.4.3480': attribute type 3 has an invalid length. [ 928.431616][T15601] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3480'. [ 930.861222][T15619] netlink: 'syz.3.3484': attribute type 3 has an invalid length. [ 930.887374][T15619] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3484'. [ 931.175085][T15629] Ÿë: port 1(veth0_to_team) entered blocking state [ 931.195615][T15629] Ÿë: port 1(veth0_to_team) entered disabled state [ 931.272555][T15629] device veth0_to_team entered promiscuous mode [ 931.483793][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.490188][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.705893][T15649] netlink: 'syz.3.3496': attribute type 3 has an invalid length. [ 931.714428][T15649] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3496'. [ 933.526813][T13431] Bluetooth: hci5: command 0x0406 tx timeout [ 949.427992][T15851] netlink: 'syz.3.3559': attribute type 25 has an invalid length. [ 949.454634][T15851] netlink: 'syz.3.3559': attribute type 9 has an invalid length. [ 949.654051][T15851] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3559'. [ 960.727904][T15933] @: port 1(gretap0) entered blocking state [ 960.734437][T15933] @: port 1(gretap0) entered disabled state [ 960.752715][T15933] device gretap0 entered promiscuous mode [ 966.576331][T15972] netlink: 'syz.1.3603': attribute type 20 has an invalid length. [ 967.384508][T15995] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3612'. [ 969.366679][T13431] Bluetooth: hci1: command 0x0406 tx timeout [ 970.040206][T16023] netlink: 'syz.2.3621': attribute type 16 has an invalid length. [ 970.067054][T16023] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3621'. [ 970.215312][T16028] netlink: 'syz.2.3621': attribute type 16 has an invalid length. [ 970.251523][T16028] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3621'. [ 970.841763][T16043] netlink: 'syz.3.3629': attribute type 3 has an invalid length. [ 970.870098][T16043] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3629'. [ 971.940580][T16055] netlink: 'syz.0.3643': attribute type 3 has an invalid length. [ 972.030453][T16055] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3643'. [ 974.170871][T16070] FAULT_INJECTION: forcing a failure. [ 974.170871][T16070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.184288][T16070] CPU: 0 PID: 16070 Comm: syz.0.3639 Not tainted syzkaller #0 [ 974.191798][T16070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 974.201902][T16070] Call Trace: [ 974.205233][T16070] [ 974.208219][T16070] dump_stack_lvl+0x188/0x24e [ 974.212955][T16070] ? show_regs_print_info+0x12/0x12 [ 974.218225][T16070] ? load_image+0x400/0x400 [ 974.222802][T16070] ? __lock_acquire+0x7d10/0x7d10 [ 974.227879][T16070] should_fail_ex+0x399/0x4d0 [ 974.232594][T16070] _copy_from_iter+0x1c0/0x1130 [ 974.237510][T16070] ? __lock_acquire+0x7d10/0x7d10 [ 974.242580][T16070] ? copyout_mc+0x110/0x110 [ 974.247116][T16070] ? __virt_addr_valid+0x188/0x540 [ 974.252259][T16070] ? __virt_addr_valid+0x188/0x540 [ 974.257488][T16070] ? __virt_addr_valid+0x465/0x540 [ 974.262637][T16070] ? __check_object_size+0x500/0xa40 [ 974.267974][T16070] kernfs_fop_write_iter+0x1a0/0x520 [ 974.273298][T16070] vfs_write+0x4b1/0xa30 [ 974.277582][T16070] ? file_end_write+0x250/0x250 [ 974.282496][T16070] ? __fget_files+0x43d/0x4b0 [ 974.287213][T16070] ? __fdget_pos+0x2ae/0x360 [ 974.291838][T16070] ? ksys_write+0x71/0x250 [ 974.296295][T16070] ksys_write+0x14c/0x250 [ 974.300666][T16070] ? __ia32_sys_read+0x80/0x80 [ 974.305501][T16070] ? lockdep_hardirqs_on+0x94/0x140 [ 974.310719][T16070] do_syscall_64+0x4c/0xa0 [ 974.315158][T16070] ? clear_bhb_loop+0x60/0xb0 [ 974.319860][T16070] ? clear_bhb_loop+0x60/0xb0 [ 974.324589][T16070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.330517][T16070] RIP: 0033:0x7fe13a59c819 [ 974.334956][T16070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.354578][T16070] RSP: 002b:00007fe13b3a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 974.363010][T16070] RAX: ffffffffffffffda RBX: 00007fe13a816180 RCX: 00007fe13a59c819 [ 974.370999][T16070] RDX: 0000000000000012 RSI: 0000200000000540 RDI: 0000000000000008 [ 974.378988][T16070] RBP: 00007fe13b3a3090 R08: 0000000000000000 R09: 0000000000000000 [ 974.386978][T16070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.394961][T16070] R13: 00007fe13a816218 R14: 00007fe13a816180 R15: 00007ffd66675338 [ 974.402964][T16070] [ 977.880669][T16099] netlink: 'syz.3.3650': attribute type 3 has an invalid length. [ 977.943250][T16099] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3650'. [ 978.133837][T16110] FAULT_INJECTION: forcing a failure. [ 978.133837][T16110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.174263][T16110] CPU: 1 PID: 16110 Comm: syz.1.3653 Not tainted syzkaller #0 [ 978.181827][T16110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 978.191952][T16110] Call Trace: [ 978.195301][T16110] [ 978.198304][T16110] dump_stack_lvl+0x188/0x24e [ 978.203091][T16110] ? show_regs_print_info+0x12/0x12 [ 978.208484][T16110] ? load_image+0x400/0x400 [ 978.213094][T16110] ? __lock_acquire+0x7d10/0x7d10 [ 978.218260][T16110] should_fail_ex+0x399/0x4d0 [ 978.223078][T16110] _copy_from_user+0x2c/0x170 [ 978.227848][T16110] ___sys_recvmsg+0x172/0x590 [ 978.232630][T16110] ? __sys_recvmsg+0x290/0x290 [ 978.237507][T16110] ? common_file_perm+0x171/0x1c0 [ 978.242657][T16110] ? __fget_files+0x43d/0x4b0 [ 978.247490][T16110] __x64_sys_recvmsg+0x205/0x2e0 [ 978.252529][T16110] ? ___sys_recvmsg+0x590/0x590 [ 978.257559][T16110] ? lockdep_hardirqs_on+0x94/0x140 [ 978.262853][T16110] do_syscall_64+0x4c/0xa0 [ 978.267347][T16110] ? clear_bhb_loop+0x60/0xb0 [ 978.272099][T16110] ? clear_bhb_loop+0x60/0xb0 [ 978.276854][T16110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 978.282822][T16110] RIP: 0033:0x7f4c2719c819 [ 978.287310][T16110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.306980][T16110] RSP: 002b:00007f4c28021028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 978.315466][T16110] RAX: ffffffffffffffda RBX: 00007f4c27415fa0 RCX: 00007f4c2719c819 [ 978.323506][T16110] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000005 [ 978.331543][T16110] RBP: 00007f4c28021090 R08: 0000000000000000 R09: 0000000000000000 [ 978.339585][T16110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.347625][T16110] R13: 00007f4c27416038 R14: 00007f4c27415fa0 R15: 00007ffc9af48d08 [ 978.355826][T16110] [ 981.197321][T16120] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 981.208796][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3656'. [ 981.554915][T16129] netlink: 'syz.1.3658': attribute type 10 has an invalid length. [ 984.751696][T16161] netlink: 'syz.2.3666': attribute type 3 has an invalid length. [ 984.759997][T16161] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3666'. [ 988.728253][T16179] netlink: 