last executing test programs: 6m10.521575472s ago: executing program 1 (id=4339): perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x21, 0x0, 0x7602, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 6m9.901761538s ago: executing program 1 (id=4341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x12, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x480100, 0x0) close(r2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) close(0x3) 6m9.243693536s ago: executing program 1 (id=4344): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0xff04}], 0x1, 0x0, 0xe0ff}, 0x40) 6m9.00348618s ago: executing program 1 (id=4346): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xa6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex=r4, 0x1f, 0x1, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x21}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014008080c000a0000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x47}, 0x80, 0x0}, 0x0) 6m8.705519448s ago: executing program 1 (id=4347): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x5, 0x9, 0x9, 0x0, 0xa86, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317040000000400fef2000e40004d59875a65969ff57b00ff020000000000050000000000000001"], 0xfdef) 6m8.441075244s ago: executing program 1 (id=4349): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x4, "b2f699b7cb"}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800040000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffb}, 0x94) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="df2af25367882f5e") close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="00000000000000005270550efaee00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x4, 0xa28, 0x10000, r7, 0xffffffff, '\x00', r6, r10, 0x5, 0x5, 0x0, 0x0, @void, @value, @value=r3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60f74f03}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m58.848381755s ago: executing program 0 (id=4381): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x20, 0x2, 0x9, 0xa, 0x40412, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{}, 0x0, &(0x7f0000000c80)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{}, &(0x7f0000000d00), &(0x7f0000000d40)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={r1}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) syz_clone(0xaf000, &(0x7f0000000140)="69f570355793fa6d9dcc556fbe042406073e55eddfe7afec69be99fc5e8c6130e4e07e9ce0736c58c6", 0x29, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="a8188d5e571f2706daee26a69beaeb79c448633248c96f1991a69030394a53aea8ad8fcab49d04bfbdf98aca22e9b708256b093f55b417") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000480)=""/164}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5}, 0x18) 5m57.679417044s ago: executing program 0 (id=4383): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x9006, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)={[{0x2d, 'blkio'}]}, 0x7) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 5m55.983205023s ago: executing program 0 (id=4386): socket$kcm(0xa, 0x3, 0x87) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x4080, 0x7fd, 0x7fde, 0x5, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1000000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0xff, 0x0, 0x0, 0xc0000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf, @perf_config_ext={0x7, 0x1}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x89}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff0200"/53], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8404, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 5m54.997856741s ago: executing program 0 (id=4388): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{}, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x2800, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462", 0x26}, {&(0x7f0000000280)="0499", 0x2}], 0x2}, 0x0) 5m54.721242857s ago: executing program 0 (id=4390): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000010000000000000000000000b70800000000000000000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12160) 5m52.768784571s ago: executing program 32 (id=4349): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x4, "b2f699b7cb"}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800040000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffb}, 0x94) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="df2af25367882f5e") close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="00000000000000005270550efaee00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x4, 0xa28, 0x10000, r7, 0xffffffff, '\x00', r6, r10, 0x5, 0x5, 0x0, 0x0, @void, @value, @value=r3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60f74f03}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m52.766108192s ago: executing program 0 (id=4395): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800040000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffb}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000a00a2e0d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m37.092468459s ago: executing program 33 (id=4395): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800040000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffb}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000a00a2e0d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m37.092114879s ago: executing program 5 (id=4393): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xffffffffffffff29) r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000840)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f0000000640)={'some', 0x20, 0x100, 0x20, 0x3909}, 0x2f) r1 = syz_clone(0x5a034000, &(0x7f0000000280)="ef4c93ee133cfe767babd015e5540d3d7bb170035d7f826c6b970b176854ffbbbf0a1733c8ac49a7aeb03be348d18ff2a50a0bf365955f5b2b7f2779846646d7cf7512391dc90de182e5213cb8cbd983caeb87e82d1535b4598d1ab02098ac88fc5c773da463b70a6fb9d89fdd490715b1f40aa9f93abaddd7a9bd314ea30a9caa367bf84aabc5ce7e6e36a948f5d4232113589ae31f59a67785d5ba97679053befff52382cc9ea1ec54c0c2d1f1c51087e937ca5aa7b91938457d7b3a9e477e52c980e9be5cded88e314e7cebb0c2cc0c56f708c092d35ce7754e2b91d670cc7d8d766b15ed9be37b183c34736ac11c535f82", 