last executing test programs: 29m56.948563292s ago: executing program 1 (id=1943): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='-cpu'], 0x5) r3 = openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x9) 29m56.581499751s ago: executing program 1 (id=1947): perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}, 0x200, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 29m56.191972681s ago: executing program 1 (id=1948): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff00000000030000000000000000000000030000000000000000"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf"], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x12, 0x0, 0x0, 0x6}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4090) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 29m55.954438407s ago: executing program 1 (id=1949): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000034000b63717a3c4a0ed8985b0808aa78", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x40000022) 29m55.842465381s ago: executing program 1 (id=1950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0x3) 29m54.454880106s ago: executing program 1 (id=1953): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r1}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x6) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000d5b2307878b6a5229917ebb4029a0bea3522c1f874a88524b8256e9616dc84ef9f539900f13815da3cbc479df45e1acd7454a155dd43645345f9a4cddab3d6d9d40e13de56bf656d77b7451f09e02bcb6cf96a4c0fce8ff74fe80460b51e50b4d8105ae605917a45734dbd377e5f99ad246b7485"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 29m39.378127129s ago: executing program 32 (id=1953): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r1}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x6) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000d5b2307878b6a5229917ebb4029a0bea3522c1f874a88524b8256e9616dc84ef9f539900f13815da3cbc479df45e1acd7454a155dd43645345f9a4cddab3d6d9d40e13de56bf656d77b7451f09e02bcb6cf96a4c0fce8ff74fe80460b51e50b4d8105ae605917a45734dbd377e5f99ad246b7485"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 20m34.483232839s ago: executing program 5 (id=5866): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000060000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000540), 0x4) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x12000) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x6, 0x3, 0x100}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x6, 0x9, 0x0, r5, 0x100}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000280), &(0x7f00000001c0)=r5}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000040)='FROZEN\x00', 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(r8, 0x0, 0x2, 0x0) 20m33.497855074s ago: executing program 5 (id=5877): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x38b433a4}, 0x104080, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001540)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0x400b8c8) socket$kcm(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000060000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) getpid() openat$ppp(0xffffffffffffff9c, 0x0, 0x84401, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r6, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0xe, &(0x7f00000011c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0xae, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) sendmsg$inet(r7, &(0x7f0000001500)={&(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000a00)="d574e8c1d1d356019b27173686d240c8526a1b7c044ea01bbcde6ffbacbe50697818fe5755522cbedff6d960df1d0758225067361845d654950a696c777f95a7c1f2d1d3892719ddd0c384cbb091937905f723d33748a3515ef178c8fc7257a36cabd77b1f0e6552c5b7ee20a3101ee3a78cd90c80934f972fda461ac94a1be7ef561d6c2fb45f83f98833d84147064aa12ba3fa9215f49d688cc152f114ddf1d21b2bf8e6ae7cb82270", 0xaa}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)}, {&(0x7f0000000b80)="7a44bbace74365e85b7fcf52ad9c4ef64d4f54da66d5efc350688292a6cce52b5f", 0x21}, {&(0x7f0000000bc0)="9c60ba75d81df2481b84004dcb2a2aad9ae563534df4e07b64df236fe46e693f51784b8b5b70a2a9ded05a94c68a9a4310a28a219c39a42a846999f6259b0f4b5fa9dacef13cbd443945611dfe3e70e15a8ecea8c7a98d6ad9abc824168d100283e620fc1be2926658425ef0a77afe1519f911e03c61ce43241846a59e116d651f5d447a3c9d97401ce697935955303559a38140e98aced439630b5b09156b90e3bec11624994bb1ca4dea7efd8f5322e3129b3c64a6015cec586bcf8de6", 0xbe}, {&(0x7f0000000c80)="7641c8e8f3da4d9f7561a84f7a58866deef24a6a6bcd9b8c484d6464cc5729680c06b28cb293ef70f557204d836046f5b167e9ac6effed952d931c8ed375e25b3d6251f9bb031e8d9a766d4ecc83ed92025c57d50e8cf86491949527b4726286cce6e8a884b145a504dc5ed8a1152a750bb246caa7ecd88f4e8e5ea7c402ccc8b5f0e9a1977e51dc8e0426185626999d8d0ee7a7ee9b9e425e637598a1530c995b687f9346f9f51314eade45f4d935ad21ed8f0bf7e7f172439de5b414950b11063b3e", 0xc3}, {&(0x7f0000000d80)="78189900087771686e0147757b010fde609386021498a7f54bf238127deda7db374c516163b15c422a6fd99822f641a0a4d41ab421964266a7b8ed7c08b3e43ca91edf2a3e59b4ff5bd487fa0d7879865352969935e0981daae45e66bb47ddc27008381fc8847331aaee1ffb26569cd17696fcce64a1e1d3f776cff881b2f68ae7dcec4bff4b4333f9dbe4713a9240c24ec0b83d71ff64c020561ec3ae49e9ec7dca80bc8c7bd6302a85f6d30126a3089a09f32656a2944efc6ddbf30dc59afa9974de45dcadfc9f68a2b87940522329241ec1b96372e115c3f95803", 0xdc}, {&(0x7f0000000e80)="c34fedf1fdaeb57474c15ed43783ce4caf332aaef9ad48ffaea1c6c2cdd8636f4e57a5ad9c27d878115668e2b18f26a486bdc718db1667b8be5417a6f5a30153088850d9c0e0da267a11b4e2157677f1c15ec51090d6b30489a8f9e6320a5b9b95587fa1c9cdb869822761c26484c850c61a1fb9180136ab10baa23aea29f28b11ce774d659f4f4516b2fcd3139429def0031468b0361fbfa24e9bc4817acb", 0x9f}, {&(0x7f0000000f40)="b60a110c", 0x4}, {&(0x7f0000000f80)="53763f48bcd8e5c946f76f1cac5a2d6d8d61c322618deb58eb2d0f48692e19168579c518e52158d3ff99378ba960b3b993788f611473da02db43aed4c59f7bc58790c707fad4af23defba6040972fc5641b7bf942e082ff6cfa7", 0x5a}], 0xa, &(0x7f0000001400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @local}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x6, [{@loopback, 0x7}, {@private=0xa010100, 0x850f}]}, @rr={0x7, 0x1b, 0x41, [@multicast1, @broadcast, @multicast1, @private=0xa010100, @multicast2, @multicast1]}, @rr={0x7, 0xf, 0xe0, [@rand_addr=0x64010102, @multicast1, @multicast1]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x67, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x1, 0x4, "7895"}, {0x5, 0x2}]}, @generic={0x94, 0xd, "b3bea40270fd052e6df017"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0xe8}, 0x4000001) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000080)=@xdp={0x2c, 0xc, r8, 0x28}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="28e0962148b76db430082b5c6cef1b43341bc89f55c68b426085d790cea54fc098daf47470842237547eb3b44174bd6ca8d05d38f69fb028d27969f1079e9a2a102f0282f58d9d4baa33c8158a9c73f71d6674202ad5b6ce4784ad83c9ccdd8515fe0fcfda280ee3d84931885120", 0x6e}, {&(0x7f0000000380)="1384427b1fd5c284fe69d71719b4e329e08e4bfde971e5f5d407e9364e42e119c20f2cae67886ddf2c42d2a59b94ad9f9abed69a767b5bb7508ad100b676bfd2f13c84dfe5c9a754db914489157d555ff81d2e96e51ec5e8fb141c769687a9", 0x5f}, {&(0x7f0000000400)="cca9e699f8777e28ae7b24da0e", 0xd}], 0x3}, 0x800) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b904020000000080000000001500100014000000000009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e9701", 0xd7}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socket$kcm(0x29, 0x3, 0x0) 20m33.357540498s ago: executing program 5 (id=5880): r0 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108906, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000a000000010100000000000008320600", @ANYRES32, @ANYBLOB="4131000000000000000000928e9c2676cd7476bd03eac3000000000000000000593cbe7fd104d8efbe6c70eeedc6163f47cd3d769abc7955751653df3792b1cfe8f5e2db6f6edca0ff7a28fead6c37eac3fc997b971d3f846a300929a122bd0d93adaa1f8d1b769491a2c5317cd5c3a08093b6636d9e6a060e6365388ac56d8b570f06dff188", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000002010000000500"/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x619, r4}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2105, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440200, 0x0) sendmsg$inet(r5, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x2000000000000104, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$tipc(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="cf9a37a7805e9dfa339b1345cbbe06af9ba2b4e94aabb77d3f76a35f178f5ff6bd6da231bcc37a471d4067db34ac9ae4f68092c689bf44967baa474d5ebe27382de587bf97d4301ddf6d3a8f0d7423c9", 0x50}, {&(0x7f0000000300)="c35ed5a66bd80ff615fa16b39498f1d3b5b32b40f837fa26d8cc0488d092d671e1a0cbec381a35ad5a412db6b2f74ef5821a3173a361663b8ea77773980673c28787ca9cbaf9281554c1f930c2cf818ef22edcecb60cbba2b2f4b84e1d944a4ac3887d673d91077fa96fc2e122dcccfdcd7b748edbcae7906d1861797d80adc4b553e0eb237848a06f07d2090d3769589318ff80b8b4b9dc68241d6b52cb621a822e90f419b2cbb03e246fb4b7187a3d1517968aca4325a420bc026209fb11b82b93c722e2581a28e6be4d9aaac997fceca851", 0xd3}, {&(0x7f0000000400)="d90a3240ee7981540c4188f37c0e510f", 0x10}, {&(0x7f0000000500)="7c056ab516ed15c6311ecf50c1c63ffbc52dec220581a3736fb88708da97a1dbd151e74870016eed494dc7fd2831552098f2a4", 0x33}, {&(0x7f00000005c0)="225a65ecf85b1e8db31fb2bc2e454878899b819d100799aea6c53ff177ee9dc464ba3aa592d235f65d8331e8cb53963bcdcef27a91a9602718b6147932b5bad61052b6acfe4c52693b72bec815e0ca01e13682c1641ac41c19f269f2cf25cdc583e55c9f37684e9a814645ad8d7d7e6edad321a655b57a8d4d37a98d3a270fb314e2812c04f2c20c13ded9e0c4abbbd66d0b3faa2463e1be5cb43fc7f424027ead3b254d5fbdfc", 0xa7}, {&(0x7f00000006c0)="7e562cacc8b0f203384644a0e779823e9ad300bb6e4b7cf96d40ded7fdb0beef2009198d303798e150550d5723193d9012463a88d540ab6da73e4976bb1bea02bc2cb77e0c46ac390279feb8397e5de250fa54cb66b82d04c0dbfa3082f1da8a942d8661ae44ad005f3cba332213a25936566d0e338c173fbb96915558ddab1d132e7d7b3d9999a02ea82205b8e8fc2efd0f3f3b57a8b9b09e41a67cff278f8cfe0e79d2e5e0189ac41068b703cdc7ae316b296276c32c5817f5dc4246a0b031e4cae06643c858c6f7f287eb246005554d331e0b97b9ccaafe981f2e40bad6c1683c4b4a868f735ce2ecdd1f", 0xec}, {&(0x7f00000007c0)="18c2a15e73713d4e2b5557114408a73186f2878edba6885e869408a8ca047175e08e59287d941121f47226909167e5a1b394bb6cf3601386534748bd170c7027cc59ea591a15ea5c3b615ced4f3731b490ade96d978f4d426c1e1dcdfe7ffd44a30799a825d49bac2f1eccba0c6269231be9f5b50aaf6e52b72e6b98b2b678eb0ad6", 0x82}], 0x7, &(0x7f0000000980), 0x0, 0x4004010}, 0x4) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079103800000000001e500000000000009500000011300000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 20m30.029425224s ago: executing program 5 (id=5896): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc6, 0xc6, 0x3, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0x6}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x77, 0x4}, @datasec={0x3, 0x4, 0x0, 0xf, 0x2, [{0x3, 0x9}, {0x3, 0x10, 0x4}, {0x2, 0x9470, 0x10ed}, {0x2, 0x7, 0xa}], "c58b"}, @enum={0xc, 0x5, 0x0, 0x6, 0x4, [{0x2, 0xac05}, {0x1, 0x9}, {0x0, 0xfffffffe}, {0x4, 0x6db}, {0x8, 0x3}]}, @volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2}}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x68, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000440)=""/2, 0xe3, 0x2, 0x1}, 0x28) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x2000000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffe, r3}, 0x38) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c003", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100080000000000000038000000380000000c0000050000000000000084010000000a000000030000000600000000000000000600000000e0ff0d02000000010000000041002e2e61610061005f00"], 0x0, 0x5c}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000001980)=""/4096, 0x27, 0x1000, 0x1}, 0x28) r5 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000700)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) 20m29.512316748s ago: executing program 5 (id=5903): syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/cgroup\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x800, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001001000050000e6794d0ca497000500000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/cgroup\x00') 20m29.267809954s ago: executing program 5 (id=5906): socketpair(0x2, 0x4, 0x4, &(0x7f0000000080)) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x40000004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x13, 0x1, 0x9, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x200000000000006, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETFEATURES(r2, 0x5452, &(0x7f00000013c0)) write$cgroup_pressure(r2, &(0x7f00000000c0)={'some', 0x20, 0x3ff, 0x20, 0x9}, 0x2f) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="d5dd94de00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24864, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, 0x0, 0x840) recvmsg$kcm(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40010042) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0xfff}, 0x104140, 0x400000, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000040)) 20m14.254191785s ago: executing program 33 (id=5906): socketpair(0x2, 0x4, 0x4, &(0x7f0000000080)) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff0000000072030000000000001d400500000000004704000001ed000072030200030000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x40000004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x13, 0x1, 0x9, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x200000000000006, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETFEATURES(r2, 0x5452, &(0x7f00000013c0)) write$cgroup_pressure(r2, &(0x7f00000000c0)={'some', 0x20, 0x3ff, 0x20, 0x9}, 0x2f) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="d5dd94de00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24864, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, 0x0, 0x840) recvmsg$kcm(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40010042) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0xfff}, 0x104140, 0x400000, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000040)) 26.625293214s ago: executing program 0 (id=11193): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000285000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0xcb1f, 0x0, 0x0, 0x100, 0x16, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x6}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 23.984882341s ago: executing program 0 (id=11205): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001000)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8991, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 23.63318357s ago: executing program 6 (id=11209): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) 21.810839936s ago: executing program 0 (id=11213): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa80, 0x400000, 0x10, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r1, 0x4, r0}, 0x10) 21.090007925s ago: executing program 0 (id=11217): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 20.959942978s ago: executing program 6 (id=11218): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce060000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.995909043s ago: executing program 0 (id=11223): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xfc4, 0x0, 0x0, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000", @ANYRES32=0x0, @ANYRES16], 0x48) 19.920938694s ago: executing program 6 (id=11225): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001000)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8991, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 18.89284634s ago: executing program 6 (id=11226): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa80, 0x400000, 0x10, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r1, 0x4, r0}, 0x10) 18.88616582s ago: executing program 0 (id=11236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x7bc0ecde, 0x100, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x20, 0x2, 0x4, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRESHEX=r1, @ANYBLOB="00000000000000000000000000000000000000008488b665235512927fa46e43687da6ca11b8ab45f1cea77db1b2ab2eb76e63db1ff0b40bff802c6973000400002caeda4fa4dfe6b3fc73542822d80cd35e15cf6ddb2ca91e4cfa646d60febe9cd7cf77ecf55a74ec7e9600d4701025023b92e09ff7da28415e6935b8ef79e042c737017799193193f8ce0549729bcb8ca0aa7fcea9457a30ef6e56eeb5fd47362a8f00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 17.433315177s ago: executing program 6 (id=11231): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair(0x10, 0x80000, 0xe, &(0x7f0000001380)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r5 = openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x6a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000e00000000000000", @ANYRES8, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 15.866445317s ago: executing program 6 (id=11233): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x9b, &(0x7f0000000580)}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 14.605342869s ago: executing program 4 (id=11239): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, &(0x7f00000004c0)=""/204, 0x0, 0x0, 0x7, 0x1}, 0x38) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080)) 14.275922597s ago: executing program 4 (id=11241): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x5, 0x28, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8946, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000028c0)={0xffffffffffffffff, 0xe0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002640)=[0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f0000002680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000002700), &(0x7f0000002740), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000002780)}}, 0x10) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 13.274138713s ago: executing program 4 (id=11243): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x101900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004430000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="02"], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 13.035905479s ago: executing program 3 (id=11244): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x101}, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x31, 0x0}, 0x0) 12.802442995s ago: executing program 4 (id=11245): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000008b000000050010000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, &(0x7f00000002c0), 0x0}, 0x20) 12.58511753s ago: executing program 3 (id=11246): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000880), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xc, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x7, 