'syz.3.3674': attribute type 10 has an invalid length. [ 988.784978][T16179] bond0: (slave bond_slave_0): Releasing backup interface [ 989.133780][T16202] netlink: 'syz.1.3681': attribute type 3 has an invalid length. [ 989.147417][T16202] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3681'. [ 989.846628][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 992.640219][T16233] netlink: 'syz.3.3693': attribute type 3 has an invalid length. [ 992.655921][T16233] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3693'. [ 992.892516][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.898941][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.905975][T16235] netlink: 'syz.0.3692': attribute type 10 has an invalid length. [ 993.015870][T16235] bond0: (slave bond_slave_0): Releasing backup interface [ 994.406765][T13431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 994.416055][T13431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 994.425500][T13431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 994.433856][T13431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 994.441728][T13431] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 994.450075][T13431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 994.840379][T16268] chnl_net:caif_netlink_parms(): no params data found [ 995.066044][T16268] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.090388][T16268] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.110355][T16268] device bridge_slave_0 entered promiscuous mode [ 995.143697][T16268] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.169091][T16268] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.200261][T16268] device bridge_slave_1 entered promiscuous mode [ 995.290665][T16268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.322222][T16268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.440614][T16268] team0: Port device team_slave_0 added [ 995.474454][T16268] team0: Port device team_slave_1 added [ 995.550784][T16268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.569236][T16268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.642001][T16268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.673359][T16268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.696750][T16268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.756693][T16268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.486665][T13431] Bluetooth: hci4: command 0x0409 tx timeout [ 996.645929][T16268] device hsr_slave_0 entered promiscuous mode [ 996.726244][T16268] device hsr_slave_1 entered promiscuous mode [ 996.771501][T16268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 996.806786][T16268] Cannot create hsr debugfs directory [ 996.896720][T16285] netlink: 'syz.2.3711': attribute type 10 has an invalid length. [ 996.963391][T16285] team0: Port device dummy0 added [ 997.291619][T16268] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 997.348324][T16268] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 997.365701][T16268] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 997.382722][T16268] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 997.595505][T16268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.667671][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 997.676194][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 997.715908][T16268] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.770428][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 997.787478][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 997.838092][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.845250][ T7663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.918514][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 997.949178][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 997.999538][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 998.059435][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.066649][ T7663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.136375][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 998.178706][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 998.251158][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 998.287746][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 998.329324][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 998.368605][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 998.397603][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 998.420751][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 998.450263][T16268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 998.477547][T16268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 998.498674][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 998.519718][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 998.537401][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 998.566629][T13431] Bluetooth: hci4: command 0x041b tx timeout [ 999.003302][T16094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 999.011076][T16094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 999.029003][T16268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.603737][T16309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 999.613619][T16309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 999.652716][T16309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 999.668245][T16309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 999.684751][T16268] device veth0_vlan entered promiscuous mode [ 999.692552][T16309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 999.704707][T16309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 999.722775][T16268] device veth1_vlan entered promiscuous mode [ 999.767721][T16309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 999.777232][T16309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 999.785625][T16309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 999.794716][T16309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 999.806369][T16268] device veth0_macvtap entered promiscuous mode [ 999.828219][T16268] device veth1_macvtap entered promiscuous mode [ 999.858893][T16268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.869836][T16268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.881424][T16268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.892371][T16268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.902842][T16268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.915697][T16268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.940918][T16268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.957484][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 999.974702][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 999.983529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 