0xf3, &(0x7f0000000200), &(0x7f0000000380), &(0x7f0000000440)="c06520abd919036df52435cf1afa35c8fda1adb5c1e800f61e25e164b3cd3011a32dfd16f2ad2019c08811e87977cf44b3a4c4762bbff233bb3f8f63508c4cbee1e84efeeac4f3ca3ae347ffb934e65460d1ab5c9245521e3c883eeeb078619d1ca11e72e9f234b508f24f8ea34d22239757dffc2903eb2d86e88bcdfdf11606a5901880f7da85eb539e89a6274a884025336413bb2023f1c14f2ecd23e92a3962c819ab9bd09995047100f9736b03c8ccad88efddae6ce77f899e0fb949230f68c5550aa738c0a84984c76e34b9e71d5e") perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, r1, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8906, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000000), &(0x7f00000003c0)=r3}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000540)="878bb1e5787968677f09c05e53448f4605ffb0a0cf42ed747cdd166f6ae3e82dc05026988d7f5937749a37ec452256224c081b69f92efb9282aaec8019319f70e053eeae33d5a26b2e2b160693c096d3e6955b9533e7cff5dac3153dc1b925c7e0dad1a5103ce4c9d313b762", &(0x7f0000000c40)=""/4096, &(0x7f0000000680)="17eecda2db7f83baddeae2fa9bea2f788b829e8c9e9b931cca43fed789c3456d00fea7aba1a503c37608406c402c41a795e431bac34f4c3fc9bbdb22567b464493b21baf1e9f815fe33a34a48938981fa3e05d07f347434afeccd789646f873beb815b9919fe8106150a8ece04940886fb86f7ee87c772350fe2471509b05f36bc78ddb221d73b61a20814afa559700659aa699631f5656dd64190e9e8cc8fa99e0a7f5c98c10df78e9518ebab2099c4ffa6c3510e8c156932d6313bd4ad3d47395e63e7261350addfb56780c09da09ed29c53b78ad96b10dc3bfd05e2613ced", &(0x7f0000000780)="f46876c715a065322496079f6423d20149d56bd956db52713424e6e3333953dce2fc4aea7eedd166d27c5374acfa112495a07d2c387bc6ebd919c1cc932b58b2af30cb99aa0e7863189811d42ee777ceeb5e456979ef36fa742780bca5f72230f09bac9e4b298dafa55c39c246fdc8986f10ef4bddf2298c53e0127687cf1c41fa249565b634f1008d9157be15de39a47e3071dd7e3019f6bb55ed1fd583ed9dfe9317dff22ce9673269a839055d06001ed7553b4f1c", 0x8, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r4 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061002400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00 '], 0x33fe0) 5m36.792376767s ago: executing program 5 (id=4433): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) close(r0) 5m35.811756764s ago: executing program 5 (id=4440): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)={[{0x0, 'rdma'}]}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair(0xf, 0x3, 0x9, 0x0) 5m35.326645672s ago: executing program 5 (id=4442): socket$kcm(0xa, 0x3, 0x87) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x4080, 0x7fd, 0x7fde, 0x5, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1000000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0xff, 0x0, 0x0, 0xc0000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf, @perf_config_ext={0x7, 0x1}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x89}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8404, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x44490, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14101, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 5m33.82983671s ago: executing program 5 (id=4446): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2d706572665f6576656e74202d706572665f6576656e74202d5cdec494995b9b952b637075202d6e65745f636c7320"], 0x2f) socket$kcm(0x1e, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23004a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5460, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230007) close(0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, r5, 0x0, 0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000001d00)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xa) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 5m18.694523216s ago: executing program 34 (id=4446): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2d706572665f6576656e74202d706572665f6576656e74202d5cdec494995b9b952b637075202d6e65745f636c7320"], 0x2f) socket$kcm(0x1e, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23004a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5460, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230007) close(0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, r5, 0x0, 0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000001d00)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xa) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 11.050654395s ago: executing program 6 (id=6743): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) socket$kcm(0xa, 0x7, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xde, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.210394024s ago: executing program 6 (id=6753): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x854}, 0x182, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x200000000100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=""/242, &(0x7f0000000180), &(0x7f0000000240), 0x2, r0}, 0x38) 9.563804672s ago: executing program 6 (id=6763): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r0}, 0x8) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 9.182452024s ago: executing program 6 (id=6769): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x10420, 0x2000000, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101240, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) 8.326489874s ago: executing program 6 (id=6778): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 6.868730569s ago: executing program 6 (id=6800): r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0xad, 0x5, 0x0, 0x0, 0x0, 0x1b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0xfffffffffffffffd}, 0x0, 0x0, 0xcd, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40001ff}, r0, 0x0, 0xffffffffffffffff, 0x0) 4.070530373s ago: executing program 7 (id=6824): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 3.032698603s ago: executing program 7 (id=6834): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0xb, &(0x7f00000006c0)=@framed={{0x18, 0x8}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB=','], 0x9a) 2.74993825s ago: executing program 7 (id=6839): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x20008080) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 2.298509276s ago: executing program 4 (id=6846): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000180)={'team_slave_1', 0x32, 0x35}, 0xf) 2.027489692s ago: executing program 4 (id=6847): r0 = syz_clone(0x80400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) 1.694589631s ago: executing program 2 (id=6850): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xaa}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.668309673s ago: executing program 7 (id=6852): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x10, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair(0x28, 0x801, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x40, 0x7, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xc, r2}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.640643904s ago: executing program 4 (id=6853): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x2a}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xf09f) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0200"/19, @ANYRES32, @ANYRES32=r3, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf0500000000000073350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767741dcb92629c40046b723858c298b8b5e3a496f763d1d1587cc6e8a647c5b78ffcdafc254f9f9ba2f72a5281eb0d15b24b0262648b58b13d4e923dbd698013cd73b2a745b2d2323a75fa4e5fcc15c9a2aae85450957d7ba20be0747e35fdd2b127334c348ea8c833a1edea1b88437d43f39b1b6cb7498448f592eda2c815f865e9695ac66eef4ff62ffe09f8bfd81280ac99bf9deae880f0c3dc6216792bea828ad20354e590e0aa6d287da3759d44c606741dc6b55f42916e8bb9afbd2ec1bb5f6381c9228930b454148dd56cc89ce9b6"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53, 0xc00}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xec8, 0x9, 0x1, 0x200a0, r4, 0x0, '\x00', 0x0, r3, 0x1, 0x3, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 1.578353838s ago: executing program 2 (id=6854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[], 0x0}, 0x94) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, r1, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000880)={0xffff}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0x7, 0x54, 0xff, 0x1, 0x0, 0x10, 0xa8a0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000006c0), 0x4}, 0x104000, 0xffffffffffff7fff, 0x100, 0x3, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000000)="b9ff03316844268cb89e14f008007541050000000000002f77fbac141416e000030a", 0x0, 0xf, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 1.35973335s ago: executing program 7 (id=6855): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) close(r1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 1.359277151s ago: executing program 2 (id=6857): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0xb, &(0x7f00000006c0)=@framed={{0x18, 0x8}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) 1.084135446s ago: executing program 3 (id=6860): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x4, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1001}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.050675289s ago: executing program 2 (id=6861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x90480, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x12) 1.006616571s ago: executing program 7 (id=6862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x80000081}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8}, 0x1, 0x0, 0xfffffffd, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd86}, 0x94) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000080)) 894.491838ms ago: executing program 3 (id=6863): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) 732.474407ms ago: executing program 3 (id=6864): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000f}, 0x0, 0x0, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x0, 0x772}, 0x108500, 0xe9a, 0x7baf376b, 0x3, 0x5, 0x0, 0x5}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae, 0x2, @perf_config_ext={0x0, 0x8}, 0x10d51d, 0xb6a0, 0x0, 0x0, 0x4, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x7f7c2739efff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='GPL\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 596.262845ms ago: executing program 2 (id=6865): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r0}, 0x36) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) 478.217752ms ago: executing program 4 (id=6866): socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x880, 0x63, 0xcfb5, 0x1, 0x0, 0x200000, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8940, &(0x7f0000000080)) 426.473555ms ago: executing program 3 (id=6867): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_procfs$namespace(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000180), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffffff857b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x2f08, 0xe, 0x0, &(0x7f0000001000)="0000000009000005ed14a3c9d27f", 0x0, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 271.848594ms ago: executing program 4 (id=6868): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000007000000080000000080"], 0x50) 154.105341ms ago: executing program 3 (id=6869): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000002d40)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 10.630029ms ago: executing program 3 (id=6870): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) r3 = gettid() sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="5f1a20b5bda8", 0x6}], 0x1, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x20008000}, 0x8c0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 10.460489ms ago: executing program 2 (id=6871): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) close(r1) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x1000000000005, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x400000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0x28}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000b00)=ANY=[@ANYRES8=r1, @ANYBLOB="3e6f0dfdcc"], 0x9a) 0s ago: executing program 4 (id=6872): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x5, 0x9, 0x4, 0x35}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): 9] dump_stack_lvl+0x188/0x250 [ 867.793475][T17939] ? show_regs_print_info+0x20/0x20 [ 867.798716][T17939] ? load_image+0x400/0x400 [ 867.803260][T17939] ? __might_sleep+0xf0/0xf0 [ 867.807886][T17939] ? __lock_acquire+0x7d10/0x7d10 [ 867.812992][T17939] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 867.819390][T17939] should_fail+0x38c/0x4c0 [ 867.823851][T17939] should_failslab+0x5/0x20 [ 867.828380][T17939] slab_pre_alloc_hook+0x51/0xc0 [ 867.833361][T17939] __kmalloc+0x6b/0x330 [ 867.837550][T17939] ? tomoyo_encode+0x27e/0x540 [ 867.842363][T17939] tomoyo_encode+0x27e/0x540 [ 867.847003][T17939] tomoyo_realpath_from_path+0x5cd/0x610 [ 867.852694][T17939] tomoyo_path_number_perm+0x242/0x660 [ 867.858211][T17939] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 867.863764][T17939] security_file_ioctl+0x6c/0xa0 [ 867.868746][T17939] __se_sys_ioctl+0x48/0x170 [ 867.873373][T17939] do_syscall_64+0x4c/0xa0 [ 867.877832][T17939] ? clear_bhb_loop+0x30/0x80 [ 867.882697][T17939] ? clear_bhb_loop+0x30/0x80 [ 867.887404][T17939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 867.893469][T17939] RIP: 0033:0x7f21ddb36eb9 [ 867.897920][T17939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.917859][T17939] RSP: 002b:00007f21dbd92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.926321][T17939] RAX: ffffffffffffffda RBX: 00007f21dddb1fa0 RCX: 00007f21ddb36eb9 [ 867.934377][T17939] RDX: 0000200000000180 RSI: 0000000080047456 RDI: 0000000000000003 [ 867.942387][T17939] RBP: 00007f21dbd92090 R08: 0000000000000000 R09: 0000000000000000 [ 867.950455][T17939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.958460][T17939] R13: 00007f21dddb2038 R14: 00007f21dddb1fa0 R15: 00007fffc6446a78 [ 867.966497][T17939] [ 868.006376][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.027354][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.071015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 868.109505][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.128367][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.171115][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 868.323780][T17949] netlink: 192440 bytes leftover after parsing attributes in process `syz.7.4488'. [ 868.358055][T17949] net_ratelimit: 8353 callbacks suppressed [ 868.358167][T17949] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 868.486188][ T4476] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.592820][T17939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 868.654802][ T4476] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.959562][ T4476] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.215302][ T4476] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.302288][T17977] bridge0: port 3(ip6gretap0) entered blocking state [ 869.342927][T17977] bridge0: port 3(ip6gretap0) entered disabled state [ 869.433826][T17977] device ip6gretap0 entered promiscuous mode [ 869.459965][T17977] bridge0: port 3(ip6gretap0) entered blocking state [ 869.467965][T17977] bridge0: port 3(ip6gretap0) entered forwarding state [ 869.871626][T17996] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4580'. [ 870.095284][ T4476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.158972][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.165411][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.202292][T17997] netlink: 'syz.6.4577': attribute type 2 has an invalid length. [ 870.274426][T17996] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4580'. [ 870.309781][T17999] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4580'. [ 870.520874][ T4476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.681745][ T4476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.879771][ T4476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.275075][ T4476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.458988][ T4476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.577194][ T4476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.930645][T18051] netlink: 'syz.2.4590': attribute type 29 has an invalid length. [ 871.976362][T18051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4590'. [ 874.463259][T18051] netlink: 'syz.2.4590': attribute type 29 has an invalid length. [ 874.497899][T18051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4590'. [ 874.656869][ T4476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.975103][T18069] netlink: 'syz.4.4597': attribute type 2 has an invalid length. [ 876.871816][ T4476] bridge0: port 3(ip6gretap0) entered disabled state [ 876.888182][T18142] netlink: 'syz.7.4607': attribute type 29 has an invalid length. [ 877.127450][ T4476] device ip6gretap0 left promiscuous mode [ 877.157078][ T4476] bridge0: port 3(ip6gretap0) entered disabled state [ 877.431435][T18142] netlink: 'syz.7.4607': attribute type 29 has an invalid length. [ 877.477854][T18146] netlink: 'syz.7.4607': attribute type 29 has an invalid length. [ 877.537211][T18148] netlink: 'syz.7.4607': attribute type 29 has an invalid length. [ 877.545506][T18153] netlink: 'syz.7.4607': attribute type 29 has an invalid length. [ 878.968241][T18179] netlink: 'syz.3.4614': attribute type 2 has an invalid length. [ 879.564352][T18195] netlink: 212168 bytes leftover after parsing attributes in process `syz.6.4617'. [ 879.806304][T18211] netlink: 'syz.4.4621': attribute type 39 has an invalid length. [ 881.721421][T18258] netlink: 'syz.7.4631': attribute type 2 has an invalid length. [ 881.958190][T18278] netlink: 'syz.4.4638': attribute type 29 has an invalid length. [ 