last executing test programs: 2m40.701370771s ago: executing program 0 (id=8870): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'io'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}, {0x2d, 'cpuacct'}, {0x2d, 'rlimit'}, {0x2b, 'net_cls'}, {0x2b, 'freezer'}, {0x2b, 'net'}, {0x6, 'perf_event'}]}, 0x47) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) socketpair(0x25, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x62140, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x6, 0x3, 0x3, 0x200, r5, 0x2, '\x00', 0x0, r5, 0x5, 0x0, 0x1}, 0x50) r8 = openat$cgroup_type(r5, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f00000002c0)="a269b438aee9642e050c8c3df8b0bbc01552efdbae75d556cd8033a631dd4010096d6bf643fb24d0ca0ce3b6e6c71386", &(0x7f0000000300)=""/115, &(0x7f0000000380)="a6dea42b2be1287d73f5717271", &(0x7f00000003c0)="1154a99e1f9f9d2aab1e015977ad9e0f72f02218519af0423f2b9b5b86a0c84aa6b911fef2b08c01067137a0adfa9c4865bb9af4f3fbe53fb20f493c40b26293e566d1757aa0c67dd3474139d2719dce1a2b263c532c94884dd0ed15964d22c76bfc32ba8b8a5de24801155db13863ecac47eb49e4e6a6d47855d9796dac9352a6e5818cd582eef7fdd4f24929ff15e38ca08bc8c9e8b41e71c73ee93bc5ca5eee06b1f7af3af4cf8c6c75ee5201a99e6f6623e08552a718a4672e46feffb37713010f499f56531704", 0x8000, r5}, 0x38) r9 = openat$cgroup_ro(r5, &(0x7f0000000500)='cgroup.controllers\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f0000000540)="6dab9846c78f9a7fcad65f886dc04d5cac2ad0b6dd63bfe28f253a504741b4e42cbac3f26f556a7a83e3289265635afa03250dda23e3eba59613c0a4b5c28509f4b0667095520484f8c59fed0936a8bc7033e9dfeca12dfd21ad027e2faebbf6f00c6c85ff277273f0f40cc0a76aff0ab81324dd39a8a8d8b30489fbaf55", &(0x7f00000005c0)=""/132, &(0x7f0000000680)="d975dcc5410a6d577be05437fb9f001e1cc626dbc53ab27f4de386900605699f81e4bef605487701609e275d51db5ae5f91cae5f190e6101f785625155c3a83eee49d20e128188a927a459f3a5ca023e451114cd", &(0x7f0000000700)="75219a49835a949047df46dfb90d2b64eb528f8136ebe322a566d9377b19dd668a9f2396bce99aec254d0212084ebc1c8adcf63a2bec7239dee7a1077b01d83158426a872ba52410b2cd1703b0c992b5dd9577e31d996468ad569d5b7707c1dbd84e2678ace9dfd383b079b06cd83d449de5c5cbf374ebf46294651c1068afac67018f050530a5b0f685ca", 0x7, r9, 0x4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000940)={r7, &(0x7f0000000800)="b1344f2acbc1294ef4cc3bdaf0a0cf25f197fa9387dab8f2966e5eed18f4e5f53b4884d7611bcec120f2325c2cc3d1b968fc85e8b63471a60ff5d5a8e06030c27829ff2543eab246a3e94ec87378e8a3e670a9ea7c8c999cde6af229bab7a4de2deeeb8cfc", &(0x7f0000000880)=""/179}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000980)='\x00') ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f00000009c0)=0xc) r10 = perf_event_open(&(0x7f0000000a00)={0x5, 0x80, 0xbf, 0x3, 0x0, 0x7, 0x0, 0x400, 0xa2085, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x1, 0xf, 0x4, 0x4, 0x8, 0x4e9, 0x0, 0x9, 0x0, 0x9e00000000}, 0x0, 0xc, 0xffffffffffffffff, 0x8) close(r5) sendmsg$sock(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a80)="b32aa55df676683541e894a5c4a3b250d8efe4e679d614d094711e1273a94e5113f04ec8a7a89e1987d96f59b458d146992aec070f802e4cbee12eaa0cda2ed9c5", 0x41}, {&(0x7f0000000b00)="0bff859e513275c01abac4a673d5bcf409ee36bab4d27ccb2d33fd2689efdc9d6a2745e3087c2d2f35e11d93ccf2546d60", 0x31}, {&(0x7f0000000b40)="755147633b46aa92ed8122162d3683b85665346f37d83430562c927ee02c73c4fc6522da70b4961fe3d01965cb", 0x2d}, {&(0x7f0000000b80)="9051527ed6a05b2a11963d1172fb6368aa24014b28e0f0216d18ede5c1cc4556ebb81858091efa8b9dda7d961118c3920ff45fdf2ff1961bd3417f7bba9748563aacbcb7531e775b8567e9fee60edcb4e569bc9e04561fc7b0386722e1ac3b41631e231d7ea535aec879f9cdaa46964f02234555e26e0dc48d5bc511ccc7fbcc02d0dbfd6ec0d79698de3e540f837036552987b392536403018b5ad2eef6486666e6301a5d3cdb8a681fa09f078a63d9bb12", 0xb2}], 0x4, &(0x7f0000000c80)=[@timestamping={{0x14, 0x1, 0x25, 0xd8c0}}], 0x18}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d00)) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={r9, 0x58, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x4, '\x00', r11, r9, 0x2, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb, '\x00', r11, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) r15 = syz_clone(0x4000, &(0x7f0000000f80)="549e589912fceff269e5ccb2de07be00ed1b4c7e71fbc564cb1a3dd9daad083ef61e965af67db76c4151ad8a48546f2ddd5bc35eacf6276708700b9225af52e33fa29d5c8331ff1b46930ba2453f657b557f3677a80959a6a9ab11736e8d38588d2c1286dd619d64f80801cfcdc7e36766d78a1bb92fe4759949f58f36285bedfdbf7bce9d33c3e115cbc3d0faec2cc04728d9f9348ec102d89f194364167f5c4efa0323bdfba06e6e0c6cfdfce32d309cc4b50a96e73fb6c9971f0e5ebc1fd0aea0e6b657e00ff71f3cc0819214e1a3a285", 0xd2, &(0x7f0000001080), &(0x7f00000010c0), &(0x7f0000001100)="2c65260ab70405dc87838166b1f4f0728703091451e1e24607aedb28ddabbfc2c807a69a0b2f84df1912e2b2175d28cf0ea5cdceccbd1e95b56c9e7855c5d4aec399b08246cde8ce3e39d9adf73582b364a11622a1a6a5a5f87a4c10c95af8526c") r16 = openat$cgroup(r5, &(0x7f0000001180)='syz1\x00', 0x200002, 0x0) r17 = openat$cgroup_freezer_state(r2, &(0x7f00000011c0), 0x2, 0x0) r18 = getpid() sendmsg$unix(r13, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000ec0), 0x0, &(0x7f0000001340)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r10]}}, @rights={{0x38, 0x1, 0x1, [r12, r1, r14, r4, r8, r7, r5, r3, r7, r9]}}, @rights={{0x18, 0x1, 0x1, [r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee00, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r6, r16, r8, r8, r17, r10, r6]}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x140, 0x8000}, 0x20000001) 2m40.495185587s ago: executing program 0 (id=8873): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000061194000000000009500000000000000be507fb0a56b9ff93ab05343439bbf83a7ca8d76a0fe7794a681259563b88e091eb9652578a1dfdf6e8400c7b3f79be6e622fdcaefa21acf38c025280178e06f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$kcm(0x29, 0x7, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d5d, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300004caf0000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m40.106417009s ago: executing program 0 (id=8878): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x7, 0x0) (async) r1 = socket$kcm(0x10, 0x7, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26}, 0x28) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRESDEC=r4, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES16=r5], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) (async) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x82b00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xf9, 0x66, 0x7, 0x3, 0x0, 0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x7}, 0x910, 0x8, 0xae3343a, 0x9, 0x981, 0x40, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff8}, r7, 0x2, r3, 0x1) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) r9 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7) (async) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2], &(0x7f0000000280)='GPL\x00', 0x405, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x40, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4}, 0x10}, 0x94) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 2m37.631411033s ago: executing program 0 (id=8890): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m37.273893974s ago: executing program 0 (id=8892): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000ff900000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, 0x1}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES16], 0xffd3) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x19, 0x0, 0x0) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES32=r5, @ANYRES32=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m35.805448608s ago: executing program 0 (id=8903): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='+net_prio +net +perf_event -~et -hugetlb -hugetlb +perf_event '], 0x3e) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x20, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @jmp={0x5, 0x0, 0x9, 0x3, 0x5, 0x10, 0x1}, @generic={0xfb, 0x0, 0x7, 0x4, 0x7db3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000840)='GPL\x00', 0x4, 0x13, &(0x7f0000000880)=""/19, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x3, 0x4, 0x7, 0x5}, 0x10, 0x21d3, r2, 0x4, &(0x7f0000000900)=[0x1], &(0x7f0000000940)=[{0x2, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x4, 0xa}, {0x3, 0x4, 0x2, 0x2}, {0x4, 0x2, 0x0, 0x5}]}, 0x94) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x2, 0x1, 0x5, 0x0, 0x5, 0x2541, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x5, 0xff}, 0x10520, 0x1, 0x7, 0x0, 0x7, 0x2, 0xfff8, 0x0, 0x80, 0x0, 0xa796}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000b65fb8a1922a9b1f001205000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r8, @ANYBLOB="3eca", @ANYRES8=r10], 0x9a) 2m20.317443364s ago: executing program 32 (id=8903): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='+net_prio +net +perf_event -~et -hugetlb -hugetlb +perf_event '], 0x3e) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x20, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @jmp={0x5, 0x0, 0x9, 0x3, 0x5, 0x10, 0x1}, @generic={0xfb, 0x0, 0x7, 0x4, 0x7db3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000840)='GPL\x00', 0x4, 0x13, &(0x7f0000000880)=""/19, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x3, 0x4, 0x7, 0x5}, 0x10, 0x21d3, r2, 0x4, &(0x7f0000000900)=[0x1], &(0x7f0000000940)=[{0x2, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x4, 0xa}, {0x3, 0x4, 0x2, 0x2}, {0x4, 0x2, 0x0, 0x5}]}, 0x94) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x2, 0x1, 0x5, 0x0, 0x5, 0x2541, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x5, 0xff}, 0x10520, 0x1, 0x7, 0x0, 0x7, 0x2, 0xfff8, 0x0, 0x80, 0x0, 0xa796}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000b65fb8a1922a9b1f001205000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r8, @ANYBLOB="3eca", @ANYRES8=r10], 0x9a) 10.597673741s ago: executing program 3 (id=9522): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0xc0ff}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.242078302s ago: executing program 4 (id=9428): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000101bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@alu={0x1, 0x1, 0xd, 0x9, 0xa, 0xc, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0xad, &(0x7f0000000380)=""/173, 0x41100, 0x1, '\x00', r3, 0x0, r2, 0x8, &(0x7f0000000700)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xe, 0x3, 0xffffff80}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[r2, r2, 0xffffffffffffffff, r2], &(0x7f0000000900)=[{0x3, 0x2, 0x9, 0x55134e6ea0079c75}, {0x0, 0x3, 0x6, 0x6}, {0x1, 0x3, 0xc, 0xc}, {0x2, 0x1, 0xc, 0xc}, {0x0, 0x2, 0xe, 0x9}, {0x1, 0x1, 0xd, 0x3}, {0x2, 0x5, 0xb, 0x4}, {0x0, 0x3, 0x4, 0x4}], 0x10, 0x800}, 0x94) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 10.181328194s ago: executing program 3 (id=9534): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f00000009c0), 0xf}, 0x222, 0x4, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018000000000000000000000000000f009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 9.703235388s ago: executing program 3 (id=9527): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03000054880000c94aa955338cb74d0000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 9.397460017s ago: executing program 4 (id=9529): socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x810000a6, 0x0, 0x0, 0x0, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0xfdef) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400a000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x8014) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000070bd85ac26d8003ad0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRESHEX=r0, @ANYBLOB='\x00'/28], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000900b703000000fcff000000000021000000b700000000a8aed5ab10bf5a76000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.395127318s ago: executing program 2 (id=9540): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000002bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@alu={0x1, 0x1, 0xd, 0x9, 0xa, 0xc, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0xad, &(0x7f0000000380)=""/173, 0x41100, 0x1, '\x00', r3, 0x0, r2, 0x8, &(0x7f0000000700)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xe, 0x3, 0xffffff80}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[r2, r2, 0xffffffffffffffff, r2], &(0x7f0000000900)=[{0x3, 0x2, 0x9, 0x55134e6ea0079c75}, {0x0, 0x3, 0x6, 0x6}, {0x1, 0x3, 0xc, 0xc}, {0x2, 0x1, 0xc, 0xc}, {0x0, 0x2, 0xe, 0x9}, {0x1, 0x1, 0xd, 0x3}, {0x2, 0x5, 0xb, 0x4}, {0x0, 0x3, 0x4, 0x4}], 0x10, 0x800}, 0x94) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 8.115288756s ago: executing program 2 (id=9535): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0xd0ff}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.880587803s ago: executing program 2 (id=9538): perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x12, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x2404c880) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfd81) 6.369514888s ago: executing program 5 (id=9543): perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000001c0)=r5, 0x4) openat$cgroup(r2, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @private2, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f23080000000000000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x4310feed034fc9f2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0x4, &(0x7f0000000b80), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x2000000000000018, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071104e00000000009500000000000000f7cd857ac5737aa46e86ed34f2bb8e26f819a832b08d994a583e3bfb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038011000000d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.602893262s ago: executing program 1 (id=9548): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x39, 0x40, &(0x7f00000000c0)="e3137409827cfab6fcb5f77480d3aa0ece1ed4e03bb965ede0aab603e78d6d905197315bf68f563fa2c1989c2fb05ff978fa61bb39491aaf42", &(0x7f0000000200)=""/64, 0xfc44f209, 0x0, 0x40, 0xc8, &(0x7f0000000240)="d2dd257a61c26d7056c08913342732a043d9d3cae879ed1c1e1bf19231c02f196b8e9c12280fce94587d5884cdd8763a07fb34dc7f2846078c388c8c4eed55f0", &(0x7f00000006c0)="f917fd94fb4facaa5739de98ac776e5afc38f3b0ec562c98f306fe2cf632e8e71406b464557ec977d491488c03c6971ef27ccec08ceeb9f897c9ba27995b5dee01073b8860b67e8480e7fc975dca8e31fa3e1aa73a16311f0493a5abb350ede839499c22bf23657bd85d8c7c63383d150999e2c0a3720e1950a9b43d4493bd64ddaf7d7a91e33c56451b748079ce8482553dfa682bf7e7221f5ba20f07006fc283c86f9967bdbf5b8edeaaa8ff2b9278a0fb8f532dbb2bbbceb22538e9f257c81fab838609ef4d99", 0x2, 0x0, 0x9}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.460040546s ago: executing program 4 (id=9549): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002440)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b24a4bcdc33b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d12afdb295ce2edecb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde31469c4aea0c64850eb3f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c296af344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707484df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a4181966f24f51679c491a8e0a7dfbdbab3bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a97769e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc517239a6777dbb92a7462538dbd8a4b82f87df7982b44b160a598c75bafa5a9b388a44303dbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bb9204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b0200897e505afb87b878f3e13187001bba6a401bd56f3f8eb5384e33"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbdf55c5ca5705acd}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x18, 0x24, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x3a}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcfd1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x6, 0x5, 0x30}]}, &(0x7f00000004c0)='GPL\x00', 0xfffffffc, 0x1000, &(0x7f0000001140)=""/4096, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x7, &(0x7f0000002140)=[0xffffffffffffffff], &(0x7f0000002180)=[{0x2, 0x3, 0x8, 0xa}, {0x3, 0x1, 0x2, 0x3}, {0x2, 0x2, 0xd, 0xc}, {0x2, 0x2, 0xc, 0x2}, {0x2, 0x1, 0xc, 0x6}, {0x2, 0x3, 0x1, 0x8}, {0x0, 0x1, 0x3, 0x4}], 0x10, 0x518}, 0x94) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000540)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000022c0)={0xffffffffffffffff}, 0x4) (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000022c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002400)={@ifindex, 0x3, 0x1, 0x3, &(0x7f0000002300)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="2600000004200000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="d33f80a74d12c2bf94eb", @ANYRES64=r5], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="2600000004200000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="d33f80a74d12c2bf94eb", @ANYRES64=r5], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) sendmsg$kcm(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000000600)="f56ab4fd40c7c1234ede9560e8552308ec0fcc2ca2b13e08", 0x18}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="f1991415caf7b7e87a7c33a83dc73cc54b599d71af4087904f817407c21eae7237d5530a299db4a2a8d63c2ea536f718df0a3537af33647ebd9256dc5a6205ffcbebd4e1055ea8b7db7573c8fa69142e21fa8e4ee3d5d1496f52f10f4f986e6c351d3f85cd8f5c4e8fcc9704b407619391627797811a0d1fcefe0fbfd6ff67791ec2054efab52fc2670b0c89c4b27071d17198370317785435750c1430", 0x9d}, {&(0x7f0000000900)="3f5cc135b31a95a01417fa1636354f21fde4e4dbf3e7b6fa4d4fb6b4dc8831c3685f98927d77d601f26ab9174fa7a85427f0232509dfbf7e66dcd6b2800de91bf9cb7d852d9131704878a359f880567612ecc3679c3d3464dff3555e88d2028706826f443121613c9922a700833f5c4cfb755b7ad3be40efc6040a529d3c52f2ca7f7fa885b00b6bbc7d570585e9b7907b18a3b3f30ec6fc27b5a00dd2f20e9a5a86673a320c7663f0e073c93cb4827045fd68fde9c2401392a50c26e9a607c4c1cf", 0xc2}, {&(0x7f0000000bc0)="c592ec0aceb7d36a854d37ca3a1a430be78a576f7b54aa119a1e7ac2a182694eeb37f9aa6eebf46efb7c7f45c86168d5104d9c2497a9068f898c", 0x3a}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="5017f0a8f15b60961ae5696bf799d248bc8722597ae2a21fc80db6c927d4477531c38cb8cb7ade8568eb6fffcb91accf6af2bc5817e4d1e930e67cbfc7825caf7a7ca83bf55dc6f797ee5c32979b829de0bdd8242151f093e53288aa5d2de541dc450291705adc0a702e84600405a9761b0a411466c11e6d20ddfdccd0a3cbc4023581d07c", 0x85}, {&(0x7f0000004000)="c73d38ede698a99836bd03b80073a8b6c1ac11c0007d05a252a96c51ed7be82b9170c11039aef2a78aff8abeb9aa9025a9aa7865d723e1b31ee72d65d2052a23505c5b51cee6547a2704422fb3895b13f9ebd245b3a5d2e722deb5fa1e817f90bd7cc08fd5800db8cd37491768e800637a1a0706887d73727b9f041b120271fe2dd095", 