999.997716][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1000.013983][T16268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.025307][T16268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.042128][T16268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.052881][T16268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.067966][T16268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.082368][T16268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.103851][T16268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.118179][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1000.132729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1000.145565][T16268] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.157826][T16268] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.167188][T16268] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.176020][T16268] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.646757][T13431] Bluetooth: hci4: command 0x040f tx timeout [ 1000.682801][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.730022][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.793507][ T5417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1000.838199][ T5417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.846109][ T5417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.883439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1001.480885][T16338] @: port 1(gretap0) entered blocking state [ 1001.487682][T16338] @: port 1(gretap0) entered disabled state [ 1001.495167][T16338] device gretap0 entered promiscuous mode [ 1002.726744][T13431] Bluetooth: hci4: command 0x0419 tx timeout [ 1005.564231][T16395] delete_channel: no stack [ 1008.909997][T16430] netlink: 'syz.5.3752': attribute type 12 has an invalid length. [ 1008.925056][T16432] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3755'. [ 1008.948787][T16430] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3752'. [ 1008.995807][T16432] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3755'. [ 1009.010909][T16433] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3755'. [ 1009.105107][T16434] netlink: 'syz.5.3752': attribute type 29 has an invalid length. [ 1009.121592][T16434] netlink: 'syz.5.3752': attribute type 29 has an invalid length. [ 1009.694212][T16451] netlink: 'syz.5.3764': attribute type 21 has an invalid length. [ 1009.705681][T16451] netlink: 'syz.5.3764': attribute type 2 has an invalid length. [ 1009.717438][T16451] netlink: 'syz.5.3764': attribute type 4 has an invalid length. [ 1009.738246][T16451] netlink: 'syz.5.3764': attribute type 8 has an invalid length. [ 1009.757032][T16451] netlink: 'syz.5.3764': attribute type 9 has an invalid length. [ 1009.796725][T16451] netlink: 'syz.5.3764': attribute type 10 has an invalid length. [ 1009.824643][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3764'. [ 1009.882812][T16456] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3765'. [ 1010.326693][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 1013.903618][T16500] netlink: 'syz.5.3778': attribute type 10 has an invalid length. [ 1013.927147][T16500] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3778'. [ 1013.952097][T16500] device ipvlan1 entered promiscuous mode [ 1014.039027][T16500] bridge0: port 3(ipvlan1) entered blocking state [ 1014.053181][T16500] bridge0: port 3(ipvlan1) entered disabled state [ 1014.143639][T16500] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1016.920573][T16523] netlink: 'syz.0.3788': attribute type 3 has an invalid length. [ 1017.005282][T16523] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3788'. [ 1017.020308][T16525] netlink: 'syz.3.3789': attribute type 23 has an invalid length. [ 1020.110155][T16558] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3800'. [ 1020.176893][T16560] netlink: 'syz.0.3802': attribute type 3 has an invalid length. [ 1020.217455][T16560] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3802'. [ 1023.454540][T16604] netlink: 'syz.0.3818': attribute type 3 has an invalid length. [ 1023.496577][T16604] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3818'. [ 1024.333847][T16627] Ÿë: port 1(veth0_to_team) entered blocking state [ 1024.350677][T16627] Ÿë: port 1(veth0_to_team) entered disabled state [ 1024.365817][T16627] device veth0_to_team entered promiscuous mode [ 1025.185977][T16652] netlink: 'syz.0.3835': attribute type 3 has an invalid length. [ 1025.255186][T16652] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3835'. [ 1025.419971][T16662] netlink: 'syz.2.3837': attribute type 29 has an invalid length. [ 1025.437608][T16662] netlink: 'syz.2.3837': attribute type 29 has an invalid length. [ 1025.476714][T16657] netlink: 'syz.2.3837': attribute type 29 has an invalid length. [ 1025.853903][T16676] netlink: 'syz.2.3845': attribute type 13 has an invalid length. [ 1025.886608][T16676] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3845'. [ 1025.921779][T16676] erspan0: refused to change device tx_queue_len [ 1026.383800][T16695] netlink: 'syz.0.3852': attribute type 3 has an invalid length. [ 1026.421778][T16695] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1027.041327][T16713] netlink: 'syz.2.3858': attribute type 49 has an invalid length. [ 1027.324496][T16719] team0: Port device team_slave_0 removed [ 1027.346109][T16719] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1029.404949][T16766] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1029.674792][T16774] FAULT_INJECTION: forcing a failure. [ 1029.674792][T16774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.712241][T16774] CPU: 1 PID: 16774 Comm: syz.5.3880 Not tainted syzkaller #0 [ 1029.719870][T16774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1029.729996][T16774] Call Trace: [ 1029.733306][T16774] [ 1029.736355][T16774] dump_stack_lvl+0x188/0x24e [ 1029.741089][T16774] ? show_regs_print_info+0x12/0x12 [ 1029.746341][T16774] ? load_image+0x400/0x400 [ 1029.750893][T16774] ? __lock_acquire+0x7d10/0x7d10 [ 1029.755982][T16774] ? snprintf+0xe5/0x140 [ 1029.760278][T16774] should_fail_ex+0x399/0x4d0 [ 1029.765018][T16774] _copy_to_user+0x2c/0x130 [ 1029.769582][T16774] simple_read_from_buffer+0xe3/0x150 [ 1029.775013][T16774] proc_fail_nth_read+0x1a6/0x220 [ 1029.780203][T16774] ? proc_fault_inject_write+0x310/0x310 [ 1029.785867][T16774] ? fsnotify_perm+0x248/0x550 [ 1029.790752][T16774] ? proc_fault_inject_write+0x310/0x310 [ 1029.796426][T16774] vfs_read+0x2de/0xa00 [ 1029.800617][T16774] ? kernel_read+0x1e0/0x1e0 [ 1029.805234][T16774] ? __fget_files+0x28/0x4b0 [ 1029.809840][T16774] ? __fget_files+0x28/0x4b0 [ 1029.814454][T16774] ? __fget_files+0x43d/0x4b0 [ 1029.819176][T16774] ? __fdget_pos+0x2ae/0x360 [ 1029.823810][T16774] ? ksys_read+0x71/0x250 [ 1029.828202][T16774] ksys_read+0x14c/0x250 [ 1029.832482][T16774] ? vfs_write+0xa30/0xa30 [ 1029.836938][T16774] ? lockdep_hardirqs_on+0x94/0x140 [ 1029.842165][T16774] do_syscall_64+0x4c/0xa0 [ 