882.092452][T18278] netlink: 'syz.4.4638': attribute type 29 has an invalid length. [ 882.297509][T18282] netlink: 'syz.4.4638': attribute type 29 has an invalid length. [ 883.204993][T18323] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.4645'. [ 883.595570][T18331] netlink: 'syz.6.4647': attribute type 39 has an invalid length. [ 883.613335][T18335] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4648'. [ 883.633456][T18335] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 884.332488][T18360] netlink: 'syz.2.4653': attribute type 29 has an invalid length. [ 884.446591][T18360] netlink: 'syz.2.4653': attribute type 29 has an invalid length. [ 884.479863][T18364] netlink: 'syz.2.4653': attribute type 29 has an invalid length. [ 884.564093][T18368] netlink: 'syz.2.4653': attribute type 29 has an invalid length. [ 884.661703][ T4476] device hsr_slave_0 left promiscuous mode [ 884.686291][ T4476] device hsr_slave_1 left promiscuous mode [ 884.740712][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.790362][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.830368][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.867424][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.905510][ T4476] device bridge_slave_1 left promiscuous mode [ 884.916855][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.763170][ T4476] device bridge_slave_0 left promiscuous mode [ 887.771269][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.896877][ T4476] device hsr_slave_0 left promiscuous mode [ 887.905079][ T4476] device hsr_slave_1 left promiscuous mode [ 887.947666][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.967005][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.027995][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.035559][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.119397][ T4476] device bridge_slave_1 left promiscuous mode [ 888.125669][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.196852][ T4476] device hsr_slave_0 left promiscuous mode [ 888.238909][ T4476] device hsr_slave_1 left promiscuous mode [ 888.265293][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.308406][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.346176][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.368376][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.434401][ T4476] device hsr_slave_0 left promiscuous mode [ 888.483320][ T4476] device hsr_slave_1 left promiscuous mode [ 888.523237][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.560225][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.618145][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.654872][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.748298][ T4476] device veth1_macvtap left promiscuous mode [ 888.784341][ T4476] device veth0_macvtap left promiscuous mode [ 888.802616][ T4476] device veth1_vlan left promiscuous mode [ 888.842339][ T4476] device veth0_vlan left promiscuous mode [ 888.854180][ T4476] device veth1_macvtap left promiscuous mode [ 888.875926][ T4476] device veth0_macvtap left promiscuous mode [ 888.912674][ T4476] device veth1_vlan left promiscuous mode [ 888.941046][ T4476] device veth0_vlan left promiscuous mode [ 888.978138][ T4476] device veth1_macvtap left promiscuous mode [ 888.984319][ T4476] device veth0_macvtap left promiscuous mode [ 889.009744][ T4476] device veth1_vlan left promiscuous mode [ 889.050147][ T4476] device veth1_macvtap left promiscuous mode [ 889.066943][ T4476] device veth0_macvtap left promiscuous mode [ 889.073128][ T4476] device veth1_vlan left promiscuous mode [ 890.267855][ T4476] team0 (unregistering): Port device team_slave_1 removed [ 890.291645][ T4476] team0 (unregistering): Port device team_slave_0 removed [ 890.332989][ T4476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.380397][ T4476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.537085][ T4476] bond0 (unregistering): Released all slaves [ 890.934032][ T4476] team0 (unregistering): Port device team_slave_1 removed [ 890.984731][ T4476] team0 (unregistering): Port device team_slave_0 removed [ 891.018511][ T4476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.051271][ T4476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.196112][ T4476] team0 (unregistering): Port device bond0 removed [ 891.209945][ T4476] team0 (unregistering): Port device bridge0 removed [ 891.239194][ T4476] bond0 (unregistering): Released all slaves [ 891.309924][ T4476] team0 (unregistering): Port device geneve1 removed [ 891.538831][ T4476] team0 (unregistering): Port device team_slave_1 removed [ 891.569141][ T4476] team0 (unregistering): Port device team_slave_0 removed [ 891.604498][ T4476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.632658][ T4476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.815549][ T4476] bond0 (unregistering): Released all slaves [ 892.109043][ T4476] team0 (unregistering): Port device team_slave_1 removed [ 892.148022][ T4476] team0 (unregistering): Port device team_slave_0 removed [ 892.175276][ T4476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.212012][ T4476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.383009][ T4476] bond0 (unregistering): Released all slaves [ 892.703853][T18481] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4692'. [ 892.815910][T18481] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 896.499610][T18579] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4705'. [ 896.539777][T18579] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 900.617789][T18689] netlink: 21 bytes leftover after parsing attributes in process `syz.7.4725'. [ 900.674074][T18689] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 906.268150][T18840] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4749'. [ 906.293852][T18840] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 908.093483][T18906] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4765'. [ 908.168970][T18906] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 