last executing test programs: 23.112523141s ago: executing program 2 (id=579): r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x4, 0x0, 0x2, 0x1ff}, r1, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x4) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920f", 0x13}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/user\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000413b7887fa2c0d0fe000000010000001f6d3770ece827a82b682183b2ffd18042861f74", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r3, 0x8901, 0x1000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000200)}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x11, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0, 0x8}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) perf_event_open$cgroup(0x0, r1, 0x0, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) 22.180158475s ago: executing program 2 (id=582): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="c9fe00001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 21.655999659s ago: executing program 2 (id=586): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 21.115457983s ago: executing program 2 (id=589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f00000008c0)=@framed={{}, [@generic={0x3f, 0x0, 0x0, 0x1}]}, &(0x7f0000000940)='GPL\x00', 0x7}, 0x90) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYRESDEC=r6], 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_clone(0x2802000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x7, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x7c, &(0x7f0000000ec0)=""/124, 0x41000, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000f40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0xc, 0x4, 0xfffffff9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000fc0)=[{0x4, 0x4, 0xe, 0xc}, {0x4, 0x2, 0xd, 0x4}, {0x3, 0x3, 0x8, 0x3}, {0x2, 0x3, 0x8, 0x6}, {0x2, 0x2, 0x8, 0x9}, {0x5, 0x3, 0xf, 0x7}], 0x10, 0x8000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r9, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000a40)=[{}, {}], 0x10, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x38, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0xe, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x9c}], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', r10, @cgroup_sysctl, r3, 0x8, &(0x7f0000000c80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x0, 0x4, 0x8, 0x3}, 0x10, 0x0, r9, 0x1, &(0x7f0000000d00)=[r3, r2], &(0x7f0000000d40)=[{0x3, 0x1, 0xd, 0x6}], 0x10, 0x9}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x12, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xa4, 0x3, 0x6, 0x5847, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x800, 0x83, &(0x7f0000000140)=""/131, 0x41100, 0x42, '\x00', r10, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0x2, 0x81}, 0x10, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 19.610435373s ago: executing program 2 (id=595): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.769233028s ago: executing program 2 (id=607): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 11.903919586s ago: executing program 1 (id=619): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000080)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x590b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.946333261s ago: executing program 1 (id=621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x21, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70000bfac00000000000007020000b8ffffffb703000008000000b7040000000000008500000082000000181100008afe2a898e2ba459b93228880cce7337b597a19983017076eec23585c361f0d7452b5770befc99566ed8e74954801da4fe9e02f8c74c72208b81dd099bf8fdb6371368414dc36aa1a48e42f77e03e28cc6577a04e01db11fe3b79dbc154a10b314fe7919da01bf99b30a1cabbad33e21fd89050000000000000042358c7c88bb1dec4af4750910a2f4f58ed2cf8d1dc8eacf00"/214, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069103c0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 10.635741669s ago: executing program 0 (id=622): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000ff8977fbac141416e000000107079ffeb18000440f050f00845002f2075f0039010586038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000030000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r4}, &(0x7f0000000380), &(0x7f0000000680)='%pI4 \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000700000000000000f1000000001811000026d8492d52d84fc2e4ae8c23deb0f45ecc3069c0bfb7943e965bc27ec121cb195d9d051cf055e136839aee859ab4ce51e63177fbd57e33320f0e29980db116db21257ca6472c784d54f4efaea4184587f541605f8fcf147c6bd738ed936e0322dbd2874a2c5da615e70c7189857a20f67557eeaac83eeccf62db58a199b824ecaa45e351ff30e89f99b7", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000e0000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone(0x20000000, &(0x7f00000005c0), 0x0, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="0eecb347c8f6fb366bf4024144ce221df275723690caaaba4f731470b3f22f3043f605352c94df1ea18f6ed99d95c30e37bde807558854da35c0a00160c6b46c92be77d0753317a60384866d46dbb355a03ef3ed0a2dc963ff752e0afa5b4cc578b20c4d05359e9fa5e5dd77184259ec06e6989fa79248") perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r6, 0x2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r6, &(0x7f0000000300)='ns/uts\x00') socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='P\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fcd18fac1c4453ed1e00"/38], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r3}, 0xc) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a400034003", 0x39}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xffffffffffffff7a, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4004090) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@cgroup=r7, 0x33, 0x0, 0xfffffffe, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r3, 0x4) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f0000000940)=0x8) 7.277835898s ago: executing program 1 (id=632): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r1, 0x0, 0x20040000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e7"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640), 0x1}, 0x0, 0x400008, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000500)="2e0000002e008f866b29924a6f130000005e140608000000000022727f0000a31802dd00003b1fcc7336507fb18f", 0x2e}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='.\x00', 0x0, 0x0, r5}, 0x18) perf_event_open(&(0x7f0000000140)={0xabe013c12450b94e, 0x80, 0x29, 0x8, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x100000, 0x10004, 0x9e8, 0x5, 0x209, 0x20005, 0x0, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x25b5) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x5, &(0x7f0000000980)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r2, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x2, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x0, 0x4, 0xd, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b400000000000000611484000000000005000000000000009500000000000000df6f529e26de12aeb6afc88dd97f69546c5effc7ce517f793d3fdc7e4a22f7bde5c56991c59aede6ea72ebde3ee47ed47e7bb3a578c4167332af53b32d85ef4b580a9c0bdf8f22f46179e8a746411f4f3f336fcdf8df134e884bba6332b7a49d28a1351fa970cb4c1e846f2b4c24f326399f42a04d65194c2a78d2a3960bf8721fd1be0bece3"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x6, 0x0, 0x20000, 0xb, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x7ffffffe, r0, 0xa) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.056638274s ago: executing program 0 (id=625): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e002e0010000000ba80013ffa85f59a0000005a8c3774fa0af3dc59a933c1e6a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f", 0x67}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, @perf_config_ext, 0x1005e2, 0x5, 0x4, 0x0, 0x2, 0x1ff}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="81f3ff00282000000400000092da859ef0a6790824f5f9"], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="c9fe00001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r9, r7}, 0xfffffffffffffe0d) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000", 0x0, 0x104, 0x6000000000000000, 0xc1, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab30", 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000080)) 6.292937294s ago: executing program 3 (id=626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000f500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000008f0b00001811009cb92e7fd2fba51387e5c23795708d8e6c956b090afe50db30a24bb941bc253829cbf88af0220930b5c6732572a590e4f2711119b80500fbbfa9f4f28e0a10a5b7c142485898c1866f0d83939045443b72eaf04080c6e1ad2b1c569c9328e8af", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef268563"], 0xffdd) 5.726205799s ago: executing program 1 (id=627): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x29, &(0x7f0000003fc0)}, 0x10) (async, rerun: 64) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) 4.737011035s ago: executing program 1 (id=628): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000f4ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) sendmsg$kcm(r3, 0x0, 0x4080) socket$kcm(0x11, 0x2, 0x300) gettid() r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0xa) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, &(0x7f0000000340)) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014180000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000400"/22], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1], 0x48) 3.577197726s ago: executing program 3 (id=629): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb67, 0x9}, 0x108081, 0x5, 0xc3a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000023000b02d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x2003, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3a}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x818) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000380)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000040)='syz0\x00', 0x1ff) openat$cgroup_int(r5, &(0x7f00000001c0)='memory.swap.max\x00', 0x2, 0x0) 3.555010296s ago: executing program 1 (id=630): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000080)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x590b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.04029809s ago: executing program 0 (id=631): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x64, 0x0, 0x64}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'pim6reg\x00'}) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x200000000000001, 0x106) 2.952552962s ago: executing program 3 (id=633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a0001", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800000010", 0x5}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80, 0x0}, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="ffffed8e46dc3f0adf3303faca2a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000200000000000000000000000200"], 0x0, 0x1a}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="330000001420000000", @ANYRES32, @ANYBLOB="b312a198bd13097ab6806af7593043ad9cf101f932cfd03a7b02577f37a6da5b34f35c3495e13609bc7c2c4b8378b5b8e10852a6a367737e43c890efa07afa5d085d597a9a85ca9216f4dab46b06cac019d53f702dbc24c301c7bf7a856d7f5b5e94d667b616491273", @ANYRES64=0x0], 0x20) r7 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) write$cgroup_int(r6, &(0x7f0000000040), 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), 0x0}, 0x20) 2.066573196s ago: executing program 3 (id=634): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x100c, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x4000800) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xe}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 1.926824979s ago: executing program 0 (id=635): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x100c, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x4000800) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00000000000000000000400040000000000004225731f88f274a7ffdc9bbbd90aa04d43f0e1394a3518e1afef5b59e3de05a9256e24c70c9bc7b26aa92b3c86428237600497d7741e8a1add2623bc6f31897bdf723", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710444000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xe}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 945.109285ms ago: executing program 0 (id=636): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x808e}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 944.792195ms ago: executing program 3 (id=637): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r1, 0x0, 0x20040000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e7"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640), 0x1}, 0x0, 0x400008, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000500)="2e0000002e008f866b29924a6f130000005e140608000000000022727f0000a31802dd00003b1fcc7336507fb18f", 0x2e}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='.