1029.846622][T16774] ? clear_bhb_loop+0x60/0xb0 [ 1029.851333][T16774] ? clear_bhb_loop+0x60/0xb0 [ 1029.856038][T16774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.861952][T16774] RIP: 0033:0x7f782e35d04e [ 1029.866394][T16774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1029.886029][T16774] RSP: 002b:00007f782f180fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1029.894555][T16774] RAX: ffffffffffffffda RBX: 00007f782f1816c0 RCX: 00007f782e35d04e [ 1029.902563][T16774] RDX: 000000000000000f RSI: 00007f782f1810a0 RDI: 0000000000000008 [ 1029.910555][T16774] RBP: 00007f782f181090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.918551][T16774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.926645][T16774] R13: 00007f782e616128 R14: 00007f782e616090 R15: 00007ffcc62d96b8 [ 1029.934663][T16774] [ 1034.213359][T16814] netlink: 'syz.5.3895': attribute type 13 has an invalid length. [ 1034.256333][T16814] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3895'. [ 1034.299454][T16814] syz_tun: refused to change device tx_queue_len [ 1034.306115][T16814] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1034.515948][T16818] netlink: 'syz.5.3895': attribute type 13 has an invalid length. [ 1034.527803][T16818] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3895'. [ 1034.544120][T16818] syz_tun: refused to change device tx_queue_len [ 1034.552746][T16818] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1034.572909][T16819] netlink: 'syz.5.3895': attribute type 10 has an invalid length. [ 1036.187626][T16819] team0: Port device netdevsim0 added [ 1040.429019][T16866] delete_channel: no stack [ 1042.069010][T16873] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3912'. [ 1042.192070][T16873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.221946][T16873] bond0 (unregistering): Released all slaves [ 1042.329226][T16891] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3916'. [ 1042.376986][T16891] bridge_slave_1: default FDB implementation only supports local addresses [ 1045.148456][T16923] delete_channel: no stack [ 1045.703318][T16939] delete_channel: no stack [ 1045.709038][T16939] delete_channel: no stack [ 1046.494913][T16961] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3941'. [ 1046.504277][T16961] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3941'. [ 1046.523759][T16961] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3941'. [ 1054.330289][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.336742][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.307376][T17037] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3965'. [ 1056.389689][T17037] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3965'. [ 1059.907504][T17059] sctp: [Deprecated]: syz.0.3975 (pid 17059) Use of int in max_burst socket option deprecated. [ 1059.907504][T17059] Use struct sctp_assoc_value instead [ 1060.174651][T17061] delete_channel: no stack [ 1060.182953][T17061] delete_channel: no stack [ 1063.760379][T17103] sctp: [Deprecated]: syz.1.3990 (pid 17103) Use of int in max_burst socket option deprecated. [ 1063.760379][T17103] Use struct sctp_assoc_value instead [ 1067.162523][T17120] delete_channel: no stack [ 1067.207441][T17120] delete_channel: no stack [ 1067.470456][T17123] delete_channel: no stack [ 1068.627708][T17138] delete_channel: no stack [ 1069.774761][T17151] sctp: [Deprecated]: syz.3.4003 (pid 17151) Use of int in max_burst socket option deprecated. [ 1069.774761][T17151] Use struct sctp_assoc_value instead [ 1072.853975][T17181] FAULT_INJECTION: forcing a failure. [ 1072.853975][T17181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.914999][T17181] CPU: 0 PID: 17181 Comm: syz.1.4011 Not tainted syzkaller #0 [ 1072.922537][T17181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1072.932656][T17181] Call Trace: [ 1072.935991][T17181] [ 1072.938967][T17181] dump_stack_lvl+0x188/0x24e [ 1072.943709][T17181] ? show_regs_print_info+0x12/0x12 [ 1072.948958][T17181] ? load_image+0x400/0x400 [ 1072.953520][T17181] ? __lock_acquire+0x7d10/0x7d10 [ 1072.958601][T17181] should_fail_ex+0x399/0x4d0 [ 1072.963332][T17181] _copy_from_user+0x2c/0x170 [ 1072.968054][T17181] bpf_prog_test_run_skb+0x262/0x12a0 [ 1072.973476][T17181] ? lockdep_hardirqs_on+0x94/0x140 [ 1072.978731][T17181] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1072.985127][T17181] ? cpu_online+0xa0/0xa0 [ 1072.989515][T17181] bpf_prog_test_run+0x31e/0x390 [ 1072.994505][T17181] __sys_bpf+0x62b/0x780 [ 1072.998802][T17181] ? bpf_link_show_fdinfo+0x380/0x380 [ 1073.004247][T17181] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1073.010470][T17181] __x64_sys_bpf+0x78/0x90 [ 1073.014954][T17181] do_syscall_64+0x4c/0xa0 [ 1073.019416][T17181] ? clear_bhb_loop+0x60/0xb0 [ 1073.024127][T17181] ? clear_bhb_loop+0x60/0xb0 [ 1073.028851][T17181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1073.034798][T17181] RIP: 0033:0x7f4c2719c819 [ 1073.039236][T17181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.058876][T17181] RSP: 002b:00007f4c28021028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1073.067320][T17181] RAX: ffffffffffffffda RBX: 00007f4c27415fa0 RCX: 00007f4c2719c819 [ 1073.075320][T17181] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1073.083309][T17181] RBP: 00007f4c28021090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.091303][T17181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.099301][T17181] R13: 00007f4c27416038 R14: 00007f4c27415fa0 R15: 00007ffc9af48d08 [ 1073.107318][T17181] [ 1076.530403][T17202] delete_channel: no stack [ 1076.950879][T17219] delete_channel: no stack [ 1076.991304][T17227] netlink: 'syz.5.4025': attribute type 3 has an invalid length. [ 1077.003385][T17227] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4025'. [ 1077.352679][T17233] delete_channel: no stack [ 1080.800488][T17257] delete_channel: no stack [ 1081.183309][T17267] Ÿë: port 1(veth0_to_team) entered blocking state [ 1081.205207][T17269] netlink: 'syz.0.4040': attribute type 3 has an invalid length. [ 1081.211595][T17267] Ÿë: port 1(veth0_to_team) entered disabled state [ 1081.225773][T17269] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4040'. [ 1081.247686][T17267] device veth0_to_team entered promiscuous mode [ 1083.691817][T17275] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1083.735271][T17275] ksmbd: Unknown IPC event: 10, ignore. [ 1083.762699][T17273] delete_channel: no stack [ 1083.787042][T17280] netlink: 'syz.5.4043': attribute type 29 has an invalid length. [ 1084.103891][T17280] netlink: 'syz.5.4043': attribute type 29 has an invalid length. [ 1085.096388][T17301] netlink: 'syz.3.4052': attribute type 3 has an invalid length. [ 1085.118687][T17301] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4052'. [ 1085.340773][T17303] delete_channel: no stack [ 1088.664482][T17324] tap0: tun_chr_ioctl cmd 