0xfd, &(0x7f00000005c0)=""/253, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_pressure(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2100, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 12.332870657s ago: executing program 4 (id=11248): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x5, 0x28, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8946, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000028c0)={0xffffffffffffffff, 0xe0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640), 0x0, 0x5d, &(0x7f0000002680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000002700), &(0x7f0000002740), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000002780)}}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 10.843548775s ago: executing program 3 (id=11250): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff00000000030000000000000000000000030000000000000000"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000", 0x1c}, {&(0x7f0000000080)}, {&(0x7f0000000140)="9d7fa74553ce3f5d59516d02ede9999f3b073dd99175af73c8a3248a83807167484645540f8749acf5a7b3fe4fbe939939d14b68517342797d181af72c28b57d02234901e359", 0x46}, {&(0x7f0000000340)="12c39a00e0afe61bf7be1383722dc41b141b2e325c18bc7d1f9c2c0d4e8f7e8055e109410dbf093ac0342c3e9ca417cba49e00b2cf6f2bc1f61db74fdb8c4e5e8f714f2f8d23c88475d5aeae3ac10e941d563de1fe9444a84395911574c4a28d2172c585a5bf79232e4c901cae38ac974b8cd2b2d2066aab8669743043ebca311b81f25b2dd5df5af2085a117461cfc249bfc7837cb6d802f5db27dd5f3a5530e6d9f2fef425106e61817f428f46890dde4e0aaf39a899e97cac2cf8b13b12b4f013c8cf1718fce8882a1a6b3469beedc74cd098e8ca41cd0af438d44004437c7359386972149f5ab5b3a0e518c4be09", 0xf0}], 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x2, &(0x7f0000000000)=r4, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/file0/file0\x00', r4, 0x4000, r1}, 0x18) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) mkdir(&(0x7f0000000500)='./cgroup/file0/file0\x00', 0x100) 7.820431262s ago: executing program 3 (id=11251): r0 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108906, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000a000000010100000000000008320600", @ANYRES32, @ANYBLOB="4131000000000000000000928e9c2676cd7476bd03eac3000000000000000000593cbe7fd104d8efbe6c70eeedc6163f47cd3d769abc7955751653df3792b1cfe8f5e2db6f6edca0ff7a28fead6c37eac3fc997b971d3f846a300929a122bd0d93adaa1f8d1b769491a2c5317cd5c3a08093b6636d9e6a060e6365388ac56d8b570f06dff188", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000002010000000500"/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x619, r4}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) close(r5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$tipc(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="cf9a37a7805e9dfa339b1345cbbe06af9ba2b4e94aabb77d3f76a35f178f5ff6bd6da231bcc37a471d4067db34ac9ae4f68092c689bf44967baa474d5ebe27382de587bf97d4301ddf6d3a8f0d7423c9", 0x50}, {&(0x7f0000000300)="c35ed5a66bd80ff615fa16b39498f1d3b5b32b40f837fa26d8cc0488d092d671e1a0cbec381a35ad5a412db6b2f74ef5821a3173a361663b8ea77773980673c28787ca9cbaf9281554c1f930c2cf818ef22edcecb60cbba2b2f4b84e1d944a4ac3887d673d91077fa96fc2e122dcccfdcd7b748edbcae7906d1861797d80adc4b553e0eb237848a06f07d2090d3769589318ff80b8b4b9dc68241d6b52cb621a822e90f419b2cbb03e246fb4b7187a3d1517968aca4325a420bc026209fb11b82b93c722e2581a28e6be4d9aaac997fceca851", 0xd3}, {&(0x7f0000000400)="d90a3240ee7981540c4188f37c0e510f", 0x10}, {&(0x7f0000000500)="7c056ab516ed15c6311ecf50c1c63ffbc52dec220581a3736fb88708da97a1dbd151e74870016eed494dc7fd2831552098f2a4", 0x33}, {&(0x7f00000005c0)="225a65ecf85b1e8db31fb2bc2e454878899b819d100799aea6c53ff177ee9dc464ba3aa592d235f65d8331e8cb53963bcdcef27a91a9602718b6147932b5bad61052b6acfe4c52693b72bec815e0ca01e13682c1641ac41c19f269f2cf25cdc583e55c9f37684e9a814645ad8d7d7e6edad321a655b57a8d4d37a98d3a270fb314e2812c04f2c20c13ded9e0c4abbbd66d0b3faa2463e1be5cb43fc7f424027ead3b254d5fbdfc", 0xa7}, {&(0x7f00000006c0)="7e562cacc8b0f203384644a0e779823e9ad300bb6e4b7cf96d40ded7fdb0beef2009198d303798e150550d5723193d9012463a88d540ab6da73e4976bb1bea02bc2cb77e0c46ac390279feb8397e5de250fa54cb66b82d04c0dbfa3082f1da8a942d8661ae44ad005f3cba332213a25936566d0e338c173fbb96915558ddab1d132e7d7b3d9999a02ea82205b8e8fc2efd0f3f3b57a8b9b09e41a67cff278f8cfe0e79d2e5e0189ac41068b703cdc7ae316b296276c32c5817f5dc4246a0b031e4cae06643c858c6f7f287eb246005554d331e0b97b9ccaafe981f2e40bad6c1683c4b4a868f735ce2ecdd1f", 0xec}, {&(0x7f00000007c0)="18c2a15e73713d4e2b5557114408a73186f2878edba6885e869408a8ca047175e08e59287d941121f47226909167e5a1b394bb6cf3601386534748bd170c7027cc59ea591a15ea5c3b615ced4f3731b490ade96d978f4d426c1e1dcdfe7ffd44a30799a825d49bac2f1eccba0c6269231be9f5b50aaf6e52b72e6b98b2b678eb0ad6", 0x82}], 0x7, &(0x7f0000000980), 0x0, 0x4004010}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079103800000000001e500000000000009500000011300000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 4.531871276s ago: executing program 4 (id=11253): r0 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108906, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000a00000001010000000000", @ANYRES32, @ANYBLOB="4131000000000000000000928e9c2676cd7476bd03eac3000000000000000000593cbe7fd104d8efbe6c70eeedc6163f47cd3d769abc7955751653df3792b1cfe8f5e2db6f6edca0ff7a28fead6c37eac3fc997b971d3f846a300929a122bd0d93adaa1f8d1b769491a2c5317cd5c3a08093b6636d9e6a060e6365388ac56d8b570f06dff188", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000002010000000500"/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000bc0)=ANY=[], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x619, r3}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2105, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440200, 0x0) sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x2000000000000104, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079103800000000001e500000000000009500000011300000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) 4.453243967s ago: executing program 2 (id=11254): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, r1}, 0x38) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, r3}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xa, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x9f, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xd, 0x5, 0x4, 0xe, 0x4004, r3, 0xcbc, '\x00', r5, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x108, 0x108, 0x3, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0xa}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0xa, 0x2}, {0xa, 0x1}]}, @fwd={0xa}, @union={0xc, 0x5, 0x0, 0x5, 0x1, 0x0, [{0x8, 0x4, 0x3daf}, {0xb, 0x0, 0x9}, {0xa, 0x0, 0x2}, {0xa, 0x0, 0x6f}, {0xf, 0x4, 0xba}]}, @enum64={0x5, 0x3, 0x0, 0x13, 0x0, 0x0, [{0xf, 0x6, 0x8}, {0x6, 0x0, 0xffff}, {0x5, 0x6, 0x3}]}, @float={0x6, 0x0, 0x0, 0x10, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0xc, 0x4}, {0xf, 0x8000}, {0x8, 0x3}, {0x6}]}]}, {0x0, [0x2e]}}, &(0x7f0000000740)=""/180, 0x123, 0xb4, 0x0, 0x200, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f00000008c0), &(0x7f0000000900)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socket$kcm(0x21, 0x2, 0x2) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000240)="19c17e61a0ce939f062a29cec9cef550d3f6a56c7e42109840d8115df30426e28259bd697756162b4619894299d0ccdaa4cd1f7cf3368c53979aa78601ed31641974416ec3bc2bc32a9b50574f0b278ccb6f8fa1efc44629e94294320ec68293fa1c85d8f246e6721146dd706d20cb363a05720c5c7b8f74537629f30a635c88ccb0fa994133d43993252e61d420f45880e3bb254df84f0065b79a310888a75eaaa2", &(0x7f0000000300)=""/128, &(0x7f0000000380)="57bb93b62c16dcab4f2d1aede8903806bb8c55c178854f49c051f044fd37bf7804097b35b8411777b5f9d03f5c8694a2bfbdc08e5a87b1fdb8fe241f953edaf31001ec35ee2ff6d5ae76c514fe518453c40b09f62b015d0da70db0e0ca16fdd258d2fea54720f34c67d2f06d438d234439d7d9d681b37caf4c6e37a9de3722983b74576b351291c4723fbfc9df43b73bec08f0da092dc6957f0b42a88643e4f44eb4f2e2cc7f9348d3c91805ecb3b2d565bf9ffb942378d46347adbe027f81381ae340cbd6babcb6", &(0x7f0000000480), 0x2, r1}, 0x38) 4.040140777s ago: executing program 2 (id=11255): r0 = socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000200)}, 0x20) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000020000000700000012000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x20000122, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073b7048b76b08e09d3eaf4700cf87caa9a807d709de1e955a1b394e7895dd2d40a6b3713dabcf3463fe8f77eb3a52421eb06904f963dca0ffc397070edb3bec9b03d76d2640726b56373bed2b0e83f556ea4984f2e71b1827f393b62d8cea0f2d844d29fccaaf687740262fb4d81174dff8c", @ANYRESDEC, @ANYRESDEC, @ANYRESHEX=r6, @ANYBLOB="74030127e2aeca76ade4", @ANYRESDEC=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x110, 0xd}], 0x10}, 0x800) 3.846761843s ago: executing program 34 (id=11236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x7bc0ecde, 0x100, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x20, 0x2, 0x4, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRESHEX=r1, @ANYBLOB="00000000000000000000000000000000000000008488b665235512927fa46e43687da6ca11b8ab45f1cea77db1b2ab2eb76e63db1ff0b40bff802c6973000400002caeda4fa4dfe6b3fc73542822d80cd35e15cf6ddb2ca91e4cfa646d60febe9cd7cf77ecf55a74ec7e9600d4701025023b92e09ff7da28415e6935b8ef79e042c737017799193193f8ce0549729bcb8ca0aa7fcea9457a30ef6e56eeb5fd47362a8f00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.823105473s ago: executing program 2 (id=11257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18ee6627ca99fd020000000100"/22], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x1402, 0xc2ba, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 3.511172421s ago: executing program 2 (id=11258): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000001c0)=r5) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="996822ce3899d7", 0x7}], 0x1, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4972}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff9d27}}], 0x60}, 0x844) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.959242601s ago: executing program 3 (id=11259): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0xa6, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.650996369s ago: executing program 2 (id=11260): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4048840) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x24000840) close(r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 544.035637ms ago: executing program 35 (id=11233): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x9b, &(0x7f0000000580)}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 543.846927ms ago: executing program 3 (id=11262): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x23c0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x8000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=11263): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000811) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r2, 0x78) kernel console output (not intermixed with test programs): fdinfo+0x380/0x380 [ 1790.708194][ T4302] ? lock_chain_count+0x20/0x20 [ 1790.713044][ T4302] __x64_sys_bpf+0x78/0x90 [ 1790.717456][ T4302] do_syscall_64+0x4c/0xa0 [ 1790.721895][ T4302] ? clear_bhb_loop+0x60/0xb0 [ 1790.726571][ T4302] ? clear_bhb_loop+0x60/0xb0 [ 1790.731240][ T4302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.737124][ T4302] RIP: 0033:0x7f618f99e019 [ 1790.741528][ T4302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.761129][ T4302] RSP: 002b:00007f619082d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1790.769536][ T4302] RAX: ffffffffffffffda RBX: 00007f618fc25fa0 RCX: 00007f618f99e019 [ 1790.777503][ T4302] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 1790.785474][ T4302] RBP: 00007f619082d090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.793439][ T4302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.801400][ T4302] R13: 00007f618fc26038 R14: 00007f618fc25fa0 R15: 00007ffd5d6cdac8 [ 1790.809373][ T4302] [ 1791.611536][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.617958][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.163165][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 1793.303349][ T4300] netlink: 'syz.4.9271': attribute type 22 has an invalid length. [ 1793.311201][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9271'. [ 1794.092311][ T4331] device syzkaller0 entered promiscuous mode [ 1794.238506][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 1794.516373][ T4349] netlink: 'syz.4.9287': attribute type 1 has an invalid length. [ 1794.530106][ T4349] netlink: 'syz.4.9287': attribute type 3 has an invalid length. [ 1794.538080][ T4349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9287'. [ 1796.317161][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 1797.206806][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 1797.428374][ T4373] bridge0: port 3(veth1) entered blocking state [ 1797.435804][ T4373] bridge0: port 3(veth1) entered disabled state [ 1797.445658][ T4373] device veth1 entered promiscuous mode [ 1797.451616][ T4373] bridge0: port 3(veth1) entered blocking state [ 1797.458207][ T4373] bridge0: port 3(veth1) entered forwarding state [ 1797.520097][ T4368] device syzkaller0 entered promiscuous mode [ 1798.301092][ T4389] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9297'. [ 1800.126335][ T5799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1800.232284][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.239600][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.249159][ T4289] device bridge_slave_0 entered promiscuous mode [ 1800.267534][ T4389] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9297'. [ 1800.315157][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.322582][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.361485][ T4289] device bridge_slave_1 entered promiscuous mode [ 1800.696651][ T5704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.842207][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1800.901277][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1801.025403][ T5704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.115825][ T4289] team0: Port device team_slave_0 added [ 1801.157791][ T4289] team0: Port device team_slave_1 added [ 1801.229529][ T5704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.336323][ T4426] netlink: 'syz.4.9307': attribute type 29 has an invalid length. [ 1801.431203][ T4426] netlink: 'syz.4.9307': attribute type 29 has an invalid length. [ 1801.466109][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.477278][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.577733][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.620812][ T4435] FAULT_INJECTION: forcing a failure. [ 1801.620812][ T4435] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.633753][ T4435] CPU: 0 PID: 4435 Comm: syz.2.9310 Not tainted syzkaller #0 [ 1801.641152][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1801.651226][ T4435] Call Trace: [ 1801.654522][ T4435] [ 1801.657463][ T4435] dump_stack_lvl+0x188/0x24e [ 1801.662167][ T4435] ? show_regs_print_info+0x12/0x12 [ 1801.667386][ T4435] ? load_image+0x410/0x410 [ 1801.671912][ T4435] ? __lock_acquire+0x7c40/0x7c40 [ 1801.676966][ T4435] should_fail_ex+0x390/0x4c0 [ 1801.681672][ T4435] should_failslab+0x5/0x20 [ 1801.686190][ T4435] slab_pre_alloc_hook+0x59/0x300 [ 1801.691232][ T4435] kmem_cache_alloc_node+0x5a/0x310 [ 1801.696437][ T4435] ? perf_event_alloc+0x155/0x21e0 [ 1801.701564][ T4435] perf_event_alloc+0x155/0x21e0 [ 1801.706516][ T4435] ? _raw_spin_unlock+0x24/0x40 [ 1801.711376][ T4435] ? find_lively_task_by_vpid+0x19/0x290 [ 1801.717021][ T4435] ? find_lively_task_by_vpid+0x19/0x290 [ 1801.722664][ T4435] __se_sys_perf_event_open+0x701/0x1ec0 [ 1801.728320][ T4435] ? __fget_files+0x3fc/0x460 [ 1801.733023][ T4435] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1801.738686][ T4435] ? lockdep_hardirqs_on+0x94/0x140 [ 1801.743890][ T4435] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1801.749538][ T4435] do_syscall_64+0x4c/0xa0 [ 1801.753978][ T4435] ? clear_bhb_loop+0x60/0xb0 [ 1801.758672][ T4435] ? clear_bhb_loop+0x60/0xb0 [ 1801.763379][ T4435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1801.769291][ T4435] RIP: 0033:0x7f618f99e019 [ 1801.773720][ T4435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.793349][ T4435] RSP: 002b:00007f619082d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1801.801781][ T4435] RAX: ffffffffffffffda RBX: 00007f618fc25fa0 RCX: 00007f618f99e019 [ 1801.809779][ T4435] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 1801.817769][ T4435] RBP: 00007f619082d090 R08: 0000000000000000 R09: 0000000000000000 [ 1801.825759][ T4435] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1801.833752][ T4435] R13: 00007f618fc26038 R14: 00007f618fc25fa0 R15: 00007ffd5d6cdac8 [ 1801.841752][ T4435] [ 1801.897063][ T5704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.940820][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.962228][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.051111][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1802.271295][ T4431] device syzkaller0 entered promiscuous mode [ 1802.296397][ T4289] device hsr_slave_0 entered promiscuous mode [ 1802.310484][ T4289] device hsr_slave_1 entered promiscuous mode [ 1806.072832][ T4486] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9324'. [ 1806.411962][ T4497] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9329'. [ 1806.436774][ T4502] FAULT_INJECTION: forcing a failure. [ 1806.436774][ T4502] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.455577][ T4502] CPU: 0 PID: 4502 Comm: syz.4.9330 Not tainted syzkaller #0 [ 1806.463043][ T4502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1806.473107][ T4502] Call Trace: [ 1806.476384][ T4502] [ 1806.479305][ T4502] dump_stack_lvl+0x188/0x24e [ 1806.483983][ T4502] ? show_regs_print_info+0x12/0x12 [ 1806.489179][ T4502] ? load_image+0x410/0x410 [ 1806.493673][ T4502] ? __might_sleep+0xd0/0xd0 [ 1806.498250][ T4502] ? __lock_acquire+0x7c40/0x7c40 [ 1806.503270][ T4502] should_fail_ex+0x390/0x4c0 [ 1806.507945][ T4502] should_failslab+0x5/0x20 [ 1806.512436][ T4502] slab_pre_alloc_hook+0x59/0x300 [ 1806.517455][ T4502] ? page_pool_create+0x6d/0x5c0 [ 1806.522384][ T4502] __kmem_cache_alloc_node+0x4f/0x270 [ 1806.527748][ T4502] ? page_pool_create+0x6d/0x5c0 [ 1806.532677][ T4502] kmalloc_node_trace+0x22/0xe0 [ 1806.537526][ T4502] page_pool_create+0x6d/0x5c0 [ 1806.542285][ T4502] bpf_test_run_xdp_live+0x220/0x1a90 [ 1806.547652][ T4502] ? 