\x00', 0x0, 0x0, r5}, 0x18) perf_event_open(&(0x7f0000000140)={0xabe013c12450b94e, 0x80, 0x29, 0x8, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x100000, 0x10004, 0x9e8, 0x5, 0x209, 0x20005, 0x0, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x25b5) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x5, &(0x7f0000000980)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r2, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x2, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x0, 0x4, 0xd, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b400000000000000611484000000000005000000000000009500000000000000df6f529e26de12aeb6afc88dd97f69546c5effc7ce517f793d3fdc7e4a22f7bde5c56991c59aede6ea72ebde3ee47ed47e7bb3a578c4167332af53b32d85ef4b580a9c0bdf8f22f46179e8a746411f4f3f336fcdf8df134e884bba6332b7a49d28a1351fa970cb4c1e846f2b4c24f326399f42a04d65194c2a78d2a3960bf8721fd1be0bece3"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x6, 0x0, 0x20000, 0xb, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x7ffffffe, r0, 0xa) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.82246ms ago: executing program 0 (id=638): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x300, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 0s ago: executing program 3 (id=639): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={0x0, 0x12}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES16=r0], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000100)=r2, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff000000008d000000850000007b000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3000000, 0xff00}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 75.159731][ T5764] cgroup: Unknown subsys name 'net' [ 75.294347][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.011478][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.454161][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.462797][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.497157][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.508768][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.516567][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.524258][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.553398][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.554105][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.561596][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.569058][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.575755][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.582704][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.590019][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.596816][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.603472][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.611483][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.617142][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.629245][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.683082][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.696032][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.707262][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.722004][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.737168][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.744820][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.077511][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 79.127540][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 79.199841][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 79.324236][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.332393][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.340534][ T5780] bridge_slave_0: entered allmulticast mode [ 79.351367][ T5780] bridge_slave_0: entered promiscuous mode [ 79.383982][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.391276][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.399072][ T5780] bridge_slave_1: entered allmulticast mode [ 79.406241][ T5780] bridge_slave_1: entered promiscuous mode [ 79.427352][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.434526][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.441751][ T5779] bridge_slave_0: entered allmulticast mode [ 79.449177][ T5779] bridge_slave_0: entered promiscuous mode [ 79.465901][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.473230][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.480539][ T5775] bridge_slave_0: entered allmulticast mode [ 79.487912][ T5775] bridge_slave_0: entered promiscuous mode [ 79.503498][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 79.515761][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.522979][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.530804][ T5779] bridge_slave_1: entered allmulticast mode [ 79.537836][ T5779] bridge_slave_1: entered promiscuous mode [ 79.544965][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.554245][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.561499][ T5775] bridge_slave_1: entered allmulticast mode [ 79.569724][ T5775] bridge_slave_1: entered promiscuous mode [ 79.594813][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.652960][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.673885][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.695680][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.717259][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.735344][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.748262][ T5780] team0: Port device team_slave_0 added [ 79.785626][ T5780] team0: Port device team_slave_1 added [ 79.833481][ T5779] team0: Port device team_slave_0 added [ 79.844260][ T5779] team0: Port device team_slave_1 added [ 79.862073][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.869277][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.876557][ T5785] bridge_slave_0: entered allmulticast mode [ 79.883749][ T5785] bridge_slave_0: entered promiscuous mode [ 79.893385][ T5775] team0: Port device team_slave_0 added [ 79.902983][ T5775] team0: Port device team_slave_1 added [ 79.941105][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.948335][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.955693][ T5785] bridge_slave_1: entered allmulticast mode [ 79.962723][ T5785] bridge_slave_1: entered promiscuous mode [ 80.001666][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.008705][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.035179][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.050147][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.057680][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.083806][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.095745][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.102931][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.129172][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.158076][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.165049][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.191325][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.205424][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.218194][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.244333][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.251648][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.277815][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.291533][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.298787][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.325075][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.402716][ T5785] team0: Port device team_slave_0 added [ 80.425270][ T5779] hsr_slave_0: entered promiscuous mode [ 80.432031][ T5779] hsr_slave_1: entered promiscuous mode [ 80.444885][ T5775] hsr_slave_0: entered promiscuous mode [ 80.452156][ T5775] hsr_slave_1: entered promiscuous mode [ 80.458638][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.466398][ T5775] Cannot create hsr debugfs directory [ 80.484551][ T5785] team0: Port device team_slave_1 added [ 80.505423][ T5780] hsr_slave_0: entered promiscuous mode [ 80.511860][ T5780] hsr_slave_1: entered promiscuous mode [ 80.518753][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.526528][ T5780] Cannot create hsr debugfs directory [ 80.537955][ T51] Bluetooth: hci0: command tx timeout [ 80.574052][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.581230][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.607521][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.641915][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.650437][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.676711][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.697452][ T51] Bluetooth: hci1: command tx timeout [ 80.703456][ T5782] Bluetooth: hci2: command tx timeout [ 80.777657][ T51] Bluetooth: hci3: command tx timeout [ 80.832481][ T5785] hsr_slave_0: entered promiscuous mode [ 80.841991][ T5785] hsr_slave_1: entered promiscuous mode [ 80.848197][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.855778][ T5785] Cannot create hsr debugfs directory [ 81.128853][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.141874][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.153513][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.175006][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.224174][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.245547][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.272892][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.304016][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.348960][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.359975][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.383582][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.396003][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.491390][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.502061][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.512803][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.532500][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.587804][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.634100][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.662845][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.670259][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.702703][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.736920][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.744102][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.765490][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.787773][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.794921][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.807849][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.814936][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.915762][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.974071][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.040447][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.061578][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.068771][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.159283][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.166448][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.193387][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.243046][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.250338][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.278449][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.285596][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.392507][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.444036][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.559636][ T5779] veth0_vlan: entered promiscuous mode [ 82.584941][ T5779] veth1_vlan: entered promiscuous mode [ 82.627966][ T51] Bluetooth: hci0: command tx timeout [ 82.635712][ T5780] veth0_vlan: entered promiscuous mode [ 82.704887][ T5779] veth0_macvtap: entered promiscuous mode [ 82.731527][ T5780] veth1_vlan: entered promiscuous mode [ 82.743063][ T5779] veth1_macvtap: entered promiscuous mode [ 82.781349][ T51] Bluetooth: hci2: command tx timeout [ 82.781447][ T5782] Bluetooth: hci1: command tx timeout [ 82.815613][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.857574][ T5782] Bluetooth: hci3: command tx timeout [ 82.868246][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.898708][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.910368][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.920740][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.929793][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.946201][ T5780] veth0_macvtap: entered promiscuous mode [ 82.976480][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.005047][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.013129][ T5780] veth1_macvtap: entered promiscuous mode [ 83.075928][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.092846][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.104975][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.138588][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.149938][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.161626][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.200311][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.210472][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.220582][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.229367][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.258720][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.267517][ T5775] veth0_vlan: entered promiscuous mode [ 83.280945][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.365097][ T5785] veth0_vlan: entered promiscuous mode [ 83.373393][ T5775] veth1_vlan: entered promiscuous mode [ 83.393306][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.405085][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.411773][ T5785] veth1_vlan: entered promiscuous mode [ 83.455221][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.483786][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.541188][ T5775] veth0_macvtap: entered promiscuous mode [ 83.552366][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.560949][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.561469][ T5785] veth0_macvtap: entered promiscuous mode [ 83.585345][ T5775] veth1_macvtap: entered promiscuous mode [ 83.604541][ T5785] veth1_macvtap: entered promiscuous mode [ 83.665012][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.687618][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.703382][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.714178][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.729698][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.776038][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.818455][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.853486][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.882716][ C0] hrtimer: interrupt took 59461 ns [ 83.893185][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.917998][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.943949][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.966279][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.021619][ T5835] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.041691][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.053712][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.065199][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.075853][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.101213][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.118491][ T5833] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.162718][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.182303][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.227562][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.257936][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.281565][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.300820][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.335081][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.355449][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.367562][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.376374][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.397345][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.416899][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.426003][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.438672][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.448078][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.699819][ T5782] Bluetooth: hci0: command tx timeout [ 84.816290][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.837923][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.860808][ T5782] Bluetooth: hci2: command tx timeout [ 84.868476][ T5782] Bluetooth: hci1: command tx timeout [ 84.938515][ T5782] Bluetooth: hci3: command tx timeout [ 85.286478][ T5853] Illegal XDP return value 4294967274 on prog (id 5) dev N/A, expect packet loss! [ 85.326536][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.369300][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.432217][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.462750][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.661427][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.680303][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.052337][ T5860] Zero length message leads to an empty skb [ 86.589441][ T5874] netlink: 'syz.2.3': attribute type 39 has an invalid length. [ 87.007619][ T5782] Bluetooth: hci0: command tx timeout [ 87.014682][ T51] Bluetooth: hci1: command tx timeout [ 87.014700][ T5778] Bluetooth: hci2: command tx timeout [ 87.020432][ T51] Bluetooth: hci3: command tx timeout [ 87.064647][ T5877] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10'. [ 87.115951][ T5877] openvswitch: netlink: Key type 4112 is out of range max 32 [ 87.195054][ T5876] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 90.626240][ T5890] syzkaller0: entered promiscuous mode [ 90.651620][ T5890] syzkaller0: entered allmulticast mode [ 90.668051][ T5895] syz.1.15 (5895) used greatest stack depth: 20488 bytes left [ 92.003696][ T5912] delete_channel: no stack [ 92.066502][ T789] cfg80211: failed to load regulatory.db [ 93.612588][ T5902] netlink: 'syz.2.18': attribute type 33 has an invalid length. [ 93.627050][ T5902] netlink: 128 bytes leftover after parsing attributes in process `syz.2.18'. [ 93.676427][ T5924] netlink: 'syz.3.23': attribute type 27 has an invalid length. [ 94.135468][ T5935] netlink: 156 bytes leftover after parsing attributes in process `syz.3.26'. [ 94.344117][ T5939] netlink: 'syz.0.34': attribute type 27 has an invalid length. [ 95.207163][ T5949] netlink: 'syz.0.30': attribute type 9 has an invalid length. [ 95.215046][ T5957] netlink: 'syz.1.33': attribute type 33 has an invalid length. [ 95.215111][ T5957] netlink: 128 bytes leftover after parsing attributes in process `syz.1.33'. [ 95.280583][ T5949] netlink: 399 bytes leftover after parsing attributes in process `syz.0.30'. [ 95.725999][ T5950] delete_channel: no stack [ 96.260732][ T5962] syzkaller0: entered promiscuous mode [ 96.287254][ T5962] syzkaller0: entered allmulticast mode [ 96.824721][ T5975] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.42'. [ 96.854850][ T5975] openvswitch: netlink: Key type 4112 is out of range max 32 [ 101.053261][ T5979] netlink: 'syz.2.40': attribute type 27 has an invalid length. [ 101.158094][ T5985] netlink: 'syz.3.45': attribute type 33 has an invalid length. [ 101.185316][ T5985] netlink: 128 bytes leftover after parsing attributes in process `syz.3.45'. [ 101.211704][ T5989] netlink: 156 bytes leftover after parsing attributes in process `syz.2.44'. [ 101.891119][ T6002] netlink: 'syz.0.52': attribute type 27 has an invalid length. [ 102.034004][ T6000] netlink: 'syz.3.48': attribute type 9 has an invalid length. [ 102.078851][ T6000] netlink: 399 bytes leftover after parsing attributes in process `syz.3.48'. [ 102.149039][ T5991] delete_channel: no stack [ 103.464005][ T6018] netlink: 'syz.0.59': attribute type 27 has an invalid length. [ 103.903249][ T6027] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.54'. [ 103.954586][ T6027] openvswitch: netlink: Key type 4112 is out of range max 32 [ 105.173322][ T6029] syzkaller0: entered promiscuous mode [ 105.207785][ T6029] syzkaller0: entered allmulticast mode [ 107.864951][ T6037] delete_channel: no stack [ 108.811177][ T6036] netlink: 'syz.2.57': attribute type 33 has an invalid length. [ 108.819397][ T6036] netlink: 128 bytes leftover after parsing attributes in process `syz.2.57'. [ 108.833360][ T6043] netlink: 156 bytes leftover after parsing attributes in process `syz.1.61'. [ 110.203956][ T6064] netlink: 'syz.1.64': attribute type 27 has an invalid length. [ 111.479625][ T6079] netlink: 'syz.2.71': attribute type 33 has an invalid length. [ 111.541947][ T6079] netlink: 128 bytes leftover after parsing attributes in process `syz.2.71'. [ 111.717623][ T6071] delete_channel: no stack [ 112.427882][ T6090] netlink: 'syz.1.73': attribute type 39 has an invalid length. [ 114.010728][ T6109] netlink: 'syz.0.78': attribute type 27 has an invalid length. [ 114.037442][ T6090] syz.1.73 (6090) used greatest stack depth: 20248 bytes left [ 114.254881][ T6116] netlink: 'syz.2.81': attribute type 33 has an invalid length. [ 114.308550][ T6116] netlink: 128 bytes leftover after parsing attributes in process `syz.2.81'. [ 117.422796][ T6118] delete_channel: no stack [ 119.087442][ T6160] netlink: 'syz.0.88': attribute type 39 has an invalid length. [ 120.736104][ T6163] netlink: 'syz.2.91': attribute type 27 has an invalid length. [ 120.826949][ T6171] netlink: 'syz.0.92': attribute type 33 has an invalid length. [ 120.835004][ T6171] netlink: 128 bytes leftover after parsing attributes in process `syz.0.92'. [ 121.696951][ T6172] delete_channel: no stack [ 122.108100][ T6201] netlink: 'syz.3.102': attribute type 39 has an invalid length. [ 122.468056][ T6203] FAULT_INJECTION: forcing a failure. [ 122.468056][ T6203] name failslab, interval 1, probability 0, space 0, times 1 [ 122.503173][ T6203] CPU: 0 PID: 6203 Comm: syz.0.103 Not tainted syzkaller #0 [ 122.510536][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.520628][ T6203] Call Trace: [ 122.523941][ T6203] [ 122.526907][ T6203] dump_stack_lvl+0x18c/0x250 [ 122.531638][ T6203] ? show_regs_print_info+0x20/0x20 [ 122.536889][ T6203] ? load_image+0x420/0x420 [ 122.541445][ T6203] ? __might_sleep+0xe0/0xe0 [ 122.546088][ T6203] ? __lock_acquire+0x7d80/0x7d80 [ 122.551162][ T6203] should_fail_ex+0x394/0x4c0 [ 122.555894][ T6203] should_failslab+0x9/0x20 [ 122.560462][ T6203] slab_pre_alloc_hook+0x59/0x300 [ 122.565547][ T6203] kmem_cache_alloc_lru+0x4d/0x2b0 [ 122.570703][ T6203] ? __d_alloc+0x31/0x710 [ 122.575085][ T6203] __d_alloc+0x31/0x710 [ 122.579288][ T6203] d_alloc_pseudo+0x1d/0x70 [ 122.583827][ T6203] alloc_file_pseudo+0xe4/0x210 [ 122.588718][ T6203] ? fput+0x1a0/0x1a0 [ 122.592735][ T6203] ? alloc_fd+0x590/0x640 [ 122.597117][ T6203] anon_inode_getfd+0xca/0x1c0 [ 122.601935][ T6203] map_create+0xf13/0x12f0 [ 122.606412][ T6203] __sys_bpf+0x651/0x890 [ 122.610687][ T6203] ? bpf_link_show_fdinfo+0x390/0x390 [ 122.616097][ T6203] ? lock_chain_count+0x20/0x20 [ 122.620977][ T6203] __x64_sys_bpf+0x7c/0x90 [ 122.625411][ T6203] do_syscall_64+0x55/0xb0 [ 122.629840][ T6203] ? clear_bhb_loop+0x40/0x90 [ 122.634531][ T6203] ? clear_bhb_loop+0x40/0x90 [ 122.639217][ T6203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.645118][ T6203] RIP: 0033:0x7fc53559e019 [ 122.649551][ T6203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.669277][ T6203] RSP: 002b:00007fc53651d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.677712][ T6203] RAX: ffffffffffffffda RBX: 00007fc535825fa0 RCX: 00007fc53559e019 [ 122.685704][ T6203] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 0000000000000000 [ 122.693692][ T6203] RBP: 00007fc53651d090 R08: 0000000000000000 R09: 0000000000000000 [ 122.701678][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.709658][ T6203] R13: 00007fc535826038 R14: 00007fc535825fa0 R15: 00007ffc175d5a08 [ 122.717659][ T6203] [ 122.921976][ T6209] netlink: 'syz.0.106': attribute type 33 has an invalid length. [ 122.943936][ T6209] netlink: 128 bytes leftover after parsing attributes in process `syz.0.106'. [ 123.200555][ T6215] FAULT_INJECTION: forcing a failure. [ 123.200555][ T6215] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.239120][ T6215] CPU: 0 PID: 6215 Comm: syz.0.107 Not tainted syzkaller #0 [ 123.246501][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.256604][ T6215] Call Trace: [ 123.259928][ T6215] [ 123.262899][ T6215] dump_stack_lvl+0x18c/0x250 [ 123.267628][ T6215] ? show_regs_print_info+0x20/0x20 [ 123.272873][ T6215] ? load_image+0x420/0x420 [ 123.277431][ T6215] ? __lock_acquire+0x7d80/0x7d80 [ 123.282495][ T6215] ? snprintf+0xe9/0x140 [ 123.286783][ T6215] should_fail_ex+0x394/0x4c0 [ 123.291498][ T6215] _copy_to_user+0x2f/0xa0 [ 123.295957][ T6215] simple_read_from_buffer+0xe7/0x150 [ 123.301376][ T6215] proc_fail_nth_read+0x1e8/0x260 [ 123.306452][ T6215] ? proc_fault_inject_write+0x360/0x360 [ 123.312133][ T6215] ? fsnotify_perm+0x271/0x5e0 [ 123.316940][ T6215] ? proc_fault_inject_write+0x360/0x360 [ 123.322616][ T6215] vfs_read+0x298/0x990 [ 123.326822][ T6215] ? kernel_read+0x1e0/0x1e0 [ 123.331458][ T6215] ? __fget_files+0x28/0x460 [ 123.336099][ T6215] ? __fget_files+0x3fc/0x460 [ 123.340828][ T6215] ? __fdget_pos+0x2a3/0x330 [ 123.345452][ T6215] ? ksys_read+0x74/0x260 [ 123.349837][ T6215] ksys_read+0x151/0x260 [ 123.354098][ T6215] ? vfs_write+0x9a0/0x9a0 [ 123.358557][ T6215] ? lockdep_hardirqs_on+0x98/0x150 [ 123.363772][ T6215] do_syscall_64+0x55/0xb0 [ 123.368201][ T6215] ? clear_bhb_loop+0x40/0x90 [ 123.372887][ T6215] ? clear_bhb_loop+0x40/0x90 [ 123.377571][ T6215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.383477][ T6215] RIP: 0033:0x7fc53555e84e [ 123.388344][ T6215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 123.407965][ T6215] RSP: 002b:00007fc53651cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.416390][ T6215] RAX: ffffffffffffffda RBX: 00007fc53651d6c0 RCX: 00007fc53555e84e [ 123.424372][ T6215] RDX: 000000000000000f RSI: 00007fc53651d0a0 RDI: 0000000000000004 [ 123.432359][ T6215] RBP: 00007fc53651d090 R08: 0000000000000000 R09: 0000000000000000 [ 123.440358][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.448341][ T6215] R13: 00007fc535826038 R14: 00007fc535825fa0 R15: 00007ffc175d5a08 [ 123.456334][ T6215] [ 124.861398][ T6236] netlink: 'syz.0.115': attribute type 33 has an invalid length. [ 124.870994][ T6224] delete_channel: no stack [ 124.878178][ T6236] netlink: 128 bytes leftover after parsing attributes in process `syz.0.115'. [ 125.853155][ T6259] FAULT_INJECTION: forcing a failure. [ 125.853155][ T6259] name failslab, interval 1, probability 0, space 0, times 0 [ 125.881150][ T6259] CPU: 1 PID: 6259 Comm: syz.0.122 Not tainted syzkaller #0 [ 125.888539][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.898675][ T6259] Call Trace: [ 125.902017][ T6259] [ 125.905008][ T6259] dump_stack_lvl+0x18c/0x250 [ 125.909768][ T6259] ? show_regs_print_info+0x20/0x20 [ 125.915027][ T6259] ? load_image+0x420/0x420 [ 125.919594][ T6259] ? __might_sleep+0xe0/0xe0 [ 125.924223][ T6259] ? __lock_acquire+0x7d80/0x7d80 [ 125.929298][ T6259] should_fail_ex+0x394/0x4c0 [ 125.934028][ T6259] should_failslab+0x9/0x20 [ 125.938568][ T6259] slab_pre_alloc_hook+0x59/0x300 [ 125.943641][ T6259] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 125.949407][ T6259] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 125.955159][ T6259] __kmem_cache_alloc_node+0x53/0x250 [ 125.960583][ T6259] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 125.966345][ T6259] __kmalloc+0xa7/0x240 [ 125.970549][ T6259] tomoyo_realpath_from_path+0xe6/0x5c0 [ 125.976147][ T6259] ? tomoyo_domain+0xd6/0x120 [ 125.980885][ T6259] tomoyo_path_number_perm+0x248/0x5e0 [ 125.986380][ T6259] ? tomoyo_path_number_perm+0x217/0x5e0 [ 125.992050][ T6259] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 125.997557][ T6259] ? ksys_write+0x1d2/0x260 [ 126.002203][ T6259] ? __fget_files+0x28/0x460 [ 126.006869][ T6259] security_file_ioctl+0x70/0xa0 [ 126.011853][ T6259] __se_sys_ioctl+0x48/0x170 [ 126.016484][ T6259] do_syscall_64+0x55/0xb0 [ 126.020931][ T6259] ? clear_bhb_loop+0x40/0x90 [ 126.025640][ T6259] ? clear_bhb_loop+0x40/0x90 [ 126.030374][ T6259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.036298][ T6259] RIP: 0033:0x7fc53559e019 [ 126.040758][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.060394][ T6259] RSP: 002b:00007fc53651d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.068847][ T6259] RAX: ffffffffffffffda RBX: 00007fc535825fa0 RCX: 00007fc53559e019 [ 126.076853][ T6259] RDX: 0000200000000080 RSI: 0000000000008982 RDI: 0000000000000005 [ 126.084853][ T6259] RBP: 00007fc53651d090 R08: 0000000000000000 R09: 0000000000000000 [ 126.092868][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.100869][ T6259] R13: 00007fc535826038 R14: 00007fc535825fa0 R15: 00007ffc175d5a08 [ 126.108914][ T6259] [ 126.118048][ T6259] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.303052][ T6261] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.123'. [ 126.525720][ T6268] netlink: 'syz.0.126': attribute type 33 has an invalid length. [ 126.568351][ T6268] netlink: 128 bytes leftover after parsing attributes in process `syz.0.126'. [ 127.236015][ T6264] delete_channel: no stack [ 128.398420][ T6296] netlink: 'syz.0.135': attribute type 33 has an invalid length. [ 128.406581][ T6296] netlink: 128 bytes leftover after parsing attributes in process `syz.0.135'. [ 129.586019][ T6302] delete_channel: no stack [ 129.992457][ T6321] FAULT_INJECTION: forcing a failure. [ 129.992457][ T6321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.036529][ T6321] CPU: 0 PID: 6321 Comm: syz.3.142 Not tainted syzkaller #0 [ 130.043900][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.054020][ T6321] Call Trace: [ 130.057337][ T6321] [ 130.060314][ T6321] dump_stack_lvl+0x18c/0x250 [ 130.065039][ T6321] ? show_regs_print_info+0x20/0x20 [ 130.070281][ T6321] ? load_image+0x420/0x420 [ 130.073271][ T6324] netlink: 'syz.2.144': attribute type 33 has an invalid length. [ 130.074812][ T6321] ? __lock_acquire+0x7d80/0x7d80 [ 130.074860][ T6321] ? snprintf+0xe9/0x140 [ 130.083219][ T6324] netlink: 128 bytes leftover after parsing attributes in process `syz.2.144'. [ 130.087604][ T6321] should_fail_ex+0x394/0x4c0 [ 130.087647][ T6321] _copy_to_user+0x2f/0xa0 [ 130.087671][ T6321] simple_read_from_buffer+0xe7/0x150 [ 130.115327][ T6321] proc_fail_nth_read+0x1e8/0x260 [ 130.120390][ T6321] ? proc_fault_inject_write+0x360/0x360 [ 130.126044][ T6321] ? fsnotify_perm+0x271/0x5e0 [ 130.130823][ T6321] ? proc_fault_inject_write+0x360/0x360 [ 130.136469][ T6321] vfs_read+0x298/0x990 [ 130.140658][ T6321] ? kernel_read+0x1e0/0x1e0 [ 130.145263][ T6321] ? __fget_files+0x28/0x460 [ 130.149868][ T6321] ? __fget_files+0x3fc/0x460 [ 130.154565][ T6321] ? __fdget_pos+0x2a3/0x330 [ 130.159166][ T6321] ? ksys_read+0x74/0x260 [ 130.163517][ T6321] ksys_read+0x151/0x260 [ 130.167784][ T6321] ? vfs_write+0x9a0/0x9a0 [ 130.172215][ T6321] ? lockdep_hardirqs_on+0x98/0x150 [ 130.177440][ T6321] do_syscall_64+0x55/0xb0 [ 130.181868][ T6321] ? clear_bhb_loop+0x40/0x90 [ 130.186554][ T6321] ? clear_bhb_loop+0x40/0x90 [ 130.191242][ T6321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.197146][ T6321] RIP: 0033:0x7f9a73f5e84e [ 130.201572][ T6321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.221208][ T6321] RSP: 002b:00007f9a74db2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.229653][ T6321] RAX: ffffffffffffffda RBX: 00007f9a74db36c0 RCX: 00007f9a73f5e84e [ 130.237648][ T6321] RDX: 000000000000000f RSI: 00007f9a74db30a0 RDI: 0000000000000006 [ 130.245631][ T6321] RBP: 00007f9a74db3090 R08: 0000000000000000 R09: 0000000000000000 [ 130.253613][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.261596][ T6321] R13: 00007f9a74226038 R14: 00007f9a74225fa0 R15: 00007ffd2668b8b8 [ 130.269598][ T6321] [ 130.486906][ T6328] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 130.494962][ T6328] netlink: 'syz.3.145': attribute type 4 has an invalid length. [ 130.503293][ T6328] netlink: 116 bytes leftover after parsing attributes in process `syz.3.145'. [ 130.514434][ T6328] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 130.546338][ T6328] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 130.570546][ T6328] netlink: 55 bytes leftover after parsing attributes in process `syz.3.145'. [ 131.698661][ T6334] delete_channel: no stack [ 131.845320][ T6349] FAULT_INJECTION: forcing a failure. [ 131.845320][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 131.874257][ T6349] CPU: 1 PID: 6349 Comm: syz.2.153 Not tainted syzkaller #0 [ 131.881618][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.891708][ T6349] Call Trace: [ 131.895012][ T6349] [ 131.897970][ T6349] dump_stack_lvl+0x18c/0x250 [ 131.902692][ T6349] ? show_regs_print_info+0x20/0x20 [ 131.907922][ T6349] ? load_image+0x420/0x420 [ 131.912448][ T6349] ? __might_sleep+0xe0/0xe0 [ 131.917059][ T6349] ? __lock_acquire+0x7d80/0x7d80 [ 131.922136][ T6349] should_fail_ex+0x394/0x4c0 [ 131.926836][ T6349] should_failslab+0x9/0x20 [ 131.931355][ T6349] slab_pre_alloc_hook+0x59/0x300 [ 131.936397][ T6349] ? __lock_acquire+0x7d80/0x7d80 [ 131.941434][ T6349] ? kvmalloc_node+0x70/0x180 [ 131.946130][ T6349] ? kvmalloc_node+0x70/0x180 [ 131.950819][ T6349] __kmem_cache_alloc_node+0x53/0x250 [ 131.956205][ T6349] ? __schedule_delayed_monitor_work+0x200/0x200 [ 131.962549][ T6349] ? kvmalloc_node+0x70/0x180 [ 131.967246][ T6349] __kmalloc_node+0xa6/0x240 [ 131.971857][ T6349] kvmalloc_node+0x70/0x180 [ 131.976381][ T6349] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 131.981777][ T6349] ? 0xffffffffa0004740 [ 131.985940][ T6349] ? 0xffffffffa0004740 [ 131.990103][ T6349] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 131.996030][ T6349] ? xdp_convert_md_to_buff+0x330/0x330 [ 132.001668][ T6349] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 132.007941][ T6349] ? _copy_from_user+0xa5/0xe0 [ 132.012731][ T6349] ? bpf_test_init+0x119/0x140 [ 132.017516][ T6349] ? xdp_convert_md_to_buff+0x5b/0x330 [ 132.022996][ T6349] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 132.028390][ T6349] ? __lock_acquire+0x7d80/0x7d80 [ 132.033448][ T6349] ? dev_put+0x80/0x80 [ 132.037540][ T6349] ? dev_put+0x80/0x80 [ 132.041644][ T6349] bpf_prog_test_run+0x31f/0x390 [ 132.046616][ T6349] __sys_bpf+0x49d/0x890 [ 132.050872][ T6349] ? bpf_link_show_fdinfo+0x390/0x390 [ 132.056276][ T6349] ? lock_chain_count+0x20/0x20 [ 132.061147][ T6349] __x64_sys_bpf+0x7c/0x90 [ 132.065574][ T6349] do_syscall_64+0x55/0xb0 [ 132.070004][ T6349] ? clear_bhb_loop+0x40/0x90 [ 132.074691][ T6349] ? clear_bhb_loop+0x40/0x90 [ 132.079406][ T6349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.085316][ T6349] RIP: 0033:0x7feb6db9e019 [ 132.089742][ T6349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.109366][ T6349] RSP: 002b:00007feb6e9dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.117796][ T6349] RAX: ffffffffffffffda RBX: 00007feb6de25fa0 RCX: 00007feb6db9e019 [ 132.125776][ T6349] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 132.133756][ T6349] RBP: 00007feb6e9dc090 R08: 0000000000000000 R09: 0000000000000000 [ 132.141734][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.149714][ T6349] R13: 00007feb6de26038 R14: 00007feb6de25fa0 R15: 00007ffc89e5b4c8 [ 132.157711][ T6349] [ 132.173274][ T6352] netlink: 'syz.1.154': attribute type 33 has an invalid length. [ 132.181332][ T6352] netlink: 128 bytes leftover after parsing attributes in process `syz.1.154'. [ 133.025285][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.036185][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.232619][ T6383] netlink: 'syz.3.164': attribute type 33 has an invalid length. [ 134.291819][ T6383] netlink: 128 bytes leftover after parsing attributes in process `syz.3.164'. [ 134.350508][ T6387] netlink: 'syz.0.165': attribute type 33 has an invalid length. [ 134.367500][ T6387] netlink: 128 bytes leftover after parsing attributes in process `syz.0.165'. [ 135.025790][ T6378] delete_channel: no stack [ 136.901281][ T6418] netlink: 'syz.1.174': attribute type 33 has an invalid length. [ 136.937858][ T6418] netlink: 128 bytes leftover after parsing attributes in process `syz.1.174'. [ 138.333652][ T6434] netlink: 'syz.0.176': attribute type 27 has an invalid length. [ 138.386773][ T6423] delete_channel: no stack [ 141.003066][ T6462] netlink: 'syz.2.185': attribute type 27 has an invalid length. [ 142.056332][ T6463] delete_channel: no stack [ 142.638883][ T6480] netlink: 'syz.2.192': attribute type 27 has an invalid length. [ 143.174020][ T6485] netlink: 'syz.2.195': attribute type 33 has an invalid length. [ 143.204644][ T6485] netlink: 128 bytes leftover after parsing attributes in process `syz.2.195'. [ 143.224033][ T6487] netlink: 'syz.0.194': attribute type 33 has an invalid length. [ 143.244234][ T6487] netlink: 128 bytes leftover after parsing attributes in process `syz.0.194'. [ 143.355567][ T6490] netlink: 'syz.1.196': attribute type 33 has an invalid length. [ 143.363619][ T6490] netlink: 128 bytes leftover after parsing attributes in process `syz.1.196'. [ 144.684406][ T6513] netlink: 'syz.0.204': attribute type 33 has an invalid length. [ 144.695160][ T6513] netlink: 128 bytes leftover after parsing attributes in process `syz.0.204'. [ 145.014434][ T6518] netlink: 'syz.2.206': attribute type 33 has an invalid length. [ 145.043729][ T6518] netlink: 128 bytes leftover after parsing attributes in process `syz.2.206'. [ 145.121810][ T6503] delete_channel: no stack [ 147.873188][ T6551] netlink: 'syz.1.216': attribute type 33 has an invalid length. [ 147.885496][ T6551] netlink: 128 bytes leftover after parsing attributes in process `syz.1.216'. [ 149.142739][ T6542] delete_channel: no stack [ 153.273217][ T6583] FAULT_INJECTION: forcing a failure. [ 153.273217][ T6583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.337233][ T6583] CPU: 0 PID: 6583 Comm: syz.2.224 Not tainted syzkaller #0 [ 153.344631][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.354742][ T6583] Call Trace: [ 153.358075][ T6583] [ 153.361066][ T6583] dump_stack_lvl+0x18c/0x250 [ 153.365820][ T6583] ? show_regs_print_info+0x20/0x20 [ 153.371084][ T6583] ? load_image+0x420/0x420 [ 153.375667][ T6583] ? __lock_acquire+0x7d80/0x7d80 [ 153.380760][ T6583] ? snprintf+0xe9/0x140 [ 153.385086][ T6583] should_fail_ex+0x394/0x4c0 [ 153.389849][ T6583] _copy_to_user+0x2f/0xa0 [ 153.394338][ T6583] simple_read_from_buffer+0xe7/0x150 [ 153.399793][ T6583] proc_fail_nth_read+0x1e8/0x260 [ 153.404899][ T6583] ? proc_fault_inject_write+0x360/0x360 [ 153.410621][ T6583] ? fsnotify_perm+0x271/0x5e0 [ 153.415455][ T6583] ? proc_fault_inject_write+0x360/0x360 [ 153.421166][ T6583] vfs_read+0x298/0x990 [ 153.425411][ T6583] ? kernel_read+0x1e0/0x1e0 [ 153.430074][ T6583] ? __fget_files+0x28/0x460 [ 153.434740][ T6583] ? __fget_files+0x3fc/0x460 [ 153.439519][ T6583] ? __fdget_pos+0x2a3/0x330 [ 153.444169][ T6583] ? ksys_read+0x74/0x260 [ 153.448576][ T6583] ksys_read+0x151/0x260 [ 153.452900][ T6583] ? vfs_write+0x9a0/0x9a0 [ 153.457399][ T6583] ? lockdep_hardirqs_on+0x98/0x150 [ 153.462678][ T6583] do_syscall_64+0x55/0xb0 [ 153.467153][ T6583] ? clear_bhb_loop+0x40/0x90 [ 153.471888][ T6583] ? clear_bhb_loop+0x40/0x90 [ 153.476639][ T6583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.482590][ T6583] RIP: 0033:0x7feb6db5e84e [ 153.487068][ T6583] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.506732][ T6583] RSP: 002b:00007feb6e9dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.515213][ T6583] RAX: ffffffffffffffda RBX: 00007feb6e9dc6c0 RCX: 00007feb6db5e84e [ 153.523236][ T6583] RDX: 000000000000000f RSI: 00007feb6e9dc0a0 RDI: 0000000000000004 [ 153.531263][ T6583] RBP: 00007feb6e9dc090 R08: 0000000000000000 R09: 0000000000000000 [ 153.539297][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.547337][ T6583] R13: 00007feb6de26038 R14: 00007feb6de25fa0 R15: 00007ffc89e5b4c8 [ 153.555429][ T6583] [ 153.800650][ T6585] netlink: 'syz.3.225': attribute type 33 has an invalid length. [ 153.818015][ T6585] netlink: 128 bytes leftover after parsing attributes in process `syz.3.225'. [ 154.420867][ T6600] netlink: 128 bytes leftover after parsing attributes in process `syz.3.231'. [ 154.465086][ T6600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.563135][ T6600] delete_channel: no stack [ 154.569102][ T6600] delete_channel: no stack [ 154.973790][ T6586] delete_channel: no stack [ 155.836714][ T6617] netlink: 'syz.3.235': attribute type 33 has an invalid length. [ 155.845961][ T6617] netlink: 128 bytes leftover after parsing attributes in process `syz.3.235'. [ 156.032149][ T6619] netlink: 'syz.0.236': attribute type 33 has an invalid length. [ 156.051356][ T6619] netlink: 128 bytes leftover after parsing attributes in process `syz.0.236'. [ 156.531853][ T6623] netlink: 'syz.0.238': attribute type 25 has an invalid length. [ 156.552531][ T6623] netlink: 'syz.0.238': attribute type 9 has an invalid length. [ 156.567368][ T6623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.238'. [ 156.812195][ T6634] netlink: 128 bytes leftover after parsing attributes in process `syz.1.242'. [ 156.865196][ T6634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.151907][ T6634] delete_channel: no stack [ 157.174636][ T6634] delete_channel: no stack [ 157.349396][ T6628] delete_channel: no stack [ 158.253610][ T6648] sock: sock_set_timeout: `syz.2.245' (pid 6648) tries to set negative timeout [ 158.708312][ T6639] delete_channel: no stack [ 159.000210][ T6652] netlink: 'syz.1.246': attribute type 33 has an invalid length. [ 159.019925][ T6652] netlink: 128 bytes leftover after parsing attributes in process `syz.1.246'. [ 160.575240][ T6671] netlink: 128 bytes leftover after parsing attributes in process `syz.2.253'. [ 160.680311][ T6671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.289448][ T6671] delete_channel: no stack [ 161.294152][ T6671] delete_channel: no stack [ 161.864490][ T6691] netlink: 'syz.1.258': attribute type 33 has an invalid length. [ 161.881160][ T6691] netlink: 128 bytes leftover after parsing attributes in process `syz.1.258'. [ 161.979185][ T6682] delete_channel: no stack [ 162.855410][ T6702] netlink: 'syz.1.263': attribute type 39 has an invalid length. [ 164.842065][ T6727] netlink: 'syz.0.269': attribute type 33 has an invalid length. [ 164.850193][ T6727] netlink: 128 bytes leftover after parsing attributes in process `syz.0.269'. [ 164.861885][ T6722] sit0: entered allmulticast mode [ 165.393288][ T6731] netlink: 'syz.2.270': attribute type 25 has an invalid length. [ 165.407805][ T6731] netlink: 'syz.2.270': attribute type 9 has an invalid length. [ 165.429529][ T6731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.270'. [ 165.709171][ T6723] delete_channel: no stack [ 168.078982][ T6758] netlink: 'syz.3.278': attribute type 46 has an invalid length. [ 168.098097][ T6758] netlink: 'syz.3.278': attribute type 46 has an invalid length. [ 168.482074][ T6763] netlink: 'syz.0.279': attribute type 33 has an invalid length. [ 168.521571][ T6763] netlink: 128 bytes leftover after parsing attributes in process `syz.0.279'. [ 169.140451][ T6777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.285'. [ 169.658955][ T6767] delete_channel: no stack [ 170.456222][ T6793] netlink: 'syz.3.289': attribute type 21 has an invalid length. [ 170.467171][ T6793] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 170.474887][ T6793] netlink: 15726 bytes leftover after parsing attributes in process `syz.3.289'. [ 170.488481][ T6793] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.289'. [ 171.824101][ T6803] netlink: 'syz.3.293': attribute type 33 has an invalid length. [ 171.838251][ T6803] netlink: 128 bytes leftover after parsing attributes in process `syz.3.293'. [ 172.266173][ T6807] FAULT_INJECTION: forcing a failure. [ 172.266173][ T6807] name failslab, interval 1, probability 0, space 0, times 0 [ 172.294058][ T6807] CPU: 0 PID: 6807 Comm: syz.0.294 Not tainted syzkaller #0 [ 172.301409][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.311503][ T6807] Call Trace: [ 172.314808][ T6807] [ 172.317764][ T6807] dump_stack_lvl+0x18c/0x250 [ 172.322523][ T6807] ? show_regs_print_info+0x20/0x20 [ 172.327757][ T6807] ? load_image+0x420/0x420 [ 172.332336][ T6807] ? __might_sleep+0xe0/0xe0 [ 172.336961][ T6807] ? __lock_acquire+0x7d80/0x7d80 [ 172.342035][ T6807] should_fail_ex+0x394/0x4c0 [ 172.346755][ T6807] should_failslab+0x9/0x20 [ 172.351291][ T6807] slab_pre_alloc_hook+0x59/0x300 [ 172.356357][ T6807] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 172.362113][ T6807] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 172.367879][ T6807] __kmem_cache_alloc_node+0x53/0x250 [ 172.373300][ T6807] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 172.379059][ T6807] __kmalloc+0xa7/0x240 [ 172.383257][ T6807] tomoyo_realpath_from_path+0xe6/0x5c0 [ 172.388842][ T6807] ? tomoyo_domain+0xd6/0x120 [ 172.393563][ T6807] tomoyo_path_number_perm+0x248/0x5e0 [ 172.399061][ T6807] ? tomoyo_path_number_perm+0x217/0x5e0 [ 172.404733][ T6807] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 172.410244][ T6807] ? ksys_write+0x1d2/0x260 [ 172.415008][ T6807] ? __fget_files+0x28/0x460 [ 172.419648][ T6807] security_file_ioctl+0x70/0xa0 [ 172.424644][ T6807] __se_sys_ioctl+0x48/0x170 [ 172.429276][ T6807] do_syscall_64+0x55/0xb0 [ 172.433723][ T6807] ? clear_bhb_loop+0x40/0x90 [ 172.438434][ T6807] ? clear_bhb_loop+0x40/0x90 [ 172.443148][ T6807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.449073][ T6807] RIP: 0033:0x7fc53559e019 [ 172.453525][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.473163][ T6807] RSP: 002b:00007fc5364fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.481610][ T6807] RAX: ffffffffffffffda RBX: 00007fc535826090 RCX: 00007fc53559e019 [ 172.489610][ T6807] RDX: 0000200000000180 RSI: 0000000040047459 RDI: 0000000000000005 [ 172.497607][ T6807] RBP: 00007fc5364fc090 R08: 0000000000000000 R09: 0000000000000000 [ 172.505603][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.513720][ T6807] R13: 00007fc535826128 R14: 00007fc535826090 R15: 00007ffc175d5a08 [ 172.521767][ T6807] [ 172.574925][ T6807] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.588564][ T6811] delete_channel: no stack [ 175.945487][ T6844] netlink: 'syz.3.306': attribute type 33 has an invalid length. [ 175.963877][ T6844] netlink: 128 bytes leftover after parsing attributes in process `syz.3.306'. [ 175.979191][ T6845] netlink: 'syz.0.305': attribute type 10 has an invalid length. [ 176.383621][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.434500][ T6845] team0: Port device bond0 added [ 176.717317][ T6855] netlink: 'syz.3.309': attribute type 8 has an invalid length. [ 176.733654][ T6855] netlink: 156 bytes leftover after parsing attributes in process `syz.3.309'. [ 177.286403][ T6868] netlink: 'syz.1.313': attribute type 21 has an invalid length. [ 177.321132][ T6868] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 177.347122][ T6868] netlink: 15726 bytes leftover after parsing attributes in process `syz.1.313'. [ 177.368952][ T6870] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.313'. [ 177.611438][ T6857] delete_channel: no stack [ 178.007961][ T6882] netlink: 'syz.1.317': attribute type 33 has an invalid length. [ 178.015775][ T6882] netlink: 128 bytes leftover after parsing attributes in process `syz.1.317'. [ 178.366101][ T6892] syz.1.320 (6892) used obsolete PPPIOCDETACH ioctl [ 179.631542][ T6898] netlink: 'syz.0.318': attribute type 10 has an invalid length. [ 179.727161][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'. [ 179.840717][ T6898] batman_adv: batadv0: Adding interface: virt_wifi0 [ 179.912833][ T6898] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.127489][ T6898] batman_adv: batadv0: Interface activated: virt_wifi0 [ 180.600436][ T6909] netlink: 'syz.1.322': attribute type 10 has an invalid length. [ 180.756245][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.780188][ T6909] team0: Port device bond0 added [ 182.165773][ T6927] netlink: 'syz.2.327': attribute type 21 has an invalid length. [ 182.233964][ T6920] delete_channel: no stack [ 182.258325][ T6927] netlink: 'syz.2.327': attribute type 1 has an invalid length. [ 182.266046][ T6927] netlink: 15726 bytes leftover after parsing attributes in process `syz.2.327'. [ 182.389563][ T6932] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.327'. [ 182.702484][ T6936] netlink: 'syz.0.328': attribute type 33 has an invalid length. [ 182.754452][ T6936] netlink: 128 bytes leftover after parsing attributes in process `syz.0.328'. [ 183.017786][ T6940] netlink: 'syz.2.330': attribute type 46 has an invalid length. [ 183.046064][ T6940] netlink: 55 bytes leftover after parsing attributes in process `syz.2.330'. [ 183.344908][ T6940] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.330'. [ 183.398698][ T6941] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.330'. [ 183.431634][ T6940] netlink: zone id is out of range [ 186.148081][ T6963] delete_channel: no stack [ 186.651315][ T6980] netlink: 'syz.0.342': attribute type 33 has an invalid length. [ 186.667194][ T6980] netlink: 128 bytes leftover after parsing attributes in process `syz.0.342'. [ 186.824719][ T6982] netlink: 'syz.3.345': attribute type 46 has an invalid length. [ 186.857078][ T6982] netlink: 55 bytes leftover after parsing attributes in process `syz.3.345'. [ 186.961101][ T6982] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.345'. [ 186.984085][ T6982] netlink: zone id is out of range [ 186.993940][ T6984] sctp: [Deprecated]: syz.1.344 (pid 6984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.993940][ T6984] Use struct sctp_sack_info instead [ 187.035497][ T6982] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.345'. [ 187.067216][ T6984] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 187.645891][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.706295][ T6995] netlink: 'syz.0.355': attribute type 33 has an invalid length. [ 187.723284][ T6995] netlink: 128 bytes leftover after parsing attributes in process `syz.0.355'. [ 189.187932][ T7009] delete_channel: no stack [ 189.697421][ T7027] netlink: 'syz.1.358': attribute type 46 has an invalid length. [ 189.754558][ T7027] netlink: 55 bytes leftover after parsing attributes in process `syz.1.358'. [ 189.796525][ T7032] netlink: 'syz.0.359': attribute type 33 has an invalid length. [ 189.816681][ T7032] netlink: 128 bytes leftover after parsing attributes in process `syz.0.359'. [ 189.885345][ T7027] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.358'. [ 189.955650][ T7027] netlink: zone id is out of range [ 190.108634][ T7027] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.358'. [ 191.625180][ T7045] delete_channel: no stack [ 191.832461][ T7062] FAULT_INJECTION: forcing a failure. [ 191.832461][ T7062] name failslab, interval 1, probability 0, space 0, times 0 [ 191.845857][ T7062] CPU: 1 PID: 7062 Comm: syz.2.367 Not tainted syzkaller #0 [ 191.853222][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.863337][ T7062] Call Trace: [ 191.866657][ T7062] [ 191.869622][ T7062] dump_stack_lvl+0x18c/0x250 [ 191.874350][ T7062] ? show_regs_print_info+0x20/0x20 [ 191.879598][ T7062] ? load_image+0x420/0x420 [ 191.884151][ T7062] ? __might_sleep+0xe0/0xe0 [ 191.888791][ T7062] ? __lock_acquire+0x7d80/0x7d80 [ 191.893881][ T7062] should_fail_ex+0x394/0x4c0 [ 191.898612][ T7062] should_failslab+0x9/0x20 [ 191.903162][ T7062] slab_pre_alloc_hook+0x59/0x300 [ 191.908242][ T7062] ? __lock_acquire+0x7d80/0x7d80 [ 191.913339][ T7062] ? kvmalloc_node+0x70/0x180 [ 191.918068][ T7062] ? kvmalloc_node+0x70/0x180 [ 191.922791][ T7062] __kmem_cache_alloc_node+0x53/0x250 [ 191.928207][ T7062] ? __schedule_delayed_monitor_work+0x200/0x200 [ 191.934768][ T7062] ? kvmalloc_node+0x70/0x180 [ 191.939488][ T7062] __kmalloc_node+0xa6/0x240 [ 191.944130][ T7062] kvmalloc_node+0x70/0x180 [ 191.948681][ T7062] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 191.954103][ T7062] ? 0xffffffffa0004740 [ 191.958299][ T7062] ? 0xffffffffa0004740 [ 191.962481][ T7062] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 191.968423][ T7062] ? xdp_convert_md_to_buff+0x330/0x330 [ 191.974056][ T7062] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 191.980344][ T7062] ? _copy_from_user+0xa5/0xe0 [ 191.985144][ T7062] ? bpf_test_init+0x119/0x140 [ 191.989946][ T7062] ? xdp_convert_md_to_buff+0x5b/0x330 [ 191.995535][ T7062] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 192.001072][ T7062] ? __lock_acquire+0x7d80/0x7d80 [ 192.006167][ T7062] ? dev_put+0x80/0x80 [ 192.010306][ T7062] ? dev_put+0x80/0x80 [ 192.014412][ T7062] bpf_prog_test_run+0x31f/0x390 [ 192.019391][ T7062] __sys_bpf+0x49d/0x890 [ 192.023674][ T7062] ? bpf_link_show_fdinfo+0x390/0x390 [ 192.029098][ T7062] ? lock_chain_count+0x20/0x20 [ 192.033997][ T7062] __x64_sys_bpf+0x7c/0x90 [ 192.038460][ T7062] do_syscall_64+0x55/0xb0 [ 192.043093][ T7062] ? clear_bhb_loop+0x40/0x90 [ 192.047808][ T7062] ? clear_bhb_loop+0x40/0x90 [ 192.052531][ T7062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.058472][ T7062] RIP: 0033:0x7feb6db9e019 [ 192.062921][ T7062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.082568][ T7062] RSP: 002b:00007feb6e9dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.091029][ T7062] RAX: ffffffffffffffda RBX: 00007feb6de25fa0 RCX: 00007feb6db9e019 [ 192.099038][ T7062] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 192.107046][ T7062] RBP: 00007feb6e9dc090 R08: 0000000000000000 R09: 0000000000000000 [ 192.115050][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.123054][ T7062] R13: 00007feb6de26038 R14: 00007feb6de25fa0 R15: 00007ffc89e5b4c8 [ 192.131084][ T7062] [ 192.505356][ T7071] netlink: 'syz.0.369': attribute type 33 has an invalid length. [ 192.529206][ T7071] netlink: 128 bytes leftover after parsing attributes in process `syz.0.369'. [ 192.670804][ T7074] netlink: 'syz.1.371': attribute type 2 has an invalid length. [ 193.302362][ T7085] netlink: 'syz.0.372': attribute type 10 has an invalid length. [ 193.347773][ T7085] team0: Device ipvlan1 failed to register rx_handler [ 194.552377][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.561268][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.612873][ T7092] delete_channel: no stack [ 195.453838][ T7114] netlink: 'syz.0.380': attribute type 33 has an invalid length. [ 195.480428][ T7114] netlink: 128 bytes leftover after parsing attributes in process `syz.0.380'. [ 195.779064][ T7104] delete_channel: no stack [ 196.130295][ T7117] FAULT_INJECTION: forcing a failure. [ 196.130295][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 196.211996][ T7117] CPU: 1 PID: 7117 Comm: syz.1.381 Not tainted syzkaller #0 [ 196.219381][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.229472][ T7117] Call Trace: [ 196.232780][ T7117] [ 196.235743][ T7117] dump_stack_lvl+0x18c/0x250 [ 196.240467][ T7117] ? show_regs_print_info+0x20/0x20 [ 196.245726][ T7117] ? load_image+0x420/0x420 [ 196.250288][ T7117] ? __might_sleep+0xe0/0xe0 [ 196.254930][ T7117] ? __lock_acquire+0x7d80/0x7d80 [ 196.260005][ T7117] should_fail_ex+0x394/0x4c0 [ 196.264824][ T7117] should_failslab+0x9/0x20 [ 196.269369][ T7117] slab_pre_alloc_hook+0x59/0x300 [ 196.274436][ T7117] kmem_cache_alloc_node+0x5e/0x310 [ 196.279668][ T7117] ? __alloc_skb+0x103/0x2c0 [ 196.284277][ T7117] __alloc_skb+0x103/0x2c0 [ 196.288710][ T7117] alloc_skb_with_frags+0xcd/0x7a0 [ 196.293835][ T7117] ? lockdep_hardirqs_on+0x98/0x150 [ 196.299055][ T7117] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.305229][ T7117] sock_alloc_send_pskb+0x883/0x9a0 [ 196.310454][ T7117] ? rep_movs_alternative+0x33/0x90 [ 196.315693][ T7117] ? sock_kzfree_s+0x50/0x50 [ 196.320301][ T7117] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.326479][ T7117] packet_sendmsg+0x3058/0x4c70 [ 196.331358][ T7117] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.337538][ T7117] ? aa_sk_perm+0x1ae/0x970 [ 196.342067][ T7117] ? aa_sk_perm+0x83c/0x970 [ 196.346582][ T7117] ? perf_trace_preemptirq_template+0x269/0x330 [ 196.352852][ T7117] ? packet_getsockopt+0xad0/0xad0 [ 196.357976][ T7117] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 196.363974][ T7117] ? tomoyo_write_file+0x1d0/0xc50 [ 196.369189][ T7117] ? aa_sock_msg_perm+0x94/0x150 [ 196.374141][ T7117] ? apparmor_socket_sendmsg+0x8e/0x330 [ 196.379725][ T7117] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 196.385025][ T7117] ? security_socket_sendmsg+0x80/0xa0 [ 196.390493][ T7117] ? packet_getsockopt+0xad0/0xad0 [ 196.395614][ T7117] ____sys_sendmsg+0x61b/0x980 [ 196.400436][ T7117] ? __asan_memset+0x22/0x40 [ 196.405059][ T7117] ? __sys_sendmsg_sock+0x30/0x30 [ 196.410100][ T7117] ? __import_iovec+0x3fa/0x850 [ 196.414984][ T7117] ? import_iovec+0x73/0xa0 [ 196.419504][ T7117] ___sys_sendmsg+0x2a6/0x360 [ 196.424198][ T7117] ? __sys_sendmsg+0x2b0/0x2b0 [ 196.428998][ T7117] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 196.435027][ T7117] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.441196][ T7117] ? lockdep_hardirqs_on+0x98/0x150 [ 196.446429][ T7117] ? __se_sys_sendmsg+0xf2/0x2c0 [ 196.451398][ T7117] ? kasan_check_range+0x1ba/0x290 [ 196.456556][ T7117] __se_sys_sendmsg+0x1d0/0x2c0 [ 196.461441][ T7117] ? __x64_sys_sendmsg+0x80/0x80 [ 196.466411][ T7117] ? syscall_enter_from_user_mode+0x2e/0x80 [ 196.472330][ T7117] do_syscall_64+0x55/0xb0 [ 196.476761][ T7117] ? clear_bhb_loop+0x40/0x90 [ 196.481458][ T7117] ? clear_bhb_loop+0x40/0x90 [ 196.486234][ T7117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.492144][ T7117] RIP: 0033:0x7fcb0eb9e019 [ 196.496571][ T7117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.516211][ T7117] RSP: 002b:00007fcb0fb5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.524660][ T7117] RAX: ffffffffffffffda RBX: 00007fcb0ee25fa0 RCX: 00007fcb0eb9e019 [ 196.533002][ T7117] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 196.540996][ T7117] RBP: 00007fcb0fb5a090 R08: 0000000000000000 R09: 0000000000000000 [ 196.549001][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.556989][ T7117] R13: 00007fcb0ee26038 R14: 00007fcb0ee25fa0 R15: 00007ffd4a02f938 [ 196.564987][ T7117] [ 198.279203][ T7147] netlink: 'syz.2.391': attribute type 33 has an invalid length. [ 198.304870][ T7147] netlink: 128 bytes leftover after parsing attributes in process `syz.2.391'. [ 198.681741][ T7153] netlink: 'syz.1.394': attribute type 33 has an invalid length. [ 198.699086][ T7153] netlink: 128 bytes leftover after parsing attributes in process `syz.1.394'. [ 198.724358][ T7155] FAULT_INJECTION: forcing a failure. [ 198.724358][ T7155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.751454][ T7155] CPU: 1 PID: 7155 Comm: syz.2.395 Not tainted syzkaller #0 [ 198.758829][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.768930][ T7155] Call Trace: [ 198.772236][ T7155] [ 198.775180][ T7155] dump_stack_lvl+0x18c/0x250 [ 198.779969][ T7155] ? show_regs_print_info+0x20/0x20 [ 198.785183][ T7155] ? load_image+0x420/0x420 [ 198.789711][ T7155] ? __might_fault+0xaa/0x120 [ 198.794402][ T7155] ? __lock_acquire+0x7d80/0x7d80 [ 198.799456][ T7155] should_fail_ex+0x394/0x4c0 [ 198.804420][ T7155] _copy_from_user+0x2f/0xe0 [ 198.809024][ T7155] ___sys_sendmsg+0x1c7/0x360 [ 198.813715][ T7155] ? get_pid_task+0x20/0x1e0 [ 198.818371][ T7155] ? __sys_sendmsg+0x2b0/0x2b0 [ 198.823204][ T7155] ? __lock_acquire+0x7d80/0x7d80 [ 198.828279][ T7155] __se_sys_sendmsg+0x1d0/0x2c0 [ 198.833151][ T7155] ? __x64_sys_sendmsg+0x80/0x80 [ 198.838118][ T7155] ? lockdep_hardirqs_on+0x98/0x150 [ 198.843705][ T7155] do_syscall_64+0x55/0xb0 [ 198.848160][ T7155] ? clear_bhb_loop+0x40/0x90 [ 198.852861][ T7155] ? clear_bhb_loop+0x40/0x90 [ 198.857587][ T7155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.863499][ T7155] RIP: 0033:0x7feb6db9e019 [ 198.867960][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.887580][ T7155] RSP: 002b:00007feb6e9dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.896011][ T7155] RAX: ffffffffffffffda RBX: 00007feb6de25fa0 RCX: 00007feb6db9e019 [ 198.904002][ T7155] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003 [ 198.911997][ T7155] RBP: 00007feb6e9dc090 R08: 0000000000000000 R09: 0000000000000000 [ 198.920017][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.928018][ T7155] R13: 00007feb6de26038 R14: 00007feb6de25fa0 R15: 00007ffc89e5b4c8 [ 198.936389][ T7155] [ 199.484929][ T7148] delete_channel: no stack [ 200.705168][ T7174] netlink: 'syz.1.399': attribute type 21 has an invalid length. [ 200.767321][ T7174] netlink: 156 bytes leftover after parsing attributes in process `syz.1.399'. [ 201.246189][ T7184] netlink: 'syz.1.402': attribute type 10 has an invalid length. [ 201.834679][ T7165] Bluetooth: hci3: command 0x0406 tx timeout [ 201.840901][ T7165] Bluetooth: hci0: command 0x0406 tx timeout [ 201.846932][ T7165] Bluetooth: hci2: command 0x0406 tx timeout [ 201.853585][ T7165] Bluetooth: hci1: command 0x0406 tx timeout [ 202.204585][ T7184] team0: Port device wlan1 added [ 202.288296][ T7187] netlink: 'syz.0.403': attribute type 33 has an invalid length. [ 202.316837][ T7187] netlink: 128 bytes leftover after parsing attributes in process `syz.0.403'. [ 202.409896][ T7195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.665564][ T7197] netlink: 'syz.0.405': attribute type 46 has an invalid length. [ 202.706915][ T7197] netlink: 55 bytes leftover after parsing attributes in process `syz.0.405'. [ 202.775648][ T7197] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.405'. [ 202.797557][ T7197] netlink: zone id is out of range [ 202.812632][ T7197] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.405'. [ 203.054860][ T7206] netlink: 'syz.3.408': attribute type 10 has an invalid length. [ 205.126380][ T7198] delete_channel: no stack [ 205.181582][ T7206] team0: Port device wlan1 added [ 205.435898][ T7223] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.415'. [ 205.517903][ T7226] netlink: 'syz.0.414': attribute type 33 has an invalid length. [ 205.542826][ T7226] netlink: 128 bytes leftover after parsing attributes in process `syz.0.414'. [ 206.911089][ T60] tipc: Subscription rejected, illegal request [ 208.465692][ T7246] delete_channel: no stack [ 209.545680][ T7263] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.425'. [ 209.904986][ T7266] netlink: 'syz.0.426': attribute type 33 has an invalid length. [ 209.961200][ T7266] netlink: 128 bytes leftover after parsing attributes in process `syz.0.426'. [ 211.188980][ T7284] syzkaller0: entered promiscuous mode [ 211.217152][ T7284] syzkaller0: entered allmulticast mode [ 212.081356][ T7287] delete_channel: no stack [ 214.493741][ T7294] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.434'. [ 214.811382][ T7311] netlink: 'syz.0.439': attribute type 33 has an invalid length. [ 214.820213][ T7311] netlink: 128 bytes leftover after parsing attributes in process `syz.0.439'. [ 216.165778][ T7330] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.444'. [ 216.323095][ T7333] netlink: 'syz.0.445': attribute type 46 has an invalid length. [ 216.373047][ T7333] netlink: 55 bytes leftover after parsing attributes in process `syz.0.445'. [ 216.417224][ T7325] netlink: 63579 bytes leftover after parsing attributes in process `syz.1.443'. [ 216.630614][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 216.657869][ T7333] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.445'. [ 216.682989][ T7333] netlink: zone id is out of range [ 216.697829][ T7334] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.445'. [ 216.808854][ T7343] netlink: 'syz.2.449': attribute type 33 has an invalid length. [ 216.853530][ T7343] netlink: 128 bytes leftover after parsing attributes in process `syz.2.449'. [ 217.469674][ T7359] FAULT_INJECTION: forcing a failure. [ 217.469674][ T7359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.496402][ T7359] CPU: 0 PID: 7359 Comm: syz.3.454 Not tainted syzkaller #0 [ 217.504336][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.514546][ T7359] Call Trace: [ 217.517879][ T7359] [ 217.520845][ T7359] dump_stack_lvl+0x18c/0x250 [ 217.525579][ T7359] ? show_regs_print_info+0x20/0x20 [ 217.530820][ T7359] ? load_image+0x420/0x420 [ 217.535386][ T7359] ? __might_fault+0xaa/0x120 [ 217.540107][ T7359] ? __lock_acquire+0x7d80/0x7d80 [ 217.545257][ T7359] should_fail_ex+0x394/0x4c0 [ 217.549983][ T7359] _copy_from_user+0x2f/0xe0 [ 217.554600][ T7359] ___sys_sendmsg+0x1c7/0x360 [ 217.559915][ T7359] ? get_pid_task+0x20/0x1e0 [ 217.564535][ T7359] ? __sys_sendmsg+0x2b0/0x2b0 [ 217.569483][ T7359] ? __lock_acquire+0x7d80/0x7d80 [ 217.574611][ T7359] __se_sys_sendmsg+0x1d0/0x2c0 [ 217.579582][ T7359] ? __x64_sys_sendmsg+0x80/0x80 [ 217.585535][ T7359] ? lockdep_hardirqs_on+0x98/0x150 [ 217.590769][ T7359] do_syscall_64+0x55/0xb0 [ 217.595205][ T7359] ? clear_bhb_loop+0x40/0x90 [ 217.599913][ T7359] ? clear_bhb_loop+0x40/0x90 [ 217.604717][ T7359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.610649][ T7359] RIP: 0033:0x7f9a73f9e019 [ 217.615099][ T7359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.634736][ T7359] RSP: 002b:00007f9a74db3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.643166][ T7359] RAX: ffffffffffffffda RBX: 00007f9a74225fa0 RCX: 00007f9a73f9e019 [ 217.651171][ T7359] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 217.659154][ T7359] RBP: 00007f9a74db3090 R08: 0000000000000000 R09: 0000000000000000 [ 217.667759][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.675828][ T7359] R13: 00007f9a74226038 R14: 00007f9a74225fa0 R15: 00007ffd2668b8b8 [ 217.683844][ T7359] [ 218.063618][ T7363] netlink: 63579 bytes leftover after parsing attributes in process `syz.3.456'. [ 218.639806][ T7372] netlink: 'syz.3.459': attribute type 33 has an invalid length. [ 218.662671][ T7372] netlink: 128 bytes leftover after parsing attributes in process `syz.3.459'. [ 218.722019][ T7374] netlink: 'syz.0.457': attribute type 28 has an invalid length. [ 218.769933][ T7374] netlink: 'syz.0.457': attribute type 4 has an invalid length. [ 219.433342][ T7375] syzkaller0: entered promiscuous mode [ 219.447221][ T7375] syzkaller0: entered allmulticast mode [ 224.470415][ T7406] netlink: 'syz.3.468': attribute type 33 has an invalid length. [ 224.504939][ T7406] __nla_validate_parse: 1 callbacks suppressed [ 224.504957][ T7406] netlink: 128 bytes leftover after parsing attributes in process `syz.3.468'. [ 224.576431][ T7410] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.585387][ T7410] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.629201][ T7410] bridge0: entered allmulticast mode [ 224.738468][ T7408] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.467'. [ 226.298896][ T7436] netlink: 'syz.2.476': attribute type 46 has an invalid length. [ 226.318498][ T7436] netlink: 55 bytes leftover after parsing attributes in process `syz.2.476'. [ 226.401312][ T7436] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.476'. [ 226.437504][ T7436] netlink: zone id is out of range [ 226.507481][ T7439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'. [ 226.575971][ T7436] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.476'. [ 226.776385][ T7445] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 227.318692][ T7451] netlink: 'syz.1.480': attribute type 33 has an invalid length. [ 227.386833][ T7451] netlink: 128 bytes leftover after parsing attributes in process `syz.1.480'. [ 227.513743][ T7452] netlink: 63579 bytes leftover after parsing attributes in process `syz.2.481'. [ 227.766281][ T7446] delete_channel: no stack [ 228.306258][ T7477] netlink: 'syz.0.489': attribute type 46 has an invalid length. [ 228.327022][ T7477] netlink: 55 bytes leftover after parsing attributes in process `syz.0.489'. [ 228.436805][ T7475] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.489'. [ 228.482219][ T7475] netlink: zone id is out of range [ 228.789523][ T7480] netlink: 'syz.1.490': attribute type 33 has an invalid length. [ 230.295098][ T7508] netlink: 'syz.1.499': attribute type 16 has an invalid length. [ 230.327508][ T7508] netlink: 'syz.1.499': attribute type 3 has an invalid length. [ 230.335223][ T7508] __nla_validate_parse: 2 callbacks suppressed [ 230.335234][ T7508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.499'. [ 230.494531][ T7510] netlink: 'syz.3.500': attribute type 33 has an invalid length. [ 230.512764][ T7510] netlink: 128 bytes leftover after parsing attributes in process `syz.3.500'. [ 231.139276][ T7486] delete_channel: no stack [ 231.773881][ T7515] netlink: 'syz.1.501': attribute type 153 has an invalid length. [ 231.783242][ T7515] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.501'. [ 234.132859][ T7552] netlink: 'syz.3.511': attribute type 33 has an invalid length. [ 234.182154][ T7552] netlink: 128 bytes leftover after parsing attributes in process `syz.3.511'. [ 234.341101][ T7557] netlink: 'syz.2.507': attribute type 3 has an invalid length. [ 234.592059][ T7557] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.507'. [ 235.062543][ T7547] delete_channel: no stack [ 235.327874][ T7562] netlink: 'syz.0.514': attribute type 46 has an invalid length. [ 235.335976][ T7562] netlink: 55 bytes leftover after parsing attributes in process `syz.0.514'. [ 235.462704][ T7562] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.514'. [ 235.492923][ T7562] netlink: zone id is out of range [ 235.502100][ T7562] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.514'. [ 237.333237][ T7586] netlink: 'syz.2.522': attribute type 10 has an invalid length. [ 237.402483][ T7586] bridge0: left allmulticast mode [ 237.467924][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.475233][ T7586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.482970][ T7586] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.490197][ T7586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.654275][ T7586] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 237.669031][ T7592] netlink: 'syz.3.524': attribute type 33 has an invalid length. [ 237.707301][ T7592] netlink: 128 bytes leftover after parsing attributes in process `syz.3.524'. [ 238.126778][ T7589] delete_channel: no stack [ 238.299759][ T7602] netlink: 'syz.3.527': attribute type 46 has an invalid length. [ 238.374893][ T7602] netlink: 55 bytes leftover after parsing attributes in process `syz.3.527'. [ 238.480616][ T7602] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.527'. [ 238.564168][ T7607] netlink: 'syz.1.529': attribute type 46 has an invalid length. [ 238.608604][ T7607] netlink: 55 bytes leftover after parsing attributes in process `syz.1.529'. [ 238.641425][ T7602] netlink: zone id is out of range [ 238.673193][ T7604] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.527'. [ 238.750204][ T7610] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.529'. [ 238.807138][ T7610] netlink: zone id is out of range [ 239.058680][ T7610] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.529'. [ 240.302113][ T7626] netlink: 'syz.2.535': attribute type 33 has an invalid length. [ 240.350023][ T7626] netlink: 128 bytes leftover after parsing attributes in process `syz.2.535'. [ 241.297950][ T7628] delete_channel: no stack [ 241.479131][ T7645] netlink: 'syz.2.541': attribute type 46 has an invalid length. [ 241.569357][ T7645] netlink: 55 bytes leftover after parsing attributes in process `syz.2.541'. [ 241.690580][ T7645] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.541'. [ 241.762514][ T7645] netlink: zone id is out of range [ 241.881639][ T7645] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.541'. [ 242.294983][ T7658] netlink: 'syz.3.545': attribute type 46 has an invalid length. [ 242.333254][ T7658] netlink: 55 bytes leftover after parsing attributes in process `syz.3.545'. [ 242.399345][ T7657] netlink: 'syz.1.546': attribute type 3 has an invalid length. [ 242.430766][ T7658] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.545'. [ 242.459790][ T7657] netlink: 'syz.1.546': attribute type 16 has an invalid length. [ 242.524538][ T7657] netlink: 'syz.1.546': attribute type 18 has an invalid length. [ 242.533858][ T7659] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.545'. [ 242.544070][ T7658] netlink: zone id is out of range [ 242.574108][ T7657] netlink: 'syz.1.546': attribute type 20 has an invalid length. [ 242.660891][ T7657] netlink: 'syz.1.546': attribute type 25 has an invalid length. [ 242.885263][ T7669] netlink: 'syz.2.548': attribute type 33 has an invalid length. [ 243.009407][ T7669] netlink: 128 bytes leftover after parsing attributes in process `syz.2.548'. [ 244.711768][ T7679] delete_channel: no stack [ 245.260672][ T7699] netlink: 'syz.0.556': attribute type 46 has an invalid length. [ 245.324703][ T7699] netlink: 55 bytes leftover after parsing attributes in process `syz.0.556'. [ 245.460557][ T7696] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.556'. [ 245.573347][ T7696] netlink: zone id is out of range [ 245.957087][ T7699] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.556'. [ 246.000987][ T7709] netlink: 'syz.1.560': attribute type 33 has an invalid length. [ 246.111196][ T7712] netlink: zone id is out of range [ 247.561250][ T7736] FAULT_INJECTION: forcing a failure. [ 247.561250][ T7736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.637602][ T7736] CPU: 1 PID: 7736 Comm: syz.2.567 Not tainted syzkaller #0 [ 247.644996][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.656287][ T7736] Call Trace: [ 247.659636][ T7736] [ 247.662657][ T7736] dump_stack_lvl+0x18c/0x250 [ 247.667420][ T7736] ? show_regs_print_info+0x20/0x20 [ 247.672690][ T7736] ? load_image+0x420/0x420 [ 247.677286][ T7736] ? __lock_acquire+0x7d80/0x7d80 [ 247.682380][ T7736] ? snprintf+0xe9/0x140 [ 247.686671][ T7736] should_fail_ex+0x394/0x4c0 [ 247.691407][ T7736] _copy_to_user+0x2f/0xa0 [ 247.695981][ T7736] simple_read_from_buffer+0xe7/0x150 [ 247.701400][ T7736] proc_fail_nth_read+0x1e8/0x260 [ 247.706496][ T7736] ? proc_fault_inject_write+0x360/0x360 [ 247.712183][ T7736] ? fsnotify_perm+0x271/0x5e0 [ 247.717036][ T7736] ? proc_fault_inject_write+0x360/0x360 [ 247.722744][ T7736] vfs_read+0x298/0x990 [ 247.726989][ T7736] ? kernel_read+0x1e0/0x1e0 [ 247.731732][ T7736] ? __fget_files+0x28/0x460 [ 247.736377][ T7736] ? __fget_files+0x3fc/0x460 [ 247.741120][ T7736] ? __fdget_pos+0x2a3/0x330 [ 247.745751][ T7736] ? ksys_read+0x74/0x260 [ 247.750125][ T7736] ksys_read+0x151/0x260 [ 247.754418][ T7736] ? vfs_write+0x9a0/0x9a0 [ 247.759062][ T7736] ? lockdep_hardirqs_on+0x98/0x150 [ 247.764325][ T7736] do_syscall_64+0x55/0xb0 [ 247.768782][ T7736] ? clear_bhb_loop+0x40/0x90 [ 247.773491][ T7736] ? clear_bhb_loop+0x40/0x90 [ 247.778298][ T7736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.784226][ T7736] RIP: 0033:0x7feb6db5e84e [ 247.788677][ T7736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.808313][ T7736] RSP: 002b:00007feb6e9dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.816769][ T7736] RAX: ffffffffffffffda RBX: 00007feb6e9dc6c0 RCX: 00007feb6db5e84e [ 247.824780][ T7736] RDX: 000000000000000f RSI: 00007feb6e9dc0a0 RDI: 0000000000000004 [ 247.832923][ T7736] RBP: 00007feb6e9dc090 R08: 0000000000000000 R09: 0000000000000000 [ 247.840937][ T7736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.848939][ T7736] R13: 00007feb6de26038 R14: 00007feb6de25fa0 R15: 00007ffc89e5b4c8 [ 247.857021][ T7736] [ 248.623819][ T7743] validate_nla: 1 callbacks suppressed [ 248.623837][ T7743] netlink: 'syz.2.571': attribute type 33 has an invalid length. [ 248.693257][ T7743] __nla_validate_parse: 4 callbacks suppressed [ 248.693276][ T7743] netlink: 128 bytes leftover after parsing attributes in process `syz.2.571'. [ 248.897982][ T7750] netlink: 'syz.3.573': attribute type 46 has an invalid length. [ 248.921889][ T7750] netlink: 55 bytes leftover after parsing attributes in process `syz.3.573'. [ 249.013721][ T7752] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.573'. [ 249.059285][ T7752] netlink: zone id is out of range [ 249.065939][ T7748] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.572'. [ 249.129141][ T7752] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.573'. [ 251.359024][ T7779] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.582'. [ 251.401988][ T7782] netlink: 'syz.1.583': attribute type 33 has an invalid length. [ 251.451294][ T7782] netlink: 128 bytes leftover after parsing attributes in process `syz.1.583'. [ 251.504920][ T7781] netlink: 'syz.0.584': attribute type 46 has an invalid length. [ 251.520036][ T7787] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.584'. [ 251.557235][ T7781] netlink: 55 bytes leftover after parsing attributes in process `syz.0.584'. [ 251.623252][ T7787] netlink: zone id is out of range [ 251.651496][ T7781] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.584'. [ 252.703321][ T7797] cgroup: fork rejected by pids controller in /syz2 [ 252.932339][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.941563][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.018837][ T7807] bridge0: entered allmulticast mode [ 254.361481][ T7920] netlink: 'syz.3.596': attribute type 33 has an invalid length. [ 254.410781][ T7920] __nla_validate_parse: 1 callbacks suppressed [ 254.410827][ T7920] netlink: 128 bytes leftover after parsing attributes in process `syz.3.596'. [ 254.664890][ T7926] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.598'. [ 254.687348][ T7926] netlink: 'syz.1.598': attribute type 2 has an invalid length. [ 254.749993][ T7926] syzkaller0: entered allmulticast mode [ 254.800793][ T7926] syzkaller0: left allmulticast mode [ 254.848161][ T7932] netlink: 'syz.3.600': attribute type 46 has an invalid length. [ 254.878062][ T7932] netlink: 55 bytes leftover after parsing attributes in process `syz.3.600'. [ 255.030820][ T7932] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.600'. [ 255.047247][ T7932] netlink: zone id is out of range [ 255.115604][ T7932] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.600'. [ 255.419403][ T7937] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 255.519622][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.661157][ T7937] bridge_slave_1: left allmulticast mode [ 255.666892][ T7937] bridge_slave_1: left promiscuous mode [ 255.731503][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.848470][ T7937] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 255.903569][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.911182][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.014474][ T7949] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.604'. [ 256.037394][ T7949] netlink: zone id is out of range [ 256.057530][ T7947] netlink: 'syz.1.604': attribute type 46 has an invalid length. [ 256.067321][ T7947] netlink: 55 bytes leftover after parsing attributes in process `syz.1.604'. [ 256.254481][ T3509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.313074][ T7949] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.604'. [ 256.642638][ T3509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.891428][ T3509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.206712][ T3509] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.745397][ T7962] netlink: 'syz.0.608': attribute type 33 has an invalid length. [ 257.767142][ T7962] netlink: 128 bytes leftover after parsing attributes in process `syz.0.608'. [ 258.452678][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.610'. [ 258.486017][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.525031][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.533876][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.546818][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.557203][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 258.564664][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.317910][ T7991] netlink: 'syz.3.614': attribute type 46 has an invalid length. [ 259.381681][ T7996] netlink: zone id is out of range [ 259.637071][ T7991] __nla_validate_parse: 3 callbacks suppressed [ 259.637090][ T7991] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.614'. [ 260.454230][ T7981] chnl_net:caif_netlink_parms(): no params data found [ 260.475895][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 260.498228][ T8005] netlink: 152 bytes leftover after parsing attributes in process `syz.0.623'. [ 260.529414][ T8016] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.616'. [ 260.550886][ T8008] netlink: 'syz.1.615': attribute type 10 has an invalid length. [ 260.553381][ T8016] netlink: 'syz.3.616': attribute type 2 has an invalid length. [ 260.617612][ T5087] Bluetooth: hci3: command tx timeout [ 260.754884][ T8008] bridge_slave_1: left allmulticast mode [ 260.785164][ T8008] bridge_slave_1: left promiscuous mode [ 260.812387][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.892318][ T8025] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.617'. [ 260.931186][ T8008] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 260.957152][ T8025] netlink: zone id is out of range [ 261.018582][ T8020] netlink: 'syz.3.617': attribute type 46 has an invalid length. [ 261.066644][ T8020] netlink: 55 bytes leftover after parsing attributes in process `syz.3.617'. [ 261.115485][ T8025] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.617'. [ 262.123790][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.162452][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.177398][ T7981] bridge_slave_0: entered allmulticast mode [ 262.196552][ T7981] bridge_slave_0: entered promiscuous mode [ 262.347640][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.354958][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.384265][ T7981] bridge_slave_1: entered allmulticast mode [ 262.400763][ T7981] bridge_slave_1: entered promiscuous mode [ 262.439532][ T8045] netlink: 'syz.3.620': attribute type 33 has an invalid length. [ 262.457857][ T8045] netlink: 128 bytes leftover after parsing attributes in process `syz.3.620'. [ 262.593429][ T7981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.682445][ T3509] hsr_slave_0: left promiscuous mode [ 262.691975][ T3509] hsr_slave_1: left promiscuous mode [ 262.697522][ T5087] Bluetooth: hci3: command tx timeout [ 262.862341][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.891196][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.918770][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.957038][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.997845][ T3509] bridge_slave_1: left allmulticast mode [ 263.003574][ T3509] bridge_slave_1: left promiscuous mode [ 263.031051][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.110365][ T3509] bridge_slave_0: left allmulticast mode [ 263.126338][ T3509] bridge_slave_0: left promiscuous mode [ 263.146399][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.207934][ T3509] veth1_macvtap: left promiscuous mode [ 263.214069][ T3509] veth0_macvtap: left promiscuous mode [ 263.237445][ T3509] veth1_vlan: left promiscuous mode [ 263.247674][ T3509] veth0_vlan: left promiscuous mode [ 264.777064][ T5087] Bluetooth: hci3: command tx timeout [ 264.952565][ T3509] team0 (unregistering): Port device team_slave_1 removed [ 265.036375][ T3509] team0 (unregistering): Port device team_slave_0 removed [ 265.137390][ T3509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.208734][ T3509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.633094][ T3509] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 265.648679][ T3509] bond0 (unregistering): Released all slaves [ 265.782487][ T7981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.820650][ T8052] C: renamed from team_slave_0 (while UP) [ 265.863787][ T8052] netlink: 'syz.0.622': attribute type 3 has an invalid length. [ 265.887216][ T8052] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 