2147767506 [ 1088.712174][T17324] tap0: tun_chr_ioctl cmd 1074025681 [ 1089.052374][T17334] netlink: 'syz.0.4061': attribute type 29 has an invalid length. [ 1089.070534][T17319] delete_channel: no stack [ 1089.088241][T17334] netlink: 'syz.0.4061': attribute type 29 has an invalid length. [ 1089.392803][T17340] netlink: 'syz.5.4064': attribute type 4 has an invalid length. [ 1089.517962][T17342] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4064'. [ 1089.535769][T17342] bridge_slave_1: default FDB implementation only supports local addresses [ 1089.633064][T17344] netlink: 'syz.0.4066': attribute type 3 has an invalid length. [ 1089.656660][T17344] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4066'. [ 1089.952270][T17345] delete_channel: no stack [ 1090.704238][T17379] netlink: 'syz.5.4080': attribute type 27 has an invalid length. [ 1090.747268][T17379] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1090.775796][T17381] netlink: 'syz.2.4079': attribute type 29 has an invalid length. [ 1090.816255][T17381] netlink: 'syz.2.4079': attribute type 29 has an invalid length. [ 1091.339444][T17395] netlink: 'syz.5.4084': attribute type 3 has an invalid length. [ 1091.367380][T17395] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4084'. [ 1091.555220][T17400] netlink: 'syz.2.4086': attribute type 15 has an invalid length. [ 1091.573169][T17400] netlink: 'syz.2.4086': attribute type 5 has an invalid length. [ 1091.586893][T17400] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4086'. [ 1091.811809][T17402] delete_channel: no stack [ 1092.454803][T17428] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4099'. [ 1092.546212][T17435] FAULT_INJECTION: forcing a failure. [ 1092.546212][T17435] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.573665][T17435] CPU: 1 PID: 17435 Comm: syz.5.4102 Not tainted syzkaller #0 [ 1092.581296][T17435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1092.591413][T17435] Call Trace: [ 1092.594733][T17435] [ 1092.597700][T17435] dump_stack_lvl+0x188/0x24e [ 1092.602437][T17435] ? show_regs_print_info+0x12/0x12 [ 1092.607698][T17435] ? load_image+0x400/0x400 [ 1092.612287][T17435] ? __might_sleep+0xd0/0xd0 [ 1092.617006][T17435] ? __lock_acquire+0x7d10/0x7d10 [ 1092.622100][T17435] should_fail_ex+0x399/0x4d0 [ 1092.626830][T17435] should_failslab+0x5/0x20 [ 1092.631376][T17435] slab_pre_alloc_hook+0x59/0x310 [ 1092.636450][T17435] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1092.642242][T17435] __kmem_cache_alloc_node+0x4f/0x260 [ 1092.647727][T17435] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1092.653503][T17435] __kmalloc+0xa0/0x240 [ 1092.657713][T17435] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1092.663491][T17435] ? tomoyo_path_number_perm+0x205/0x650 [ 1092.669176][T17435] tomoyo_path_number_perm+0x22f/0x650 [ 1092.674695][T17435] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1092.680196][T17435] ? ksys_write+0x1c0/0x250 [ 1092.684889][T17435] ? common_file_perm+0x171/0x1c0 [ 1092.690005][T17435] ? __fget_files+0x28/0x4b0 [ 1092.694644][T17435] ? __fget_files+0x28/0x4b0 [ 1092.699299][T17435] security_file_ioctl+0x6c/0xa0 [ 1092.704315][T17435] __se_sys_ioctl+0x48/0x170 [ 1092.708953][T17435] do_syscall_64+0x4c/0xa0 [ 1092.713424][T17435] ? clear_bhb_loop+0x60/0xb0 [ 1092.718150][T17435] ? clear_bhb_loop+0x60/0xb0 [ 1092.722918][T17435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1092.728856][T17435] RIP: 0033:0x7f782e39c819 [ 1092.733353][T17435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.752998][T17435] RSP: 002b:00007f782f1a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1092.761490][T17435] RAX: ffffffffffffffda RBX: 00007f782e615fa0 RCX: 00007f782e39c819 [ 1092.769520][T17435] RDX: 0000200000000100 RSI: 000000000000894b RDI: 0000000000000003 [ 1092.777539][T17435] RBP: 00007f782f1a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.785561][T17435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.793621][T17435] R13: 00007f782e616038 R14: 00007f782e615fa0 R15: 00007ffcc62d96b8 [ 1092.801658][T17435] [ 1092.870982][T17435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1094.209997][T17471] validate_nla: 1 callbacks suppressed [ 1094.210014][T17471] netlink: 'syz.2.4115': attribute type 3 has an invalid length. [ 1094.252912][T17471] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4115'. [ 1095.569426][T17502] netlink: 'syz.1.4127': attribute type 21 has an invalid length. [ 1095.605986][T17502] netlink: 'syz.1.4127': attribute type 1 has an invalid length. [ 1095.633705][T17502] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1095.705962][T17508] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4129'. [ 1095.722581][T17508] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1095.832473][T17513] netlink: 'syz.0.4131': attribute type 3 has an invalid length. [ 1095.845717][T17513] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4131'. [ 1101.550129][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4162'. [ 1101.618709][T17597] netlink: 'syz.1.4162': attribute type 21 has an invalid length. [ 1101.648339][T17591] delete_channel: no stack [ 1102.560741][T17622] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.4172'. [ 1103.022771][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4180'. [ 1103.043653][T17634] delete_channel: no stack [ 1103.070511][T17638] netlink: 'syz.3.4180': attribute type 21 has an invalid length. [ 1103.573357][T17651] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1103.610641][T17651] bridge_slave_1: default FDB implementation only supports local addresses [ 1104.017117][T17665] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4189'. [ 1105.007568][T17682] delete_channel: no stack [ 1105.381649][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4198'. [ 1105.420730][T17696] netlink: 'syz.2.4198': attribute type 21 has an invalid length. [ 1105.908226][T17715] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.4206'. [ 1105.980788][T17719] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4208'. [ 1105.999525][T17719] bridge_slave_1: default FDB implementation only supports local addresses [ 1106.469771][T17727] delete_channel: no stack [ 1106.492586][T17733] netlink: 'syz.5.4213': attribute type 3 has an invalid length. [ 1106.506384][T17733] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4213'. [ 1108.101169][T17765] netlink: 'syz.3.4228': attribute type 3 has an invalid length. [ 1108.119549][T17765] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4228'. [ 1108.343780][T17775] netlink: 22 bytes leftover after parsing attributes in process `syz.0.4231'. [ 1108.402794][T17777] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.4232'. [ 1108.990273][T17793] FAULT_INJECTION: forcing a failure. [ 1108.990273][T17793] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.096621][T17793] CPU: 0 PID: 