908.884183][T18937] netlink: 'syz.4.4771': attribute type 39 has an invalid length. [ 909.622467][T18963] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4777'. [ 909.670893][T18963] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 909.997543][T18978] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4781'. [ 910.049822][T18978] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 910.535536][T18990] netlink: 'syz.3.4785': attribute type 39 has an invalid length. [ 913.808592][T19105] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4810'. [ 913.843831][T19105] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 914.946313][T19136] netlink: 'syz.7.4816': attribute type 39 has an invalid length. [ 915.480138][T19161] netlink: 21 bytes leftover after parsing attributes in process `syz.6.4820'. [ 915.494466][T19161] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 915.857718][T19156] netlink: 'syz.3.4821': attribute type 39 has an invalid length. [ 916.941934][T19206] netlink: 'syz.7.4832': attribute type 39 has an invalid length. [ 917.882571][T19231] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4838'. [ 918.046726][T19231] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 918.785388][T19248] netlink: 'syz.2.4840': attribute type 39 has an invalid length. [ 919.183001][T19256] netlink: 'syz.4.4841': attribute type 39 has an invalid length. [ 919.878027][T19275] netlink: 21 bytes leftover after parsing attributes in process `syz.7.4847'. [ 919.966949][T19275] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 921.826078][T19338] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4860'. [ 921.872537][T19338] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 922.171408][T19343] netlink: 'syz.7.4861': attribute type 39 has an invalid length. [ 922.247384][T19335] netlink: 'syz.2.4858': attribute type 39 has an invalid length. [ 923.164716][T19373] netlink: 'syz.6.4867': attribute type 39 has an invalid length. [ 924.514786][T19434] netlink: 'syz.7.4877': attribute type 39 has an invalid length. [ 927.164275][T19506] netlink: 'syz.6.4892': attribute type 39 has an invalid length. [ 928.554977][T18106] Bluetooth: hci2: command 0x0406 tx timeout [ 928.800541][T19549] netlink: 21 bytes leftover after parsing attributes in process `syz.7.4903'. [ 928.840402][T19549] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 930.207042][T19595] netlink: 'syz.3.4912': attribute type 39 has an invalid length. [ 931.591950][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.599294][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.144957][T19656] netlink: 'syz.4.4926': attribute type 39 has an invalid length. [ 932.432914][T19672] netlink: 'syz.4.4929': attribute type 5 has an invalid length. [ 932.595866][T19672] netlink: 'syz.4.4929': attribute type 10 has an invalid length. [ 932.922216][T19672] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 934.638544][T19744] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4949'. [ 934.716635][T19744] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4949'. [ 934.835555][T19749] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4949'. [ 934.899655][T19752] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4949'. [ 935.510423][T19781] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4956'. [ 935.542118][T19781] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4956'. [ 935.570074][T19785] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4956'. [ 935.766354][T19793] FAULT_INJECTION: forcing a failure. [ 935.766354][T19793] name failslab, interval 1, probability 0, space 0, times 0 [ 935.819107][T19793] CPU: 0 PID: 19793 Comm: syz.7.4958 Not tainted syzkaller #0 [ 935.826707][T19793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 935.836807][T19793] Call Trace: [ 935.840117][T19793] [ 935.843089][T19793] dump_stack_lvl+0x188/0x250 [ 935.847858][T19793] ? show_regs_print_info+0x20/0x20 [ 935.853098][T19793] ? load_image+0x400/0x400 [ 935.857663][T19793] ? __might_sleep+0xf0/0xf0 [ 935.862298][T19793] ? __lock_acquire+0x7d10/0x7d10 [ 935.867391][T19793] should_fail+0x38c/0x4c0 [ 935.871875][T19793] should_failslab+0x5/0x20 [ 935.876430][T19793] slab_pre_alloc_hook+0x51/0xc0 [ 935.881420][T19793] ? security_file_alloc+0x30/0x110 [ 935.886670][T19793] kmem_cache_alloc+0x3d/0x290 [ 935.891488][T19793] ? rcu_is_watching+0x11/0xa0 [ 935.896310][T19793] security_file_alloc+0x30/0x110 [ 935.901406][T19793] __alloc_file+0xc2/0x240 [ 935.905895][T19793] alloc_empty_file+0x90/0x180 [ 935.910720][T19793] alloc_file+0x5b/0x4f0 [ 935.915023][T19793] ? do_raw_spin_unlock+0x11d/0x230 [ 935.920289][T19793] alloc_file_pseudo+0x180/0x200 [ 935.925287][T19793] ? alloc_empty_file_noaccount+0x80/0x80 [ 935.931083][T19793] ? __lock_acquire+0x7d10/0x7d10 [ 935.936153][T19793] ? __local_bh_enable_ip+0x136/0x1c0 [ 935.941570][T19793] ? _local_bh_enable+0xa0/0xa0 [ 935.946482][T19793] anon_inode_getfile+0xc1/0x1a0 [ 935.951482][T19793] bpf_link_prime+0x125/0x270 [ 935.956216][T19793] bpf_xdp_link_attach+0x1f3/0x480 [ 935.961395][T19793] ? dev_xdp_prog_id+0xe0/0xe0 [ 935.966257][T19793] link_create+0x50e/0x690 [ 935.970795][T19793] __sys_bpf+0x645/0x6f0 [ 935.975085][T19793] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 935.981397][T19793] ? bpf_link_show_fdinfo+0x380/0x380 [ 935.986818][T19793] ? rcu_nmi_exit+0x6f/0xf0 [ 935.991433][T19793] ? vtime_user_exit+0x2c8/0x3e0 [ 935.996454][T19793] __x64_sys_bpf+0x78/0x90 [ 936.000912][T19793] do_syscall_64+0x4c/0xa0 [ 936.005357][T19793] ? clear_bhb_loop+0x30/0x80 [ 936.010076][T19793] ? clear_bhb_loop+0x30/0x80 [ 936.014800][T19793] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 936.020749][T19793] RIP: 0033:0x7f08ec90beb9 [ 936.025209][T19793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.044854][T19793] RSP: 002b:00007f08eab67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 936.053328][T19793] RAX: ffffffffffffffda RBX: 00007f08ecb86fa0 