0x83}, {&(0x7f00000040c0)="5614adc974349fa7773871ef0e670885f88996", 0x13}], 0x9, &(0x7f00000041c0)=[{0x48, 0x10a, 0x4, "03264d4678d22d0286d9f5c6df20eb0391002973427cf497b7620a3fb9a31e0ef9c34533355d348c6957f5c649b4f7d97e90d7658137"}, {0xa8, 0x109, 0x4b, "76ef4cca5427a597db2e322bf0ba64f3c280afd3d60aaff5b4e5e6f3de6bd4ce04ebaa7fbc0d46513cee2be018bfcb73285b10486905f9ca6a9a55eee514786fb8e4ac616939bbeae2e1151e002858a92220a757fd93fdc91cc745e0908e521c37b2342ba4585e1601b75e2003dacae9812278237bdd36edce3261c2b82b4d8ab69f17fddff7e44fa8b9ac77c9b2995a3e9b2ef4c0180be7"}, {0x90, 0xe52af2f70c9a353f, 0x40, "d73afde0710e4eedb88895929db6fd52efebde462f4494c001a5f416bb487043c425a098b24e3338e7661d92b6f52d2bdbefad4c2946315141eef988223b687b387398c670d160d244286f26e96b368f95f44f71d2c3ed5f1bfcb361a0ea52482357b7ff31e86d1a02f25595fa51416a2b4fbd121596a7c0defa5b"}], 0x180}, 0x20000014) (async) sendmsg$kcm(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000000600)="f56ab4fd40c7c1234ede9560e8552308ec0fcc2ca2b13e08", 0x18}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="f1991415caf7b7e87a7c33a83dc73cc54b599d71af4087904f817407c21eae7237d5530a299db4a2a8d63c2ea536f718df0a3537af33647ebd9256dc5a6205ffcbebd4e1055ea8b7db7573c8fa69142e21fa8e4ee3d5d1496f52f10f4f986e6c351d3f85cd8f5c4e8fcc9704b407619391627797811a0d1fcefe0fbfd6ff67791ec2054efab52fc2670b0c89c4b27071d17198370317785435750c1430", 0x9d}, {&(0x7f0000000900)="3f5cc135b31a95a01417fa1636354f21fde4e4dbf3e7b6fa4d4fb6b4dc8831c3685f98927d77d601f26ab9174fa7a85427f0232509dfbf7e66dcd6b2800de91bf9cb7d852d9131704878a359f880567612ecc3679c3d3464dff3555e88d2028706826f443121613c9922a700833f5c4cfb755b7ad3be40efc6040a529d3c52f2ca7f7fa885b00b6bbc7d570585e9b7907b18a3b3f30ec6fc27b5a00dd2f20e9a5a86673a320c7663f0e073c93cb4827045fd68fde9c2401392a50c26e9a607c4c1cf", 0xc2}, {&(0x7f0000000bc0)="c592ec0aceb7d36a854d37ca3a1a430be78a576f7b54aa119a1e7ac2a182694eeb37f9aa6eebf46efb7c7f45c86168d5104d9c2497a9068f898c", 0x3a}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="5017f0a8f15b60961ae5696bf799d248bc8722597ae2a21fc80db6c927d4477531c38cb8cb7ade8568eb6fffcb91accf6af2bc5817e4d1e930e67cbfc7825caf7a7ca83bf55dc6f797ee5c32979b829de0bdd8242151f093e53288aa5d2de541dc450291705adc0a702e84600405a9761b0a411466c11e6d20ddfdccd0a3cbc4023581d07c", 0x85}, {&(0x7f0000004000)="c73d38ede698a99836bd03b80073a8b6c1ac11c0007d05a252a96c51ed7be82b9170c11039aef2a78aff8abeb9aa9025a9aa7865d723e1b31ee72d65d2052a23505c5b51cee6547a2704422fb3895b13f9ebd245b3a5d2e722deb5fa1e817f90bd7cc08fd5800db8cd37491768e800637a1a0706887d73727b9f041b120271fe2dd095", 0x83}, {&(0x7f00000040c0)="5614adc974349fa7773871ef0e670885f88996", 0x13}], 0x9, &(0x7f00000041c0)=[{0x48, 0x10a, 0x4, "03264d4678d22d0286d9f5c6df20eb0391002973427cf497b7620a3fb9a31e0ef9c34533355d348c6957f5c649b4f7d97e90d7658137"}, {0xa8, 0x109, 0x4b, "76ef4cca5427a597db2e322bf0ba64f3c280afd3d60aaff5b4e5e6f3de6bd4ce04ebaa7fbc0d46513cee2be018bfcb73285b10486905f9ca6a9a55eee514786fb8e4ac616939bbeae2e1151e002858a92220a757fd93fdc91cc745e0908e521c37b2342ba4585e1601b75e2003dacae9812278237bdd36edce3261c2b82b4d8ab69f17fddff7e44fa8b9ac77c9b2995a3e9b2ef4c0180be7"}, {0x90, 0xe52af2f70c9a353f, 0x40, "d73afde0710e4eedb88895929db6fd52efebde462f4494c001a5f416bb487043c425a098b24e3338e7661d92b6f52d2bdbefad4c2946315141eef988223b687b387398c670d160d244286f26e96b368f95f44f71d2c3ed5f1bfcb361a0ea52482357b7ff31e86d1a02f25595fa51416a2b4fbd121596a7c0defa5b"}], 0x180}, 0x20000014) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r8, r3, 0x0, 0x2000, 0x0, @value=r1, @void, @void, @void, r5}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="fb6bba88", 0x4}], 0x1}, 0x0) recvmsg(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1}, 0x40fe) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'gre0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x8914, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r12, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b0000000000000000000000000000000001827511d5b4d3a9f536f4"], 0xee8a) 2.361038039s ago: executing program 2 (id=9550): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x93, 0x10, 0x0, 0x2, 0x0, 0x8, 0x3000, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x2401, 0x7, 0xa0000000, 0x6, 0x6c3, 0x9, 0xf20, 0x0, 0x5, 0x0, 0xfffffffffffffff8}, r0, 0x10, r1, 0xa) 2.284059441s ago: executing program 3 (id=9551): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f00000009c0), 0xf}, 0x222, 0x4, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000020009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 2.283775121s ago: executing program 1 (id=9552): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000007600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.253350192s ago: executing program 5 (id=9553): socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x28, 0x1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500070086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 1.743268437s ago: executing program 1 (id=9554): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 1.577672813s ago: executing program 5 (id=9555): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000a0000000000000000d18560200400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000b80)='blkio.reset_stats\x00', 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="04a19c238bb7577f94cf5951bca08d4ad5e443798549dce7b5ccc8574d87ba002286426304910d2571ba6eb038bbb94cbc6efcb9a9642ab671d115a4a4726d664df191c4f541d7f0d05cc9880f8132933085cec0ecb7fb6c856316d0e3fe9937b32a5e1d3d0cda083e819f25f551d20b860621d8e1d7b2ad808a4f71260785ae1400835afe48a75bcfdc1b6ae7bb83e9e87d9fbd9301f7aa0b9f1e4fe66366baf31e724fd87cddab95b629c6ab7440b557c41abce2afd29c6042593c15bf831d8575df4f302295ffefb9712c9046250ff697b5ffbb8276fcf7c8ba02ba443b11ab99e23d302885", @ANYRES64=r0], 0x0, 0x58}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r9) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 1.576787062s ago: executing program 4 (id=9556): perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000001c0)=r4, 0x4) openat$cgroup(r2, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x4310feed034fc9f2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071104e00000000009500000000000000f7cd857ac5737aa46e86ed34f2bb8e26f819a832b08d994a583e3bfb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071104e00000000009500000000000000f7cd857ac5737aa46e86ed34f2bb8e26f819a832b08d994a583e3bfb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038011000000d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.498771195s ago: executing program 3 (id=9557): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r1 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xc2bb, 0x0, 0x4000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1, 0x0, 0x0, 0xffffffffffffff41}, 0x80) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="accc000000000000000000006b5e540dc74ad8df", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="05000000040000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x81, 0x9, 0xf7, 0x3, 0x0, 0x9, 0x4000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x9}, 0x1008, 0x6, 0x1, 0x3, 0x0, 0x4e4, 0x7, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r4, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x40047459, &(0x7f0000000180)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x16, 0x0, 0xd, 0xfffffff9}, {0x3, 0x4, 0x4, 0x80000000}]}) r10 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x6005, 0x0, @empty, 0x7}, 0x80, 0x0}, 0x20040040) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10102) 1.242332332s ago: executing program 1 (id=9558): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x6, 0x4200003, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f017afd1bd", 0x33fe0}], 0x1}, 0x0) 1.224905673s ago: executing program 2 (id=9559): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000040)=@x25, 0x80, 0x0}, 0x400c4) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000006c0)=[{0x0, 0x11}, {0x0, 0xf5ff}], 0x2, &(0x7f0000000740)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @end, @cipso={0x86, 0x6, 0x3}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x48}, 0x840) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x17}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r2, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_clone(0x48000000, &(0x7f0000000100)="e4a2df988600eb1b3a3c605838d6464d7d538ffd2e70a4c48dafbde84c738b3b07ab373f3e488d1160458fe02d0fd4d1a428b4c5836be81e1baed4c9d653af284dbe343a677e0dce8ffbc758383d820cf5045f775da74521f89364fc80e0d86498ddd6a49a6ed6eca77e94cb5a11b630b870bcd63ca55006b104338346575b4d32433990a2afd34b75f09a7caf858701dda8f5e72ff38b8f", 0x98, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)="ad8864dec7dc7c0076b1413d401538e9525a54184c7d320f56f4316deb5443e7e7f1cd59bc11a6195bfbcb1d17aefa584cba6e06d445fffe15c5e68ff00bd693ddb6a138e3f4253260b0c1d892e09927c5") syz_open_procfs$namespace(r3, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0x2, 0x3, 0x84) (async) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000040)=@x25, 0x80, 0x0}, 0x400c4) (async) socket$kcm(0xa, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000006c0)=[{0x0, 0x11}, {0x0, 0xf5ff}], 0x2, &(0x7f0000000740)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @end, @cipso={0x86, 0x6, 0x3}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x48}, 0x840) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x17}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r2, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_clone(0x48000000, &(0x7f0000000100)="e4a2df988600eb1b3a3c605838d6464d7d538ffd2e70a4c48dafbde84c738b3b07ab373f3e488d1160458fe02d0fd4d1a428b4c5836be81e1baed4c9d653af284dbe343a677e0dce8ffbc758383d820cf5045f775da74521f89364fc80e0d86498ddd6a49a6ed6eca77e94cb5a11b630b870bcd63ca55006b104338346575b4d32433990a2afd34b75f09a7caf858701dda8f5e72ff38b8f", 0x98, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)="ad8864dec7dc7c0076b1413d401538e9525a54184c7d320f56f4316deb5443e7e7f1cd59bc11a6195bfbcb1d17aefa584cba6e06d445fffe15c5e68ff00bd693ddb6a138e3f4253260b0c1d892e09927c5") (async) syz_open_procfs$namespace(r3, &(0x7f0000000300)='ns/ipc\x00') (async) 778.543606ms ago: executing program 5 (id=9560): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0xffc0}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 713.555379ms ago: executing program 4 (id=9561): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800d5c7c59b4734514d08ba30e82c", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014d6d600b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="b8914b3f677210a5befd00000500", 0x0, 0x10012000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200e801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r5, 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 549.795413ms ago: executing program 1 (id=9562): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x43) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) mkdirat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000400), 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) 420.919767ms ago: executing program 5 (id=9563): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000000380)=""/157, 0x9d}], 0x4, &(0x7f0000000480)=""/34, 0x22}, 0x12000) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 330.63332ms ago: executing program 4 (id=9564): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f090094f9105f9253", 0x14}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x1000, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000900000004000000020000060400000003000000000000000500000000000000000000615f57"], &(0x7f0000003680)=""/4096, 0x3d, 0x1000, 0x1}, 0x28) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r4}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="2e00000010008102b78cc358f86515e00000c9f1af642fb6429d6efb4400490009002e0010000000ba8000051201", 0x2e}], 0x1}, 0x4000000) r7 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1212000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 136.768216ms ago: executing program 2 (id=9565): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="001e0000a52e5b4124108ae0b986b633c9b6e31ac2cc16d99e"], 0x18, 0x14}, 0x4000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x8cf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="b9f2973d963c76", 0x7}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) (async) sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="b9f2973d963c76", 0x7}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) (async) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 42.506708ms ago: executing program 1 (id=9566): socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x28, 0x1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000a0086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 9.621659ms ago: executing program 5 (id=9567): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f00000009c0), 0xf}, 0x222, 0x4, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000021009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 0s ago: executing program 3 (id=9568): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 5) kernel console output (not intermixed with test programs): lear_bhb_loop+0x60/0xb0 [ 1677.506764][T29728] ? clear_bhb_loop+0x60/0xb0 [ 1677.511558][T29728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1677.517507][T29728] RIP: 0033:0x7fdede39ce59 [ 1677.521953][T29728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.541862][T29728] RSP: 002b:00007fdedf2a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1677.550340][T29728] RAX: ffffffffffffffda RBX: 00007fdede615fa0 RCX: 00007fdede39ce59 [ 1677.558417][T29728] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000021 [ 1677.566403][T29728] RBP: 00007fdedf2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.574394][T29728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.582383][T29728] R13: 00007fdede616038 R14: 00007fdede615fa0 R15: 00007ffc3492d3b8 [ 1677.590409][T29728] [ 1677.613085][T29728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1678.731177][T29765] FAULT_INJECTION: forcing a failure. [ 1678.731177][T29765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1678.788742][T29765] CPU: 0 PID: 29765 Comm: syz.1.8061 Not tainted syzkaller #0 [ 1678.796492][T29765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1678.806809][T29765] Call Trace: [ 1678.810762][T29765] [ 1678.813731][T29765] dump_stack_lvl+0x188/0x24e [ 1678.818498][T29765] ? show_regs_print_info+0x12/0x12 [ 1678.823917][T29765] ? load_image+0x400/0x400 [ 1678.828600][T29765] ? __lock_acquire+0x7d10/0x7d10 [ 1678.833795][T29765] should_fail_ex+0x399/0x4d0 [ 1678.838613][T29765] _copy_from_user+0x2c/0x170 [ 1678.843514][T29765] iovec_from_user+0x143/0x360 [ 1678.848352][T29765] __import_iovec+0x6d/0x500 [ 1678.853181][T29765] import_iovec+0x6f/0xa0 [ 1678.857756][T29765] ___sys_sendmsg+0x252/0x360 [ 1678.862491][T29765] ? __sys_sendmsg+0x290/0x290 [ 1678.867419][T29765] ? __lock_acquire+0x7d10/0x7d10 [ 1678.872615][T29765] __se_sys_sendmsg+0x1bb/0x2a0 [ 1678.877526][T29765] ? __x64_sys_sendmsg+0x80/0x80 [ 1678.882537][T29765] ? lockdep_hardirqs_on+0x94/0x140 [ 1678.887887][T29765] do_syscall_64+0x4c/0xa0 [ 1678.892349][T29765] ? clear_bhb_loop+0x60/0xb0 [ 1678.897165][T29765] ? clear_bhb_loop+0x60/0xb0 [ 1678.901999][T29765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1678.908031][T29765] RIP: 0033:0x7fdede39ce59 [ 1678.912488][T29765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.932489][T29765] RSP: 002b:00007fdedf2a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1678.941032][T29765] RAX: ffffffffffffffda RBX: 00007fdede615fa0 RCX: 00007fdede39ce59 [ 1678.949107][T29765] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1678.957375][T29765] RBP: 00007fdedf2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.965476][T29765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1678.973815][T29765] R13: 00007fdede616038 R14: 00007fdede615fa0 R15: 00007ffc3492d3b8 [ 1678.981993][T29765] [ 1679.329241][T29776] FAULT_INJECTION: forcing a failure. [ 1679.329241][T29776] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.446936][T29776] CPU: 0 PID: 29776 Comm: syz.2.8063 Not tainted syzkaller #0 [ 1679.454660][T29776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1679.465047][T29776] Call Trace: [ 1679.468442][T29776] [ 1679.471751][T29776] dump_stack_lvl+0x188/0x24e [ 1679.476573][T29776] ? show_regs_print_info+0x12/0x12 [ 1679.482035][T29776] ? load_image+0x400/0x400 [ 1679.486958][T29776] ? __might_sleep+0xd0/0xd0 [ 1679.492035][T29776] ? __lock_acquire+0x7d10/0x7d10 [ 1679.497098][T29776] should_fail_ex+0x399/0x4d0 [ 1679.501811][T29776] should_failslab+0x5/0x20 [ 1679.506346][T29776] slab_pre_alloc_hook+0x59/0x310 [ 1679.511522][T29776] ? tomoyo_encode+0x27e/0x540 [ 1679.516457][T29776] __kmem_cache_alloc_node+0x4f/0x260 [ 1679.522175][T29776] ? tomoyo_encode+0x27e/0x540 [ 1679.527446][T29776] __kmalloc+0xa0/0x240 [ 1679.532528][T29776] tomoyo_encode+0x27e/0x540 [ 1679.538128][T29776] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1679.544722][T29776] ? tomoyo_path_number_perm+0x205/0x650 [ 1679.550589][T29776] tomoyo_path_number_perm+0x22f/0x650 [ 1679.556110][T29776] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1679.562232][T29776] ? trace_call_bpf+0xbf/0x6b0 [ 1679.567397][T29776] ? trace_call_bpf+0xbf/0x6b0 [ 1679.572750][T29776] ? trace_call_bpf+0x5d6/0x6b0 [ 1679.577819][T29776] ? __fget_files+0x28/0x4b0 [ 1679.582839][T29776] ? __fget_files+0x28/0x4b0 [ 1679.587669][T29776] security_file_ioctl+0x6c/0xa0 [ 1679.593291][T29776] __se_sys_ioctl+0x48/0x170 [ 1679.598092][T29776] do_syscall_64+0x4c/0xa0 [ 1679.602834][T29776] ? clear_bhb_loop+0x60/0xb0 [ 1679.607539][T29776] ? clear_bhb_loop+0x60/0xb0 [ 1679.612459][T29776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1679.618755][T29776] RIP: 0033:0x7f0eecd9ce59 [ 1679.623384][T29776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.644090][T29776] RSP: 002b:00007f0eedbfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1679.653267][T29776] RAX: ffffffffffffffda RBX: 00007f0eed016090 RCX: 00007f0eecd9ce59 [ 1679.661557][T29776] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000021 [ 1679.669665][T29776] RBP: 00007f0eedbfd090 R08: 0000000000000000 R09: 0000000000000000 [ 1679.677872][T29776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1679.686693][T29776] R13: 00007f0eed016128 R14: 00007f0eed016090 R15: 00007ffc76d561c8 [ 1679.695526][T29776] [ 1679.782104][T29776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1681.193194][T29824] netlink: 'syz.0.8082': attribute type 27 has an invalid length. [ 1681.394619][T29823] FAULT_INJECTION: forcing a