17793 Comm: syz.3.4240 Not tainted syzkaller #0 [ 1109.104157][T17793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1109.114236][T17793] Call Trace: [ 1109.117542][T17793] [ 1109.120521][T17793] dump_stack_lvl+0x188/0x24e [ 1109.125268][T17793] ? show_regs_print_info+0x12/0x12 [ 1109.130527][T17793] ? load_image+0x400/0x400 [ 1109.135074][T17793] ? __might_sleep+0xd0/0xd0 [ 1109.139693][T17793] ? __lock_acquire+0x7d10/0x7d10 [ 1109.144767][T17793] should_fail_ex+0x399/0x4d0 [ 1109.149513][T17793] should_failslab+0x5/0x20 [ 1109.154041][T17793] slab_pre_alloc_hook+0x59/0x310 [ 1109.159110][T17793] ? file_end_write+0x156/0x250 [ 1109.164030][T17793] kmem_cache_alloc+0x56/0x2f0 [ 1109.168833][T17793] ? getname_flags+0xb7/0x500 [ 1109.173553][T17793] getname_flags+0xb7/0x500 [ 1109.178103][T17793] do_sys_openat2+0xdd/0x4b0 [ 1109.182742][T17793] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1109.188940][T17793] ? do_sys_open+0xe0/0xe0 [ 1109.193393][T17793] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1109.199409][T17793] ? lock_chain_count+0x20/0x20 [ 1109.204300][T17793] __x64_sys_openat+0x135/0x160 [ 1109.209204][T17793] do_syscall_64+0x4c/0xa0 [ 1109.213662][T17793] ? clear_bhb_loop+0x60/0xb0 [ 1109.218379][T17793] ? clear_bhb_loop+0x60/0xb0 [ 1109.223115][T17793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1109.229045][T17793] RIP: 0033:0x7f1d0875d04e [ 1109.233489][T17793] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1109.253129][T17793] RSP: 002b:00007f1d096deec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1109.261579][T17793] RAX: ffffffffffffffda RBX: 00007f1d096df6c0 RCX: 00007f1d0875d04e [ 1109.269563][T17793] RDX: 0000000000000002 RSI: 00007f1d096def90 RDI: ffffffffffffff9c [ 1109.277555][T17793] RBP: 00007f1d096df090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.285553][T17793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.293548][T17793] R13: 00007f1d08a16038 R14: 00007f1d08a15fa0 R15: 00007ffe96828f28 [ 1109.301582][T17793] [ 1109.751332][T17803] delete_channel: no stack [ 1109.984497][T17815] netlink: 22 bytes leftover after parsing attributes in process `syz.5.4247'. [ 1110.350454][T17829] netlink: 'syz.5.4252': attribute type 3 has an invalid length. [ 1110.376793][T17829] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4252'. [ 1111.089340][T17855] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4262'. [ 1113.594381][T17864] netlink: 'syz.1.4266': attribute type 3 has an invalid length. [ 1113.632997][T17864] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4266'. [ 1114.243148][T17891] FAULT_INJECTION: forcing a failure. [ 1114.243148][T17891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.273723][T17891] CPU: 1 PID: 17891 Comm: syz.2.4278 Not tainted syzkaller #0 [ 1114.281356][T17891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1114.291446][T17891] Call Trace: [ 1114.294936][T17891] [ 1114.297916][T17891] dump_stack_lvl+0x188/0x24e [ 1114.302709][T17891] ? show_regs_print_info+0x12/0x12 [ 1114.307973][T17891] ? load_image+0x400/0x400 [ 1114.312543][T17891] ? __lock_acquire+0x7d10/0x7d10 [ 1114.317637][T17891] should_fail_ex+0x399/0x4d0 [ 1114.322370][T17891] _copy_from_user+0x2c/0x170 [ 1114.327090][T17891] bpf_prog_test_run_skb+0x262/0x12a0 [ 1114.332516][T17891] ? __fget_files+0x28/0x4b0 [ 1114.337152][T17891] ? __fget_files+0x28/0x4b0 [ 1114.341791][T17891] ? __fget_files+0x43d/0x4b0 [ 1114.346526][T17891] ? cpu_online+0xa0/0xa0 [ 1114.350898][T17891] bpf_prog_test_run+0x31e/0x390 [ 1114.355891][T17891] __sys_bpf+0x62b/0x780 [ 1114.360186][T17891] ? bpf_link_show_fdinfo+0x380/0x380 [ 1114.365627][T17891] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1114.371849][T17891] __x64_sys_bpf+0x78/0x90 [ 1114.376305][T17891] do_syscall_64+0x4c/0xa0 [ 1114.380763][T17891] ? clear_bhb_loop+0x60/0xb0 [ 1114.385495][T17891] ? clear_bhb_loop+0x60/0xb0 [ 1114.390260][T17891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1114.396204][T17891] RIP: 0033:0x7ff0dab9c819 [ 1114.400660][T17891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.420397][T17891] RSP: 002b:00007ff0db976028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1114.428941][T17891] RAX: ffffffffffffffda RBX: 00007ff0dae15fa0 RCX: 00007ff0dab9c819 [ 1114.436954][T17891] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1114.444967][T17891] RBP: 00007ff0db976090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.452997][T17891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.460998][T17891] R13: 00007ff0dae16038 R14: 00007ff0dae15fa0 R15: 00007fff7bf40888 [ 1114.469118][T17891] [ 1115.768869][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.775291][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.368679][T17897] netlink: 'syz.5.4281': attribute type 3 has an invalid length. [ 1117.376876][T17897] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4281'. [ 1117.847056][T13431] Bluetooth: hci4: command 0x0406 tx timeout [ 1120.630172][T17932] netlink: 'syz.5.4295': attribute type 3 has an invalid length. [ 1120.660004][T17932] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4295'. [ 1124.134027][T17958] netlink: 'syz.3.4303': attribute type 1 has an invalid length. [ 1124.274535][T17963] FAULT_INJECTION: forcing a failure. [ 1124.274535][T17963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.295758][T17958] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.4303'. [ 1124.411180][T17963] CPU: 0 PID: 17963 Comm: syz.1.4306 Not tainted syzkaller #0 [ 1124.418741][T17963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1124.428866][T17963] Call Trace: [ 1124.432219][T17963] [ 1124.435206][T17963] dump_stack_lvl+0x188/0x24e [ 1124.439980][T17963] ? show_regs_print_info+0x12/0x12 [ 1124.445343][T17963] ? load_image+0x400/0x400 [ 1124.449925][T17963] ? __lock_acquire+0x7d10/0x7d10 [ 1124.455027][T17963] ? snprintf+0xe5/0x140 [ 1124.459367][T17963] should_fail_ex+0x399/0x4d0 [ 1124.464155][T17963] _copy_to_user+0x2c/0x130 [ 1124.468761][T17963] simple_read_from_buffer+0xe3/0x150 [ 1124.474228][T17963] proc_fail_nth_read+0x1a6/0x220 [ 1124.479339][T17963] ? proc_fault_inject_write+0x310/0x310 [ 1124.485089][T17963] ? fsnotify_perm+0x248/0x550 [ 1124.489959][T17963] ? proc_fault_inject_write+0x310/0x310 [ 1124.495673][T17963] vfs_read+0x2de/0xa00 [ 1124.499946][T17963] ? kernel_read+0x1e0/0x1e0 [ 1124.504681][T17963] ? __fget_files+0x28/0x4b0 [ 1124.509368][T17963] ? __fget_files+0x28/0x4b0 [ 1124.514065][T17963] ? __fget_files+0x43d/0x4b0 [ 1124.518867][T17963] ? __fdget_pos+0x2ae/0x360 [ 1124.523532][T17963] ? ksys_read+0x71/0x250 [ 1124.527975][T17963] ksys_read+0x14c/0x250 [ 1124.532331][T17963] ? vfs_write+0xa30/0xa30 [ 1124.536859][T17963] ? lockdep_hardirqs_on+0x94/0x140 [ 1124.542140][T17963] do_syscall_64+0x4c/0xa0 [ 1124.546625][T17963] ? clear_bhb_loop+0x60/0xb0 [ 1124.551409][T17963] ? clear_bhb_loop+0x60/0xb0 [ 1124.556174][T17963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1124.562147][T17963] RIP: 0033:0x7f4c2715d04e [ 1124.566631][T17963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1124.586308][T17963] RSP: 002b:00007f4c27ffffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1124.594811][T17963] RAX: ffffffffffffffda RBX: 00007f4c280006c0 RCX: 00007f4c2715d04e [ 1124.602842][T17963] RDX: 000000000000000f RSI: 00007f4c280000a0 RDI: 0000000000000005 [ 1124.610967][T17963] RBP: 00007f4c28000090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.619012][T17963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.627051][T17963] R13: 00007f4c27416128 R14: 00007f4c27416090 R15: 00007ffc9af48d08 [ 1124.635138][T17963] [ 1125.400171][T17954] netlink: 'syz.2.4305': attribute type 12 has an invalid length. [ 1125.420242][T17954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4305'. [ 1125.713112][T17975] netlink: 'syz.0.4311': attribute type 3 has an invalid length. [ 1125.777689][T17975] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4311'. [ 1126.190600][T17990] netlink: 'syz.0.4316': attribute type 3 has an invalid length. [ 1126.230435][T17990] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4316'. [ 1129.310137][T18004] delete_channel: no stack [ 1129.549132][T18015] netlink: 'syz.2.4327': attribute type 3 has an invalid length. [ 1129.603484][T18015] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4327'. [ 1129.720504][T18020] netlink: 'syz.1.4329': attribute type 10 has an invalid length. [ 1129.737067][T18020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4329'. [ 1129.748446][T18020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1129.989850][T18027] netlink: 'syz.2.4332': attribute type 22 has an invalid length. [ 1130.013085][T18027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4332'. [ 1133.530818][T18051] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4336'. [ 1133.820034][T18065] netlink: 'syz.0.4342': attribute type 3 has an invalid length. [ 1133.853627][T18065] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4342'. [ 1133.904138][T18072] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1136.251456][ T28] INFO: task syz.4.3652:16107 blocked for more than 143 seconds. [ 1136.261285][ T28] Not tainted syzkaller #0 [ 1136.266284][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1136.305740][ T28] task:syz.4.3652 state:D stack:27472 pid:16107 ppid:14588 flags:0x00004004 [ 1136.333822][ T28] Call Trace: [ 1136.360056][ T28] [ 1136.363087][ T28] __schedule+0x11d1/0x40e0 [ 1136.380360][ T28] ? __mutex_lock+0x1ab/0xaf0 [ 1136.385134][ T28] ? __sched_text_start+0x8/0x8 [ 1136.416558][ T28] ? task_work_cancel+0xa1/0x220 [ 1136.425343][ T28] ? task_work_cancel_func+0x210/0x210 [ 1136.456563][ T28] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1136.462311][ T28] ? _free_event+0xfd/0x10a0 [ 1136.496590][ T28] schedule+0xb9/0x180 [ 1136.500834][ T28] _free_event+0x171/0x10a0 [ 1136.505687][ T28] ? perf_mmap+0x13d0/0x13d0 [ 1136.526596][ T28] ? perf_mmap+0x13d0/0x13d0 [ 1136.531298][ T28] perf_event_release_kernel+0x83e/0x8d0 [ 1136.556675][ T28] ? __might_sleep+0xd0/0xd0 [ 1136.561390][ T28] ? calc_timer_values+0x410/0x410 [ 1136.596517][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1136.602611][ T28] ? perf_mmap+0x13d0/0x13d0 [ 1136.616549][ T28] perf_release+0x37/0x40 [ 1136.620982][ T28] __fput+0x22c/0x920 [ 1136.640846][ T28] task_work_run+0x1d0/0x260 [ 1136.645530][ T28] ? task_work_cancel+0x220/0x220 [ 1136.681809][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 1136.706520][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 1136.711917][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 1136.742579][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 1136.757461][ T28] do_syscall_64+0x58/0xa0 [ 1136.770346][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1136.783636][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1136.797876][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1136.813385][ T28] RIP: 0033:0x7fe79f79c819 [ 1136.826347][ T28] RSP: 002b:00007fe7a061f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1136.850093][ T28] RAX: 0000000000000000 RBX: 00007fe79fa15fa0 RCX: 00007fe79f79c819 [ 1136.878522][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1136.910589][ T28] RBP: 00007fe79f832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1136.932673][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1136.954843][ T28] R13: 00007fe79fa16038 R14: 00007fe79fa15fa0 R15: 00007fff10c72db8 [ 1136.978002][ T28] [ 1136.987343][ T28] [ 1136.987343][ T28] Showing all locks held in the system: [ 1137.008112][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1137.022725][ T28] #0: ffffffff8cb2df70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1137.052107][ T28] 1 lock held by rcu_tasks_trace/13: [ 1137.066864][ T28] #0: ffffffff8cb2e790 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1137.097852][ T28] 1 lock held by khungtaskd/28: [ 1137.117279][ T28] #0: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1137.138745][ T28] 2 locks held by kworker/1:3/3654: [ 1137.149164][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1137.160115][ T28] #1: ffffc900033c7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1137.174352][ T28] 2 locks held by getty/4031: [ 1137.179300][ T28] #0: ffff88803008c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1137.194973][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 1137.206826][ T28] 2 locks held by kworker/u4:8/5141: [ 1137.212167][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1137.224432][ T28] #1: ffffc9000362fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1137.235672][ T28] 2 locks held by kworker/u4:9/5417: [ 1137.241277][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1137.252586][ T28] #1: ffffc90002fe7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1137.263869][ T28] 2 locks held by kworker/u4:10/6709: [ 1137.269464][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1137.282789][ T28] #1: ffffc90003c3fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1137.295435][ T28] 3 locks held by kworker/u4:12/7665: [ 1137.302928][ T28] 1 lock held by syz.2.4348/18076: [ 1137.311405][ T28] #0: ffffffff8cb8c248 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x87/0x310 [ 1137.323191][ T28] 1 lock held by syz.3.4350/18080: [ 1137.332044][ T28] #0: ffffffff8cb8c248 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x87/0x310 [ 1137.343984][ T28] 3 locks held by syz.5.4360/18083: [ 1137.352702][ T28] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: bpf_xdp_link_attach+0xd2/0x490 [ 1137.363462][ T28] #1: ffffffff8dd4a488 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 1137.379500][ T28] #2: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1137.394638][ T28] 1 lock held