0xffffffffa0004440 [ 1806.551795][ T4502] ? text_poke_copy+0x7b/0x90 [ 1806.556469][ T4502] ? 0xffffffffa0004440 [ 1806.560637][ T4502] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 1806.566535][ T4502] ? xdp_convert_md_to_buff+0x330/0x330 [ 1806.572090][ T4502] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1806.578325][ T4502] ? bpf_test_init+0x119/0x140 [ 1806.583078][ T4502] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1806.588526][ T4502] bpf_prog_test_run_xdp+0x757/0xf80 [ 1806.593805][ T4502] ? __lock_acquire+0x7c40/0x7c40 [ 1806.598826][ T4502] ? dev_put+0x80/0x80 [ 1806.602892][ T4502] ? dev_put+0x80/0x80 [ 1806.606952][ T4502] bpf_prog_test_run+0x31c/0x390 [ 1806.611886][ T4502] __sys_bpf+0x62b/0x780 [ 1806.616121][ T4502] ? bpf_link_show_fdinfo+0x380/0x380 [ 1806.621494][ T4502] ? lock_chain_count+0x20/0x20 [ 1806.626348][ T4502] __x64_sys_bpf+0x78/0x90 [ 1806.630757][ T4502] do_syscall_64+0x4c/0xa0 [ 1806.635166][ T4502] ? clear_bhb_loop+0x60/0xb0 [ 1806.639834][ T4502] ? clear_bhb_loop+0x60/0xb0 [ 1806.644506][ T4502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1806.650389][ T4502] RIP: 0033:0x7fec45f9e019 [ 1806.654792][ T4502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1806.674386][ T4502] RSP: 002b:00007fec46dc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1806.682790][ T4502] RAX: ffffffffffffffda RBX: 00007fec46225fa0 RCX: 00007fec45f9e019 [ 1806.690752][ T4502] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1806.698715][ T4502] RBP: 00007fec46dc1090 R08: 0000000000000000 R09: 0000000000000000 [ 1806.706676][ T4502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1806.714635][ T4502] R13: 00007fec46226038 R14: 00007fec46225fa0 R15: 00007ffcea086718 [ 1806.722604][ T4502] [ 1806.881917][ T4498] device syzkaller0 entered promiscuous mode [ 1806.991513][ T4506] device syzkaller0 entered promiscuous mode [ 1812.645501][ T4289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1812.705513][ T4289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1812.811648][ T4289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1812.834628][ T4289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1812.967907][ T4556] netlink: 'syz.3.9347': attribute type 6 has an invalid length. [ 1812.993947][ T4556] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.9347'. [ 1813.625024][ T4573] device syzkaller0 entered promiscuous mode [ 1816.416097][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.485777][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1816.510901][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1816.530598][ T5704] batman_adv: batadv0: Interface deactivated: vlan1 [ 1816.548005][ T5704] batman_adv: batadv0: Removing interface: vlan1 [ 1816.555852][ T5704] device bridge_slave_1 left promiscuous mode [ 1816.562462][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.601542][ T5704] device bridge_slave_0 left promiscuous mode [ 1816.618768][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.682124][ T5704] device veth1_macvtap left promiscuous mode [ 1816.708008][ T5704] device veth0_macvtap left promiscuous mode [ 1816.730469][ T5704] device veth1_vlan left promiscuous mode [ 1816.750140][ T5704] device veth0_vlan left promiscuous mode [ 1817.474920][ T4627] FAULT_INJECTION: forcing a failure. [ 1817.474920][ T4627] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.569424][ T4627] CPU: 1 PID: 4627 Comm: syz.4.9362 Not tainted syzkaller #0 [ 1817.576871][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1817.586950][ T4627] Call Trace: [ 1817.590252][ T4627] [ 1817.593198][ T4627] dump_stack_lvl+0x188/0x24e [ 1817.597906][ T4627] ? show_regs_print_info+0x12/0x12 [ 1817.603136][ T4627] ? load_image+0x410/0x410 [ 1817.607658][ T4627] ? perf_trace_lock+0xf8/0x390 [ 1817.612534][ T4627] ? verify_lock_unused+0x140/0x140 [ 1817.617759][ T4627] ? perf_trace_lock+0xf8/0x390 [ 1817.622640][ T4627] should_fail_ex+0x390/0x4c0 [ 1817.627349][ T4627] should_failslab+0x5/0x20 [ 1817.631867][ T4627] slab_pre_alloc_hook+0x59/0x300 [ 1817.636912][ T4627] kmem_cache_alloc+0x56/0x2f0 [ 1817.641673][ T4627] ? skb_clone+0x1e7/0x370 [ 1817.646093][ T4627] skb_clone+0x1e7/0x370 [ 1817.650337][ T4627] __netlink_deliver_tap+0x3e4/0x7e0 [ 1817.655634][ T4627] ? netlink_deliver_tap+0x2e/0x1b0 [ 1817.660830][ T4627] netlink_deliver_tap+0x19c/0x1b0 [ 1817.665939][ T4627] netlink_unicast+0x777/0x920 [ 1817.670714][ T4627] netlink_sendmsg+0x8ad/0xbd0 [ 1817.675488][ T4627] ? netlink_getsockopt+0x550/0x550 [ 1817.680688][ T4627] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1817.686236][ T4627] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1817.691514][ T4627] ? security_socket_sendmsg+0x7c/0xa0 [ 1817.696968][ T4627] ? netlink_getsockopt+0x550/0x550 [ 1817.702173][ T4627] ____sys_sendmsg+0x5ed/0x9a0 [ 1817.706948][ T4627] ? __sys_sendmsg_sock+0x30/0x30 [ 1817.711978][ T4627] ? __import_iovec+0x306/0x510 [ 1817.716833][ T4627] ? import_iovec+0x6f/0xa0 [ 1817.721336][ T4627] ___sys_sendmsg+0x2a2/0x360 [ 1817.726020][ T4627] ? __sys_sendmsg+0x2a0/0x2a0 [ 1817.730801][ T4627] ? __lock_acquire+0x7c40/0x7c40 [ 1817.735849][ T4627] __se_sys_sendmsg+0x1c3/0x2b0 [ 1817.740696][ T4627] ? ct_nmi_exit+0x145/0x1c0 [ 1817.745285][ T4627] ? __x64_sys_sendmsg+0x80/0x80 [ 1817.750236][ T4627] ? lockdep_hardirqs_on+0x94/0x140 [ 1817.755430][ T4627] do_syscall_64+0x4c/0xa0 [ 1817.759844][ T4627] ? clear_bhb_loop+0x60/0xb0 [ 1817.764520][ T4627] ? clear_bhb_loop+0x60/0xb0 [ 1817.769195][ T4627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1817.775081][ T4627] RIP: 0033:0x7fec45f9e019 [ 1817.779490][ T4627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.799090][ T4627] RSP: 002b:00007fec46dc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1817.807497][ T4627] RAX: ffffffffffffffda RBX: 00007fec46225fa0 RCX: 00007fec45f9e019 [ 1817.815464][ T4627] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1817.823429][ T4627] RBP: 00007fec46dc1090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.831394][ T4627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1817.839358][ T4627] R13: 00007fec46226038 R14: 00007fec46225fa0 R15: 00007ffcea086718 [ 1817.847342][ T4627] [ 1818.911796][ T5704] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1818.992960][ T5704] team0 (unregistering): Port device team_slave_1 removed [ 1819.073942][ T5704] team0 (unregistering): Port device team_slave_0 removed [ 1819.138030][ T5704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1819.201850][ T5704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1819.286108][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 1819.616187][ T5704] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1819.625683][ T5704] bond0 (unregistering): Released all slaves [ 1819.712213][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1819.719663][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1819.727988][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1819.761886][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1819.789380][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1819.804043][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.811175][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1819.825775][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1819.862852][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1819.886093][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1819.916487][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.923664][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1819.958307][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1819.979742][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1820.020634][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1820.040849][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1820.051006][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1820.093452][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1820.133922][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1820.170137][ T4289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1820.208561][ T4289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1820.249930][T16696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1820.262659][T16696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1820.301241][T16696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1820.320051][T16696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1820.340331][T16696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1820.439482][ T4665] device syzkaller0 entered promiscuous mode [ 1823.296610][ T4688] device syzkaller0 entered promiscuous mode [ 1823.602754][ T4706] FAULT_INJECTION: forcing a failure. [ 1823.602754][ T4706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1823.626904][ T4706] CPU: 0 PID: 4706 Comm: syz.4.9384 Not tainted syzkaller #0 [ 1823.634345][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1823.644419][ T4706] Call Trace: [ 1823.647704][ T4706] [ 1823.650622][ T4706] dump_stack_lvl+0x188/0x24e [ 1823.655303][ T4706] ? show_regs_print_info+0x12/0x12 [ 1823.660522][ T4706] ? load_image+0x410/0x410 [ 1823.665047][ T4706] ? __lock_acquire+0x7c40/0x7c40 [ 1823.670106][ T4706] should_fail_ex+0x390/0x4c0 [ 1823.674813][ T4706] _copy_from_user+0x2c/0x170 [ 1823.679510][ T4706] __sys_bpf+0x2ea/0x780 [ 1823.683773][ T4706] ? bpf_link_show_fdinfo+0x380/0x380 [ 1823.689178][ T4706] ? lock_chain_count+0x20/0x20 [ 1823.694049][ T4706] __x64_sys_bpf+0x78/0x90 [ 1823.698486][ T4706] do_syscall_64+0x4c/0xa0 [ 1823.702922][ T4706] ? clear_bhb_loop+0x60/0xb0 [ 1823.707617][ T4706] ? clear_bhb_loop+0x60/0xb0 [ 1823.712318][ T4706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1823.718231][ T4706] RIP: 0033:0x7fec45f9e019 [ 1823.722655][ T4706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1823.742279][ T4706] RSP: 002b:00007fec46dc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1823.750711][ T4706] RAX: ffffffffffffffda RBX: 00007fec46225fa0 RCX: 00007fec45f9e019 [ 1823.758701][ T4706] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1823.766698][ T4706] RBP: 00007fec46dc1090 R08: 0000000000000000 R09: 0000000000000000 [ 1823.774700][ T4706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.782697][ T4706] R13: 00007fec46226038 R14: 00007fec46225fa0 R15: 00007ffcea086718 [ 1823.790707][ T4706] [ 1827.249762][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1827.258435][ T4718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1827.271572][ T4718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1827.282379][ T4718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1827.305730][ T4718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1827.410966][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1827.418881][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1827.599522][ T4737] FAULT_INJECTION: forcing a failure. [ 1827.599522][ T4737] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.631809][ T4735] device syzkaller0 entered promiscuous mode [ 1827.680230][ T4737] CPU: 1 PID: 4737 Comm: syz.4.9393 Not tainted syzkaller #0 [ 1827.687668][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.697739][ T4737] Call Trace: [ 1827.701027][ T4737] [ 1827.703973][ T4737] dump_stack_lvl+0x188/0x24e [ 1827.708700][ T4737] ? show_regs_print_info+0x12/0x12 [ 1827.713913][ T4737] ? load_image+0x410/0x410 [ 1827.718422][ T4737] ? perf_trace_lock+0xf8/0x390 [ 1827.723282][ T4737] ? verify_lock_unused+0x140/0x140 [ 1827.728493][ T4737] ? perf_trace_lock+0xf8/0x390 [ 1827.733358][ T4737] should_fail_ex+0x390/0x4c0 [ 1827.738050][ T4737] should_failslab+0x5/0x20 [ 1827.742556][ T4737] slab_pre_alloc_hook+0x59/0x300 [ 1827.747606][ T4737] kmem_cache_alloc+0x56/0x2f0 [ 1827.752376][ T4737] ? skb_clone+0x1e7/0x370 [ 1827.756806][ T4737] skb_clone+0x1e7/0x370 [ 1827.761064][ T4737] __netlink_deliver_tap+0x3e4/0x7e0 [ 1827.766376][ T4737] ? netlink_deliver_tap+0x2e/0x1b0 [ 1827.771593][ T4737] netlink_deliver_tap+0x19c/0x1b0 [ 1827.776718][ T4737] netlink_unicast+0x777/0x920 [ 1827.781516][ T4737] netlink_sendmsg+0x8ad/0xbd0 [ 1827.786306][ T4737] ? netlink_getsockopt+0x550/0x550 [ 1827.791523][ T4737] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1827.797085][ T4737] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1827.802379][ T4737] ? security_socket_sendmsg+0x7c/0xa0 [ 1827.807848][ T4737] ? netlink_getsockopt+0x550/0x550 [ 1827.813064][ T4737] ____sys_sendmsg+0x5ed/0x9a0 [ 1827.817857][ T4737] ? __sys_sendmsg_sock+0x30/0x30 [ 1827.822891][ T4737] ? __import_iovec+0x306/0x510 [ 1827.827768][ T4737] ? import_iovec+0x6f/0xa0 [ 1827.832286][ T4737] ___sys_sendmsg+0x2a2/0x360 [ 1827.836983][ T4737] ? __sys_sendmsg+0x2a0/0x2a0 [ 1827.841786][ T4737] ? __lock_acquire+0x7c40/0x7c40 [ 1827.846845][ T4737] __se_sys_sendmsg+0x1c3/0x2b0 [ 1827.851707][ T4737] ? ct_nmi_exit+0x145/0x1c0 [ 1827.856311][ T4737] ? __x64_sys_sendmsg+0x80/0x80 [ 1827.861275][ T4737] ? lockdep_hardirqs_on+0x94/0x140 [ 1827.866486][ T4737] do_syscall_64+0x4c/0xa0 [ 1827.870915][ T4737] ? clear_bhb_loop+0x60/0xb0 [ 1827.875601][ T4737] ? clear_bhb_loop+0x60/0xb0 [ 1827.880288][ T4737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1827.886192][ T4737] RIP: 0033:0x7fec45f9e019 [ 1827.890616][ T4737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.910232][ T4737] RSP: 002b:00007fec46dc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1827.918658][ T4737] RAX: ffffffffffffffda RBX: 00007fec46225fa0 RCX: 00007fec45f9e019 [ 1827.926638][ T4737] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1827.934617][ T4737] RBP: 00007fec46dc1090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.942631][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1827.950608][ T4737] R13: 00007fec46226038 R14: 00007fec46225fa0 R15: 00007ffcea086718 [ 1827.958599][ T4737] [ 1827.988448][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1828.006423][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1829.941572][ T4737] netlink: 'syz.4.9393': attribute type 39 has an invalid length. [ 1829.969535][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1829.986630][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1830.007266][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1830.016867][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1830.048916][ T4289] device veth0_vlan entered promiscuous mode [ 1830.116627][ T4746] FAULT_INJECTION: forcing a failure. [ 1830.116627][ T4746] name failslab, interval 1, probability 0, space 0, times 0 [ 1830.135679][ T4289] device veth1_vlan entered promiscuous mode [ 1830.207056][ T4746] CPU: 0 PID: 4746 Comm: syz.2.9398 Not tainted syzkaller #0 [ 1830.214503][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1830.224579][ T4746] Call Trace: [ 1830.227868][ T4746] [ 1830.230799][ T4746] dump_stack_lvl+0x188/0x24e [ 1830.235491][ T4746] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1830.241223][ T4746] ? show_regs_print_info+0x12/0x12 [ 1830.246451][ T4746] ? load_image+0x410/0x410 [ 1830.250967][ T4746] ? verify_lock_unused+0x140/0x140 [ 1830.256175][ T4746] ? perf_trace_lock_acquire+0x342/0x3f0 [ 1830.261822][ T4746] should_fail_ex+0x390/0x4c0 [ 1830.266541][ T4746] should_failslab+0x5/0x20 [ 1830.271046][ T4746] slab_pre_alloc_hook+0x59/0x300 [ 1830.276084][ T4746] kmem_cache_alloc+0x56/0x2f0 [ 1830.280850][ T4746] ? skb_clone+0x1e7/0x370 [ 1830.285290][ T4746] skb_clone+0x1e7/0x370 [ 1830.289544][ T4746] __netlink_deliver_tap+0x3e4/0x7e0 [ 1830.294856][ T4746] ? netlink_deliver_tap+0x2e/0x1b0 [ 1830.300062][ T4746] netlink_deliver_tap+0x19c/0x1b0 [ 1830.305188][ T4746] netlink_unicast+0x777/0x920 [ 1830.310006][ T4746] netlink_sendmsg+0x8ad/0xbd0 [ 1830.314792][ T4746] ? netlink_getsockopt+0x550/0x550 [ 1830.320006][ T4746] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1830.325561][ T4746] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1830.330850][ T4746] ? security_socket_sendmsg+0x7c/0xa0 [ 1830.336315][ T4746] ? netlink_getsockopt+0x550/0x550 [ 1830.341559][ T4746] ____sys_sendmsg+0x5ed/0x9a0 [ 1830.346346][ T4746] ? __sys_sendmsg_sock+0x30/0x30 [ 1830.351378][ T4746] ? __import_iovec+0x306/0x510 [ 1830.356254][ T4746] ? import_iovec+0x6f/0xa0 [ 1830.360776][ T4746] ___sys_sendmsg+0x2a2/0x360 [ 1830.365470][ T4746] ? __sys_sendmsg+0x2a0/0x2a0 [ 1830.370281][ T4746] ? __lock_acquire+0x7c40/0x7c40 [ 1830.375356][ T4746] __se_sys_sendmsg+0x1c3/0x2b0 [ 1830.380219][ T4746] ? __x64_sys_sendmsg+0x80/0x80 [ 1830.385194][ T4746] ? lockdep_hardirqs_on+0x94/0x140 [ 1830.390401][ T4746] do_syscall_64+0x4c/0xa0 [ 1830.394821][ T4746] ? clear_bhb_loop+0x60/0xb0 [ 1830.399549][ T4746] ? clear_bhb_loop+0x60/0xb0 [ 1830.404234][ T4746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1830.410144][ T4746] RIP: 0033:0x7f618f99e019 [ 1830.414566][ T4746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1830.434178][ T4746] RSP: 002b:00007f619082d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1830.442603][ T4746] RAX: ffffffffffffffda RBX: 00007f618fc25fa0 RCX: 00007f618f99e019 [ 1830.450578][ T4746] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1830.458552][ T4746] RBP: 00007f619082d090 R08: 0000000000000000 R09: 0000000000000000 [ 1830.466527][ T4746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1830.474497][ T4746] R13: 00007f618fc26038 R14: 00007f618fc25fa0 R15: 00007ffd5d6cdac8 [ 1830.482498][ T4746] [ 1830.526952][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1830.553924][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1830.571197][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1830.590437][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1830.613910][ T4289] device veth0_macvtap entered promiscuous mode [ 1830.636038][ T4289] device veth1_macvtap entered promiscuous mode [ 1830.681492][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.693485][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.715953][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.733572][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.753071][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.773053][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.790104][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1830.802583][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1830.828546][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1830.855899][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1830.877931][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1830.910817][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.938317][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.962593][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.983041][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.010401][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.025737][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.039255][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.052253][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1831.076987][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1831.098758][ T4289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.112253][ T4289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.128082][ T4289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.143574][ T4289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.160944][ T5704] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1831.400011][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.428392][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.484519][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1831.532906][ T5704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.553200][ T5704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.588727][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1832.012643][ T4768] device syzkaller0 entered promiscuous mode [ 1832.068923][ T4776] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.9407'. [ 1836.492457][ T4802] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.9412'. [ 1836.733996][ T4814] FAULT_INJECTION: forcing a failure. [ 1836.733996][ T4814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1836.767659][ T4814] CPU: 1 PID: 4814 Comm: syz.2.9417 Not tainted syzkaller #0 [ 1836.775090][ T4814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1836.785151][ T4814] Call Trace: [ 1836.788425][ T4814] [ 1836.791348][ T4814] dump_stack_lvl+0x188/0x24e [ 1836.796028][ T4814] ? show_regs_print_info+0x12/0x12 [ 1836.801222][ T4814] ? load_image+0x410/0x410 [ 1836.805720][ T4814] ? __lock_acquire+0x7c40/0x7c40 [ 1836.810740][ T4814] ? snprintf+0xe5/0x140 [ 1836.814975][ T4814] should_fail_ex+0x390/0x4c0 [ 1836.819650][ T4814] _copy_to_user+0x2c/0x130 [ 1836.824152][ T4814] simple_read_from_buffer+0xe3/0x150 [ 1836.829525][ T4814] proc_fail_nth_read+0x1a6/0x220 [ 1836.834549][ T4814] ? proc_fault_inject_write+0x310/0x310 [ 1836.840177][ T4814] ? fsnotify_perm+0x248/0x550 [ 1836.844936][ T4814] ? proc_fault_inject_write+0x310/0x310 [ 1836.850576][ T4814] vfs_read+0x2db/0x960 [ 1836.854732][ T4814] ? kernel_read+0x1e0/0x1e0 [ 1836.859317][ T4814] ? __fget_files+0x28/0x460 [ 1836.863901][ T4814] ? __fget_files+0x3fc/0x460 [ 1836.868577][ T4814] ? __fdget_pos+0x2ae/0x360 [ 1836.873165][ T4814] ? ksys_read+0x70/0x260 [ 1836.877491][ T4814] ksys_read+0x14d/0x260 [ 1836.881736][ T4814] ? vfs_write+0x9a0/0x9a0 [ 1836.886154][ T4814] ? lockdep_hardirqs_on+0x94/0x140 [ 1836.891346][ T4814] do_syscall_64+0x4c/0xa0 [ 1836.895759][ T4814] ? clear_bhb_loop+0x60/0xb0 [ 1836.900427][ T4814] ? clear_bhb_loop+0x60/0xb0 [ 1836.905102][ T4814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1836.910993][ T4814] RIP: 0033:0x7f618f95e84e [ 1836.915421][ T4814] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1836.935032][ T4814] RSP: 002b:00007f619082cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1836.943441][ T4814] RAX: ffffffffffffffda RBX: 00007f619082d6c0 RCX: 00007f618f95e84e [ 1836.951403][ T4814] RDX: 000000000000000f RSI: 00007f619082d0a0 RDI: 0000000000000004 [ 1836.959366][ T4814] RBP: 00007f619082d090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.967326][ T4814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1836.975286][ T4814] R13: 00007f618fc26038 R14: 00007f618fc25fa0 R15: 00007ffd5d6cdac8 [ 1836.983264][ T4814] [ 1838.477831][ T4843] device syzkaller0 entered promiscuous mode [ 1838.620584][ T4841] device syzkaller0 entered promiscuous mode [ 1842.146458][ T4879] FAULT_INJECTION: forcing a failure. [ 1842.146458][ T4879] name failslab, interval 1, probability 0, space 0, times 0 [ 1842.193769][ T4879] CPU: 0 PID: 4879 Comm: syz.4.9439 Not tainted syzkaller #0 [ 1842.201211][ T4879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1842.211286][ T4879] Call Trace: [ 1842.214574][ T4879] [ 1842.217516][ T4879] dump_stack_lvl+0x188/0x24e [ 1842.222222][ T4879] ? show_regs_print_info+0x12/0x12 [ 1842.227436][ T4879] ? load_image+0x410/0x410 [ 1842.231955][ T4879] ? __might_sleep+0xd0/0xd0 [ 1842.236560][ T4879] ? __lock_acquire+0x7c40/0x7c40 [ 1842.241600][ T4879] ? __might_sleep+0xd0/0xd0 [ 1842.246204][ T4879] should_fail_ex+0x390/0x4c0 [ 1842.250909][ T4879] should_failslab+0x5/0x20 [ 1842.255423][ T4879] slab_pre_alloc_hook+0x59/0x300 [ 1842.260472][ T4879] kmem_cache_alloc_lru+0x49/0x2e0 [ 1842.265596][ T4879] ? sock_alloc_inode+0x24/0xc0 [ 1842.270465][ T4879] sock_alloc_inode+0x24/0xc0 [ 1842.275155][ T4879] ? sockfs_init_fs_context+0xa0/0xa0 [ 1842.280545][ T4879] new_inode_pseudo+0x5f/0x1c0 [ 1842.285329][ T4879] __sock_create+0x129/0x940 [ 1842.289942][ T4879] __sys_socketpair+0x232/0x540 [ 1842.294816][ T4879] __x64_sys_socketpair+0x97/0xb0 [ 1842.299855][ T4879] do_syscall_64+0x4c/0xa0 [ 1842.304290][ T4879] ? clear_bhb_loop+0x60/0xb0 [ 1842.308985][ T4879] ? clear_bhb_loop+0x60/0xb0 [ 1842.313675][ T4879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1842.319580][ T4879] RIP: 0033:0x7fec45f9e019 [ 1842.324025][ T4879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1842.343651][ T4879] RSP: 002b:00007fec46da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1842.352073][ T4879] RAX: ffffffffffffffda RBX: 00007fec46226090 RCX: 00007fec45f9e019 [ 1842.360056][ T4879] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1842.368048][ T4879] RBP: 00007fec46da0090 R08: 0000000000000000 R09: 0000000000000000 [ 1842.376032][ T4879] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000001 [ 1842.384025][ T4879] R13: 00007fec46226128 R14: 00007fec46226090 R15: 00007ffcea086718 [ 1842.392034][ T4879] [ 1842.445450][ T4879] socket: no more sockets [ 1846.006419][ T4902] netlink: 'syz.0.9445': attribute type 3 has an invalid length. [ 1846.049905][ T4902] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9445'. [ 1846.270022][ T4897] device syzkaller0 entered promiscuous mode [ 1850.085088][ T4916] netlink: 'syz.6.9449': attribute type 2 has an invalid length. [ 1850.279117][ T4958] netlink: 'syz.3.9460': attribute type 29 has an invalid length. [ 1850.323509][ T4958] netlink: 'syz.3.9460': attribute type 29 has an invalid length. [ 1850.423043][ T4957] netlink: 'syz.3.9460': attribute type 29 has an invalid length. [ 1851.538178][ T4993] device syzkaller0 entered promiscuous mode [ 1852.014784][ T4995] device syzkaller0 entered promiscuous mode [ 1853.294430][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.300867][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.020658][ T5009] netlink: 'syz.0.9477': attribute type 10 has an invalid length. [ 1858.028564][ T5009] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9477'. [ 1858.181979][ T5016] netlink: 'syz.3.9479': attribute type 10 has an invalid length. [ 1858.190699][ T5016] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9479'. [ 1858.663660][ T5034] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9483'. [ 1858.693784][ T5038] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9483'. [ 1858.756850][ T5043] FAULT_INJECTION: forcing a failure. [ 1858.756850][ T5043] name failslab, interval 1, probability 0, space 0, times 0 [ 1858.801621][ T5043] CPU: 0 PID: 5043 Comm: syz.2.9487 Not tainted syzkaller #0 [ 1858.809061][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1858.819146][ T5043] Call Trace: [ 1858.822447][ T5043] [ 1858.825393][ T5043] dump_stack_lvl+0x188/0x24e [ 1858.830098][ T5043] ? show_regs_print_info+0x12/0x12 [ 1858.835313][ T5043] ? load_image+0x410/0x410 [ 1858.839826][ T5043] ? __might_sleep+0xd0/0xd0 [ 1858.844428][ T5043] ? __lock_acquire+0x7c40/0x7c40 [ 1858.849459][ T5043] should_fail_ex+0x390/0x4c0 [ 1858.854144][ T5043] should_failslab+0x5/0x20 [ 1858.858640][ T5043] slab_pre_alloc_hook+0x59/0x300 [ 1858.863660][ T5043] ? __lock_acquire+0x138a/0x7c40 [ 1858.868685][ T5043] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1858.874403][ T5043] __kmem_cache_alloc_node+0x4f/0x270 [ 1858.879774][ T5043] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1858.885488][ T5043] __kmalloc+0xa3/0x240 [ 1858.889645][ T5043] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1858.895190][ T5043] ? tomoyo_domain+0xd2/0x120 [ 1858.899868][ T5043] ? tomoyo_path_number_perm+0x205/0x650 [ 1858.905507][ T5043] tomoyo_path_number_perm+0x22f/0x650 [ 1858.910965][ T5043] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1858.916418][ T5043] ? ksys_write+0x1ce/0x260 [ 1858.920925][ T5043] ? common_file_perm+0x171/0x1c0 [ 1858.925973][ T5043] ? __fget_files+0x28/0x460 [ 1858.930569][ T5043] security_file_ioctl+0x6c/0xa0 [ 1858.935503][ T5043] __se_sys_ioctl+0x48/0x170 [ 1858.940091][ T5043] do_syscall_64+0x4c/0xa0 [ 1858.944510][ T5043] ? clear_bhb_loop+0x60/0xb0 [ 1858.949183][ T5043] ? clear_bhb_loop+0x60/0xb0 [ 1858.953853][ T5043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1858.959742][ T5043] RIP: 0033:0x7f618f99e019 [ 1858.964149][ T5043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1858.983748][ T5043] RSP: 002b:00007f619082d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1858.992154][ T5043] RAX: ffffffffffffffda RBX: 00007f618fc25fa0 RCX: 00007f618f99e019 [ 1859.000124][ T5043] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000005 [ 1859.008086][ T5043] RBP: 00007f619082d090 R08: 0000000000000000 R09: 0000000000000000 [ 1859.016054][ T5043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1859.024018][ T5043] R13: 00007f618fc26038 R14: 00007f618fc25fa0 R15: 00007ffd5d6cdac8 [ 1859.031997][ T5043] [ 1859.123177][ T5043] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1859.297526][ T5051] device syzkaller0 entered promiscuous mode [ 1861.986960][ T5068] netlink: 'syz.0.9494': attribute type 10 has an invalid length. [ 1862.000313][ T5068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.009814][ T5068] device bridge_slave_1 left promiscuous mode [ 1862.016454][ T5068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.027811][ T5068] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1862.197480][ T5076] FAULT_INJECTION: forcing a failure. [ 1862.197480][ T5076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1862.234233][ T5079] netlink: 'syz.3.9500': attribute type 10 has an invalid length. [ 1862.262612][ T5079] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9500'. [ 1862.268523][ T5076] CPU: 0 PID: 5076 Comm: syz.2.9497 Not tainted syzkaller #0 [ 1862.278980][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1862.289056][ T5076] Call Trace: [ 1862.292336][ T5076] [ 1862.295268][ T5076] dump_stack_lvl+0x188/0x24e [ 1862.299955][ T5076] ? show_regs_print_info+0x12/0x12 [ 1862.305156][ T5076] ? load_image+0x410/0x410 [ 1862.309658][ T5076] ? __lock_acquire+0x7c40/0x7c40 [ 1862.314681][ T5076] ? ktime_get+0x7b/0x270 [ 1862.319013][ T5076] should_fail_ex+0x390/0x4c0 [ 1862.323696][ T5076] _copy_from_user+0x2c/0x170 [ 1862.328372][ T5076] __sys_bpf+0x2ea/0x780 [ 1862.332616][ T5076] ? bpf_link_show_fdinfo+0x380/0x380 [ 1862.338001][ T5076] ? lock_chain_count+0x20/0x20 [ 1862.342851][ T5076] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1862.348849][ T5076] __x64_sys_bpf+0x78/0x90 [ 1862.353265][ T5076] do_syscall_64+0x4c/0xa0 [ 1862.357682][ T5076] ? clear_bhb_loop+0x60/0xb0 [ 1862.362356][ T5076] ? clear_bhb_loop+0x60/0xb0 [ 1862.367068][ T5076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1862.372990][ T5076] RIP: 0033:0x7f618f99e019 [ 1862.377415][ T5076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1862.397024][ T5076] RSP: 002b:00007f619082d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1862.405443][ T5076] RAX: ffffffffffffffda RBX: 00007f618fc25fa0 RCX: 00007f618f99e019 [ 1862.413409][ T5076] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1862.421372][ T5076] RBP: 00007f619082d090 R08: 0000000000000000 R09: 0000000000000000 [ 1862.429337][ T5076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1862.437308][ T5076] R13: 00007f618fc26038 R14: 00007f618fc25fa0 R15: 00007ffd5d6cdac8 [ 1862.445292][ T5076] [ 1862.590147][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1863.482709][ T5115] device syzkaller0 entered promiscuous mode [ 1867.759540][ T5169] netlink: 'syz.3.9526': attribute type 2 has an invalid length. [ 1867.809533][ T5169] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9526'. [ 1867.837119][ T5169] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9526'. [ 1868.112789][ T5179] device syzkaller0 entered promiscuous mode [ 1870.474220][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 1871.801414][ T5238] device syzkaller0 entered promiscuous mode [ 1871.867988][ T5236] netlink: 64771 bytes leftover after parsing attributes in process `syz.0.9548'. [ 1872.203577][ T5246] FAULT_INJECTION: forcing a failure. [ 1872.203577][ T5246] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.217341][ T5246] CPU: 0 PID: 5246 Comm: syz.0.9552 Not tainted syzkaller #0 [ 1872.224751][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1872.234829][ T5246] Call Trace: [ 1872.238127][ T5246] [ 1872.241071][ T5246] dump_stack_lvl+0x188/0x24e [ 1872.245780][ T5246] ? show_regs_print_info+0x12/0x12 [ 1872.251007][ T5246] ? load_image+0x410/0x410 [ 1872.255541][ T5246] ? __might_sleep+0xd0/0xd0 [ 1872.260128][ T5246] ? __lock_acquire+0x7c40/0x7c40 [ 1872.265151][ T5246] should_fail_ex+0x390/0x4c0 [ 1872.269829][ T5246] should_failslab+0x5/0x20 [ 1872.274323][ T5246] slab_pre_alloc_hook+0x59/0x300 [ 1872.279338][ T5246] ? slab_free_freelist_hook+0x133/0x1b0 [ 1872.284964][ T5246] ? nlmon_xmit+0xac/0xf0 [ 1872.289293][ T5246] kmem_cache_alloc_node+0x5a/0x310 [ 1872.294481][ T5246] ? ___sys_sendmsg+0x2a2/0x360 [ 1872.299327][ T5246] ? __alloc_skb+0xf9/0x7d0 [ 1872.303830][ T5246] __alloc_skb+0xf9/0x7d0 [ 1872.308181][ T5246] tipc_nl_compat_doit+0x186/0x610 [ 1872.313293][ T5246] ? end_current_label_crit_section+0x170/0x170 [ 1872.319539][ T5246] ? tipc_nl_compat_bearer_enable+0x610/0x610 [ 1872.325608][ T5246] ? apparmor_capable+0x12c/0x190 [ 1872.330629][ T5246] ? bpf_lsm_capable+0x5/0x10 [ 1872.335305][ T5246] ? security_capable+0x85/0xb0 [ 1872.340160][ T5246] tipc_nl_compat_recv+0x536/0xaf0 [ 1872.345267][ T5246] ? ct_nmi_exit+0x145/0x1c0 [ 1872.349858][ T5246] ? tipc_netlink_compat_stop+0x20/0x20 [ 1872.355400][ T5246] ? __mutex_trylock_common+0x15c/0x260 [ 1872.360939][ T5246] ? tipc_nl_node_get_link+0x5a0/0x5a0 [ 1872.366395][ T5246] ? tipc_nl_compat_link_set+0x1080/0x1080 [ 1872.372202][ T5246] ? rcu_is_watching+0x11/0xa0 [ 1872.376962][ T5246] ? trace_contention_end+0x5f/0x170 [ 1872.382244][ T5246] genl_family_rcv_msg_doit+0x22f/0x350 [ 1872.387794][ T5246] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1872.393683][ T5246] ? memset+0x1e/0x40 [ 1872.397657][ T5246] ? genl_get_cmd+0x55f/0x8b0 [ 1872.402326][ T5246] genl_rcv_msg+0x601/0x790 [ 1872.406829][ T5246] ? genl_bind+0x360/0x360 [ 1872.411236][ T5246] ? tipc_netlink_compat_stop+0x20/0x20 [ 1872.416795][ T5246] netlink_rcv_skb+0x1ef/0x440 [ 1872.421558][ T5246] ? genl_bind+0x360/0x360 [ 1872.425967][ T5246] ? netlink_ack+0x1160/0x1160 [ 1872.430732][ T5246] ? down_read+0x1a8/0x2d0 [ 1872.435143][ T5246] genl_rcv+0x24/0x40 [ 1872.439117][ T5246] netlink_unicast+0x7ad/0x920 [ 1872.443883][ T5246] netlink_sendmsg+0x8ad/0xbd0 [ 1872.448648][ T5246] ? netlink_getsockopt+0x550/0x550 [ 1872.453842][ T5246] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1872.459384][ T5246] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1872.464663][ T5246] ? security_socket_sendmsg+0x7c/0xa0 [ 1872.470117][ T5246] ? netlink_getsockopt+0x550/0x550 [ 1872.475315][ T5246] ____sys_sendmsg+0x5ed/0x9a0 [ 1872.480082][ T5246] ? __sys_sendmsg_sock+0x30/0x30 [ 1872.485098][ T5246] ? __import_iovec+0x306/0x510 [ 1872.489953][ T5246] ? import_iovec+0x6f/0xa0 [ 1872.494453][ T5246] ___sys_sendmsg+0x2a2/0x360 [ 1872.499128][ T5246] ? __sys_sendmsg+0x2a0/0x2a0 [ 1872.503903][ T5246] ? __lock_acquire+0x7c40/0x7c40 [ 1872.508938][ T5246] __se_sys_sendmsg+0x1c3/0x2b0 [ 1872.513804][ T5246] ? __x64_sys_sendmsg+0x80/0x80 [ 1872.518749][ T5246] ? lockdep_hardirqs_on+0x94/0x140 [ 1872.523941][ T5246] do_syscall_64+0x4c/0xa0 [ 1872.528352][ T5246] ? clear_bhb_loop+0x60/0xb0 [ 1872.533023][ T5246] ? clear_bhb_loop+0x60/0xb0 [ 1872.537699][ T5246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1872.543586][ T5246] RIP: 0033:0x7f2344b9e019 [ 1872.547995][ T5246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1872.567591][ T5246] RSP: 002b:00007f2345a33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1872.576011][ T5246] RAX: ffffffffffffffda RBX: 00007f2344e25fa0 RCX: 00007f2344b9e019 [ 1872.583989][ T5246] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1872.591956][ T5246] RBP: 00007f2345a33090 R08: 0000000000000000 R09: 0000000000000000 [ 1872.599919][ T5246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1872.607883][ T5246] R13: 00007f2344e26038 R14: 00007f2344e25fa0 R15: 00007fff61c842b8 [ 1872.615858][ T5246] [ 1873.140296][ T5261] FAULT_INJECTION: forcing a failure. [ 1873.140296][ T5261] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1873.158622][ T5261] CPU: 1 PID: 5261 Comm: syz.0.9557 Not tainted syzkaller #0 [ 1873.166059][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1873.176136][ T5261] Call Trace: [ 1873.179443][ T5261] [ 1873.182383][ T5261] dump_stack_lvl+0x188/0x24e [ 1873.187093][ T5261] ? show_regs_print_info+0x12/0x12 [ 1873.192317][ T5261] ? load_image+0x410/0x410 [ 1873.196843][ T5261] ? __lock_acquire+0x7c40/0x7c40 [ 1873.201889][ T5261] ? perf_trace_lock_acquire+0x101/0x3f0 [ 1873.207553][ T5261] should_fail_ex+0x390/0x4c0 [ 1873.212263][ T5261] prepare_alloc_pages+0x1e1/0x5b0 [ 1873.217408][ T5261] __alloc_pages+0x130/0x4f0 [ 1873.222024][ T5261] ? zone_statistics+0x170/0x170 [ 1873.226987][ T5261] ? __lock_acquire+0x7c40/0x7c40 [ 1873.232040][ T5261] pte_alloc_one+0x7b/0x310 [ 1873.236564][ T5261] ? pfn_modify_allowed+0x560/0x560 [ 1873.241787][ T5261] ? count_memcg_event_mm+0x36b/0x3c0 [ 1873.247173][ T5261] ? __lock_acquire+0x7c40/0x7c40 [ 1873.252225][ T5261] ? count_memcg_event_mm+0x8a/0x3c0 [ 1873.257529][ T5261] ? put_page+0x270/0x270 [ 1873.261878][ T5261] __pte_alloc+0x21/0x150 [ 1873.266236][ T5261] handle_mm_fault+0x34b1/0x3d40 [ 1873.271190][ T5261] ? mt_find+0x157/0x830 [ 1873.275471][ T5261] ? numa_migrate_prep+0x250/0x250 [ 1873.280605][ T5261] ? lock_chain_count+0x20/0x20 [ 1873.285481][ T5261] ? lock_mm_and_find_vma+0xae/0x2f0 [ 1873.290793][ T5261] do_user_addr_fault+0x58e/0xb20 [ 1873.295852][ T5261] exc_page_fault+0x60/0x100 [ 1873.300461][ T5261] asm_exc_page_fault+0x22/0x30 [ 1873.305332][ T5261] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1873.311940][ T5261] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1873.331579][ T5261] RSP: 0018:ffffc90004257bc8 EFLAGS: 00050202 [ 1873.337674][ T5261] RAX: ffffffff8415c301 RBX: 000000000014000e RCX: 000000000008025c [ 1873.345668][ T5261] RDX: 000000000014000e RSI: 0000200000200000 RDI: ffff88803d6bfdb2 [ 1873.353664][ T5261] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000006 [ 1873.361654][ T5261] R10: dffffc0000000000 R11: ffffed1007ae8001 R12: 00007fffffebeff2 [ 1873.369649][ T5261] R13: 1ffff9200084af90 R14: ffff88803d600000 R15: 000020000014024e [ 1873.377652][ T5261] ? _copy_from_user+0x21/0x170 [ 1873.382534][ T5261] _copy_from_user+0xf4/0x170 [ 1873.387239][ T5261] generic_map_update_batch+0x48d/0x7f0 [ 1873.392818][ T5261] ? rcu_read_unlock+0xa0/0xa0 [ 1873.397602][ T5261] ? __fdget+0x17c/0x200 [ 1873.401857][ T5261] ? rcu_read_unlock+0xa0/0xa0 [ 1873.406632][ T5261] bpf_map_do_batch+0x475/0x5f0 [ 1873.411499][ T5261] ? bpf_lsm_xfrm_state_delete_security+0x10/0x10 [ 1873.417940][ T5261] __sys_bpf+0x6f7/0x780 [ 1873.422218][ T5261] ? bpf_link_show_fdinfo+0x380/0x380 [ 1873.427630][ T5261] ? lock_chain_count+0x20/0x20 [ 1873.432515][ T5261] __x64_sys_bpf+0x78/0x90 [ 1873.436954][ T5261] do_syscall_64+0x4c/0xa0 [ 1873.441392][ T5261] ? clear_bhb_loop+0x60/0xb0 [ 1873.446095][ T5261] ? clear_bhb_loop+0x60/0xb0 [ 1873.450804][ T5261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1873.456721][ T5261] RIP: 0033:0x7f2344b9e019 [ 1873.461155][ T5261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1873.480794][ T5261] RSP: 002b:00007f2345a33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1873.489243][ T5261] RAX: ffffffffffffffda RBX: 00007f2344e25fa0 RCX: 00007f2344b9e019 [ 1873.497258][ T5261] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1873.505248][ T5261] RBP: 00007f2345a33090 R08: 0000000000000000 R09: 0000000000000000 [ 1873.513239][ T5261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1873.521235][ T5261] R13: 00007f2344e26038 R14: 00007f2344e25fa0 R15: 00007fff61c842b8 [ 1873.529252][ T5261] [ 1876.485997][ T5286] netlink: 'syz.4.9566': attribute type 3 has an invalid length. [ 1876.548247][ T5286] netlink: 'syz.4.9566': attribute type 153 has an invalid length. [ 1876.588943][ T5286] netlink: 85736 bytes leftover after parsing attributes in process `syz.4.9566'. [ 1878.032194][ T5313] device syzkaller0 entered promiscuous mode [ 1880.505443][ T5316] device syzkaller0 entered promiscuous mode [ 1880.518357][ T5321] device syzkaller0 left promiscuous mode [ 1880.524977][ T5336] netlink: 'syz.6.9577': attribute type 1 has an invalid length. [ 1880.590192][ T5340] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9578'. [ 1880.643157][ T5340] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9578'. [ 1880.663304][ T5341] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9578'. [ 1880.689087][ T5341] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9578'. [ 1880.822959][ T5347] netlink: 'syz.4.9581': attribute type 29 has an invalid length. [ 1880.858365][ T5347] netlink: 'syz.4.9581': attribute type 29 has an invalid length. [ 1880.963882][ T5356] netlink: 'syz.4.9581': attribute type 29 has an invalid length. [ 1881.038726][ T5347] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9581'. [ 1881.691505][ T5370] device syzkaller0 entered promiscuous mode [ 1881.742007][ T5378] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.9592'. [ 1882.720034][ T5395] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.9597'. [ 1882.745021][ T5395] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1886.470786][ T5435] device syzkaller0 entered promiscuous mode [ 1892.120074][ T5523] device syzkaller0 entered promiscuous mode [ 1893.840859][ T5704] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1896.898294][ T5568] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1896.974914][ T5568] syzkaller1: linktype set to 825 [ 1899.192892][ T5606] device syzkaller0 entered promiscuous mode [ 1904.562517][ T5611] device syzkaller0 entered promiscuous mode [ 1908.649889][ T5714] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1908.660224][ T5714] syzkaller1: linktype set to 825 [ 1909.026690][ T5726] device syzkaller0 entered promiscuous mode [ 1910.150299][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1910.834098][ T5767] device syzkaller0 entered promiscuous mode [ 1911.433226][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 1914.483530][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.489929][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.576676][ T5775] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1915.582648][ T5775] syzkaller1: linktype set to 825 [ 1916.887974][ T5842] device syzkaller0 entered promiscuous mode [ 1917.506617][ T4280] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1919.594943][ T4280] Bluetooth: hci4: command 0x2016 tx timeout [ 1922.832091][ T5906] device syzkaller0 entered promiscuous mode [ 1922.960801][ T5919] device syzkaller0 entered promiscuous mode [ 1924.849363][T18283] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1929.420784][ T5965] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1929.440288][ T5965] syzkaller1: linktype set to 825 [ 1930.932766][ T5996] device syzkaller0 entered promiscuous mode [ 1936.272364][ T6061] device syzkaller0 entered promiscuous mode [ 1940.379430][ T6099] device syzkaller0 entered promiscuous mode [ 1944.749655][ T6146] device syzkaller0 entered promiscuous mode [ 1948.175725][ T6171] device syzkaller0 entered promiscuous mode [ 1948.249763][ T6190] device syzkaller0 entered promiscuous mode [ 1955.778401][ T5704] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1956.848954][ T6304] device syzkaller0 entered promiscuous mode [ 1962.586831][ T6379] device syzkaller0 entered promiscuous mode [ 1962.739151][ T6382] device syzkaller0 entered promiscuous mode [ 1971.154910][ T4280] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1971.390940][ T6472] netlink: 'syz.4.9955': attribute type 3 has an invalid length. [ 1971.438006][ T6472] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9955'. [ 1972.118349][ T6486] device syzkaller0 entered promiscuous mode [ 1973.193066][ T4280] Bluetooth: hci5: command 0x2016 tx timeout [ 1974.991128][ T6519] mac80211_hwsim hwsim474 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1975.001023][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9968'. [ 1975.933504][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.939948][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.132792][ T6558] device syzkaller0 entered promiscuous mode [ 1980.154852][ T6612] device syzkaller0 entered promiscuous mode [ 1983.335358][ T4280] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 1985.010752][ T4280] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1985.098896][ T6673] device syzkaller0 entered promiscuous mode [ 1985.353251][ T4280] Bluetooth: hci1: command 0x2016 tx timeout [ 1986.801194][ T4311] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1987.035965][ T4280] Bluetooth: hci3: command 0x2016 tx timeout [ 1989.347080][ T6702] device syzkaller0 entered promiscuous mode [ 1994.662394][ T6760] device syzkaller0 entered promiscuous mode [ 1994.693887][ T6794] netlink: 'syz.2.10065': attribute type 1 has an invalid length. [ 1998.185821][ T6837] device syzkaller0 entered promiscuous mode [ 1998.988028][ T6865] netlink: 'syz.0.10090': attribute type 11 has an invalid length. [ 1999.008797][ T6865] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10090'. [ 1999.082379][ T6864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2001.988896][ T6881] device syzkaller0 entered promiscuous mode [ 2005.814882][ T6932] device syzkaller0 entered promiscuous mode [ 2010.257155][ T7013] device syzkaller0 entered promiscuous mode [ 2011.089147][ T7034] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.10143'. [ 2011.313422][ T7034] netlink: zone id is out of range [ 2011.318859][ T7034] netlink: zone id is out of range [ 2011.402849][ T7034] netlink: zone id is out of range [ 2011.423101][ T7034] netlink: zone id is out of range [ 2011.469833][ T7034] netlink: zone id is out of range [ 2011.490038][ T7034] netlink: zone id is out of range [ 2014.917925][ T7038] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10143'. [ 2014.934473][ T7038] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2014.946168][ T7038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2016.251797][ T7097] device syzkaller0 entered promiscuous mode [ 2017.727254][ T5704] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2021.601126][ T7191] device syzkaller0 entered promiscuous mode [ 2025.330734][ T7190] device syzkaller0 entered promiscuous mode [ 2028.343206][ T7226] mac80211_hwsim hwsim468 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2028.368516][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10205'. [ 2028.399741][ T7235] netlink: 'syz.3.10208': attribute type 1 has an invalid length. [ 2028.626632][ T7244] device syzkaller0 entered promiscuous mode [ 2030.803999][ T7439] wlan1: Trigger new scan to find an IBSS to join [ 2032.815026][ T7287] delete_channel: no stack [ 2033.754267][ T4361] wlan1: Trigger new scan to find an IBSS to join [ 2034.430087][ T7330] delete_channel: no stack [ 2034.758014][ T7337] device syzkaller0 entered promiscuous mode [ 2035.888943][ T7361] netlink: 'syz.3.10247': attribute type 10 has an invalid length. [ 2035.898565][ T7361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10247'. [ 2037.021296][ T7373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10250'. [ 2037.358083][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.364876][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.760980][T16696] wlan1: Trigger new scan to find an IBSS to join [ 2038.620414][ T7361] netlink: 'syz.3.10247': attribute type 10 has an invalid length. [ 2038.634787][ T7361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10247'. [ 2038.648262][ T7373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10250'. [ 2038.724725][T16696] wlan1: Creating new IBSS network, BSSID 9e:c0:e9:15:5b:9f [ 2039.048714][ T7387] device syzkaller0 entered promiscuous mode [ 2042.597067][ T7423] bridge0: port 3(veth1) entered blocking state [ 2042.606854][ T7423] bridge0: port 3(veth1) entered disabled state [ 2042.615231][ T7423] device veth1 entered promiscuous mode [ 2042.622227][ T7423] bridge0: port 3(veth1) entered blocking state [ 2042.628620][ T7423] bridge0: port 3(veth1) entered forwarding state [ 2042.657188][ T7431] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10265'. [ 2042.742230][ T7424] device syzkaller0 entered promiscuous mode [ 2042.989562][ T7438] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10266'. [ 2045.023061][ T7438] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10266'. [ 2045.132320][ T7454] netlink: 'syz.0.10270': attribute type 10 has an invalid length. [ 2045.202784][ T7454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10270'. [ 2045.245963][ T7454] netlink: 'syz.0.10270': attribute type 10 has an invalid length. [ 2045.340654][ T7454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10270'. [ 2045.522006][ T7447] netlink: 'syz.0.10270': attribute type 10 has an invalid length. [ 2045.542859][ T7447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10270'. [ 2047.697685][ T7494] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10281'. [ 2048.220411][ T7493] device syzkaller0 entered promiscuous mode [ 2048.631411][ T7508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10284'. [ 2050.015646][ T7527] netlink: 'syz.3.10289': attribute type 3 has an invalid length. [ 2050.039193][ T7527] netlink: 'syz.3.10289': attribute type 153 has an invalid length. [ 2050.071891][ T7527] netlink: 85736 bytes leftover after parsing attributes in process `syz.3.10289'. [ 2053.332498][ T7508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10284'. [ 2053.452008][ T7548] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10297'. [ 2055.148676][ T7576] netlink: 'syz.2.10305': attribute type 29 has an invalid length. [ 2055.191718][ T7576] netlink: 'syz.2.10305': attribute type 29 has an invalid length. [ 2055.287199][ T7575] netlink: 'syz.2.10305': attribute type 29 has an invalid length. [ 2056.400970][ T7594] device syzkaller0 entered promiscuous mode [ 2058.119072][ T7615] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10315'. [ 2060.198678][ T7597] device syzkaller0 entered promiscuous mode [ 2062.920169][ T7648] netlink: 14548 bytes leftover after parsing attributes in process `syz.6.10327'. [ 2063.374348][ T7655] device syzkaller0 entered promiscuous mode [ 2063.539507][ T7663] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10332'. [ 2066.795498][ T7671] device syzkaller0 entered promiscuous mode [ 2067.949041][ T7712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10348'. [ 2068.826942][ T7439] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2072.273967][ T7762] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10361'. [ 2073.123415][ T7766] device syzkaller0 entered promiscuous mode [ 2076.566120][ T7818] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10378'. [ 2078.176582][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10394'. [ 2078.202007][ T7860] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10394'. [ 2078.472652][ T7869] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10398'. [ 2079.421074][ T7894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10406'. [ 2079.443297][ T7894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10406'. [ 2079.562308][ T7902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10411'. [ 2080.594275][ T7931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10422'. [ 2080.630933][ T7931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10422'. [ 2085.770277][ T8007] device bond_slave_1 entered promiscuous mode [ 2086.901993][ T8041] FAULT_INJECTION: forcing a failure. [ 2086.901993][ T8041] name failslab, interval 1, probability 0, space 0, times 0 [ 2087.017761][ T8043] netlink: 'syz.6.10463': attribute type 21 has an invalid length. [ 2087.088116][ T8043] IPv6: NLM_F_CREATE should be specified when creating new route [ 2087.103188][ T8041] CPU: 0 PID: 8041 Comm: syz.3.10462 Not tainted syzkaller #0 [ 2087.110694][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2087.120771][ T8041] Call Trace: [ 2087.123694][ T8043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2087.124066][ T8041] [ 2087.124077][ T8041] dump_stack_lvl+0x188/0x24e [ 2087.131303][ T8043] IPv6: NLM_F_CREATE should be set when creating new route [ 2087.134216][ T8041] ? show_regs_print_info+0x12/0x12 [ 2087.134245][ T8041] ? load_image+0x410/0x410 [ 2087.134264][ T8041] ? __might_sleep+0xd0/0xd0 [ 2087.134281][ T8041] ? __lock_acquire+0x7c40/0x7c40 [ 2087.134308][ T8041] should_fail_ex+0x390/0x4c0 [ 2087.139050][ T8043] IPv6: NLM_F_CREATE should be set when creating new route [ 2087.146174][ T8041] should_failslab+0x5/0x20 [ 2087.146199][ T8041] slab_pre_alloc_hook+0x59/0x300 [ 2087.146217][ T8041] ? __get_vm_area_node+0x122/0x330 [ 2087.146237][ T8041] __kmem_cache_alloc_node+0x4f/0x270 [ 2087.151449][ T8043] IPv6: NLM_F_CREATE should be set when creating new route [ 2087.155905][ T8041] ? __get_vm_area_node+0x122/0x330 [ 2087.155931][ T8041] kmalloc_node_trace+0x22/0xe0 [ 2087.155956][ T8041] __get_vm_area_node+0x122/0x330 [ 2087.219624][ T8041] ? perf_trace_lock_acquire+0x101/0x3f0 [ 2087.225299][ T8041] __vmalloc_node_range+0x357/0x1380 [ 2087.230586][ T8041] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2087.236134][ T8041] ? trace_event_raw_event_lock+0x230/0x230 [ 2087.242044][ T8041] ? aa_get_newest_label+0xf9/0x5b0 [ 2087.247238][ T8041] ? free_vm_area+0x50/0x50 [ 2087.251735][ T8041] ? end_current_label_crit_section+0x170/0x170 [ 2087.257977][ T8041] ? __lock_acquire+0x7c40/0x7c40 [ 2087.263008][ T8041] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2087.268558][ T8041] __vmalloc+0x76/0x80 [ 2087.272624][ T8041] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2087.278166][ T8041] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2087.283534][ T8041] ? bpf_prog_alloc+0x13/0x1b0 [ 2087.288299][ T8041] bpf_prog_alloc+0x1c/0x1b0 [ 2087.292890][ T8041] bpf_prog_load+0x7d4/0x1530 [ 2087.297578][ T8041] ? map_freeze+0x390/0x390 [ 2087.302077][ T8041] ? __might_fault+0xa6/0x120 [ 2087.306758][ T8041] ? __might_fault+0xa6/0x120 [ 2087.311434][ T8041] ? __might_fault+0xc2/0x120 [ 2087.316106][ T8041] ? __might_fault+0xa6/0x120 [ 2087.320776][ T8041] ? bpf_lsm_bpf+0x5/0x10 [ 2087.325096][ T8041] ? security_bpf+0x7a/0xa0 [ 2087.329596][ T8041] __sys_bpf+0x5b8/0x780 [ 2087.333840][ T8041] ? bpf_link_show_fdinfo+0x380/0x380 [ 2087.339218][ T8041] ? lock_chain_count+0x20/0x20 [ 2087.344070][ T8041] __x64_sys_bpf+0x78/0x90 [ 2087.348484][ T8041] do_syscall_64+0x4c/0xa0 [ 2087.352899][ T8041] ? clear_bhb_loop+0x60/0xb0 [ 2087.357576][ T8041] ? clear_bhb_loop+0x60/0xb0 [ 2087.362275][ T8041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2087.368163][ T8041] RIP: 0033:0x7f09ff99e019 [ 2087.372569][ T8041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2087.392172][ T8041] RSP: 002b:00007f0a008bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2087.400580][ T8041] RAX: ffffffffffffffda RBX: 00007f09ffc25fa0 RCX: 00007f09ff99e019 [ 2087.408547][ T8041] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 2087.416513][ T8041] RBP: 00007f0a008bd090 R08: 0000000000000000 R09: 0000000000000000 [ 2087.424475][ T8041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2087.432447][ T8041] R13: 00007f09ffc26038 R14: 00007f09ffc25fa0 R15: 00007fffa73d9f88 [ 2087.440428][ T8041] [ 2087.483130][ T8041] syz.3.10462: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2087.556579][ T8041] CPU: 1 PID: 8041 Comm: syz.3.10462 Not tainted syzkaller #0 [ 2087.564141][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2087.574217][ T8041] Call Trace: [ 2087.577514][ T8041] [ 2087.580457][ T8041] dump_stack_lvl+0x188/0x24e [ 2087.585163][ T8041] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2087.591607][ T8041] ? show_regs_print_info+0x12/0x12 [ 2087.596838][ T8041] ? load_image+0x410/0x410 [ 2087.601374][ T8041] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2087.607826][ T8041] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2087.614359][ T8041] warn_alloc+0x242/0x330 [ 2087.618718][ T8041] ? __get_vm_area_node+0x122/0x330 [ 2087.623944][ T8041] ? zone_watermark_ok_safe+0x270/0x270 [ 2087.629511][ T8041] ? rcu_is_watching+0x11/0xa0 [ 2087.634297][ T8041] ? __get_vm_area_node+0x318/0x330 [ 2087.639512][ T8041] ? perf_trace_lock_acquire+0x101/0x3f0 [ 2087.645183][ T8041] __vmalloc_node_range+0x37c/0x1380 [ 2087.650496][ T8041] ? trace_event_raw_event_lock+0x230/0x230 [ 2087.656432][ T8041] ? aa_get_newest_label+0xf9/0x5b0 [ 2087.661658][ T8041] ? free_vm_area+0x50/0x50 [ 2087.666188][ T8041] ? end_current_label_crit_section+0x170/0x170 [ 2087.672458][ T8041] ? __lock_acquire+0x7c40/0x7c40 [ 2087.677513][ T8041] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2087.683084][ T8041] __vmalloc+0x76/0x80 [ 2087.687178][ T8041] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2087.692756][ T8041] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 2087.698151][ T8041] ? bpf_prog_alloc+0x13/0x1b0 [ 2087.702942][ T8041] bpf_prog_alloc+0x1c/0x1b0 [ 2087.707567][ T8041] bpf_prog_load+0x7d4/0x1530 [ 2087.712279][ T8041] ? map_freeze+0x390/0x390 [ 2087.716811][ T8041] ? __might_fault+0xa6/0x120 [ 2087.721521][ T8041] ? __might_fault+0xa6/0x120 [ 2087.726219][ T8041] ? __might_fault+0xc2/0x120 [ 2087.730909][ T8041] ? __might_fault+0xa6/0x120 [ 2087.735605][ T8041] ? bpf_lsm_bpf+0x5/0x10 [ 2087.739950][ T8041] ? security_bpf+0x7a/0xa0 [ 2087.744478][ T8041] __sys_bpf+0x5b8/0x780 [ 2087.748750][ T8041] ? bpf_link_show_fdinfo+0x380/0x380 [ 2087.754166][ T8041] ? lock_chain_count+0x20/0x20 [ 2087.759075][ T8041] __x64_sys_bpf+0x78/0x90 [ 2087.763521][ T8041] do_syscall_64+0x4c/0xa0 [ 2087.767960][ T8041] ? clear_bhb_loop+0x60/0xb0 [ 2087.772670][ T8041] ? clear_bhb_loop+0x60/0xb0 [ 2087.777372][ T8041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2087.783296][ T8041] RIP: 0033:0x7f09ff99e019 [ 2087.787739][ T8041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2087.807386][ T8041] RSP: 002b:00007f0a008bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2087.815834][ T8041] RAX: ffffffffffffffda RBX: 00007f09ffc25fa0 RCX: 00007f09ff99e019 [ 2087.823835][ T8041] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 2087.831834][ T8041] RBP: 00007f0a008bd090 R08: 0000000000000000 R09: 0000000000000000 [ 2087.839837][ T8041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2087.847840][ T8041] R13: 00007f09ffc26038 R14: 00007f09ffc25fa0 R15: 00007fffa73d9f88 [ 2087.855854][ T8041] [ 2088.537245][ T8041] Mem-Info: [ 2088.540412][ T8041] active_anon:26558 inactive_anon:0 isolated_anon:0 [ 2088.540412][ T8041] active_file:25559 inactive_file:40758 isolated_file:0 [ 2088.540412][ T8041] unevictable:768 dirty:231 writeback:0 [ 2088.540412][ T8041] slab_reclaimable:21794 slab_unreclaimable:102905 [ 2088.540412][ T8041] mapped:40209 shmem:19030 pagetables:853 [ 2088.540412][ T8041] sec_pagetables:0 bounce:0 [ 2088.540412][ T8041] kernel_misc_reclaimable:0 [ 2088.540412][ T8041] free:1282482 free_pcp:6953 free_cma:0 [ 2089.258134][ T8064] device syzkaller0 entered promiscuous mode [ 2089.280396][ T8041] Node 0 active_anon:128608kB inactive_anon:0kB active_file:102236kB inactive_file:162828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160976kB dirty:928kB writeback:0kB shmem:96608kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10820kB pagetables:3596kB sec_pagetables:0kB all_unreclaimable? no [ 2089.837729][ T8041] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2089.994679][ T8041] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2090.117673][ T8041] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 2090.142308][ T8041] Node 0 DMA32 free:1130160kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:176592kB inactive_anon:0kB active_file:102236kB inactive_file:162828kB unevictable:1536kB writepending:928kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:15664kB local_pcp:3812kB free_cma:0kB [ 2090.281299][ T8041] lowmem_reserve[]: 0 0 1 1 1 [ 2090.301515][ T8041] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 2090.427813][ T8041] lowmem_reserve[]: 0 0 0 0 0 [ 2090.450258][ T8041] Node 1 Normal free:3913356kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:4704kB local_pcp:0kB free_cma:0kB [ 2090.588731][ T8041] lowmem_reserve[]: 0 0 0 0 0 [ 2090.620413][ T8041] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2090.693027][ T8041] Node 0 DMA32: 0*4kB 935*8kB (UE) 29*16kB (UE) 336*32kB (UE) 427*64kB (UME) 980*128kB (UME) 318*256kB (UM) 171*512kB (UM) 48*1024kB (UME) 23*2048kB (UM) 165*4096kB (UM) = 1112520kB [ 2090.753177][ T8041] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 2090.813729][ T8041] Node 1 Normal: 251*4kB (U) 64*8kB (UE) 36*16kB (UME) 191*32kB (UME) 78*64kB (UME) 18*128kB (UME) 18*256kB (UME) 4*512kB (UME) 0*1024kB 2*2048kB (UE) 949*4096kB (M) = 3913356kB [ 2090.903045][ T8041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2090.933073][ T8041] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2090.963076][ T8041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2090.983078][ T8041] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2091.022490][ T8041] 111053 total pagecache pages [ 2091.027732][ T8041] 0 pages in swap cache [ 2091.045195][ T8041] Free swap = 124996kB [ 2091.073048][ T8041] Total swap = 124996kB [ 2091.077351][ T8041] 2097051 pages RAM [ 2091.103329][ T8041] 0 pages HighMem/MovableOnly [ 2091.108141][ T8041] 415222 pages reserved [ 2091.140787][ T8041] 0 pages cma reserved [ 2097.630464][ T8153] netlink: 'syz.6.10500': attribute type 29 has an invalid length. [ 2097.639643][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10500'. [ 2097.650446][ T8153] netlink: 'syz.6.10500': attribute type 29 has an invalid length. [ 2097.659074][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10500'. [ 2098.802697][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.809136][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.843620][ T8177] device syzkaller0 entered promiscuous mode [ 2098.883435][ T8188] netlink: 'syz.2.10512': attribute type 29 has an invalid length. [ 2098.901933][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10512'. [ 2098.924211][ T8188] netlink: 'syz.2.10512': attribute type 29 has an invalid length. [ 2098.959906][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10512'. [ 2099.752987][T16696] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2103.267368][ T8201] device syzkaller0 entered promiscuous mode [ 2106.109536][ T8273] netlink: 'syz.0.10535': attribute type 29 has an invalid length. [ 2106.125546][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10535'. [ 2106.174409][ T8273] netlink: 'syz.0.10535': attribute type 29 has an invalid length. [ 2106.221825][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10535'. [ 2106.538860][ T8278] device syzkaller0 entered promiscuous mode [ 2108.965650][ T8316] syz.6.10548[8316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2108.965739][ T8316] syz.6.10548[8316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2109.100216][ T8314] netlink: 'syz.3.10550': attribute type 39 has an invalid length. [ 2110.766324][ T8360] netlink: 'syz.4.10569': attribute type 3 has an invalid length. [ 2110.794827][ T8360] netlink: 'syz.4.10569': attribute type 1 has an invalid length. [ 2110.851930][ T8360] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.10569'. [ 2111.008264][ T8369] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10571'. [ 2111.040078][ T8365] device syzkaller0 entered promiscuous mode [ 2116.986470][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2116.998991][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2117.007886][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2117.032017][ T8479] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2117.041015][ T8479] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2117.073770][ T8479] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2117.276993][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.389147][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.493711][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.633657][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.784091][ T8476] chnl_net:caif_netlink_parms(): no params data found [ 2117.900265][ T8476] bridge0: port 1(bridge_slave_0) entered blocking state [ 2117.921023][ T8476] bridge0: port 1(bridge_slave_0) entered disabled state [ 2117.966393][ T8476] device bridge_slave_0 entered promiscuous mode [ 2117.981842][ T8476] bridge0: port 2(bridge_slave_1) entered blocking state [ 2117.989191][ T8476] bridge0: port 2(bridge_slave_1) entered disabled state [ 2117.998566][ T8476] device bridge_slave_1 entered promiscuous mode [ 2118.200677][ T8476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2118.214631][ T8476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2118.305593][ T8476] team0: Port device team_slave_0 added [ 2118.426245][ T8476] team0: Port device team_slave_1 added [ 2118.564603][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2118.586044][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2118.678033][ T8476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2118.762747][ T8528] netlink: 'syz.0.10620': attribute type 21 has an invalid length. [ 2118.776705][ T8528] IPv6: NLM_F_CREATE should be specified when creating new route [ 2118.856260][ T8528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2118.863655][ T8528] IPv6: NLM_F_CREATE should be set when creating new route [ 2118.870960][ T8528] IPv6: NLM_F_CREATE should be set when creating new route [ 2118.878228][ T8528] IPv6: NLM_F_CREATE should be set when creating new route [ 2119.343095][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 2119.981341][ T8476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2119.988683][ T8476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2120.042706][ T8476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2120.456681][ T8476] device hsr_slave_0 entered promiscuous mode [ 2120.474042][ T8476] device hsr_slave_1 entered promiscuous mode [ 2120.483539][ T8476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2120.507891][ T8476] Cannot create hsr debugfs directory [ 2121.353340][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 2122.742762][ T57] device hsr_slave_0 left promiscuous mode [ 2122.760304][ T57] device hsr_slave_1 left promiscuous mode [ 2122.782024][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2122.790182][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2122.806072][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2122.836949][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2122.845675][ T57] device bridge_slave_1 left promiscuous mode [ 2122.864742][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 2122.891768][ T57] device bridge_slave_0 left promiscuous mode [ 2122.908100][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 2122.993985][ T57] device veth1_macvtap left promiscuous mode [ 2123.018004][ T57] device veth0_macvtap left promiscuous mode [ 2123.054485][ T57] device veth1_vlan left promiscuous mode [ 2123.133300][ T57] device veth0_vlan left promiscuous mode [ 2123.433448][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 2123.950929][ T57] team0 (unregistering): Port device team_slave_1 removed [ 2124.007968][ T57] team0 (unregistering): Port device team_slave_0 removed [ 2124.058399][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2124.140979][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2124.485629][ T57] bond0 (unregistering): Released all slaves [ 2124.610051][ T8655] mac80211_hwsim hwsim470 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2124.626131][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10647'. [ 2125.518473][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 2125.888031][ T8476] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2125.909313][ T8476] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2125.933655][ T8476] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2126.007153][ T8476] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2126.325301][ T8476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2126.348255][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2126.378913][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2126.415567][ T8476] 8021q: adding VLAN 0 to HW filter on device team0 [ 2126.487367][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2126.505300][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2126.527526][T18283] bridge0: port 1(bridge_slave_0) entered blocking state [ 2126.534755][T18283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2126.567213][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2126.591712][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2126.602595][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2126.616906][ T5704] bridge0: port 2(bridge_slave_1) entered blocking state [ 2126.624161][ T5704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2126.665750][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2126.699043][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2126.708226][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2126.731913][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2126.784847][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2126.793198][T16696] wlan1: Trigger new scan to find an IBSS to join [ 2126.835039][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2126.854690][ T8713] FAULT_INJECTION: forcing a failure. [ 2126.854690][ T8713] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.859292][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2126.879663][ T8713] CPU: 1 PID: 8713 Comm: syz.6.10660 Not tainted syzkaller #0 [ 2126.887173][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2126.897252][ T8713] Call Trace: [ 2126.900555][ T8713] [ 2126.903504][ T8713] dump_stack_lvl+0x188/0x24e [ 2126.908212][ T8713] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2126.913962][ T8713] ? show_regs_print_info+0x12/0x12 [ 2126.919192][ T8713] ? load_image+0x410/0x410 [ 2126.923731][ T8713] should_fail_ex+0x390/0x4c0 [ 2126.928440][ T8713] should_failslab+0x5/0x20 [ 2126.932966][ T8713] slab_pre_alloc_hook+0x59/0x300 [ 2126.937057][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2126.938012][ T8713] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 2126.938042][ T8713] kmem_cache_alloc+0x56/0x2f0 [ 2126.938066][ T8713] ? skb_clone+0x1e7/0x370 [ 2126.954089][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2126.956847][ T8713] skb_clone+0x1e7/0x370 [ 2126.956880][ T8713] bpf_clone_redirect+0x169/0x4a0 [ 2126.956898][ T8713] ? ktime_get+0x247/0x270 [ 2126.977425][ T8476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2126.978256][ T8713] bpf_prog_d74fa8fabdca2f94+0x19/0x1d [ 2126.993614][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2126.998423][ T8713] bpf_test_run+0x2b6/0x830 [ 2126.998464][ T8713] ? dst_hold+0xb0/0xb0 [ 2127.014272][ T8713] ? eth_get_headlen+0x200/0x200 [ 2127.019222][ T8713] ? __build_skb+0x24b/0x3b0 [ 2127.023831][ T8713] ? convert___skb_to_skb+0x3d/0x580 [ 2127.029124][ T8713] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 2127.034505][ T8713] ? cpu_online+0xa0/0xa0 [ 2127.038830][ T8713] bpf_prog_test_run+0x31c/0x390 [ 2127.043766][ T8713] __sys_bpf+0x62b/0x780 [ 2127.048010][ T8713] ? bpf_link_show_fdinfo+0x380/0x380 [ 2127.053390][ T8713] ? lock_chain_count+0x20/0x20 [ 2127.058239][ T8713] __x64_sys_bpf+0x78/0x90 [ 2127.062651][ T8713] do_syscall_64+0x4c/0xa0 [ 2127.067066][ T8713] ? clear_bhb_loop+0x60/0xb0 [ 2127.071735][ T8713] ? clear_bhb_loop+0x60/0xb0 [ 2127.076414][ T8713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2127.082309][ T8713] RIP: 0033:0x7f59bd79e019 [ 2127.086716][ T8713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2127.106349][ T8713] RSP: 002b:00007f59be5a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2127.114759][ T8713] RAX: ffffffffffffffda RBX: 00007f59bda25fa0 RCX: 00007f59bd79e019 [ 2127.122720][ T8713] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 2127.130709][ T8713] RBP: 00007f59be5a8090 R08: 0000000000000000 R09: 0000000000000000 [ 2127.138692][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2127.146672][ T8713] R13: 00007f59bda26038 R14: 00007f59bda25fa0 R15: 00007fff93f653a8 [ 2127.154653][ T8713] [ 2127.209022][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2127.233474][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2129.344091][ T8717] netlink: 'syz.0.10661': attribute type 10 has an invalid length. [ 2129.353941][ T8717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10661'. [ 2129.372039][ T8717] device ipvlan1 entered promiscuous mode [ 2129.380783][ T8717] bridge0: port 2(ipvlan1) entered blocking state [ 2129.419079][ T8717] bridge0: port 2(ipvlan1) entered disabled state [ 2129.480960][ T8717] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2129.970346][ T8766] mac80211_hwsim hwsim474 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2130.010209][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2130.028419][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2130.048891][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10670'. [ 2130.080127][ T8476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2130.972773][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2130.994216][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2131.026058][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2131.047412][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2131.081173][ T8476] device veth0_vlan entered promiscuous mode [ 2131.095717][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2131.118323][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2131.145504][ T8476] device veth1_vlan entered promiscuous mode [ 2131.224516][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2131.253870][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2131.275578][ T8476] device veth0_macvtap entered promiscuous mode [ 2131.283441][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2131.302099][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2131.323824][ T8476] device veth1_macvtap entered promiscuous mode [ 