failure. [ 1681.394619][T29823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1681.471840][T29823] CPU: 0 PID: 29823 Comm: syz.3.8081 Not tainted syzkaller #0 [ 1681.479464][T29823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1681.489549][T29823] Call Trace: [ 1681.492867][T29823] [ 1681.495832][T29823] dump_stack_lvl+0x188/0x24e [ 1681.500727][T29823] ? show_regs_print_info+0x12/0x12 [ 1681.506468][T29823] ? load_image+0x400/0x400 [ 1681.511279][T29823] ? __lock_acquire+0x7d10/0x7d10 [ 1681.516363][T29823] ? lockdep_hardirqs_on+0x94/0x140 [ 1681.521785][T29823] should_fail_ex+0x399/0x4d0 [ 1681.527295][T29823] _copy_from_user+0x2c/0x170 [ 1681.532045][T29823] sock_do_ioctl+0x18c/0x320 [ 1681.537092][T29823] ? sock_show_fdinfo+0xb0/0xb0 [ 1681.542069][T29823] sock_ioctl+0x4d2/0x710 [ 1681.546586][T29823] ? sock_poll+0x410/0x410 [ 1681.551111][T29823] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1681.556325][T29823] ? security_file_ioctl+0x7c/0xa0 [ 1681.561555][T29823] ? sock_poll+0x410/0x410 [ 1681.566000][T29823] __se_sys_ioctl+0xfa/0x170 [ 1681.570798][T29823] do_syscall_64+0x4c/0xa0 [ 1681.575245][T29823] ? clear_bhb_loop+0x60/0xb0 [ 1681.579941][T29823] ? clear_bhb_loop+0x60/0xb0 [ 1681.584649][T29823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1681.590560][T29823] RIP: 0033:0x7f668959ce59 [ 1681.595079][T29823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.615054][T29823] RSP: 002b:00007f668a3ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1681.623915][T29823] RAX: ffffffffffffffda RBX: 00007f6689815fa0 RCX: 00007f668959ce59 [ 1681.632580][T29823] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000021 [ 1681.640687][T29823] RBP: 00007f668a3ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.648818][T29823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.657510][T29823] R13: 00007f6689816038 R14: 00007f6689815fa0 R15: 00007ffc7a7102d8 [ 1681.665600][T29823] [ 1681.678672][T29824] bond0: (slave bond_slave_0): Releasing backup interface [ 1681.901431][T29835] netlink: 'syz.1.8087': attribute type 10 has an invalid length. [ 1681.949872][T29835] team0: Port device netdevsim0 removed [ 1681.962496][T29835] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1686.280413][T29880] netlink: 'syz.0.8101': attribute type 2 has an invalid length. [ 1686.363714][T29880] device 0 entered promiscuous mode [ 1686.608415][T29883] FAULT_INJECTION: forcing a failure. [ 1686.608415][T29883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1686.734402][T29893] netlink: 'syz.0.8107': attribute type 4 has an invalid length. [ 1686.781741][T29893] netlink: 'syz.0.8107': attribute type 1 has an invalid length. [ 1686.791816][T29883] CPU: 0 PID: 29883 Comm: syz.2.8102 Not tainted syzkaller #0 [ 1686.799323][T29883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1686.809623][T29883] Call Trace: [ 1686.813035][T29883] [ 1686.816068][T29883] dump_stack_lvl+0x188/0x24e [ 1686.820891][T29883] ? show_regs_print_info+0x12/0x12 [ 1686.826101][T29883] ? load_image+0x400/0x400 [ 1686.830717][T29883] ? __lock_acquire+0x7d10/0x7d10 [ 1686.835782][T29883] should_fail_ex+0x399/0x4d0 [ 1686.841372][T29883] _copy_from_user+0x2c/0x170 [ 1686.846350][T29883] dev_ethtool+0xc2/0x12f0 [ 1686.850793][T29883] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1686.857283][T29883] ? __lock_acquire+0x7d10/0x7d10 [ 1686.862382][T29883] ? dev_load+0x1d/0x1e0 [ 1686.866887][T29883] ? dev_load+0x1d/0x1e0 [ 1686.871609][T29883] dev_ioctl+0x474/0xe80 [ 1686.875918][T29883] sock_do_ioctl+0x245/0x320 [ 1686.880788][T29883] ? sock_show_fdinfo+0xb0/0xb0 [ 1686.885786][T29883] sock_ioctl+0x4d2/0x710 [ 1686.890160][T29883] ? sock_poll+0x410/0x410 [ 1686.894696][T29883] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1686.899745][T29883] ? security_file_ioctl+0x7c/0xa0 [ 1686.904965][T29883] ? sock_poll+0x410/0x410 [ 1686.909394][T29883] __se_sys_ioctl+0xfa/0x170 [ 1686.914006][T29883] do_syscall_64+0x4c/0xa0 [ 1686.918461][T29883] ? clear_bhb_loop+0x60/0xb0 [ 1686.923155][T29883] ? clear_bhb_loop+0x60/0xb0 [ 1686.928237][T29883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1686.934180][T29883] RIP: 0033:0x7f0eecd9ce59 [ 1686.938732][T29883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.959363][T29883] RSP: 002b:00007f0eedc1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1686.969148][T29883] RAX: ffffffffffffffda RBX: 00007f0eed015fa0 RCX: 00007f0eecd9ce59 [ 1686.977235][T29883] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000021 [ 1686.985495][T29883] RBP: 00007f0eedc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1686.993482][T29883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1687.001462][T29883] R13: 00007f0eed016038 R14: 00007f0eed015fa0 R15: 00007ffc76d561c8 [ 1687.009639][T29883] [ 1687.061699][T29893] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.8107'. [ 1688.294495][T29916] netlink: 105084 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1688.407191][T29916] netlink: 31 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1689.712984][T29938] sctp: [Deprecated]: syz.3.8125 (pid 29938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1689.712984][T29938] Use struct sctp_sack_info instead [ 1690.051152][T29948] FAULT_INJECTION: forcing a failure. [ 1690.051152][T29948] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.145626][T29948] CPU: 0 PID: 29948 Comm: syz.1.8126 Not tainted syzkaller #0 [ 1690.153457][T29948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1690.163895][T29948] Call Trace: [ 1690.167214][T29948] [ 1690.170261][T29948] dump_stack_lvl+0x188/0x24e [ 1690.175506][T29948] ? show_regs_print_info+0x12/0x12 [ 1690.181351][T29948] ? load_image+0x400/0x400 [ 1690.186242][T29948] ? __might_sleep+0xd0/0xd0 [ 1690.190878][T29948] ? __lock_acquire+0x7d10/0x7d10 [ 1690.196231][T29948] should_fail_ex+0x399/0x4d0 [ 1690.201043][T29948] should_failslab+0x5/0x20 [ 1690.205586][T29948] slab_pre_alloc_hook+0x59/0x310 [ 1690.210742][T29948] ? dev_ethtool+0x125/0x12f0 [ 1690.215815][T29948] __kmem_cache_alloc_node+0x4f/0x260 [ 1690.221346][T29948] ? dev_ethtool+0x125/0x12f0 [ 1690.226530][T29948] kmalloc_trace+0x26/0xe0 [ 1690.231207][T29948] dev_ethtool+0x125/0x12f0 [ 1690.235776][T29948] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1690.242111][T29948] ? __lock_acquire+0x7d10/0x7d10 [ 1690.247287][T29948] ? __kmem_cache_free+0xb6/0x1f0 [ 1690.252443][T29948] ? full_name_hash+0x8e/0xe0 [ 1690.257165][T29948] ? dev_load+0x1d/0x1e0 [ 1690.261718][T29948] ? dev_load+0x1d/0x1e0 [ 1690.266300][T29948] dev_ioctl+0x474/0xe80 [ 1690.270688][T29948] sock_do_ioctl+0x245/0x320 [ 1690.275319][T29948] ? sock_show_fdinfo+0xb0/0xb0 [ 1690.280487][T29948] sock_ioctl+0x4d2/0x710 [ 1690.284867][T29948] ? sock_poll+0x410/0x410 [ 1690.289351][T29948] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1690.294341][T29948] ? security_file_ioctl+0x7c/0xa0 [ 1690.299583][T29948] ? sock_poll+0x410/0x410 [ 1690.304042][T29948] __se_sys_ioctl+0xfa/0x170 [ 1690.308951][T29948] do_syscall_64+0x4c/0xa0 [ 1690.313524][T29948] ? clear_bhb_loop+0x60/0xb0 [ 1690.318249][T29948] ? clear_bhb_loop+0x60/0xb0 [ 1690.323142][T29948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1690.329620][T29948] RIP: 0033:0x7fdede39ce59 [ 1690.334096][T29948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.355316][T29948] RSP: 002b:00007fdedf284028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1690.363791][T29948] RAX: ffffffffffffffda RBX: 00007fdede616090 RCX: 00007fdede39ce59 [ 1690.371849][T29948] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000021 [ 1690.380067][T29948] RBP: 00007fdedf284090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.388780][T29948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.396973][T29948] R13: 00007fdede616128 R14: 00007fdede616090 R15: 00007ffc3492d3b8 [ 1690.405268][T29948] [ 1692.590858][T29998] FAULT_INJECTION: forcing a failure. [ 1692.590858][T29998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1692.659919][T29998] CPU: 1 PID: 29998 Comm: syz.3.8142 Not tainted syzkaller #0 [ 1692.667562][T29998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1692.677844][T29998] Call Trace: [ 1692.681166][T29998] [ 1692.684223][T29998] dump_stack_lvl+0x188/0x24e [ 1692.688946][T29998] ? show_regs_print_info+0x12/0x12 [ 1692.694199][T29998] ? load_image+0x400/0x400 [ 1692.698738][T29998] ? __lock_acquire+0x7d10/0x7d10 [ 1692.703898][T29998] ? trace_contention_end+0x5f/0x170 [ 1692.709345][T29998] should_fail_ex+0x399/0x4d0 [ 1692.714277][T29998] _copy_from_user+0x2c/0x170 [ 1692.718997][T29998] ethtool_get_perm_addr+0x91/0x220 [ 1692.724416][T29998] ? ethtool_get_stats+0x390/0x390 [ 1692.729578][T29998] ? full_name_hash+0x8e/0xe0 [ 1692.734299][T29998] dev_ethtool+0xb43/0x12f0 [ 1692.738948][T29998] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1692.745324][T29998] ? __lock_acquire+0x7d10/0x7d10 [ 1692.750391][T29998] ? __kmem_cache_free+0xb6/0x1f0 [ 1692.755636][T29998] ? full_name_hash+0x8e/0xe0 [ 1692.760364][T29998] ? dev_load+0x1d/0x1e0 [ 1692.764675][T29998] ? dev_load+0x1d/0x1e0 [ 1692.769045][T29998] dev_ioctl+0x474/0xe80 [ 1692.773329][T29998] sock_do_ioctl+0x245/0x320 [ 1692.778143][T29998] ? sock_show_fdinfo+0xb0/0xb0 [ 1692.783142][T29998] sock_ioctl+0x4d2/0x710 [ 1692.787505][T29998] ? sock_poll+0x410/0x410 [ 1692.792068][T29998] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1692.797069][T29998] ? security_file_ioctl+0x7c/0xa0 [ 1692.802562][T29998] ? sock_poll+0x410/0x410 [ 1692.807020][T29998] __se_sys_ioctl+0xfa/0x170 [ 1692.811740][T29998] do_syscall_64+0x4c/0xa0 [ 1692.816182][T29998] ? clear_bhb_loop+0x60/0xb0 [ 1692.820986][T29998] ? clear_bhb_loop+0x60/0xb0 [ 1692.825875][T29998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1692.831898][T29998] RIP: 0033:0x7f668959ce59 [ 1692.836456][T29998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1692.858112][T29998] RSP: 002b:00007f668a3cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1692.866956][T29998] RAX: ffffffffffffffda RBX: 00007f6689816090 RCX: 00007f668959ce59 [ 1692.875160][T29998] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000021 [ 1692.883623][T29998] RBP: 00007f668a3cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1692.891659][T29998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1692.899674][T29998] R13: 00007f6689816128 R14: 00007f6689816090 R15: 00007ffc7a7102d8 [ 1692.908159][T29998] [ 1693.114369][T30003] netlink: 'syz.2.8145': attribute type 10 has an invalid length. [ 1693.514267][T30003] team0: Device wg1 is of different type [ 1694.233096][T30027] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.8152'. [ 1695.609362][T30049] FAULT_INJECTION: forcing a failure. [ 1695.609362][T30049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1695.659777][T30049] CPU: 1 PID: 30049 Comm: syz.0.8158 Not tainted syzkaller #0 [ 1695.667327][T30049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1695.677696][T30049] Call Trace: [ 1695.681027][T30049] [ 1695.683996][T30049] dump_stack_lvl+0x188/0x24e [ 1695.688753][T30049] ? show_regs_print_info+0x12/0x12 [ 1695.694091][T30049] ? load_image+0x400/0x400 [ 1695.699007][T30049] ? __lock_acquire+0x7d10/0x7d10 [ 1695.704270][T30049] ? __might_fault+0x4e/0x120 [ 1695.709087][T30049] should_fail_ex+0x399/0x4d0 [ 1695.713847][T30049] _copy_to_user+0x2c/0x130 [ 1695.718413][T30049] ethtool_get_perm_addr+0x11e/0x220 [ 1695.723755][T30049] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1695.729972][T30049] ? ethtool_get_stats+0x390/0x390 [ 1695.735167][T30049] dev_ethtool+0xb43/0x12f0 [ 1695.739843][T30049] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1695.746150][T30049] ? __lock_acquire+0x7d10/0x7d10 [ 1695.751246][T30049] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1695.757565][T30049] ? full_name_hash+0x8e/0xe0 [ 1695.762567][T30049] ? dev_load+0x1d/0x1e0 [ 1695.766892][T30049] ? dev_load+0x1d/0x1e0 [ 1695.771210][T30049] dev_ioctl+0x474/0xe80 [ 1695.775706][T30049] sock_do_ioctl+0x245/0x320 [ 1695.780442][T30049] ? sock_show_fdinfo+0xb0/0xb0 [ 1695.785461][T30049] sock_ioctl+0x4d2/0x710 [ 1695.789948][T30049] ? sock_poll+0x410/0x410 [ 1695.794521][T30049] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1695.799521][T30049] ? security_file_ioctl+0x7c/0xa0 [ 1695.804685][T30049] ? sock_poll+0x410/0x410 [ 1695.809250][T30049] __se_sys_ioctl+0xfa/0x170 [ 1695.814077][T30049] do_syscall_64+0x4c/0xa0 [ 1695.818810][T30049] ? clear_bhb_loop+0x60/0xb0 [ 1695.823621][T30049] ? clear_bhb_loop+0x60/0xb0 [ 1695.828359][T30049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1695.834308][T30049] RIP: 0033:0x7f6849b9ce59 [ 1695.838761][T30049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.858756][T30049] RSP: 002b:00007f6847df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1695.867486][T30049] RAX: ffffffffffffffda RBX: 00007f6849e15fa0 RCX: 00007f6849b9ce59 [ 1695.875857][T30049] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000021 [ 1695.884407][T30049] RBP: 00007f6847df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.892426][T30049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.900464][T30049] R13: 00007f6849e16038 R14: 00007f6849e15fa0 R15: 00007ffe8f7dd998 [ 1695.908514][T30049] [ 1697.575430][T30093] netlink: 'syz.2.8176': attribute type 21 has an invalid length. [ 1697.590158][T30093] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8176'. [ 1697.605827][T30093] netlink: 'syz.2.8176': attribute type 4 has an invalid length. [ 1697.614821][T30093] netlink: 'syz.2.8176': attribute type 5 has an invalid length. [ 1697.631927][T30093] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8176'. [ 1697.652013][T30100] FAULT_INJECTION: forcing a failure. [ 1697.652013][T30100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1697.697515][T30100] CPU: 0 PID: 30100 Comm: syz.4.8177 Not tainted syzkaller #0 [ 1697.705084][T30100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1697.715187][T30100] Call Trace: [ 1697.719210][T30100] [ 1697.722180][T30100] dump_stack_lvl+0x188/0x24e [ 1697.726996][T30100] ? show_regs_print_info+0x12/0x12 [ 1697.732328][T30100] ? load_image+0x400/0x400 [ 1697.736973][T30100] ? __lock_acquire+0x7d10/0x7d10 [ 1697.742322][T30100] ? lockdep_hardirqs_on+0x94/0x140 [ 1697.747760][T30100] should_fail_ex+0x399/0x4d0 [ 1697.752674][T30100] _copy_to_user+0x2c/0x130 [ 1697.757330][T30100] ethtool_get_perm_addr+0x19b/0x220 [ 1697.762846][T30100] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1697.769564][T30100] ? ethtool_get_stats+0x390/0x390 [ 1697.774842][T30100] dev_ethtool+0xb43/0x12f0 [ 1697.779726][T30100] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1697.786121][T30100] ? __lock_acquire+0x7d10/0x7d10 [ 1697.791229][T30100] ? full_name_hash+0x8e/0xe0 [ 1697.796297][T30100] ? dev_load+0x1d/0x1e0 [ 1697.800687][T30100] ? dev_load+0x1d/0x1e0 [ 1697.805058][T30100] dev_ioctl+0x474/0xe80 [ 1697.809327][T30100] sock_do_ioctl+0x245/0x320 [ 1697.813943][T30100] ? sock_show_fdinfo+0xb0/0xb0 [ 1697.818913][T30100] ? sock_ioctl+0x1a0/0x710 [ 1697.823437][T30100] sock_ioctl+0x4d2/0x710 [ 1697.827961][T30100] ? sock_poll+0x410/0x410 [ 1697.832564][T30100] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1697.838998][T30100] ? __se_sys_ioctl+0x53/0x170 [ 1697.843872][T30100] ? sock_poll+0x410/0x410 [ 1697.848299][T30100] __se_sys_ioctl+0xfa/0x170 [ 1697.853000][T30100] do_syscall_64+0x4c/0xa0 [ 1697.857603][T30100] ? clear_bhb_loop+0x60/0xb0 [ 1697.862386][T30100] ? clear_bhb_loop+0x60/0xb0 [ 1697.867255][T30100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1697.873339][T30100] RIP: 0033:0x7f047fb9ce59 [ 1697.877948][T30100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1697.898031][T30100] RSP: 002b:00007f0480b0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1697.906944][T30100] RAX: ffffffffffffffda RBX: 00007f047fe15fa0 RCX: 00007f047fb9ce59 [ 1697.915123][T30100] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000021 [ 1697.923284][T30100] RBP: 00007f0480b0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1697.931456][T30100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1697.939528][T30100] R13: 00007f047fe16038 R14: 00007f047fe15fa0 R15: 00007ffccc5003a8 [ 1697.947704][T30100] [ 1698.221169][T30104] tap0: tun_chr_ioctl cmd 1074025675 [ 1698.239688][T30104] tap0: persist enabled [ 1698.271549][T30104] tap0: tun_chr_ioctl cmd 1074025675 [ 1698.276978][T30104] tap0: persist disabled [ 1700.187086][T30162] netlink: 'syz.2.8195': attribute type 10 has an invalid length. [ 1701.322695][T30184] netlink: 'syz.1.8203': attribute type 10 has an invalid length. [ 1701.587317][T30184] team0: Device wg1 is of different type [ 1703.653157][T30218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8216'. [ 1703.704193][T30216] FAULT_INJECTION: forcing a failure. [ 1703.704193][T30216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1703.728824][T30218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8216'. [ 1703.739372][T30216] CPU: 0 PID: 30216 Comm: syz.2.8215 Not tainted syzkaller #0 [ 1703.747068][T30216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1703.757356][T30216] Call Trace: [ 1703.760852][T30216] [ 1703.763876][T30216] dump_stack_lvl+0x188/0x24e [ 1703.768642][T30216] ? show_regs_print_info+0x12/0x12 [ 1703.774534][T30216] ? load_image+0x400/0x400 [ 1703.779628][T30216] ? __lock_acquire+0x7d10/0x7d10 [ 1703.784711][T30216] ? snprintf+0xe5/0x140 [ 1703.789098][T30216] should_fail_ex+0x399/0x4d0 [ 1703.793860][T30216] _copy_to_user+0x2c/0x130 [ 1703.798479][T30216] simple_read_from_buffer+0xe3/0x150 [ 1703.803987][T30216] proc_fail_nth_read+0x1a6/0x220 [ 1703.809161][T30216] ? proc_fault_inject_write+0x310/0x310 [ 1703.814934][T30216] ? fsnotify_perm+0x248/0x550 [ 1703.819750][T30216] ? proc_fault_inject_write+0x310/0x310 [ 1703.825449][T30216] vfs_read+0x2de/0xa00 [ 1703.829788][T30216] ? kernel_read+0x1e0/0x1e0 [ 1703.834789][T30216] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1703.841103][T30216] ? __fdget_pos+0x182/0x360 [ 1703.845749][T30216] ? __fdget_pos+0x2ae/0x360 [ 1703.850486][T30216] ? ksys_read+0x71/0x250 [ 1703.855176][T30216] ksys_read+0x14c/0x250 [ 1703.859497][T30216] ? vfs_write+0xa30/0xa30 [ 1703.863986][T30216] ? lockdep_hardirqs_on+0x94/0x140 [ 1703.869245][T30216] do_syscall_64+0x4c/0xa0 [ 1703.873801][T30216] ? clear_bhb_loop+0x60/0xb0 [ 1703.878533][T30216] ? clear_bhb_loop+0x60/0xb0 [ 1703.883273][T30216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.889238][T30216] RIP: 0033:0x7f0eecd5d68e [ 1703.893888][T30216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1703.913701][T30216] RSP: 