265.896417][ T8052] netlink: 116 bytes leftover after parsing attributes in process `syz.0.622'. [ 266.017161][ T7981] team0: Port device team_slave_0 added [ 266.026204][ T7981] team0: Port device team_slave_1 added [ 266.266785][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.313473][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.368211][ T7981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.411281][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.435215][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.487068][ T7981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.709994][ T7981] hsr_slave_0: entered promiscuous mode [ 266.753977][ T7981] hsr_slave_1: entered promiscuous mode [ 266.802270][ T7981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.826330][ T7981] Cannot create hsr debugfs directory [ 266.872652][ T5087] Bluetooth: hci3: command tx timeout [ 267.158589][ T8084] syzkaller0: entered promiscuous mode [ 267.167588][ T8084] syzkaller0: entered allmulticast mode [ 267.545812][ T8096] cgroup: fork rejected by pids controller in /syz1 [ 267.632783][ T8101] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.625'. [ 267.655190][ T8101] netlink: zone id is out of range [ 269.517446][ T8097] netlink: 'syz.0.625': attribute type 46 has an invalid length. [ 269.525243][ T8097] netlink: 55 bytes leftover after parsing attributes in process `syz.0.625'. [ 269.547184][ T8101] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.625'. [ 269.931150][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.169073][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.649892][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.684601][ T8139] netlink: 'syz.3.633': attribute type 33 has an invalid length. [ 270.705307][ T8139] netlink: 128 bytes leftover after parsing attributes in process `syz.3.633'. [ 270.964685][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.529671][ T7981] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.591827][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.607258][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.627019][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.629992][ T7981] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.652025][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.668744][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.679546][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.714780][ T8149] ªªªªªª: renamed from vlan0 (while UP) [ 271.876426][ T8151] ªªªªªª: renamed from vlan0 (while UP) [ 271.962087][ T7981] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.981916][ T7981] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 272.963354][ T7981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.131798][ T7981] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.263557][ T60] [ 273.265958][ T60] ====================================================== [ 273.273004][ T60] WARNING: possible circular locking dependency detected [ 273.280053][ T60] syzkaller #0 Not tainted [ 273.284474][ T60] ------------------------------------------------------ [ 273.291496][ T60] kworker/u4:4/60 is trying to acquire lock: [ 273.297488][ T60] ffff8880616f0d80 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 273.307124][ T60] [ 273.307124][ T60] but task is already holding lock: [ 273.314497][ T60] ffff88805e328768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 273.324879][ T60] [ 273.324879][ T60] which lock already depends on the new lock. [ 273.324879][ T60] [ 273.335283][ T60] [ 273.335283][ T60] the existing dependency chain (in reverse order) is: [ 273.344297][ T60] [ 273.344297][ T60] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 273.352034][ T60] __mutex_lock+0x135/0xc80 [ 273.357075][ T60] ieee80211_open+0x144/0x200 [ 273.362276][ T60] __dev_open+0x2cb/0x430 [ 273.367131][ T60] dev_open+0xab/0x190 [ 273.371727][ T60] team_add_slave+0x703/0x28a0 [ 273.377023][ T60] do_setlink+0xcde/0x3f40 [ 273.381969][ T60] rtnl_newlink+0x1848/0x2170 [ 273.387168][ T60] rtnetlink_rcv_msg+0x843/0xf90 [ 273.392636][ T60] netlink_rcv_skb+0x235/0x4c0 [ 273.397923][ T60] netlink_unicast+0x7b1/0x930 [ 273.403214][ T60] netlink_sendmsg+0x8d0/0xbf0 [ 273.408498][ T60] ____sys_sendmsg+0x61b/0x980 [ 273.413783][ T60] ___sys_sendmsg+0x2a6/0x360 [ 273.418984][ T60] __se_sys_sendmsg+0x1d0/0x2c0 [ 273.424356][ T60] do_syscall_64+0x55/0xb0 [ 273.429298][ T60] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.435721][ T60] [ 273.435721][ T60] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 273.443898][ T60] __lock_acquire+0x37ef/0x7d80 [ 273.449280][ T60] lock_acquire+0x19e/0x420 [ 273.454308][ T60] __mutex_lock+0x135/0xc80 [ 273.459342][ T60] team_del_slave+0x31/0x1b0 [ 273.464460][ T60] team_device_event+0x297/0xa30 [ 273.469919][ T60] notifier_call_chain+0x18f/0x380 [ 273.475554][ T60] unregister_netdevice_many_notify+0x1037/0x1910 [ 273.482494][ T60] unregister_netdevice_queue+0x2e9/0x330 [ 273.488737][ T60] _cfg80211_unregister_wdev+0x16d/0x580 [ 273.494895][ T60] ieee80211_remove_interfaces+0x4b3/0x690 [ 273.501229][ T60] ieee80211_unregister_hw+0x5d/0x2a0 [ 273.507144][ T60] mac80211_hwsim_del_radio+0x289/0x480 [ 273.513229][ T60] hwsim_exit_net+0x58d/0x650 [ 273.518442][ T60] cleanup_net+0x707/0xbb0 [ 273.523390][ T60] process_scheduled_works+0xa60/0x1600 [ 273.529469][ T60] worker_thread+0xa5e/0xfe0 [ 273.534589][ T60] kthread+0x2fa/0x390 [ 273.539179][ T60] ret_from_fork+0x48/0x80 [ 273.544131][ T60] ret_from_fork_asm+0x11/0x20 [ 273.549422][ T60] [ 273.549422][ T60] other info that might help us debug this: [ 273.549422][ T60] [ 273.559653][ T60] Possible unsafe locking scenario: [ 273.559653][ T60] [ 273.567100][ T60] CPU0 CPU1 [ 273.572527][ T60] ---- ---- [ 273.577892][ T60] lock(&rdev->wiphy.mtx); [ 273.582416][ T60] lock(team->team_lock_key#3); [ 273.589884][ T60] lock(&rdev->wiphy.mtx); [ 273.596932][ T60] lock(team->team_lock_key#3); [ 273.601890][ T60] [ 273.601890][ T60] *** DEADLOCK *** [ 273.601890][ T60] [ 273.610039][ T60] 5 locks held by kworker/u4:4/60: [ 273.615148][ T60] #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 273.626037][ T60] #1: ffffc900015b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 273.636574][ T60] #2: ffffffff8e3ca0d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 273.646175][ T60] #3: ffffffff8e3d70c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 273.656016][ T60] #4: ffff88805e328768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 273.666812][ T60] [ 273.666812][ T60] stack backtrace: [ 273.672708][ T60] CPU: 1 PID: 60 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 273.680081][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.690140][ T60] Workqueue: netns cleanup_net [ 273.694911][ T60] Call Trace: [ 273.698290][ T60] [ 273.701229][ T60] dump_stack_lvl+0x18c/0x250 [ 273.705919][ T60] ? load_image+0x420/0x420 [ 273.710438][ T60] ? show_regs_print_info+0x20/0x20 [ 273.715642][ T60] ? print_circular_bug+0x12b/0x1a0 [ 273.720964][ T60] check_noncircular+0x2fc/0x400 [ 273.725943][ T60] ? print_deadlock_bug+0x5d0/0x5d0 [ 273.731165][ T60] ? lockdep_lock+0xf5/0x230 [ 273.735784][ T60] ? _find_first_zero_bit+0xd6/0x100 [ 273.741120][ T60] __lock_acquire+0x37ef/0x7d80 [ 273.746010][ T60] ? verify_lock_unused+0x140/0x140 [ 273.751236][ T60] ? verify_lock_unused+0x140/0x140 [ 273.756541][ T60] ? __up_read+0x2b8/0x6b0 [ 273.760993][ T60] lock_acquire+0x19e/0x420 [ 273.765516][ T60] ? team_del_slave+0x31/0x1b0 [ 273.770308][ T60] ? __might_sleep+0xe0/0xe0 [ 273.775005][ T60] ? read_lock_is_recursive+0x20/0x20 [ 273.780391][ T60] __mutex_lock+0x135/0xc80 [ 273.784906][ T60] ? team_del_slave+0x31/0x1b0 [ 273.789684][ T60] ? __mutex_lock+0x30d/0xc80 [ 273.794368][ T60] ? team_del_slave+0x31/0x1b0 [ 273.799141][ T60] ? mutex_lock_nested+0x20/0x20 [ 273.804082][ T60] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 273.809738][ T60] team_del_slave+0x31/0x1b0 [ 273.814339][ T60] team_device_event+0x297/0xa30 [ 273.819287][ T60] notifier_call_chain+0x18f/0x380 [ 273.824412][ T60] unregister_netdevice_many_notify+0x1037/0x1910 [ 273.830840][ T60] ? unregister_netdevice_many+0x20/0x20 [ 273.836511][ T60] ? kernfs_remove_by_name_ns+0x117/0x150 [ 273.842274][ T60] ? __lock_acquire+0x7d80/0x7d80 [ 273.847322][ T60] unregister_netdevice_queue+0x2e9/0x330 [ 273.853053][ T60] ? list_netdevice+0x730/0x730 [ 273.857914][ T60] ? kernfs_remove_by_name_ns+0x117/0x150 [ 273.863654][ T60] _cfg80211_unregister_wdev+0x16d/0x580 [ 273.869311][ T60] ieee80211_remove_interfaces+0x4b3/0x690 [ 273.875131][ T60] ? ieee80211_do_stop+0x2000/0x2000 [ 273.880421][ T60] ? rcu_is_watching+0x15/0xb0 [ 273.885195][ T60] ieee80211_unregister_hw+0x5d/0x2a0 [ 273.890765][ T60] mac80211_hwsim_del_radio+0x289/0x480 [ 273.896339][ T60] ? rhashtable_remove_fast+0xc00/0xc00 [ 273.902003][ T60] hwsim_exit_net+0x58d/0x650 [ 273.906711][ T60] ? hwsim_init_net+0x90/0x90 [ 273.911408][ T60] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 273.917245][ T60] cleanup_net+0x707/0xbb0 [ 273.921674][ T60] ? ops_free_list+0x3b0/0x3b0 [ 273.926447][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.931668][ T60] ? process_scheduled_works+0x975/0x1600 [ 273.937401][ T60] ? process_scheduled_works+0x975/0x1600 [ 273.943155][ T60] process_scheduled_works+0xa60/0x1600 [ 273.948718][ T60] ? worker_attach_to_pool+0x370/0x370 [ 273.954188][ T60] ? assign_work+0x3cc/0x5d0 [ 273.959039][ T60] worker_thread+0xa5e/0xfe0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 273.963671][ T60] kthread+0x2fa/0x390 [ 273.967766][ T60] ? pr_cont_work+0x550/0x550 [ 273.972457][ T60] ? kthread_blkcg+0xd0/0xd0 [ 273.977086][ T60] ret_from_fork+0x48/0x80 [ 273.981524][ T60] ? kthread_blkcg+0xd0/0xd0 [ 273.986119][ T60] ret_from_fork_asm+0x11/0x20 [ 273.991157][ T60] [ 274.001363][ T60] team0: Port device wlan1 removed [ 274.011599][ T5087] Bluetooth: hci0: command tx timeout [ 274.078388][ T8154] chnl_net:caif_netlink_parms(): no params data found [ 274.131088][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.138390][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.778958][ T60] hsr_slave_0: left promiscuous mode [ 274.833182][ T60] hsr_slave_1: left promiscuous mode [ 274.848162][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.855611][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.869630][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.890544][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.911263][ T60] bridge_slave_0: left allmulticast mode [ 274.920458][ T60] bridge_slave_0: left promiscuous mode [ 274.928277][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.952979][ T60] veth1_macvtap: left promiscuous mode [ 274.958940][ T60] veth0_macvtap: left promiscuous mode [ 274.964592][ T60] veth1_vlan: left promiscuous mode [ 274.970541][ T60] veth0_vlan: left promiscuous mode [ 275.208869][ T60] team0 (unregistering): Port device team_slave_1 removed [ 275.235080][ T60] team0 (unregistering): Port device team_slave_0 removed [ 275.265091][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.292042][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.319791][ T60] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 275.396882][ T60] team0 (unregistering): Port device bond0 removed [ 275.424986][ T60] bond0 (unregistering): Released all slaves [ 276.345570][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.414004][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.482304][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.512314][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.333497][ T60] team0: Port device wlan1 removed [ 277.465913][ T60] hsr_slave_0: left promiscuous mode [ 277.474233][ T60] hsr_slave_1: left promiscuous mode [ 277.482419][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.491265][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.499288][ T60] bridge_slave_1: left allmulticast mode [ 277.504970][ T60] bridge_slave_1: left promiscuous mode [ 277.511550][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.520594][ T60] bridge_slave_0: left allmulticast mode [ 277.526278][ T60] bridge_slave_0: left promiscuous mode [ 277.533413][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.547886][ T60] hsr_slave_0: left promiscuous mode [ 277.553775][ T60] hsr_slave_1: left promiscuous mode [ 277.560781][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.569338][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.581410][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.588988][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.596758][ T60] bridge_slave_1: left allmulticast mode [ 277.603949][ T60] bridge_slave_1: left promiscuous mode [ 277.609975][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.621754][ T60] bridge_slave_0: left allmulticast mode [ 277.627729][ T60] bridge_slave_0: left promiscuous mode [ 277.633463][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.649138][ T60] veth1_macvtap: left promiscuous mode [ 277.654810][ T60] veth0_macvtap: left promiscuous mode [ 277.661934][ T60] veth1_vlan: left promiscuous mode [ 277.669605][ T60] veth0_vlan: left promiscuous mode [ 277.866732][ T60] team0 (unregistering): Port device team_slave_1 removed [ 277.886540][ T60] team0 (unregistering): Port device team_slave_0 removed [ 277.908992][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.933274][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.999201][ T60] bond0 (unregistering): Released all slaves [ 278.170139][ T60] team0 (unregistering): Port device team_slave_1 removed [ 278.195024][ T60] team0 (unregistering): Port device team_slave_0 removed [ 278.224667][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.250466][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.314786][ T60] bond0 (unregistering): Released all slaves [ 278.349523][ T60] bond0 (unregistering): Released all slaves