2131.346216][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2131.383970][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2131.412021][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2131.438859][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.460060][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2131.488051][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.511434][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2131.546332][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.566403][ T8476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2131.584485][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2131.628337][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2131.684651][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.715559][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.735829][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.753519][ T4311] wlan1: Trigger new scan to find an IBSS to join [ 2131.773009][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.812152][ T8476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.851992][ T8476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.909012][ T8476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2131.919949][ T8476] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2131.954736][ T8476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2131.993309][ T8476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.003446][ T8476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.022536][ T8814] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.10679'. [ 2132.050351][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2132.074809][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2132.175601][ T8814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10679'. [ 2132.271160][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2132.288609][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2132.321656][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2132.348123][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2132.372702][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2132.426317][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2132.742487][ T57] wlan1: Creating new IBSS network, BSSID 5a:71:e1:e6:b3:ac [ 2132.932718][ T8842] device syzkaller0 entered promiscuous mode [ 2136.255288][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10687'. [ 2136.311934][ T8901] netlink: 'syz.0.10707': attribute type 12 has an invalid length. [ 2136.355538][ T8902] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.10707'. [ 2136.373535][ T8901] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10707'. [ 2136.376013][ T8902] netlink: zone id is out of range [ 2136.422574][ T8902] netlink: zone id is out of range [ 2136.468535][ T8902] netlink: zone id is out of range [ 2136.496623][ T8902] netlink: zone id is out of range [ 2136.578784][ T8902] netlink: del zone limit has 4 unknown bytes [ 2139.149181][ T8934] device syzkaller0 entered promiscuous mode [ 2143.020690][ T8985] device syzkaller0 entered promiscuous mode [ 2143.028404][ T8987] netlink: 'syz.2.10730': attribute type 21 has an invalid length. [ 2143.057959][ T8987] IPv6: NLM_F_CREATE should be specified when creating new route [ 2143.079263][ T8987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2143.086629][ T8987] IPv6: NLM_F_CREATE should be set when creating new route [ 2143.093944][ T8987] IPv6: NLM_F_CREATE should be set when creating new route [ 2143.101190][ T8987] IPv6: NLM_F_CREATE should be set when creating new route [ 2143.151505][ T8989] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.10732'. [ 2143.215709][ T8989] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10732'. [ 2148.797267][ T9064] device syzkaller0 entered promiscuous mode [ 2149.152275][ T9076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10757'. [ 2151.610331][ T9071] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10757'. [ 2151.941902][ T9080] device syzkaller0 entered promiscuous mode [ 2154.435407][ T9101] device syzkaller0 entered promiscuous mode [ 2156.647737][ T9137] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10773'. [ 2157.117149][ T9137] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10773'. [ 2160.236239][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.242590][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.559897][ T9230] device syzkaller0 entered promiscuous mode [ 2162.827858][ T5799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2167.756535][ T9301] device syzkaller0 entered promiscuous mode [ 2173.873803][ T9398] FAULT_INJECTION: forcing a failure. [ 2173.873803][ T9398] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.933204][ T9398] CPU: 0 PID: 9398 Comm: syz.2.10870 Not tainted syzkaller #0 [ 2173.940731][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2173.950809][ T9398] Call Trace: [ 2173.954110][ T9398] [ 2173.957063][ T9398] dump_stack_lvl+0x188/0x24e [ 2173.961776][ T9398] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2173.967530][ T9398] ? show_regs_print_info+0x12/0x12 [ 2173.972765][ T9398] ? load_image+0x410/0x410 [ 2173.977309][ T9398] should_fail_ex+0x390/0x4c0 [ 2173.982020][ T9398] should_failslab+0x5/0x20 [ 2173.986562][ T9398] slab_pre_alloc_hook+0x59/0x300 [ 2173.992060][ T9398] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 2173.998340][ T9398] kmem_cache_alloc+0x56/0x2f0 [ 2174.003133][ T9398] ? skb_clone+0x1e7/0x370 [ 2174.007581][ T9398] skb_clone+0x1e7/0x370 [ 2174.011857][ T9398] bpf_clone_redirect+0x169/0x4a0 [ 2174.016918][ T9398] ? ktime_get+0x247/0x270 [ 2174.021365][ T9398] bpf_prog_d74fa8fabdca2f94+0x19/0x1d [ 2174.026883][ T9398] bpf_test_run+0x2b6/0x830 [ 2174.031421][ T9398] ? dst_hold+0xb0/0xb0 [ 2174.035595][ T9398] ? eth_get_headlen+0x200/0x200 [ 2174.040541][ T9398] ? __build_skb+0x24b/0x3b0 [ 2174.045152][ T9398] ? convert___skb_to_skb+0x3d/0x580 [ 2174.050454][ T9398] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 2174.055875][ T9398] ? cpu_online+0xa0/0xa0 [ 2174.060229][ T9398] bpf_prog_test_run+0x31c/0x390 [ 2174.065182][ T9398] __sys_bpf+0x62b/0x780 [ 2174.069442][ T9398] ? bpf_link_show_fdinfo+0x380/0x380 [ 2174.074842][ T9398] ? lock_chain_count+0x20/0x20 [ 2174.079722][ T9398] __x64_sys_bpf+0x78/0x90 [ 2174.084160][ T9398] do_syscall_64+0x4c/0xa0 [ 2174.088600][ T9398] ? clear_bhb_loop+0x60/0xb0 [ 2174.093297][ T9398] ? clear_bhb_loop+0x60/0xb0 [ 2174.097991][ T9398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2174.103895][ T9398] RIP: 0033:0x7f618f99e019 [ 2174.108322][ T9398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2174.127941][ T9398] RSP: 002b:00007f619082d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2174.136371][ T9398] RAX: ffffffffffffffda RBX: 00007f618fc25fa0 RCX: 00007f618f99e019 [ 2174.144349][ T9398] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 2174.152326][ T9398] RBP: 00007f619082d090 R08: 0000000000000000 R09: 0000000000000000 [ 2174.160304][ T9398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2174.168281][ T9398] R13: 00007f618fc26038 R14: 00007f618fc25fa0 R15: 00007ffd5d6cdac8 [ 2174.176280][ T9398] [ 2183.783894][ T9581] device syzkaller0 entered promiscuous mode [ 2190.645187][ T9646] device syzkaller0 entered promiscuous mode [ 2193.858744][ T4361] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2194.767007][ T9689] device syzkaller0 entered promiscuous mode [ 2198.137203][ T9757] device syzkaller0 entered promiscuous mode [ 2201.152821][ T9791] device syzkaller0 entered promiscuous mode [ 2203.974892][ T9822] netlink: 'syz.0.11000': attribute type 2 has an invalid length. [ 2203.983024][ T9822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11000'. [ 2205.101063][ T9865] netlink: 'syz.6.11014': attribute type 2 has an invalid length. [ 2205.118261][ T9865] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11014'. [ 2205.991136][ T9874] device syzkaller0 entered promiscuous mode [ 2211.174689][ T9944] device syzkaller0 entered promiscuous mode [ 2216.958848][T10019] netlink: 'syz.0.11059': attribute type 21 has an invalid length. [ 2218.329459][T10045] device syzkaller0 entered promiscuous mode [ 2221.680240][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.686632][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.005163][T10090] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11078'. [ 2224.779036][ T4361] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2229.321889][T10185] device sit0 entered promiscuous mode [ 2229.558555][T10200] device syzkaller0 entered promiscuous mode [ 2233.955737][T10257] device sit0 entered promiscuous mode [ 2240.374152][T10331] device sit0 entered promiscuous mode [ 2242.994386][T10389] bridge0: port 2(bridge_slave_1) entered disabled state [ 2243.001683][T10389] bridge0: port 1(bridge_slave_0) entered disabled state [ 2244.232951][ T8479] Bluetooth: hci0: command 0x0406 tx timeout [ 2244.926713][T10411] bridge0: port 3(veth1) entered disabled state [ 2244.937761][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 2244.945549][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 2245.038923][T10418] device veth1 left promiscuous mode [ 2245.045510][T10418] bridge0: port 3(veth1) entered disabled state [ 2245.066796][T10418] device bridge_slave_1 left promiscuous mode [ 2245.083133][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 2245.100981][T10418] device bridge_slave_0 left promiscuous mode [ 2245.187503][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 2245.379728][T10419] device sit0 left promiscuous mode [ 2246.220572][T10443] syz.3.11190[10443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2246.220663][T10443] syz.3.11190[10443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2247.308869][T10463] bridge0: port 3(veth1) entered disabled state [ 2247.331683][T10463] bridge0: port 2(bridge_slave_1) entered disabled state [ 2247.343608][T10463] bridge0: port 1(bridge_slave_0) entered disabled state [ 2247.494008][T10464] device veth1 left promiscuous mode [ 2247.499497][T10464] bridge0: port 3(veth1) entered disabled state [ 2247.528706][T10464] device bridge_slave_1 left promiscuous mode [ 2247.553012][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 2247.561506][T10464] device bridge_slave_0 left promiscuous mode [ 2247.569094][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.258296][T10513] bridge0: port 2(bridge_slave_1) entered disabled state [ 2251.270293][T10513] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.565551][T10518] device bridge_slave_1 left promiscuous mode [ 2251.571802][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 2251.661192][T10518] device bridge_slave_0 left promiscuous mode [ 2251.761402][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 2253.057683][T10546] device sit0 entered promiscuous mode [ 2256.036389][ T5161] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2256.208858][T10582] device bridge_slave_1 left promiscuous mode [ 2256.284847][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.424044][T10582] device bridge_slave_0 left promiscuous mode [ 2256.499672][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 2266.653824][T10639] device syzkaller0 entered promiscuous mode [ 2269.579545][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2269.599761][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2269.617159][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2269.628650][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2269.636919][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2269.652696][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2270.914415][T10650] device syzkaller0 entered promiscuous mode [ 2271.758910][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 2273.176090][ T8479] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2273.186372][ T8479] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2273.194536][ T8479] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2273.202343][ T8479] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2273.220858][ T8479] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2273.228766][ T4280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2273.839319][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 2275.283033][ T4280] Bluetooth: hci6: command 0x0409 tx timeout [ 2275.424271][T10658] chnl_net:caif_netlink_parms(): no params data found [ 2275.533410][T10658] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.568998][T10658] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.594068][T10658] device bridge_slave_0 entered promiscuous mode [ 2275.621801][T10686] chnl_net:caif_netlink_parms(): no params data found [ 2275.651437][T10658] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.658820][T10658] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.672375][T10658] device bridge_slave_1 entered promiscuous mode [ 2275.810929][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.818249][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.826758][T10686] device bridge_slave_0 entered promiscuous mode [ 2275.835984][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.847445][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.874780][T10686] device bridge_slave_1 entered promiscuous mode [ 2275.912069][T10686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2275.922032][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 2275.930965][T10658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2275.953836][T10686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2276.019529][T10658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2276.186269][T10686] team0: Port device team_slave_0 added [ 2276.196624][T10658] team0: Port device team_slave_0 added [ 2276.244490][T10658] team0: Port device team_slave_1 added [ 2276.282544][T10686] team0: Port device team_slave_1 added [ 2276.399293][T10658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2276.407067][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.436882][T10658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2276.458376][T10686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2276.465794][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.495559][T10686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2276.511768][T10658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2276.521919][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.549589][T10658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2276.583657][T10712] device syzkaller0 entered promiscuous mode [ 2276.591154][T10686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2276.598602][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.634147][T10686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2277.353901][ T4280] Bluetooth: hci6: command 0x041b tx timeout [ 2278.010075][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 2278.570472][T10658] device hsr_slave_0 entered promiscuous mode [ 2278.577468][T10658] device hsr_slave_1 entered promiscuous mode [ 2278.584255][T10658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2278.591843][T10658] Cannot create hsr debugfs directory [ 2278.601516][T10686] device hsr_slave_0 entered promiscuous mode [ 2278.609073][T10686] device hsr_slave_1 entered promiscuous mode [ 2278.616150][T10686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2278.624082][T10686] Cannot create hsr debugfs directory [ 2279.003559][T10658] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2279.031105][T10658] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2279.062475][T10658] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2279.076980][T10658] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2279.140991][T10686] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2279.151843][T10686] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2279.166012][T10686] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2279.176010][T10686] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2279.230501][T10658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2279.259423][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2279.267279][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2279.281062][T10658] 8021q: adding VLAN 0 to HW filter on device team0 [ 2279.295939][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2279.305036][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2279.314103][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 2279.321180][ T5799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2279.329275][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2279.342710][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2279.356157][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2279.365992][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 2279.373135][ T5799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2279.389329][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2279.398415][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2279.416160][T10686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2279.429905][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2279.443026][ T4280] Bluetooth: hci6: command 0x040f tx timeout [ 2279.444021][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2279.459185][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2279.468349][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2279.477919][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2279.497381][T10658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2279.508315][T10658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2279.521543][T10686] 8021q: adding VLAN 0 to HW filter on device team0 [ 2279.534681][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2279.543666][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2279.552047][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2279.560062][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2279.569364][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2279.579151][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2279.592597][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2279.602075][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2279.611384][ T5704] bridge0: port 1(bridge_slave_0) entered blocking state [ 2279.618521][ T5704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2279.628057][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2279.644193][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2279.658856][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2279.668196][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 2279.675368][ T5799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2279.696718][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2279.715778][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2279.751145][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2279.770973][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2279.802448][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2279.818319][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2279.829796][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2279.842697][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2279.852594][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2279.865990][T10686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2279.878311][T10686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2279.888853][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2279.898017][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2279.911129][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2279.926664][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2279.942979][T10658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2280.198745][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2280.213127][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2280.228396][T10686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2280.334323][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2280.344069][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2280.360251][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2280.371946][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2280.386097][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2280.394495][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2280.403380][T10658] device veth0_vlan entered promiscuous mode [ 2280.422563][T10658] device veth1_vlan entered promiscuous mode [ 2280.445215][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2280.453956][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2280.468246][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2280.488579][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2280.499703][T10658] device veth0_macvtap entered promiscuous mode [ 2280.511140][T10658] device veth1_macvtap entered promiscuous mode [ 2280.529267][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2280.540259][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.550200][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2280.561575][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.571511][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2280.581971][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.592188][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2280.602755][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.617131][T10658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2280.626795][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2280.644111][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2280.652364][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2280.667274][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2280.680869][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.692555][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.710373][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.729829][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.740041][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.750956][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.761153][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2280.771731][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2280.782999][T10658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2280.794835][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2280.803842][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2280.818198][T10658] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.828129][T10658] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.837264][T10658] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.846843][T10658] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2280.885156][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2280.896221][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2280.942666][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2280.950955][ T5161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2280.959912][ T5161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2280.968540][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2280.977118][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2280.985868][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2280.994600][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2281.012450][T10686] device veth0_vlan entered promiscuous mode [ 2281.032225][T10686] device veth1_vlan entered promiscuous mode [ 2281.049926][ T5799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2281.058901][ T5799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2281.069273][T10686] device veth0_macvtap entered promiscuous mode [ 2281.077452][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2281.086749][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2281.094982][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2281.104806][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2281.113799][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2281.122479][T18283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2281.139820][T10686] device veth1_macvtap entered promiscuous mode [ 2281.162748][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.177550][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.187923][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.199203][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.209982][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.220750][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.230620][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.241194][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.251284][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2281.261885][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.273757][T10686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2281.302121][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2281.314685][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.325243][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2281.336140][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.346795][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2281.358732][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.369118][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2281.379593][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.389539][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2281.400015][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2281.411525][T10686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2281.420537][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2281.428715][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2281.440671][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2281.450212][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2281.459379][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2281.473795][T10686] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2281.482544][T10686] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2281.492444][T10686] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2281.507523][T10686] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2281.517803][ T4280] Bluetooth: hci6: command 0x0419 tx timeout [ 2281.604877][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2281.617253][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2281.625825][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2281.644299][ T5799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2281.652180][ T5799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2281.659892][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2281.754446][T10748] device syzkaller0 entered promiscuous mode [ 2283.116535][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.122917][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2287.243103][ T5704] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2318.270027][ T5704] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2334.362663][ T5161] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.448115][ T5161] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.559585][ T5161] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.661550][ T5161] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2335.835163][ T5161] device hsr_slave_0 left promiscuous mode [ 2335.841741][ T5161] device hsr_slave_1 left promiscuous mode [ 2335.855269][ T5161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2335.865888][ T5161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2335.876681][ T5161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2335.889098][ T5161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2335.931919][ T5161] device veth1_macvtap left promiscuous mode [ 2335.938341][ T5161] device veth0_macvtap left promiscuous mode [ 2335.949507][ T5161] device veth1_vlan left promiscuous mode [ 2335.955590][ T5161] device veth0_vlan left promiscuous mode [ 2336.611954][ T5161] team0 (unregistering): Port device team_slave_1 removed [ 2336.659312][ T5161] team0 (unregistering): Port device team_slave_0 removed [ 2336.700941][ T5161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2336.749506][ T5161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2337.049276][ T5161] bond0 (unregistering): Released all slaves [ 2344.554704][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.561033][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2392.712974][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 2397.843392][ T4280] Bluetooth: hci6: command 0x0406 tx timeout [ 2405.995487][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.001811][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2411.762991][ T28] INFO: task syz.0.11236:10568 blocked for more than 143 seconds. [ 2411.770856][ T28] Not tainted syzkaller #0 [ 2411.779790][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2411.788621][ T28] task:syz.0.11236 state:D stack:25712 pid:10568 ppid:4289 flags:0x00004004 [ 2411.797962][ T28] Call Trace: [ 2411.801256][ T28] [ 2411.804242][ T28] __schedule+0x107f/0x4030 [ 2411.808764][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 2411.814003][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2411.820174][ T28] ? __sched_text_start+0x8/0x8 [ 2411.825107][ T28] ? task_work_cancel+0xa1/0x220 [ 2411.830070][ T28] ? rcu_is_watching+0x11/0xa0 [ 2411.835105][ T28] ? task_work_cancel_func+0x210/0x210 [ 2411.840587][ T28] schedule+0xb9/0x180 [ 2411.844720][ T28] ? _free_event+0x10d/0x1050 [ 2411.849403][ T28] _free_event+0x176/0x1050 [ 2411.853976][ T28] perf_event_release_kernel+0x7c4/0x850 [ 2411.859650][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2411.866147][ T28] ? calc_timer_values+0x410/0x410 [ 2411.871283][ T28] ? perf_mmap+0x1470/0x1470 [ 2411.875972][ T28] perf_release+0x37/0x40 [ 2411.880308][ T28] __fput+0x20a/0x8b0 [ 2411.884371][ T28] task_work_run+0x1d0/0x260 [ 2411.888991][ T28] ? task_work_cancel+0x220/0x220 [ 2411.894102][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 2411.899411][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 2411.905039][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 2411.910507][ T28] do_syscall_64+0x58/0xa0 [ 2411.915023][ T28] ? clear_bhb_loop+0x60/0xb0 [ 2411.919839][ T28] ? clear_bhb_loop+0x60/0xb0 [ 2411.924733][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2411.930644][ T28] RIP: 0033:0x7f2344b9e019 [ 2411.935102][ T28] RSP: 002b:00007f2345a33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2411.943734][ T28] RAX: 0000000000000000 RBX: 00007f2344e25fa0 RCX: 00007f2344b9e019 [ 2411.951724][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 2411.959762][ T28] RBP: 00007f2344c3500c R08: 0000000000000000 R09: 0000000000000000 [ 2411.967958][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2411.976020][ T28] R13: 00007f2344e26038 R14: 00007f2344e25fa0 R15: 00007fff61c842b8 [ 2411.984115][ T28] [ 2411.987194][ T28] [ 2411.987194][ T28] Showing all locks held in the system: [ 2411.994974][ T28] 1 lock held by rcu_tasks_kthre/12: [ 2412.000261][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2412.010783][ T28] 1 lock held by rcu_tasks_trace/13: [ 2412.016103][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2412.027311][ T28] 1 lock held by khungtaskd/28: [ 2412.032176][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 2412.042146][ T28] 2 locks held by getty/4029: [ 2412.046896][ T28] #0: ffff88814d052098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2412.056813][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 2412.067016][ T28] [ 2412.069501][ T28] ============================================= [ 2412.069501][ T28] [ 2412.078154][ T28] NMI backtrace for cpu 1 [ 2412.082494][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2412.089678][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2412.099754][ T28] Call Trace: [ 2412.103045][ T28] [ 2412.105963][ T28] dump_stack_lvl+0x188/0x24e [ 2412.110630][ T28] ? irq_work_queue+0xb8/0x140 [ 2412.115395][ T28] ? show_regs_print_info+0x12/0x12 [ 2412.120600][ T28] ? load_image+0x410/0x410 [ 2412.125095][ T28] ? vprintk_emit+0x59f/0x6a0 [ 2412.129763][ T28] ? printk_sprint+0x460/0x460 [ 2412.134521][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 2412.139463][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 2412.145611][ T28] ? _printk+0xda/0x130 [ 2412.149760][ T28] ? load_image+0x410/0x410 [ 2412.154258][ T28] ? load_image+0x410/0x410 [ 2412.158753][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 2412.164816][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2412.170895][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 2412.176900][ T28] watchdog+0xf0e/0xf50 [ 2412.181058][ T28] ? watchdog+0x1ed/0xf50 [ 2412.185381][ T28] kthread+0x29d/0x330 [ 2412.189438][ T28] ? hungtask_pm_notify+0x40/0x40 [ 2412.194463][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2412.199042][ T28] ret_from_fork+0x1f/0x30 [ 2412.203459][ T28] [ 2412.206932][ T28] Sending NMI from CPU 1 to CPUs 0: [ 2412.212272][ C0] NMI backtrace for cpu 0 [ 2412.212283][ C0] CPU: 0 PID: 18283 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 2412.212298][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2412.212307][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 2412.212332][ C0] RIP: 0010:ieee80211_bss_info_update+0x77e/0xbf0 [ 2412.212352][ C0] Code: f7 31 c0 49 bf 00 00 00 00 00 fc ff df e9 4a 02 00 00 4c 89 f8 48 8d 8c 24 e0 00 00 00 49 01 de 49 bf 00 00 00 00 00 fc ff df <43> c7 44 3c 10 00 00 00 00 66 43 c7 44 3c 14 00 00 43 c6 44 3c 16 [ 2412.212363][ C0] RSP: 0018:ffffc90004bdf680 EFLAGS: 00000286 [ 2412.212375][ C0] RAX: 0000000000000028 RBX: 0000000000000024 RCX: ffffc90004bdf760 [ 2412.212386][ C0] RDX: 0000000000000000 RSI: 000000000000004c RDI: 0000000000000024 [ 2412.212395][ C0] RBP: ffffc90004bdf870 R08: 000658252e2c8061 R09: 0000000000000064 [ 2412.212405][ C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 1ffff9200097bedc [ 2412.212415][ C0] R13: ffff8880569b2c68 R14: ffff888025649c74 R15: dffffc0000000000 [ 2412.212426][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2412.212439][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2412.212449][ C0] CR2: 000055816ebc6660 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 2412.212468][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 2412.212477][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2412.212486][ C0] Call Trace: [ 2412.212490][ C0] [ 2412.212499][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 2412.212521][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 2412.212542][ C0] ? ieee80211_vif_get_shift+0x22b/0x290 [ 2412.212563][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 2412.212586][ C0] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 2412.212606][ C0] ? verify_lock_unused+0x140/0x140 [ 2412.212632][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 2412.212653][ C0] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 2412.212676][ C0] ? mark_lock+0x94/0x320 [ 2412.212695][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2412.212715][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 2412.212733][ C0] ? lock_chain_count+0x20/0x20 [ 2412.212753][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2412.212778][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 2412.212794][ C0] ? skb_dequeue+0x120/0x150 [ 2412.212810][ C0] ieee80211_iface_work+0x72c/0xc70 [ 2412.212833][ C0] cfg80211_wiphy_work+0x224/0x260 [ 2412.212852][ C0] ? process_one_work+0x7b4/0x1160 [ 2412.212869][ C0] process_one_work+0x8ab/0x1160 [ 2412.212891][ C0] ? worker_detach_from_pool+0x240/0x240 [ 2412.212909][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2412.212923][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2412.212940][ C0] ? wq_worker_running+0x97/0x190 [ 2412.212962][ C0] worker_thread+0xaf5/0x12a0 [ 2412.212983][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2412.213003][ C0] kthread+0x29d/0x330 [ 2412.213015][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 2412.213030][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2412.213043][ C0] ret_from_fork+0x1f/0x30 [ 2412.213067][ C0] [ 2412.222331][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2412.222345][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2412.222362][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2412.222372][ T28] Call Trace: [ 2412.222378][ T28] [ 2412.222386][ T28] dump_stack_lvl+0x188/0x24e [ 2412.222412][ T28] ? memcpy+0x3c/0x60 [ 2412.222429][ T28] ? show_regs_print_info+0x12/0x12 [ 2412.222449][ T28] ? load_image+0x410/0x410 [ 2412.222475][ T28] panic+0x2d3/0x710 [ 2412.222491][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 2412.222515][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 2412.222531][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 2412.222556][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 2412.222579][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 2412.222601][ T28] watchdog+0xf4d/0xf50 [ 2412.222623][ T28] ? watchdog+0x1ed/0xf50 [ 2412.222644][ T28] kthread+0x29d/0x330 [ 2412.222657][ T28] ? hungtask_pm_notify+0x40/0x40 [ 2412.222674][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2412.222690][ T28] ret_from_fork+0x1f/0x30 [ 2412.222719][ T28] [ 2412.225406][ T28] Kernel Offset: disabled [ 2412.627139][ T28] Rebooting in 86400 seconds..