002b:00007f0eedc1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1703.922307][T30216] RAX: ffffffffffffffda RBX: 00007f0eedc1e6c0 RCX: 00007f0eecd5d68e [ 1703.930390][T30216] RDX: 000000000000000f RSI: 00007f0eedc1e0a0 RDI: 0000000000000022 [ 1703.938543][T30216] RBP: 00007f0eedc1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.946524][T30216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1703.954769][T30216] R13: 00007f0eed016038 R14: 00007f0eed015fa0 R15: 00007ffc76d561c8 [ 1703.962784][T30216] [ 1705.213960][T22607] Bluetooth: hci3: unexpected event 0x01 length: 15 > 1 [ 1705.351528][T30258] delete_channel: no stack [ 1708.468999][T30278] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8237'. [ 1709.418061][T30291] netlink: 'syz.4.8241': attribute type 10 has an invalid length. [ 1709.878862][T30304] netlink: 'syz.3.8244': attribute type 3 has an invalid length. [ 1709.948956][T30304] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8244'. [ 1710.004132][T30300] netlink: 'syz.3.8244': attribute type 19 has an invalid length. [ 1710.439239][T30321] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8249'. [ 1710.827733][T30326] netlink: 'syz.1.8254': attribute type 27 has an invalid length. [ 1710.851979][T30326] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8254'. [ 1713.282244][T30362] device syzkaller0 entered promiscuous mode [ 1715.848581][T30418] netlink: 'syz.2.8285': attribute type 3 has an invalid length. [ 1715.868557][T30418] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8285'. [ 1723.272992][T30494] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1723.283381][T30494] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1723.322063][T30494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1723.362063][T30497] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8309'. [ 1723.398309][T30497] device veth0_macvtap left promiscuous mode [ 1723.652266][T30503] netlink: 'syz.0.8311': attribute type 27 has an invalid length. [ 1723.697179][T30503] netlink: 'syz.0.8311': attribute type 4 has an invalid length. [ 1723.737181][T30503] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8311'. [ 1724.032946][T30517] netlink: 'syz.0.8318': attribute type 29 has an invalid length. [ 1724.077766][T30517] netlink: 'syz.0.8318': attribute type 29 has an invalid length. [ 1724.114026][T30525] netlink: 'syz.0.8318': attribute type 29 has an invalid length. [ 1724.181224][T30517] netlink: 'syz.0.8318': attribute type 29 has an invalid length. [ 1724.237117][T30532] netlink: 'syz.1.8321': attribute type 3 has an invalid length. [ 1724.239247][T30536] netlink: 'syz.1.8321': attribute type 3 has an invalid length. [ 1724.245250][T30529] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8320'. [ 1724.267063][T30536] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8321'. [ 1724.274907][T30532] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8321'. [ 1724.292060][T30538] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8322'. [ 1724.337122][T30535] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8322'. [ 1725.135585][T30551] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8327'. [ 1725.216010][T30560] netlink: 'syz.3.8331': attribute type 49 has an invalid length. [ 1725.246128][T30560] netlink: 'syz.3.8331': attribute type 49 has an invalid length. [ 1728.758750][T30599] tap0: tun_chr_ioctl cmd 1074025675 [ 1728.792267][T30599] tap0: persist disabled [ 1729.447087][T30607] device wlan1 entered promiscuous mode [ 1729.531232][T30607] netlink: 'syz.2.8346': attribute type 3 has an invalid length. [ 1729.552892][T30607] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.8346'. [ 1730.457530][T30638] syz.1.8357[30638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1730.457670][T30638] syz.1.8357[30638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1730.474546][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.493898][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.769415][T30648] netlink: 'syz.1.8360': attribute type 9 has an invalid length. [ 1730.857812][T30648] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.8360'. [ 1733.125704][T30660] netlink: 'syz.0.8363': attribute type 3 has an invalid length. [ 1733.163994][T30660] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.8363'. [ 1733.296965][T30672] device lo entered promiscuous mode [ 1734.491537][T30701] tap0: tun_chr_ioctl cmd 1074025675 [ 1734.532702][T30701] tap0: persist disabled [ 1735.514974][T30722] netlink: 'syz.1.8382': attribute type 3 has an invalid length. [ 1735.604648][T30722] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.8382'. [ 1736.426260][T30746] netlink: 'syz.0.8391': attribute type 1 has an invalid length. [ 1736.615161][T30746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8391'. [ 1738.565102][T30771] netlink: 'syz.4.8401': attribute type 2 has an invalid length. [ 1739.280539][T30795] FAULT_INJECTION: forcing a failure. [ 1739.280539][T30795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1739.294951][T30795] CPU: 0 PID: 30795 Comm: syz.3.8407 Not tainted syzkaller #0 [ 1739.302470][T30795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1739.312755][T30795] Call Trace: [ 1739.316178][T30795] [ 1739.319156][T30795] dump_stack_lvl+0x188/0x24e [ 1739.323951][T30795] ? show_regs_print_info+0x12/0x12 [ 1739.329285][T30795] ? load_image+0x400/0x400 [ 1739.333860][T30795] ? __lock_acquire+0x7d10/0x7d10 [ 1739.339034][T30795] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1739.344921][T30795] should_fail_ex+0x399/0x4d0 [ 1739.349740][T30795] _copy_from_user+0x2c/0x170 [ 1739.354462][T30795] ___sys_sendmsg+0x1c3/0x360 [ 1739.359547][T30795] ? __sys_sendmsg+0x290/0x290 [ 1739.364693][T30795] ? __lock_acquire+0x7d10/0x7d10 [ 1739.369875][T30795] __se_sys_sendmsg+0x1bb/0x2a0 [ 1739.374741][T30795] ? __x64_sys_sendmsg+0x80/0x80 [ 1739.379977][T30795] ? lockdep_hardirqs_on+0x94/0x140 [ 1739.385309][T30795] do_syscall_64+0x4c/0xa0 [ 1739.389846][T30795] ? clear_bhb_loop+0x60/0xb0 [ 1739.394892][T30795] ? clear_bhb_loop+0x60/0xb0 [ 1739.399863][T30795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.406385][T30795] RIP: 0033:0x7f668959ce59 [ 1739.411075][T30795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1739.431071][T30795] RSP: 002b:00007f668a3ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1739.439499][T30795] RAX: ffffffffffffffda RBX: 00007f6689815fa0 RCX: 00007f668959ce59 [ 1739.447571][T30795] RDX: 0000000000008084 RSI: 0000200000000000 RDI: 0000000000000005 [ 1739.455584][T30795] RBP: 00007f668a3ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.463769][T30795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.471772][T30795] R13: 00007f6689816038 R14: 00007f6689815fa0 R15: 00007ffc7a7102d8 [ 1739.480474][T30795] [ 1740.881725][T30824] netlink: 'syz.4.8417': attribute type 3 has an invalid length. [ 1740.937434][T30824] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8417'. [ 1741.216749][T30831] netlink: 'syz.2.8420': attribute type 21 has an invalid length. [ 1741.302073][T30831] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8420'. [ 1742.362189][T30851] ÿÿÿÿÿÿ: renamed from vlan1 [ 1743.675989][T30870] netlink: 'syz.4.8432': attribute type 1 has an invalid length. [ 1743.702652][T30870] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8432'. [ 1745.601735][T30906] netlink: 'syz.1.8445': attribute type 10 has an invalid length. [ 1745.641769][T30906] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8445'. [ 1745.651111][T30906] bridge0: port 3(hsr0) entered blocking state [ 1745.826032][T30906] bridge0: port 3(hsr0) entered disabled state [ 1745.953774][T30906] bridge0: port 3(hsr0) entered blocking state [ 1745.960117][T30906] bridge0: port 3(hsr0) entered forwarding state [ 1748.147407][T30939] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8454'. [ 1748.314514][T30940] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.8454'. [ 1749.740667][T30979] netlink: 'syz.1.8464': attribute type 1 has an invalid length. [ 1749.851727][T30979] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8464'. [ 1750.144707][T30993] netlink: 'syz.4.8471': attribute type 1 has an invalid length. [ 1750.223189][T30993] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8471'. [ 1751.764915][T31018] netlink: 111 bytes leftover after parsing attributes in process `syz.4.8480'. [ 1751.976332][T31024] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8478'. [ 1752.757617][T31041] netlink: 'syz.4.8487': attribute type 10 has an invalid length. [ 1752.779653][T31041] device veth1_macvtap left promiscuous mode [ 1752.982834][T31044] delete_channel: no stack [ 1754.303677][T31072] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8496'. [ 1754.880722][T31086] netlink: 'syz.3.8502': attribute type 21 has an invalid length. [ 1757.970943][T31114] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8511'. [ 1758.640506][T31129] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8515'. [ 1758.762277][T31126] delete_channel: no stack [ 1758.787788][T31129] netlink: 'syz.4.8515': attribute type 10 has an invalid length. [ 1758.799486][T31105] delete_channel: no stack [ 1758.821359][T31129] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1760.234427][T31165] netlink: 'syz.0.8528': attribute type 39 has an invalid length. [ 1760.665620][T31181] delete_channel: no stack [ 1761.044373][T31190] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8537'. [ 1761.111182][T31190] netlink: 'syz.3.8537': attribute type 2 has an invalid length. [ 1761.288015][T31198] netlink: 'syz.4.8538': attribute type 10 has an invalid length. [ 1761.736700][T31208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8541'. [ 1761.806031][T31208] netlink: 'syz.0.8541': attribute type 10 has an invalid length. [ 1761.898283][T31208] team0: Device hsr_slave_0 failed to register rx_handler [ 1761.973709][T31217] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8542'. [ 1761.990525][T31217] openvswitch: netlink: Message has 6 unknown bytes. [ 1762.416395][T31222] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.8546'. [ 1762.425981][T31222] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.8546'. [ 1762.765816][T31241] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8550'. [ 1762.780116][T31241] netlink: 'syz.0.8550': attribute type 2 has an invalid length. [ 1763.025315][T31244] netlink: 'syz.3.8551': attribute type 3 has an invalid length. [ 1763.102511][T31244] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8551'. [ 1763.514027][T31251] FAULT_INJECTION: forcing a failure. [ 1763.514027][T31251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1763.614857][T31251] CPU: 0 PID: 31251 Comm: syz.1.8556 Not tainted syzkaller #0 [ 1763.622755][T31251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1763.633127][T31251] Call Trace: [ 1763.636451][T31251] [ 1763.639501][T31251] dump_stack_lvl+0x188/0x24e [ 1763.644448][T31251] ? show_regs_print_info+0x12/0x12 [ 1763.650263][T31251] ? load_image+0x400/0x400 [ 1763.656177][T31251] ? __lock_acquire+0x7d10/0x7d10 [ 1763.661461][T31251] should_fail_ex+0x399/0x4d0 [ 1763.666368][T31251] _copy_from_user+0x2c/0x170 [ 1763.671301][T31251] kstrtouint_from_user+0xda/0x170 [ 1763.676651][T31251] ? kstrtol_from_user+0x190/0x190 [ 1763.681964][T31251] proc_fail_nth_write+0x8b/0x200 [ 1763.687083][T31251] ? proc_fail_nth_read+0x220/0x220 [ 1763.692338][T31251] ? common_file_perm+0x171/0x1c0 [ 1763.697502][T31251] ? proc_fail_nth_read+0x220/0x220 [ 1763.702863][T31251] vfs_write+0x2e6/0xa30 [ 1763.707874][T31251] ? file_end_write+0x250/0x250 [ 1763.712798][T31251] ? __fget_files+0x28/0x4b0 [ 1763.717881][T31251] ? __fget_files+0x28/0x4b0 [ 1763.722609][T31251] ? __fget_files+0x43d/0x4b0 [ 1763.727445][T31251] ? __fdget_pos+0x2ae/0x360 [ 1763.732067][T31251] ? ksys_write+0x71/0x250 [ 1763.736545][T31251] ksys_write+0x14c/0x250 [ 1763.740951][T31251] ? __ia32_sys_read+0x80/0x80 [ 1763.746254][T31251] ? lockdep_hardirqs_on+0x94/0x140 [ 1763.751775][T31251] do_syscall_64+0x4c/0xa0 [ 1763.757514][T31251] ? clear_bhb_loop+0x60/0xb0 [ 1763.762402][T31251] ? clear_bhb_loop+0x60/0xb0 [ 1763.767271][T31251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1763.773600][T31251] RIP: 0033:0x7fdede35d68e [ 1763.778553][T31251] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1763.800425][T31251] RSP: 002b:00007fdedf2a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1763.809261][T31251] RAX: ffffffffffffffda RBX: 00007fdedf2a56c0 RCX: 00007fdede35d68e [ 1763.817984][T31251] RDX: 0000000000000001 RSI: 00007fdedf2a50a0 RDI: 0000000000000006 [ 1763.826110][T31251] RBP: 00007fdedf2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1763.834126][T31251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1763.842336][T31251] R13: 00007fdede616038 R14: 00007fdede615fa0 R15: 00007ffc3492d3b8 [ 1763.850474][T31251] [ 1764.994878][T31281] netlink: 'syz.0.8566': attribute type 2 has an invalid length. [ 1765.012181][T31281] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8566'. [ 1765.338079][T31300] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8567'. [ 1768.802093][T31318] netlink: 'syz.2.8578': attribute type 4 has an invalid length. [ 1768.850260][T31323] netlink: 'syz.0.8577': attribute type 21 has an invalid length. [ 1768.903505][T31323] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8577'. [ 1772.178271][T31387] netlink: 'syz.1.8602': attribute type 3 has an invalid length. [ 1772.228170][T31387] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8602'. [ 1772.960074][T31399] netlink: 'syz.4.8604': attribute type 4 has an invalid length. [ 1775.709595][T31443] netlink: 'syz.3.8619': attribute type 21 has an invalid length. [ 1775.721996][T31443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8619'. [ 1775.748534][T31445] netlink: 'syz.1.8618': attribute type 4 has an invalid length. [ 1777.301365][T31470] netlink: 'syz.2.8625': attribute type 21 has an invalid length. [ 1777.325976][T31470] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8625'. [ 1777.397511][T31477] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.8629'. [ 1777.685198][T31490] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8635'. [ 1777.832668][T31489] netlink: 'syz.4.8631': attribute type 12 has an invalid length. [ 1777.872772][T31489] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8631'. [ 1779.165709][T31521] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.8646'. [ 1779.240570][T31521] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8646'. [ 1779.736382][T31541] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1779.766011][T31541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1782.512569][T31605] device lo entered promiscuous mode [ 1782.585909][T31605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1783.259651][T31636] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.8680'. [ 1784.640177][T31662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8689'. [ 1785.991459][T31693] device syzkaller0 entered promiscuous mode [ 1786.965972][T31710] netlink: 'syz.4.8706': attribute type 7 has an invalid length. [ 1787.021760][T31710] netlink: 126644 bytes leftover after parsing attributes in process `syz.4.8706'. [ 1787.042468][T31714] netlink: 'syz.1.8707': attribute type 13 has an invalid length. [ 1787.072055][T31714] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1787.150310][T31714] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1787.184554][T31714] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1787.471336][T31729] FAULT_INJECTION: forcing a failure. [ 1787.471336][T31729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1787.545515][T31729] CPU: 0 PID: 31729 Comm: syz.1.8712 Not tainted syzkaller #0 [ 1787.553957][T31729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1787.564094][T31729] Call Trace: [ 1787.567403][T31729] [ 1787.570566][T31729] dump_stack_lvl+0x188/0x24e [ 1787.575283][T31729] ? show_regs_print_info+0x12/0x12 [ 1787.580523][T31729] ? load_image+0x400/0x400 [ 1787.585228][T31729] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1787.591428][T31729] should_fail_ex+0x399/0x4d0 [ 1787.596148][T31729] _copy_from_user+0x2c/0x170 [ 1787.600901][T31729] bpf_prog_test_run_skb+0x262/0x12a0 [ 1787.606311][T31729] ? lockdep_hardirqs_on+0x94/0x140 [ 1787.611561][T31729] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1787.617853][T31729] ? cpu_online+0xa0/0xa0 [ 1787.622223][T31729] bpf_prog_test_run+0x31e/0x390 [ 1787.627299][T31729] __sys_bpf+0x62b/0x780 [ 1787.631593][T31729] ? bpf_link_show_fdinfo+0x380/0x380 [ 1787.637024][T31729] ? lock_chain_count+0x20/0x20 [ 1787.642013][T31729] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1787.648314][T31729] __x64_sys_bpf+0x78/0x90 [ 1787.652783][T31729] do_syscall_64+0x4c/0xa0 [ 1787.657320][T31729] ? clear_bhb_loop+0x60/0xb0 [ 1787.662141][T31729] ? clear_bhb_loop+0x60/0xb0 [ 1787.666949][T31729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1787.673154][T31729] RIP: 0033:0x7fdede39ce59 [ 1787.677788][T31729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1787.697888][T31729] RSP: 002b:00007fdedf2a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1787.706452][T31729] RAX: ffffffffffffffda RBX: 00007fdede615fa0 RCX: 00007fdede39ce59 [ 1787.714473][T31729] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1787.722489][T31729] RBP: 00007fdedf2a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1787.730677][T31729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1787.739340][T31729] R13: 00007fdede616038 R14: 00007fdede615fa0 R15: 00007ffc3492d3b8 [ 1787.747470][T31729] [ 1788.783612][T31742] netlink: 'syz.3.8717': attribute type 10 has an invalid length. [ 1788.843761][T31742] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8717'. [ 1788.928594][T31742] device bond0 entered promiscuous mode [ 1788.952111][T31742] device bond_slave_0 entered promiscuous mode [ 1788.989780][T31742] device bond_slave_1 entered promiscuous mode [ 1789.860002][T21723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.966810][T31766] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8725'. [ 1789.998994][T31775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1790.009470][T31775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1790.017861][T31775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1790.042560][T31775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1790.050597][T31775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1790.061912][T31775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1790.313462][T21723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.604004][T21723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.835740][T21723] bond0: (slave netdevsim0): Releasing backup interface [ 1790.866673][T21723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.914103][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.920604][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.968638][T31773] chnl_net:caif_netlink_parms(): no params data found [ 1792.151668][T31775] Bluetooth: hci0: command 0x0409 tx timeout [ 1792.425085][T31773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.457849][T31773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.538375][T31773] device bridge_slave_0 entered promiscuous mode [ 1792.642786][T31773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.685763][T31773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.726866][T31773] device bridge_slave_1 entered promiscuous mode [ 1792.745460][T21723] device 0 left promiscuous mode [ 1792.966383][T31773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1793.249514][T31773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1793.444587][T31773] team0: Port device team_slave_0 added [ 1793.484042][T31773] team0: Port device team_slave_1 added [ 1793.711872][T31851] netlink: 'syz.0.8742': attribute type 21 has an invalid length. [ 1793.802445][T31851] netlink: 'syz.0.8742': attribute type 1 has an invalid length. [ 1793.810269][T31851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1794.239274][T31775] Bluetooth: hci0: command 0x041b tx timeout [ 1794.576391][T31773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1794.634033][T31773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1794.749954][T31773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1794.861334][T31847] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1794.931783][T31866] netlink: 'syz.2.8748': attribute type 10 has an invalid length. [ 1794.952268][T31866] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8748'. [ 1795.956597][T31773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1795.971734][T31773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1796.045203][T31773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.311949][T22607] Bluetooth: hci0: command 0x040f tx timeout [ 1796.423755][T31773] device hsr_slave_0 entered promiscuous mode [ 1796.472739][T31773] device hsr_slave_1 entered promiscuous mode [ 1796.520124][T31773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1796.563082][T31773] Cannot create hsr debugfs directory [ 1797.207233][T31913] netlink: 'syz.4.8762': attribute type 10 has an invalid length. [ 1797.838085][T21723] team0: Port device wlan1 removed [ 1798.392924][T22607] Bluetooth: hci0: command 0x0419 tx timeout [ 1798.974080][T21723] device hsr_slave_0 left promiscuous mode [ 1798.992972][T21723] device hsr_slave_1 left promiscuous mode [ 1799.014038][T21723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1799.040332][T21723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1799.079357][T21723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1799.100769][T21723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1799.129846][T21723] bridge0: port 3(hsr0) entered disabled state [ 1799.155327][T21723] device bridge_slave_1 left promiscuous mode [ 1799.182638][T21723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.223109][T21723] device bridge_slave_0 left promiscuous mode [ 1799.229505][T21723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.382390][T21723] device veth1_macvtap left promiscuous mode [ 1799.388555][T21723] device veth0_macvtap left promiscuous mode [ 1799.397233][T21723] device veth1_vlan left promiscuous mode [ 1799.403578][T21723] device veth0_vlan left promiscuous mode [ 1800.609443][T21723] team0 (unregistering): Port device geneve1 removed [ 1800.733016][T21723] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1801.698539][T21723] team0 (unregistering): Port device team_slave_1 removed [ 1801.757317][T21723] team0 (unregistering): Port device team_slave_0 removed [ 1801.811854][T21723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.872019][T21723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1802.299115][T21723] bond0 (unregistering): Released all slaves [ 1802.433223][T31980] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8781'. [ 1802.451766][T31983] netlink: 'syz.3.8782': attribute type 17 has an invalid length. [ 1802.460119][T31983] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8782'. [ 1802.479411][T31983] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1802.497948][T31983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1802.541784][T31987] netlink: 'syz.2.8783': attribute type 21 has an invalid length. [ 1802.607499][T31773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1802.665368][T31773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1802.785242][T31773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1802.813026][T31994] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8786'. [ 1802.835245][T31994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1803.045702][T31773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1803.492051][T31773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1803.567610][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1803.606532][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1803.640556][T31773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1803.739092][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1803.782560][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1803.829954][T25626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.837183][T25626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1803.873651][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1803.893050][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1803.925924][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1803.968658][T25626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.976621][T25626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1804.029623][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1804.088853][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1804.134460][T32025] netlink: 'syz.2.8794': attribute type 16 has an invalid length. [ 1804.168639][T32025] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8794'. [ 1804.220590][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1804.268601][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1804.323079][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1804.371049][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1804.503617][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1804.530932][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1804.592452][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1804.618110][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1804.667277][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1805.211391][T32039] device syzkaller0 entered promiscuous mode [ 1806.187600][T32070] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.8805'. [ 1806.545608][T32077] netlink: 9079 bytes leftover after parsing attributes in process `syz.0.8805'. [ 1807.240947][T32086] netlink: 'syz.2.8807': attribute type 1 has an invalid length. [ 1807.253867][T32086] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.8807'. [ 1809.736523][T32093] netlink: 'syz.2.8808': attribute type 10 has an invalid length. [ 1809.831394][T32093] device macvlan0 entered promiscuous mode [ 1809.916308][T32093] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1810.010988][T21723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1810.052123][T21723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1810.096927][T31773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1810.338213][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1810.393595][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1810.550191][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1810.562661][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1810.655489][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1810.707141][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1810.762399][T31773] device veth0_vlan entered promiscuous mode [ 1810.813224][T31773] device veth1_vlan entered promiscuous mode [ 1811.021915][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1811.045810][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1811.086690][T31773] device veth0_macvtap entered promiscuous mode [ 1811.113396][T31773] device veth1_macvtap entered promiscuous mode [ 1811.181647][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.253878][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.272678][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1811.287940][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.303048][T31773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.376481][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1811.408438][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1811.429568][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1811.450509][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1811.474354][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.496232][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.529014][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.616831][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.637658][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1811.691820][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1811.736405][T31773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1811.777689][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1811.796177][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1811.835715][T31773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.869123][T31773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.921666][T31773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.941337][T31773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.988780][T32140] device sit0 left promiscuous mode [ 1812.787724][T32144] device sit0 entered promiscuous mode [ 1813.330495][T25624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.351134][T25624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.407884][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1813.462674][T32177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8830'. [ 1813.472840][T21709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.499823][T21709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.522072][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1813.620383][T32186] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.8833'. [ 1813.777569][T32186] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8833'. [ 1817.340082][T32278] netlink: 'syz.0.8864': attribute type 3 has an invalid length. [ 1817.391237][T32279] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8864'. [ 1817.493603][T32278] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8864'. [ 1817.613864][T32288] tc_dump_action: action bad kind [ 1818.338722][T32306] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.8875'. [ 1818.479567][T32306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8875'. [ 1820.171048][T32337] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.8884'. [ 1821.487942][T31775] Bluetooth: hci0: unexpected event 0x30 length: 151 > 3 [ 1822.838350][T32398] netlink: 'syz.3.8905': attribute type 3 has an invalid length. [ 1822.838996][T32397] netlink: 'syz.3.8905': attribute type 3 has an invalid length. [ 1822.846356][T32398] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8905'. [ 1822.870880][T32397] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8905'. [ 1824.522634][T32442] netlink: 'syz.1.8918': attribute type 2 has an invalid length. [ 1824.549448][T32442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8918'. [ 1824.611651][T32427] netlink: 'syz.3.8913': attribute type 10 has an invalid length. [ 1824.903803][T32427] team0 (unregistering): Port device team_slave_0 removed [ 1824.969218][T32427] team0 (unregistering): Port device team_slave_1 removed [ 1825.028368][T32442] netlink: 'syz.1.8918': attribute type 21 has an invalid length. [ 1825.043582][T32442] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.8918'. [ 1825.950119][T32472] netlink: 'syz.4.8928': attribute type 3 has an invalid length. [ 1825.965261][T32472] netlink: 'syz.4.8928': attribute type 8 has an invalid length. [ 1825.974410][T32472] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.8928'. [ 1831.531366][T32496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1831.538904][T32496] IPv6: NLM_F_CREATE should be set when creating new route [ 1831.546369][T32496] IPv6: NLM_F_CREATE should be set when creating new route [ 1831.554061][T32496] IPv6: NLM_F_CREATE should be set when creating new route [ 1831.570588][T32497] netlink: 'syz.4.8934': attribute type 10 has an invalid length. [ 1833.797311][T32541] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8950'. [ 1840.376095][T32615] netlink: 'syz.4.8977': attribute type 11 has an invalid length. [ 1840.603413][T32615] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8977'. [ 1840.688626][T32615] netlink: 'syz.4.8977': attribute type 11 has an invalid length. [ 1840.762040][T32615] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8977'. [ 1840.799326][T32614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1840.860640][T22607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1840.871275][T22607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1840.880916][T22607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1840.890582][T22607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1840.904684][T22607] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1840.912436][T22607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1841.407608][T32619] chnl_net:caif_netlink_parms(): no params data found [ 1841.580680][T32635] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.8984'. [ 1841.645893][T32640] netlink: 'syz.2.8984': attribute type 3 has an invalid length. [ 1841.659227][T32619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.720196][T32619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.729990][T32619] device bridge_slave_0 entered promiscuous mode [ 1841.739218][T32640] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8984'. [ 1841.739686][T32619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.757667][T32619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.766478][T32619] device bridge_slave_1 entered promiscuous mode [ 1841.802741][T32619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1841.815057][T32619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1841.878144][T32619] team0: Port device team_slave_0 added [ 1841.926226][T32619] team0: Port device team_slave_1 added [ 1842.007172][T32619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1842.037008][T32619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1842.121684][T32619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1842.160399][T32619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1842.187878][T32619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1842.226942][T32619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1842.415902][T32619] device hsr_slave_0 entered promiscuous mode [ 1842.467967][T32619] device hsr_slave_1 entered promiscuous mode [ 1842.488078][T32619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1842.517674][T32619] Cannot create hsr debugfs directory [ 1842.952137][T22607] Bluetooth: hci5: command 0x0409 tx timeout [ 1843.096941][T32619] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1843.137066][T32619] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1843.184414][T32619] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1843.218464][T32619] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1843.335666][T32708] netlink: 'syz.3.9001': attribute type 3 has an invalid length. [ 1843.366605][T32705] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.9001'. [ 1843.378959][T32708] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9001'. [ 1843.572388][T32619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1843.654212][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1843.680962][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1843.756532][T32619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1843.826358][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1843.896838][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1844.135148][T21705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.142413][T21705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1844.151047][T21705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1844.199080][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1844.239810][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1844.257161][T12561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.265031][T12561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1844.300418][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1844.352936][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1844.368555][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1844.446217][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1844.510732][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1844.560045][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1844.626155][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1844.667984][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1844.690552][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1844.713291][T32619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1844.737058][T32619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1844.754583][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1844.769778][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1844.927426][T32735] netlink: 'syz.1.9013': attribute type 1 has an invalid length. [ 1844.965375][T32735] netlink: 54695 bytes leftover after parsing attributes in process `syz.1.9013'. [ 1845.036819][T22607] Bluetooth: hci5: command 0x041b tx timeout [ 1845.085177][T32740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.172339][T32741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.179943][T32741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1845.238467][T32742] netlink: 'syz.3.9012': attribute type 5 has an invalid length. [ 1845.852253][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1845.870388][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1845.895074][T32619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1846.933102][ T301] netlink: 