by syz.5.4360/18088: [ 1137.403070][ T28] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0xaf/0x470 [ 1137.415906][ T28] 1 lock held by syz.5.4360/18090: [ 1137.424335][ T28] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 1137.435048][ T28] 2 locks held by syz.0.4347/18086: [ 1137.443835][ T28] 1 lock held by dhcpcd/18091: [ 1137.452713][ T28] #0: ffff88805c03a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1137.466049][ T28] 1 lock held by syz.1.4352/18094: [ 1137.472527][ T28] #0: ffffffff8cb8c248 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x87/0x310 [ 1137.488175][ T28] 1 lock held by syz.0.4351/18096: [ 1137.493349][ T28] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 1137.510870][ T28] 1 lock held by dhcpcd/18099: [ 1137.515704][ T28] #0: ffff888072974130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 1137.544117][T18090] netlink: 763 bytes leftover after parsing attributes in process `syz.5.4360'. [ 1137.545193][ T28] [ 1137.593825][ T28] ============================================= [ 1137.593825][ T28] [ 1137.622962][ T28] NMI backtrace for cpu 0 [ 1137.627368][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1137.634598][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1137.644685][ T28] Call Trace: [ 1137.648063][ T28] [ 1137.651030][ T28] dump_stack_lvl+0x188/0x24e [ 1137.655760][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 1137.661087][ T28] ? show_regs_print_info+0x12/0x12 [ 1137.666343][ T28] ? load_image+0x400/0x400 [ 1137.670884][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1137.675648][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 1137.680920][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1137.685915][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1137.692119][ T28] ? _printk+0xda/0x130 [ 1137.696310][ T28] ? load_image+0x400/0x400 [ 1137.700866][ T28] ? load_image+0x400/0x400 [ 1137.705416][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1137.711577][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1137.717692][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1137.723712][ T28] watchdog+0xeee/0xf30 [ 1137.727910][ T28] ? watchdog+0x1ed/0xf30 [ 1137.732274][ T28] kthread+0x29d/0x330 [ 1137.736368][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1137.741441][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1137.746162][ T28] ret_from_fork+0x1f/0x30 [ 1137.750616][ T28] [ 1137.754180][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1137.759521][ C1] NMI backtrace for cpu 1 [ 1137.759532][ C1] CPU: 1 PID: 6709 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1137.759551][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1137.759562][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1137.759591][ C1] RIP: 0010:prep_compound_page+0x144/0x4c0 [ 1137.759619][ C1] Code: 03 42 80 3c 38 00 74 05 e8 19 f5 0b 00 4b 89 6c 2c e0 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 9a 4c 89 f7 e8 fe f4 0b 00 eb 90 <48> 8d 7b 50 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a6 02 [ 1137.759635][ C1] RSP: 0018:ffffc90003c3f660 EFLAGS: 00000246 [ 1137.759649][ C1] RAX: 1ffffd40002896bd RBX: ffffea000144b400 RCX: 0000000000000003 [ 1137.759663][ C1] RDX: fffffffffffffffc RSI: 0000000000000008 RDI: ffffea000144b5c8 [ 1137.759676][ C1] RBP: ffffea000144b401 R08: ffffea000144b407 R09: 1ffffd4000289680 [ 1137.759690][ C1] R10: dffffc0000000000 R11: fffff94000289681 R12: ffffea000144b568 [ 1137.759710][ C1] R13: 00000000000000c0 R14: ffffea000144b628 R15: dffffc0000000000 [ 1137.759723][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1137.759740][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1137.759753][ C1] CR2: 00007f4c273e92f8 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 1137.759769][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1137.759781][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1137.759793][ C1] Call Trace: [ 1137.759798][ C1] [ 1137.759808][ C1] get_page_from_freelist+0x1a37/0x1ab0 [ 1137.759841][ C1] ? stack_trace_save+0xa6/0xf0 [ 1137.759863][ C1] ? verify_lock_unused+0x140/0x140 [ 1137.759890][ C1] ? __stack_depot_save+0x35/0x460 [ 1137.759918][ C1] ? __next_zones_zonelist+0x99/0x120 [ 1137.759943][ C1] __alloc_pages+0x1ec/0x4f0 [ 1137.759970][ C1] ? zone_statistics+0x170/0x170 [ 1137.760004][ C1] alloc_slab_page+0x5d/0x160 [ 1137.760028][ C1] new_slab+0x87/0x2c0 [ 1137.760050][ C1] ___slab_alloc+0xbc6/0x1240 [ 1137.760072][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 1137.760100][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 1137.760126][ C1] __kmem_cache_alloc_node+0x1a0/0x260 [ 1137.760149][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 1137.760174][ C1] __kmalloc_node_track_caller+0x9e/0x230 [ 1137.760205][ C1] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 1137.760230][ C1] __alloc_skb+0x22a/0x7e0 [ 1137.760259][ C1] nsim_dev_trap_report_work+0x28f/0xaf0 [ 1137.760293][ C1] ? process_one_work+0x7b0/0x1160 [ 1137.760314][ C1] process_one_work+0x8a2/0x1160 [ 1137.760342][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1137.760362][ C1] ? _raw_spin_lock_irq+0x86/0xf0 [ 1137.760385][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1137.760404][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1137.760424][ C1] ? kthread_data+0x4b/0xc0 [ 1137.760454][ C1] worker_thread+0xaa2/0x1270 [ 1137.760484][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1137.760513][ C1] kthread+0x29d/0x330 [ 1137.760528][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1137.760548][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1137.760565][ C1] ret_from_fork+0x1f/0x30 [ 1137.760596][ C1] [ 1138.096045][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1138.102957][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1138.110206][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1138.120299][ T28] Call Trace: [ 1138.123610][ T28] [ 1138.126585][ T28] dump_stack_lvl+0x188/0x24e [ 1138.131334][ T28] ? memcpy+0x3c/0x60 [ 1138.135367][ T28] ? show_regs_print_info+0x12/0x12 [ 1138.140660][ T28] ? load_image+0x400/0x400 [ 1138.145257][ T28] panic+0x2e5/0x730 [ 1138.149211][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1138.154899][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1138.159487][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1138.165094][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1138.171306][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1138.177625][ T28] watchdog+0xf2d/0xf30 [ 1138.181830][ T28] ? watchdog+0x1ed/0xf30 [ 1138.186231][ T28] kthread+0x29d/0x330 [ 1138.190341][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1138.195417][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1138.200059][ T28] ret_from_fork+0x1f/0x30 [ 1138.204554][ T28] [ 1138.208196][ T28] Kernel Offset: disabled [ 1138.212544][ T28] Rebooting in 86400 seconds..