RCX: 00007f08ec90beb9 [ 936.061359][T19793] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 936.069406][T19793] RBP: 00007f08eab67090 R08: 0000000000000000 R09: 0000000000000000 [ 936.077426][T19793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.085433][T19793] R13: 00007f08ecb87038 R14: 00007f08ecb86fa0 R15: 00007ffc65c2ad08 [ 936.093497][T19793] [ 937.734928][T19831] netlink: 143108 bytes leftover after parsing attributes in process `syz.7.4966'. [ 937.793784][T19831] netlink: 'syz.7.4966': attribute type 1 has an invalid length. [ 942.172914][T19998] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4997'. [ 942.238860][T19998] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 945.787660][T20032] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5008'. [ 946.068956][T20032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.152362][T20032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.152858][T20056] netlink: 21 bytes leftover after parsing attributes in process `syz.2.5013'. [ 947.286904][T20056] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 947.409385][T20032] bond0 (unregistering): Released all slaves [ 948.916835][T20106] netlink: 'syz.4.5021': attribute type 10 has an invalid length. [ 949.975570][T20136] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5028'. [ 950.046202][T20136] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 951.490573][T20185] netlink: 'syz.2.5039': attribute type 10 has an invalid length. [ 951.562968][T20188] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5040'. [ 951.582696][T20188] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 951.781778][T20194] netlink: 21 bytes leftover after parsing attributes in process `syz.2.5051'. [ 951.803425][T20194] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 953.695858][T20266] netlink: 21 bytes leftover after parsing attributes in process `syz.4.5054'. [ 953.736128][T20266] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 954.085882][T20276] netlink: 21 bytes leftover after parsing attributes in process `syz.2.5067'. [ 954.137462][T20279] netlink: 'syz.3.5055': attribute type 10 has an invalid length. [ 954.147817][T20276] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 954.379781][T20288] netlink: 21 bytes leftover after parsing attributes in process `syz.2.5071'. [ 954.440783][T20288] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 955.970197][T20349] netlink: 'syz.7.5072': attribute type 17 has an invalid length. [ 956.040538][T20349] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5072'. [ 956.178259][T20349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 956.230238][T20356] netlink: 21 bytes leftover after parsing attributes in process `syz.2.5075'. [ 956.262338][T20356] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 956.915266][T20370] FAULT_INJECTION: forcing a failure. [ 956.915266][T20370] name failslab, interval 1, probability 0, space 0, times 0 [ 956.948670][T20370] CPU: 1 PID: 20370 Comm: syz.7.5078 Not tainted syzkaller #0 [ 956.956290][T20370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 956.966385][T20370] Call Trace: [ 956.969708][T20370] [ 956.972675][T20370] dump_stack_lvl+0x188/0x250 [ 956.977403][T20370] ? show_regs_print_info+0x20/0x20 [ 956.982663][T20370] ? load_image+0x400/0x400 [ 956.987205][T20370] ? __might_sleep+0xf0/0xf0 [ 956.991843][T20370] ? __lock_acquire+0x7d10/0x7d10 [ 956.997001][T20370] should_fail+0x38c/0x4c0 [ 957.001460][T20370] should_failslab+0x5/0x20 [ 957.005992][T20370] slab_pre_alloc_hook+0x51/0xc0 [ 957.011000][T20370] __kmalloc_node_track_caller+0x68/0x3a0 [ 957.016767][T20370] ? netlink_ack+0x372/0xb50 [ 957.021428][T20370] ? kmem_cache_alloc_node+0x162/0x2d0 [ 957.026923][T20370] ? __alloc_skb+0xf4/0x750 [ 957.031477][T20370] ? netlink_ack+0x372/0xb50 [ 957.036116][T20370] __alloc_skb+0x22c/0x750 [ 957.040588][T20370] netlink_ack+0x372/0xb50 [ 957.045043][T20370] ? rcu_nmi_exit+0x6f/0xf0 [ 957.049581][T20370] ? netlink_dump+0xcf0/0xcf0 [ 957.054292][T20370] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 957.060323][T20370] netlink_rcv_skb+0x27a/0x440 [ 957.065120][T20370] ? rtnetlink_bind+0x80/0x80 [ 957.069836][T20370] ? netlink_ack+0xb50/0xb50 [ 957.074487][T20370] netlink_unicast+0x774/0x920 [ 957.079308][T20370] netlink_sendmsg+0x8ba/0xbe0 [ 957.084112][T20370] ? netlink_getsockopt+0x570/0x570 [ 957.089336][T20370] ? aa_sock_msg_perm+0x94/0x150 [ 957.094316][T20370] ? aa_sk_perm+0x1/0x910 [ 957.098681][T20370] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 957.104003][T20370] ? security_socket_sendmsg+0x7c/0xa0 [ 957.109493][T20370] ? netlink_getsockopt+0x570/0x570 [ 957.114730][T20370] ____sys_sendmsg+0x5b7/0x8f0 [ 957.119542][T20370] ? __sys_sendmsg_sock+0x30/0x30 [ 957.124635][T20370] ? import_iovec+0x6f/0xa0 [ 957.129192][T20370] ___sys_sendmsg+0x236/0x2e0 [ 957.133909][T20370] ? __sys_sendmsg+0x2a0/0x2a0 [ 957.139002][T20370] __se_sys_sendmsg+0x1af/0x290 [ 957.143895][T20370] ? __x64_sys_sendmsg+0x80/0x80 [ 957.148863][T20370] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 957.155158][T20370] ? lockdep_hardirqs_on+0x94/0x140 [ 957.160410][T20370] do_syscall_64+0x4c/0xa0 [ 957.164871][T20370] ? clear_bhb_loop+0x30/0x80 [ 957.169754][T20370] ? clear_bhb_loop+0x30/0x80 [ 957.174470][T20370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 957.180511][T20370] RIP: 0033:0x7f08ec90beb9 [ 957.184956][T20370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.204589][T20370] RSP: 002b:00007f08eab67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.213044][T20370] RAX: ffffffffffffffda RBX: 00007f08ecb86fa0 RCX: 00007f08ec90beb9 [ 957.221057][T20370] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 957.229064][T20370] RBP: 00007f08eab67090 R08: 0000000000000000 R09: 0000000000000000 [ 957.237072][T20370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 957.245082][T20370] R13: 00007f08ecb87038 R14: 00007f08ecb86fa0 R15: 00007ffc65c2ad08 [ 957.253116][T20370] [ 