'syz.1.9021': attribute type 10 has an invalid length. [ 1847.021252][ T301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1847.115708][T22607] Bluetooth: hci5: command 0x040f tx timeout [ 1847.145419][ T301] bond0: (slave team0): Enslaving as an active interface with an up link [ 1847.991001][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1848.018731][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1848.051492][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1848.072817][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1848.095540][T32619] device veth0_vlan entered promiscuous mode [ 1848.118330][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1848.129409][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1848.151302][T32619] device veth1_vlan entered promiscuous mode [ 1848.683477][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1848.724830][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1848.772616][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1848.794255][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1848.828087][T32619] device veth0_macvtap entered promiscuous mode [ 1849.201197][T31775] Bluetooth: hci5: command 0x0419 tx timeout [ 1849.457166][T32619] device veth1_macvtap entered promiscuous mode [ 1849.476679][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1849.493686][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1849.575603][T32619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.624460][T32619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.666947][T32619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.782185][T32619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1849.856203][T32619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1849.942503][T32619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1850.000419][T32619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1850.020161][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1850.050715][T12561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1850.095155][T32619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1850.145686][T32619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1850.175061][T32619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1850.204133][T32619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1850.242995][T32619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1850.280110][T32619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1850.323376][T32619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1850.368421][T32619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1850.440914][T32619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1850.523456][ T354] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9036'. [ 1850.699325][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1850.722134][T25624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1850.866552][T32619] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.941607][T32619] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.976138][T32619] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.051742][T32619] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.132927][ T362] netlink: 'syz.1.9036': attribute type 46 has an invalid length. [ 1851.141460][ T362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9036'. [ 1851.256634][ T364] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9039'. [ 1851.286005][ T364] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1851.543793][T21723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1851.582122][T21723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1851.621468][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1851.678581][T25626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1851.696206][T25626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1851.720994][T25626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1852.045708][ T380] netlink: 'syz.3.9044': attribute type 10 has an invalid length. [ 1853.356812][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.363380][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.847313][ T438] ÿÿÿÿÿÿ: renamed from vlan1 [ 1855.971852][ T439] netlink: 'syz.4.9061': attribute type 10 has an invalid length. [ 1857.957997][ T466] netlink: 'syz.4.9068': attribute type 17 has an invalid length. [ 1859.510161][ T492] device syzkaller0 entered promiscuous mode [ 1863.717848][T31775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1863.739837][T31775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1863.749407][T31775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1863.767983][T31775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1863.776032][T31775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1863.783791][T31775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1865.782475][ T527] netlink: 'syz.1.9089': attribute type 2 has an invalid length. [ 1865.790305][ T527] netlink: 'syz.1.9089': attribute type 1 has an invalid length. [ 1865.798810][ T527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9089'. [ 1865.832154][T31775] Bluetooth: hci4: command 0x0409 tx timeout [ 1866.244632][T21709] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.568799][T21709] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.886882][T21709] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.187177][T21709] team0: Port device netdevsim0 removed [ 1867.254762][T21709] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.912105][T31775] Bluetooth: hci4: command 0x041b tx timeout [ 1868.194025][ T536] chnl_net:caif_netlink_parms(): no params data found [ 1869.397886][ T589] device syzkaller0 entered promiscuous mode [ 1870.001997][T22607] Bluetooth: hci4: command 0x040f tx timeout [ 1872.071838][T22607] Bluetooth: hci4: command 0x0419 tx timeout [ 1873.321367][T21709] device 0 left promiscuous mode [ 1873.516209][ T536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.542247][ T536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.561432][ T536] device bridge_slave_0 entered promiscuous mode [ 1873.578821][ T536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.597840][ T536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.620187][ T536] device bridge_slave_1 entered promiscuous mode [ 1873.966826][ T536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1874.083101][ T536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1874.690899][ T536] team0: Port device team_slave_0 added [ 1874.738745][ T660] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9120'. [ 1874.884809][ T536] team0: Port device team_slave_1 added [ 1875.107938][ T536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1875.201806][ T536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1875.298670][ T536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1875.384971][ T536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1875.407651][ T536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1875.508476][ T536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1875.963983][ T536] device hsr_slave_0 entered promiscuous mode [ 1876.270902][ T536] device hsr_slave_1 entered promiscuous mode [ 1876.302418][ T536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1876.310156][ T536] Cannot create hsr debugfs directory [ 1877.902952][T21709] device hsr_slave_0 left promiscuous mode [ 1877.915651][T21709] device hsr_slave_1 left promiscuous mode [ 1877.936846][T21709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1877.960231][T21709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1878.006714][T21709] bridge0: port 4(hsr0) entered disabled state [ 1878.031386][T21709] bridge0: port 3(bond0) entered disabled state [ 1878.392683][T21709] device bridge_slave_1 left promiscuous mode [ 1878.399301][T21709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.523760][T21709] device bridge_slave_0 left promiscuous mode [ 1878.530312][T21709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.648223][T21709] device veth1_vlan left promiscuous mode [ 1879.221839][T21709] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1879.494481][T21709] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1879.938797][ T793] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9153'. [ 1879.958695][ T793] ksmbd: Unknown IPC event: 10, ignore. [ 1880.060664][ T792] netlink: 'syz.4.9153': attribute type 3 has an invalid length. [ 1880.069832][ T792] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.9153'. [ 1880.213881][T21709] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1880.231199][T21709] device batadv_slave_0 left promiscuous mode [ 1880.323661][T21709] team0 (unregistering): Port device team_slave_1 removed [ 1880.413037][T21709] team0 (unregistering): Port device team_slave_0 removed [ 1880.481393][T21709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1880.525790][T21709] device bond_slave_1 left promiscuous mode [ 1881.061230][T21709] bond0 (unregistering): Released all slaves [ 1881.218506][ T773] netlink: 'syz.5.9149': attribute type 2 has an invalid length. [ 1881.229006][ T773] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9149'. [ 1881.239228][ T783] netlink: 'syz.3.9150': attribute type 11 has an invalid length. [ 1881.261451][ T783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9150'. [ 1881.288604][ T803] netlink: 'syz.4.9156': attribute type 21 has an invalid length. [ 1881.313448][ T803] netlink: 'syz.4.9156': attribute type 2 has an invalid length. [ 1881.340216][ T806] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9156'. [ 1881.990568][ T536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1882.065218][ T536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1882.183278][ T536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1882.240246][ T536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1883.487371][ T846] netlink: 'syz.4.9166': attribute type 3 has an invalid length. [ 1883.548967][ T846] netlink: 'syz.4.9166': attribute type 8 has an invalid length. [ 1883.579735][ T846] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.9166'. [ 1883.658121][ T536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1883.810680][ T536] 8021q: adding VLAN 0 to HW filter on device team0 [ 1883.867896][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1883.876435][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1883.926515][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1883.945640][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1883.980651][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.988168][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1884.099256][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1884.273393][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1884.375897][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1884.383304][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1884.427717][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1884.619228][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1884.654330][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1884.780775][ T536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1884.906141][ T536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1884.999388][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1885.026948][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1885.090508][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1885.122815][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1885.176909][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1885.179220][ T899] netlink: 14415 bytes leftover after parsing attributes in process `syz.3.9175'. [ 1885.202192][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1885.244802][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1885.267573][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1885.280937][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1885.291424][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1885.313939][ T887] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9175'. [ 1886.664521][ T926] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9182'. [ 1887.165563][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1887.182114][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1887.264996][ T944] netlink: 'syz.5.9185': attribute type 33 has an invalid length. [ 1887.306215][ T944] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9185'. [ 1887.388310][ T536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1887.612672][T21727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1887.658798][T21727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1887.709125][T21727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1887.733251][T21727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1887.767634][ T536] device veth0_vlan entered promiscuous mode [ 1887.829324][T21727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1887.862856][T21727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1887.907494][ T536] device veth1_vlan entered promiscuous mode [ 1888.272021][T21711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1888.280238][T21711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1888.396251][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1888.416999][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1888.438489][ T536] device veth0_macvtap entered promiscuous mode [ 1888.478648][ T536] device veth1_macvtap entered promiscuous mode [ 1888.579689][ T536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.661580][ T536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.707744][ T536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.772841][ T536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.780445][ T966] netlink: 'syz.1.9189': attribute type 28 has an invalid length. [ 1888.801842][ T966] netlink: 'syz.1.9189': attribute type 29 has an invalid length. [ 1888.820925][ T966] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9189'. [ 1888.830466][ T536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.830492][ T536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.830509][ T536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1888.830525][ T536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1888.834398][ T536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1889.018738][T21711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1889.058295][T21711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1889.103162][T21711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1889.161971][T21711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1889.266831][ T536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1889.331597][ T536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1889.365632][ T536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1889.411622][ T536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1889.452830][ T536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1889.533994][ T536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1889.581744][ T536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1889.621393][ T536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1889.682006][ T536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1889.970300][T21711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1889.992788][T21711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1890.127412][ T536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.157441][ T536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.191708][ T536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.240982][ T536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1890.831845][ T985] netlink: 'syz.3.9192': attribute type 21 has an invalid length. [ 1890.903899][ T985] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9192'. [ 1891.090005][T21709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1891.162528][T21709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1891.225624][T21727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1891.371767][T21727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1891.379985][T21727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1891.443746][T21711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1898.739185][ T1108] netlink: 'syz.5.9211': attribute type 10 has an invalid length. [ 1900.472356][ T1141] netlink: 'syz.3.9219': attribute type 17 has an invalid length. [ 1900.516885][ T1141] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9219'. [ 1900.682287][ T1143] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.9220'. [ 1900.731904][ T1143] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9220'. [ 1903.807829][T22607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1903.818094][T22607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1903.861779][T22607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1903.875814][T22607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1903.884581][T22607] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1903.894692][T22607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1904.098771][T21727] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.315428][T21727] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.329603][ T1218] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.9239'. [ 1904.348727][ T1208] tap0: tun_chr_ioctl cmd 1074025677 [ 1904.363173][ T1218] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9239'. [ 1904.377383][ T1208] tap0: linktype set to 804 [ 1904.483885][T21727] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.876561][T21727] batman_adv: batadv0: Removing interface: netdevsim0 [ 1904.925216][T21727] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.992030][T22607] Bluetooth: hci2: command 0x0409 tx timeout [ 1906.394878][ T1254] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9250'. [ 1908.071956][T22607] Bluetooth: hci2: command 0x041b tx timeout [ 1910.161717][T22607] Bluetooth: hci2: command 0x040f tx timeout [ 1911.431183][ T1254] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9250'. [ 1911.615602][T21727] device 0 left promiscuous mode [ 1911.712056][ T1206] chnl_net:caif_netlink_parms(): no params data found [ 1912.233119][T22607] Bluetooth: hci2: command 0x0419 tx timeout [ 1912.903292][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.910793][ T1206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.992967][ T1206] device bridge_slave_0 entered promiscuous mode [ 1913.148263][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1913.180797][ T1206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.223248][ T1206] device bridge_slave_1 entered promiscuous mode [ 1913.803660][ T1206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1913.886693][ T1206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1914.226214][ T1206] team0: Port device team_slave_0 added [ 1914.373492][ T1206] team0: Port device team_slave_1 added [ 1914.576998][ T1206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1914.606555][ T1206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1914.747206][ T1206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1914.847086][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.855759][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.958385][ T1206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1914.972462][ T1206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1915.089496][ T1206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1915.161809][ T1379] device lo entered promiscuous mode [ 1915.206649][ T1384] netlink: 'syz.4.9284': attribute type 9 has an invalid length. [ 1915.252401][ T1384] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.9284'. [ 1915.344782][ T1206] device hsr_slave_0 entered promiscuous mode [ 1915.372401][ T1206] device hsr_slave_1 entered promiscuous mode [ 1915.393990][ T1206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1915.420082][ T1206] Cannot create hsr debugfs directory [ 1916.882605][T31775] Bluetooth: hci0: command 0x0406 tx timeout [ 1917.283831][T21727] device hsr_slave_0 left promiscuous mode [ 1917.310727][T21727] device hsr_slave_1 left promiscuous mode [ 1917.328203][T21727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1917.362641][T21727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1917.443463][T21727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1917.461852][T21727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1917.615024][T21727] device veth1_macvtap left promiscuous mode [ 1917.624696][T21727] device veth0_macvtap left promiscuous mode [ 1917.630955][T21727] device veth1_vlan left promiscuous mode [ 1917.637112][T21727] device veth0_vlan left promiscuous mode [ 1918.559703][T21727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1918.569013][T21727] device bond_slave_1 left promiscuous mode [ 1918.620603][T21727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1918.629922][T21727] device bond_slave_0 left promiscuous mode [ 1919.001162][T21727] bond0 (unregistering): Released all slaves [ 1919.066502][ T1425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9292'. [ 1919.501447][ T1450] netlink: 'syz.1.9297': attribute type 16 has an invalid length. [ 1919.651147][ T1450] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9297'. [ 1920.634213][ T1206] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1920.679604][ T1206] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1920.761624][ T1206] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1920.896171][ T1206] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1921.093715][ T1486] netlink: 'syz.5.9305': attribute type 10 has an invalid length. [ 1921.115310][ T1486] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.9305'. [ 1921.232576][ T1492] netlink: 'syz.5.9305': attribute type 10 has an invalid length. [ 1921.257458][ T1492] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.9305'. [ 1921.409288][ T1206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1921.517446][T21727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1921.645089][T21727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1921.694296][ T1206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1921.793034][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1921.862473][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1921.890736][T21734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.898245][T21734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1922.187799][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1922.222603][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1922.266103][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1922.297788][T21734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.305156][T21734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1922.325728][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1922.358396][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1922.490587][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1922.509001][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1922.549942][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1922.613836][T21717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1922.647902][T21717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1922.703781][T21695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1922.739385][T21695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1922.826446][T21695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1922.856028][T21695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1922.886309][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1924.340551][ T1560] netlink: 'syz.2.9320': attribute type 3 has an invalid length. [ 1924.367444][ T1560] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9320'. [ 1924.419750][ T1570] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9323'. [ 1924.452766][ T1570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1924.595090][T21707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1924.603357][T21707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1924.657778][ T1206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1924.785325][T21707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1924.812975][T21707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1924.886231][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1924.903358][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1924.934351][ T1206] device veth0_vlan entered promiscuous mode [ 1924.952620][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1924.972050][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1925.018032][ T1206] device veth1_vlan entered promiscuous mode [ 1925.107826][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1925.129707][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1925.139708][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1925.182466][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1925.194576][ T1206] device veth0_macvtap entered promiscuous mode [ 1925.225607][ T1206] device veth1_macvtap entered promiscuous mode [ 1925.287990][ T1206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1925.310144][ T1206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.333472][ T1206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1925.365078][ T1206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.490841][ T1206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1925.536561][ T1206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.557633][ T1206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1925.585926][ T1206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1925.633273][ T1206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1925.684042][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1925.707496][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1925.772447][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1925.816578][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1925.939694][ T1206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1925.977006][ T1206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.091533][ T1206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1926.175912][ T1206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.237563][ T1206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1926.261664][ T1206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.300457][ T1206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1926.339890][ T1206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1926.409586][ T1206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1926.429262][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1926.444383][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1926.606090][ T1206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.641716][ T1206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.681600][ T1206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.690687][ T1206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1927.143558][T21734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1927.188895][T21734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1927.257393][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1927.322463][T21717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1927.347968][T21717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1927.401877][T21717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1927.804160][ T1646] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9229'. [ 1927.917292][ T1646] netlink: zone id is out of range [ 1927.946627][ T1646] netlink: zone id is out of range [ 1928.020966][ T1647] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9341'. [ 1928.042563][ T1646] netlink: zone id is out of range [ 1928.072036][ T1646] netlink: zone id is out of range [ 1928.095952][ T1646] netlink: zone id is out of range [ 1928.149181][ T1646] netlink: zone id is out of range [ 1928.154824][ T1646] netlink: zone id is out of range [ 1928.160450][ T1646] netlink: zone id is out of range [ 1928.175605][ T1646] netlink: zone id is out of range [ 1928.256564][ T1658] netlink: 'syz.1.9345': attribute type 21 has an invalid length. [ 1928.374448][ T1658] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9345'. [ 1930.009793][ T1698] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9360'. [ 1930.318849][ T1711] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9362'. [ 1930.500978][ T1712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1930.530861][ T1712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1930.637555][ T1712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1930.662138][ T1712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1931.039074][ T1725] netlink: 'syz.3.9367': attribute type 29 has an invalid length. [ 1931.077376][ T1725] netlink: 'syz.3.9367': attribute type 29 has an invalid length. [ 1931.108258][ T1726] netlink: 'syz.3.9367': attribute type 29 has an invalid length. [ 1931.196155][ T1725] netlink: 'syz.3.9367': attribute type 29 has an invalid length. [ 1931.732264][ T1726] netlink: 'syz.3.9367': attribute type 29 has an invalid length. [ 1932.447095][ T1747] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9374'. [ 1932.506158][ T1747] net_ratelimit: 214 callbacks suppressed [ 1932.506181][ T1747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1932.748359][ T1754] netlink: 'syz.4.9378': attribute type 12 has an invalid length. [ 1932.841835][ T1754] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9378'. [ 1933.257628][ T1753] delete_channel: no stack [ 1933.310307][ T1766] netlink: 'syz.1.9379': attribute type 3 has an invalid length. [ 1933.351962][ T1766] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9379'. [ 1934.022557][ T1794] netlink: 'syz.3.9383': attribute type 10 has an invalid length. [ 1934.030464][ T1794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9383'. [ 1934.044317][ T1794] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1934.138249][ T1794] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1934.231633][ T1794] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1934.271347][ T1799] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9386'. [ 1934.618768][ T1796] netlink: 'syz.1.9386': attribute type 2 has an invalid length. [ 1934.707659][ T1806] netlink: 'syz.1.9386': attribute type 10 has an invalid length. [ 1934.841680][ T1806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.928703][ T1806] device bridge_slave_1 left promiscuous mode [ 1934.972515][ T1806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.062447][ T1806] team0: Port device bridge_slave_1 added [ 1935.994755][ T1835] netlink: 'syz.4.9401': attribute type 1 has an invalid length. [ 1936.103825][ T1835] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.9401'. [ 1937.032506][ T1849] netlink: 'syz.4.9405': attribute type 28 has an invalid length. [ 1937.316701][ T1848] netlink: 'syz.4.9405': attribute type 10 has an invalid length. [ 1939.290635][ T1878] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9412'. [ 1944.088157][ T1933] netlink: 'syz.3.9431': attribute type 15 has an invalid length. [ 1944.096359][ T1933] netlink: 'syz.3.9431': attribute type 7 has an invalid length. [ 1944.185348][ T1933] netlink: 'syz.3.9431': attribute type 39 has an invalid length. [ 1946.737362][T21727] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.083143][T21727] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.382618][T21727] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.419224][T22607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1947.429435][T22607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1947.462512][T22607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1947.472661][T22607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1947.480444][T22607] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1947.488833][T22607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1947.564496][T21727] batman_adv: batadv0: Removing interface: netdevsim0 [ 1947.645938][T21727] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1948.460875][T21727] tipc: Left network mode [ 1949.516316][T31775] Bluetooth: hci3: command 0x0409 tx timeout [ 1950.289994][ T1949] chnl_net:caif_netlink_parms(): no params data found [ 1950.629659][ T1994] can: request_module (can-proto-0) failed. [ 1950.924983][ T1949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.933219][ T1949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.943530][ T1949] device bridge_slave_0 entered promiscuous mode [ 1951.053722][ T1949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1951.101788][ T1949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.142096][ T1949] device bridge_slave_1 entered promiscuous mode [ 1951.315146][ T1949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1951.349034][ T1949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1951.514579][ T1949] team0: Port device team_slave_0 added [ 1951.568542][ T1949] team0: Port device team_slave_1 added [ 1951.592118][T22607] Bluetooth: hci3: command 0x041b tx timeout [ 1951.719997][ T1949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1951.730556][ T1949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.774569][ T1949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1951.816462][ T2038] netlink: 'syz.1.9454': attribute type 2 has an invalid length. [ 1951.836000][ T2038] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1951.907968][ T1949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1951.917242][ T1949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.948998][ T1949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1952.129737][ T1949] device hsr_slave_0 entered promiscuous mode [ 1952.151983][ T1949] device hsr_slave_1 entered promiscuous mode [ 1952.199605][ T1949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1952.215298][ T1949] Cannot create hsr debugfs directory [ 1953.160569][T21727] device hsr_slave_0 left promiscuous mode [ 1953.181543][T21727] device hsr_slave_1 left promiscuous mode [ 1953.228054][T21727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1953.302892][T21727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1953.347944][T21727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1953.389401][T21727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1953.402414][T21727] device bridge_slave_1 left promiscuous mode [ 1953.408992][T21727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.484434][T21727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.671650][T22607] Bluetooth: hci3: command 0x040f tx timeout [ 1955.761333][T22607] Bluetooth: hci3: command 0x0419 tx timeout [ 1956.009082][T21727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1956.069670][T21727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1956.454786][T21727] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1956.499954][T21727] bond0 (unregistering): Released all slaves [ 1956.604119][ T2082] netlink: 'syz.3.9467': attribute type 10 has an invalid length. [ 1956.902397][ T2090] tap0: tun_chr_ioctl cmd 1074812118 [ 1956.908045][ T2092] tap0: tun_chr_ioctl cmd 99999999 [ 1956.930382][ T2109] netlink: 'syz.2.9473': attribute type 10 has an invalid length. [ 1956.976593][ T2109] team0: Port device macvlan1 added [ 1958.040758][ T2139] netlink: 'syz.1.9481': attribute type 29 has an invalid length. [ 1958.121821][ T2139] netlink: 'syz.1.9481': attribute type 29 has an invalid length. [ 1958.232210][ T2142] netlink: 'syz.1.9481': attribute type 29 has an invalid length. [ 1958.716475][ T1949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1958.767772][ T2156] delete_channel: no stack [ 1958.789260][ T1949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1958.851208][ T1949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1958.881037][ T1949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1959.013486][ T2167] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9487'. [ 1959.150401][ T2168] tap0: tun_chr_ioctl cmd 1074812118 [ 1959.274538][ T2171] tap0: tun_chr_ioctl cmd 99999999 [ 1959.454965][ T1949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1959.519477][ T1949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1959.537368][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1959.549506][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1962.312016][ T2182] netlink: 'syz.2.9490': attribute type 5 has an invalid length. [ 1962.333454][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1962.356072][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1962.371302][T21734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1962.379297][T21734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1962.424395][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1962.497683][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1962.550722][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1962.582461][T21734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1962.589948][T21734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1962.647270][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1962.722479][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1962.744755][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1962.800741][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1962.838575][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1962.891813][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1962.920453][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1962.990791][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1963.027825][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1963.094745][ T1949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1963.149467][ T1949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1963.207348][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1963.241384][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1963.265010][ T2214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1963.311016][ T2217] netlink: 'syz.2.9500': attribute type 2 has an invalid length. [ 1963.336459][ T2215] netlink: 'syz.1.9498': attribute type 10 has an invalid length. [ 1963.613992][ T2215] device veth0_vlan left promiscuous mode [ 1963.635686][ T2215] device veth0_vlan entered promiscuous mode [ 1963.691186][ T2215] team0: Device veth0_vlan failed to register rx_handler [ 1964.667260][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1964.679890][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1964.750531][ T1949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1965.087647][ T2254] netlink: 'syz.5.9507': attribute type 29 has an invalid length. [ 1965.167584][ T2254] netlink: 'syz.5.9507': attribute type 29 has an invalid length. [ 1965.243841][ T2259] netlink: 'syz.5.9507': attribute type 29 has an invalid length. [ 1965.385736][ T2268] device wlan1 entered promiscuous mode [ 1965.478754][ T2268] netlink: 'syz.3.9510': attribute type 3 has an invalid length. [ 1965.501896][ T2268] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.9510'. [ 1965.870098][ T2282] netlink: 'syz.1.9513': attribute type 2 has an invalid length. [ 1966.488822][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1966.508191][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1966.602696][T12593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1966.624539][T12593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1966.643493][T12593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1966.682521][T12593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1966.704561][ T1949] device veth0_vlan entered promiscuous mode [ 1966.745649][ T1949] device veth1_vlan entered promiscuous mode [ 1966.816915][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1966.837748][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1966.851784][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1966.882567][T21734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1966.919701][ T1949] device veth0_macvtap entered promiscuous mode [ 1966.940740][ T1949] device veth1_macvtap entered promiscuous mode [ 1966.993307][ T1949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1967.016573][ T1949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1967.046279][ T1949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1967.059078][ T1949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1967.070546][ T1949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1967.082653][ T1949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1967.108624][ T1949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1967.137500][T12593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1967.156532][T12593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1967.187183][T12593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1967.215362][T12593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1967.247951][ T1949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1967.279770][ T1949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1967.301719][ T1949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1967.312701][ T1949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1967.322847][ T1949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1967.340347][ T1949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1967.354332][ T1949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1967.368648][T21707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1967.380347][T21707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1967.445211][ T1949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.468982][ T1949] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.531841][ T1949] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.540730][ T1949] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.801406][T25624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1967.851334][T25624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1967.900683][T12593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1967.960312][T12593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1968.010050][T12593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1968.055469][T12593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1968.072103][T31775] Bluetooth: hci5: command 0x0406 tx timeout [ 1968.819351][ T2338] device wlan1 entered promiscuous mode [ 1968.949808][ T2343] netlink: 'syz.1.9525': attribute type 3 has an invalid length. [ 1969.003631][ T2343] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.9525'. [ 1969.154836][ T2349] device syzkaller0 entered promiscuous mode [ 1971.909435][ T2420] FAULT_INJECTION: forcing a failure. [ 1971.909435][ T2420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1971.955908][ T2420] CPU: 0 PID: 2420 Comm: syz.1.9541 Not tainted syzkaller #0 [ 1971.963542][ T2420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1971.973918][ T2420] Call Trace: [ 1971.977336][ T2420] [ 1971.980305][ T2420] dump_stack_lvl+0x188/0x24e [ 1971.985211][ T2420] ? show_regs_print_info+0x12/0x12 [ 1971.990478][ T2420] ? load_image+0x400/0x400 [ 1971.995100][ T2420] ? __lock_acquire+0x7d10/0x7d10 [ 1972.000279][ T2420] should_fail_ex+0x399/0x4d0 [ 1972.005094][ T2420] _copy_from_user+0x2c/0x170 [ 1972.009911][ T2420] bpf_prog_test_run_skb+0x262/0x12a0 [ 1972.015331][ T2420] ? __fget_files+0x28/0x4b0 [ 1972.019976][ T2420] ? __fget_files+0x28/0x4b0 [ 1972.024707][ T2420] ? __fget_files+0x43d/0x4b0 [ 1972.029528][ T2420] ? cpu_online+0xa0/0xa0 [ 1972.034172][ T2420] bpf_prog_test_run+0x31e/0x390 [ 1972.039511][ T2420] __sys_bpf+0x62b/0x780 [ 1972.044156][ T2420] ? bpf_link_show_fdinfo+0x380/0x380 [ 1972.050826][ T2420] ? lock_chain_count+0x20/0x20 [ 1972.055920][ T2420] __x64_sys_bpf+0x78/0x90 [ 1972.060621][ T2420] do_syscall_64+0x4c/0xa0 [ 1972.065048][ T2420] ? clear_bhb_loop+0x60/0xb0 [ 1972.069945][ T2420] ? clear_bhb_loop+0x60/0xb0 [ 1972.074640][ T2420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1972.080906][ T2420] RIP: 0033:0x7f733b99ce59 [ 1972.085396][ T2420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1972.105456][ T2420] RSP: 002b:00007f733c882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1972.114172][ T2420] RAX: ffffffffffffffda RBX: 00007f733bc15fa0 RCX: 00007f733b99ce59 [ 1972.122531][ T2420] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1972.131132][ T2420] RBP: 00007f733c882090 R08: 0000000000000000 R09: 0000000000000000 [ 1972.139289][ T2420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1972.147622][ T2420] R13: 00007f733bc16038 R14: 00007f733bc15fa0 R15: 00007ffc08aae008 [ 1972.155622][ T2420] [ 1976.031563][ T2403] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.9538'. [ 1976.041247][ T2429] device wlan1 entered promiscuous mode [ 1976.054202][ T2434] netlink: 'syz.5.9543': attribute type 3 has an invalid length. [ 1976.090260][ T2434] netlink: 114680 bytes leftover after parsing attributes in process `syz.5.9543'. [ 1976.234999][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.241416][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.888170][ T2482] FAULT_INJECTION: forcing a failure. [ 1976.888170][ T2482] name failslab, interval 1, probability 0, space 0, times 0 [ 1976.950306][ T2482] CPU: 0 PID: 2482 Comm: syz.1.9554 Not tainted syzkaller #0 [ 1976.957783][ T2482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1976.968327][ T2482] Call Trace: [ 1976.971747][ T2482] [ 1976.974722][ T2482] dump_stack_lvl+0x188/0x24e [ 1976.979534][ T2482] ? show_regs_print_info+0x12/0x12 [ 1976.984774][ T2482] ? load_image+0x400/0x400 [ 1976.989430][ T2482] ? __might_sleep+0xd0/0xd0 [ 1976.994501][ T2482] ? __lock_acquire+0x7d10/0x7d10 [ 1976.999778][ T2482] should_fail_ex+0x399/0x4d0 [ 1977.004680][ T2482] should_failslab+0x5/0x20 [ 1977.009423][ T2482] slab_pre_alloc_hook+0x59/0x310 [ 1977.014792][ T2482] ? sk_prot_alloc+0xe7/0x210 [ 1977.019720][ T2482] __kmem_cache_alloc_node+0x4f/0x260 [ 1977.025500][ T2482] ? sk_prot_alloc+0xe7/0x210 [ 1977.031005][ T2482] __kmalloc+0xa0/0x240 [ 1977.035317][ T2482] sk_prot_alloc+0xe7/0x210 [ 1977.039883][ T2482] ? sk_alloc+0x20/0x340 [ 1977.044182][ T2482] sk_alloc+0x36/0x340 [ 1977.048438][ T2482] ? bpf_ctx_init+0x163/0x1a0 [ 1977.053152][ T2482] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1977.058737][ T2482] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1977.064306][ T2482] ? __fget_files+0x28/0x4b0 [ 1977.068911][ T2482] ? __fget_files+0x43d/0x4b0 [ 1977.073614][ T2482] ? cpu_online+0xa0/0xa0 [ 1977.077992][ T2482] bpf_prog_test_run+0x31e/0x390 [ 1977.082949][ T2482] __sys_bpf+0x62b/0x780 [ 1977.087314][ T2482] ? bpf_link_show_fdinfo+0x380/0x380 [ 1977.092719][ T2482] ? lock_chain_count+0x20/0x20 [ 1977.097915][ T2482] __x64_sys_bpf+0x78/0x90 [ 1977.102823][ T2482] do_syscall_64+0x4c/0xa0 [ 1977.107606][ T2482] ? clear_bhb_loop+0x60/0xb0 [ 1977.113820][ T2482] ? clear_bhb_loop+0x60/0xb0 [ 1977.118534][ T2482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1977.124711][ T2482] RIP: 0033:0x7f733b99ce59 [ 1977.129162][ T2482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1977.149830][ T2482] RSP: 002b:00007f733c882028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1977.158367][ T2482] RAX: ffffffffffffffda RBX: 00007f733bc15fa0 RCX: 00007f733b99ce59 [ 1977.166652][ T2482] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1977.174900][ T2482] RBP: 00007f733c882090 R08: 0000000000000000 R09: 0000000000000000 [ 1977.182889][ T2482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1977.191234][ T2482] R13: 00007f733bc16038 R14: 00007f733bc15fa0 R15: 00007ffc08aae008 [ 1977.199575][ T2482] [ 1977.382607][ T2489] device wlan1 entered promiscuous mode [ 1977.548731][ T2498] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9558'. [ 1977.576259][ T2488] netlink: 'syz.4.9556': attribute type 3 has an invalid length. [ 1977.610892][ T2488] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.9556'. [ 1977.733675][ T2498] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1978.457368][ T2521] netlink: 'syz.4.9564': attribute type 46 has an invalid length. [ 1978.494615][ T2521] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9564'. [ 1978.626888][ T2526] netlink: 'syz.2.9565': attribute type 2 has an invalid length. [ 1978.681938][ T2526] netlink: 119 bytes leftover after parsing attributes in process `syz.2.9565'. [ 1978.844191][ T2530] ------------[ cut here ]------------ [ 1978.849883][ T2530] WARNING: CPU: 1 PID: 2530 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470 [ 1978.859769][ T2530] Modules linked in: [ 1978.863983][ T2530] CPU: 1 PID: 2530 Comm: syz.2.9565 Not tainted syzkaller #0 [ 1978.871610][ T2530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1978.882029][ T2530] RIP: 0010:perf_pending_task+0x358/0x470 [ 1978.887818][ T2530] Code: ff 84 db 75 14 e8 e8 76 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 76 da ff e8 d7 73 58 ff eb e5 e8 c8 76 da ff <0f> 0b e9 f3 fe ff ff e8 bc 76 da ff 48 c7 c7 10 35 bc 8c 4c 89 f6 [ 1978.908248][ T2530] RSP: 0018:ffffc900031178e0 EFLAGS: 00010293 [ 1978.914517][ T2530] RAX: ffffffff81a80fe8 RBX: ffff8880545c0458 RCX: ffff88802e400000 [ 1978.915220][ T2521] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9564'. [ 1978.922766][ T2530] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1978.922805][ T2530] RBP: 0000000000000001 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1978.922823][ T2530] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: ffff88802e400000 [ 1978.922842][ T2530] R13: ffff8880622f8160 R14: ffff8880545c0220 R15: 1ffff1100a8b8044 [ 1978.965113][ T2530] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1978.974357][ T2530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1978.981080][ T2530] CR2: 00000000000000c0 CR3: 000000006035c000 CR4: 00000000003506e0 [ 1978.989301][ T2530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1978.997700][ T2530] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1979.005957][ T2530] Call Trace: [ 1979.009275][ T2530] [ 1979.012345][ T2530] task_work_run+0x1d0/0x260 [ 1979.017066][ T2530] ? task_work_cancel+0x220/0x220 [ 1979.022281][ T2530] ? do_raw_spin_unlock+0x11d/0x230 [ 1979.027546][ T2530] do_exit+0x982/0x2480 [ 1979.032241][ T2530] ? put_task_struct+0x80/0x80 [ 1979.037342][ T2530] ? lockdep_hardirqs_on+0x94/0x140 [ 1979.042745][ T2530] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1979.049084][ T2530] do_group_exit+0x217/0x2d0 [ 1979.053883][ T2530] ? _raw_spin_unlock_irq+0x25/0x40 [ 1979.059241][ T2530] get_signal+0x1272/0x1350 [ 1979.063950][ T2530] arch_do_signal_or_restart+0xc4/0x1350 [ 1979.069934][ T2530] ? lockdep_hardirqs_on+0x94/0x140 [ 1979.075405][ T2530] ? ct_nmi_exit+0x145/0x1c0 [ 1979.080062][ T2530] ? ct_irq_exit_irqson+0x113/0x170 [ 1979.085402][ T2530] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1979.091667][ T2530] ? get_sigframe_size+0x10/0x10 [ 1979.096757][ T2530] ? lock_chain_count+0x20/0x20 [ 1979.101740][ T2530] exit_to_user_mode_loop+0x70/0x110 [ 1979.107490][ T2530] exit_to_user_mode_prepare+0xee/0x180 [ 1979.113373][ T2530] syscall_exit_to_user_mode+0x16/0x40 [ 1979.119266][ T2530] do_syscall_64+0x58/0xa0 [ 1979.123817][ T2530] ? clear_bhb_loop+0x60/0xb0 [ 1979.128567][ T2530] ? clear_bhb_loop+0x60/0xb0 [ 1979.133353][ T2530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1979.139306][ T2530] RIP: 0033:0x7f6b8579ce59 [ 1979.143911][ T2530] Code: Unable to access opcode bytes at 0x7f6b8579ce2f. [ 1979.151041][ T2530] RSP: 002b:00007f6b8670b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1979.159671][ T2530] RAX: 0000000000000000 RBX: 00007f6b85a16188 RCX: 00007f6b8579ce59 [ 1979.167821][ T2530] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6b85a16188 [ 1979.175888][ T2530] RBP: 00007f6b85a16180 R08: 0000000000000000 R09: 0000000000000000 [ 1979.184208][ T2530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1979.192582][ T2530] R13: 00007f6b85a16218 R14: 00007ffe23f6c3c0 R15: 00007ffe23f6c4a8 [ 1979.200697][ T2530] [ 1979.203811][ T2530] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1979.211135][ T2530] CPU: 1 PID: 2530 Comm: syz.2.9565 Not tainted syzkaller #0 [ 1979.218710][ T2530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1979.229327][ T2530] Call Trace: [ 1979.232638][ T2530] [ 1979.235583][ T2530] dump_stack_lvl+0x188/0x24e [ 1979.240468][ T2530] ? memcpy+0x3c/0x60 [ 1979.244492][ T2530] ? show_regs_print_info+0x12/0x12 [ 1979.249729][ T2530] ? load_image+0x400/0x400 [ 1979.254356][ T2530] panic+0x2e5/0x730 [ 1979.258338][ T2530] ? bpf_jit_dump+0xd0/0xd0 [ 1979.262961][ T2530] __warn+0x2f8/0x4f0 [ 1979.267042][ T2530] ? perf_pending_task+0x358/0x470 [ 1979.272372][ T2530] ? perf_pending_task+0x358/0x470 [ 1979.277504][ T2530] report_bug+0x2ba/0x4f0 [ 1979.281864][ T2530] ? perf_pending_task+0x358/0x470 [ 1979.287001][ T2530] handle_bug+0x3a/0x70 [ 1979.291165][ T2530] exc_invalid_op+0x16/0x40 [ 1979.295716][ T2530] asm_exc_invalid_op+0x16/0x20 [ 1979.300570][ T2530] RIP: 0010:perf_pending_task+0x358/0x470 [ 1979.306702][ T2530] Code: ff 84 db 75 14 e8 e8 76 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 76 da ff e8 d7 73 58 ff eb e5 e8 c8 76 da ff <0f> 0b e9 f3 fe ff ff e8 bc 76 da ff 48 c7 c7 10 35 bc 8c 4c 89 f6 [ 1979.326696][ T2530] RSP: 0018:ffffc900031178e0 EFLAGS: 00010293 [ 1979.332968][ T2530] RAX: ffffffff81a80fe8 RBX: ffff8880545c0458 RCX: ffff88802e400000 [ 1979.340986][ T2530] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1979.349063][ T2530] RBP: 0000000000000001 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1979.357368][ T2530] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: ffff88802e400000 [ 1979.365547][ T2530] R13: ffff8880622f8160 R14: ffff8880545c0220 R15: 1ffff1100a8b8044 [ 1979.373876][ T2530] ? perf_pending_task+0x358/0x470 [ 1979.379249][ T2530] task_work_run+0x1d0/0x260 [ 1979.383934][ T2530] ? task_work_cancel+0x220/0x220 [ 1979.388962][ T2530] ? do_raw_spin_unlock+0x11d/0x230 [ 1979.394187][ T2530] do_exit+0x982/0x2480 [ 1979.398380][ T2530] ? put_task_struct+0x80/0x80 [ 1979.403148][ T2530] ? lockdep_hardirqs_on+0x94/0x140 [ 1979.408533][ T2530] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1979.414809][ T2530] do_group_exit+0x217/0x2d0 [ 1979.419436][ T2530] ? _raw_spin_unlock_irq+0x25/0x40 [ 1979.424650][ T2530] get_signal+0x1272/0x1350 [ 1979.429184][ T2530] arch_do_signal_or_restart+0xc4/0x1350 [ 1979.434842][ T2530] ? lockdep_hardirqs_on+0x94/0x140 [ 1979.440092][ T2530] ? ct_nmi_exit+0x145/0x1c0 [ 1979.444764][ T2530] ? ct_irq_exit_irqson+0x113/0x170 [ 1979.449966][ T2530] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1979.456040][ T2530] ? get_sigframe_size+0x10/0x10 [ 1979.461078][ T2530] ? lock_chain_count+0x20/0x20 [ 1979.466062][ T2530] exit_to_user_mode_loop+0x70/0x110 [ 1979.471475][ T2530] exit_to_user_mode_prepare+0xee/0x180 [ 1979.477237][ T2530] syscall_exit_to_user_mode+0x16/0x40 [ 1979.482971][ T2530] do_syscall_64+0x58/0xa0 [ 1979.487435][ T2530] ? clear_bhb_loop+0x60/0xb0 [ 1979.492222][ T2530] ? clear_bhb_loop+0x60/0xb0 [ 1979.496929][ T2530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1979.503002][ T2530] RIP: 0033:0x7f6b8579ce59 [ 1979.507524][ T2530] Code: Unable to access opcode bytes at 0x7f6b8579ce2f. [ 1979.515275][ T2530] RSP: 002b:00007f6b8670b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1979.524042][ T2530] RAX: 0000000000000000 RBX: 00007f6b85a16188 RCX: 00007f6b8579ce59 [ 1979.532237][ T2530] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6b85a16188 [ 1979.540611][ T2530] RBP: 00007f6b85a16180 R08: 0000000000000000 R09: 0000000000000000 [ 1979.548804][ T2530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1979.557154][ T2530] R13: 00007f6b85a16218 R14: 00007ffe23f6c3c0 R15: 00007ffe23f6c4a8 [ 1979.565336][ T2530] [ 1979.568655][ T2530] Kernel Offset: disabled [ 1979.573104][ T2530] Rebooting in 86400 seconds..