957.832212][T20384] device wg2 entered promiscuous mode [ 958.408987][T20417] netlink: 21 bytes leftover after parsing attributes in process `syz.2.5087'. [ 958.487398][T20417] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 958.921764][T20433] device syzkaller0 entered promiscuous mode [ 959.157397][T20443] netlink: 'syz.6.5093': attribute type 21 has an invalid length. [ 959.256074][T20443] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5093'. [ 959.266787][ T4234] Bluetooth: hci3: command 0x0406 tx timeout [ 959.641462][T20451] netlink: 'syz.3.5096': attribute type 22 has an invalid length. [ 960.307425][T20469] netlink: 21 bytes leftover after parsing attributes in process `syz.2.5101'. [ 960.325311][T20469] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 961.782452][T20513] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 961.923331][T20513] device syzkaller0 entered promiscuous mode [ 963.991416][T20578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5124'. [ 965.009898][T20608] netlink: 'syz.4.5129': attribute type 22 has an invalid length. [ 965.129620][T20613] FAULT_INJECTION: forcing a failure. [ 965.129620][T20613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.215653][T20613] CPU: 0 PID: 20613 Comm: syz.2.5130 Not tainted syzkaller #0 [ 965.223182][T20613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 965.233266][T20613] Call Trace: [ 965.236581][T20613] [ 965.239535][T20613] dump_stack_lvl+0x188/0x250 [ 965.244261][T20613] ? show_regs_print_info+0x20/0x20 [ 965.249541][T20613] ? load_image+0x400/0x400 [ 965.254255][T20613] ? __lock_acquire+0x7d10/0x7d10 [ 965.259316][T20613] should_fail+0x38c/0x4c0 [ 965.263790][T20613] _copy_from_user+0x2e/0x170 [ 965.268506][T20613] kstrtouint_from_user+0xd3/0x220 [ 965.273657][T20613] ? kstrtol_from_user+0x2a0/0x2a0 [ 965.278813][T20613] proc_fail_nth_write+0x8b/0x200 [ 965.283871][T20613] ? proc_fail_nth_read+0x220/0x220 [ 965.289106][T20613] ? common_file_perm+0x171/0x1c0 [ 965.294162][T20613] ? proc_fail_nth_read+0x220/0x220 [ 965.299393][T20613] vfs_write+0x30b/0xd60 [ 965.303680][T20613] ? file_end_write+0x250/0x250 [ 965.308567][T20613] ? __fget_files+0x40f/0x480 [ 965.313295][T20613] ? mutex_lock_nested+0x17/0x20 [ 965.318267][T20613] ? __fdget_pos+0x2bf/0x370 [ 965.322885][T20613] ? ksys_write+0x71/0x260 [ 965.327447][T20613] ksys_write+0x152/0x260 [ 965.331815][T20613] ? __ia32_sys_read+0x80/0x80 [ 965.336626][T20613] ? lockdep_hardirqs_on+0x94/0x140 [ 965.341859][T20613] do_syscall_64+0x4c/0xa0 [ 965.346308][T20613] ? clear_bhb_loop+0x30/0x80 [ 965.351021][T20613] ? clear_bhb_loop+0x30/0x80 [ 965.355735][T20613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 965.361660][T20613] RIP: 0033:0x7f7cefeba78e [ 965.366111][T20613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 965.385744][T20613] RSP: 002b:00007f7cee154fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 965.394216][T20613] RAX: ffffffffffffffda RBX: 00007f7cee1556c0 RCX: 00007f7cefeba78e [ 965.402224][T20613] RDX: 0000000000000001 RSI: 00007f7cee1550a0 RDI: 0000000000000007 [ 965.410241][T20613] RBP: 00007f7cee155090 R08: 0000000000000000 R09: 0000000000000000 [ 965.418245][T20613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.426259][T20613] R13: 00007f7cf0175038 R14: 00007f7cf0174fa0 R15: 00007ffc67b88088 [ 965.434277][T20613] [ 965.548131][T20619] FAULT_INJECTION: forcing a failure. [ 965.548131][T20619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.703937][T20619] CPU: 0 PID: 20619 Comm: syz.6.5132 Not tainted syzkaller #0 [ 965.711566][T20619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 965.721659][T20619] Call Trace: [ 965.724975][T20619] [ 965.727928][T20619] dump_stack_lvl+0x188/0x250 [ 965.732649][T20619] ? show_regs_print_info+0x20/0x20 [ 965.737878][T20619] ? load_image+0x400/0x400 [ 965.742412][T20619] ? __lock_acquire+0x7d10/0x7d10 [ 965.747478][T20619] should_fail+0x38c/0x4c0 [ 965.751939][T20619] _copy_from_user+0x2e/0x170 [ 965.756650][T20619] iovec_from_user+0x142/0x370 [ 965.761457][T20619] __import_iovec+0x70/0x490 [ 965.766084][T20619] ? perf_tp_event+0xa92/0xbf0 [ 965.770915][T20619] import_iovec+0x6f/0xa0 [ 965.775287][T20619] ___sys_sendmsg+0x1fd/0x2e0 [ 965.780004][T20619] ? __sys_sendmsg+0x2a0/0x2a0 [ 965.784839][T20619] __se_sys_sendmsg+0x1af/0x290 [ 965.789732][T20619] ? __x64_sys_sendmsg+0x80/0x80 [ 965.794703][T20619] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 965.800725][T20619] ? lockdep_hardirqs_on+0x94/0x140 [ 965.805975][T20619] do_syscall_64+0x4c/0xa0 [ 965.810433][T20619] ? clear_bhb_loop+0x30/0x80 [ 965.815148][T20619] ? clear_bhb_loop+0x30/0x80 [ 965.819878][T20619] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 965.825799][T20619] RIP: 0033:0x7fbfec2ffeb9 [ 965.830250][T20619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.850345][T20619] RSP: 002b:00007fbfea55b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 965.858810][T20619] RAX: ffffffffffffffda RBX: 00007fbfec57afa0 RCX: 00007fbfec2ffeb9 [ 965.866816][T20619] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 965.875013][T20619] RBP: 00007fbfea55b090 R08: 0000000000000000 R09: 0000000000000000 [ 965.883014][T20619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.891016][T20619] R13: 00007fbfec57b038 R14: 00007fbfec57afa0 R15: 00007ffd57530078 [ 965.899039][T20619] [ 968.712336][T20700] netlink: 'syz.2.5146': attribute type 29 has an invalid length. [ 968.876719][T20700] netlink: 'syz.2.5146': attribute type 29 has an invalid length. [ 969.286634][T20708] netlink: 'syz.2.5146': attribute type 29 has an invalid length. [ 969.617197][T20730] device syzkaller0 entered promiscuous mode [ 970.538425][T20758] FAULT_INJECTION: forcing a failure. [ 970.538425][T20758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.647021][T20758] CPU: 1 PID: 20758 Comm: syz.2.5158 Not tainted syzkaller #0 [ 970.654669][T20758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 970.664880][T20758] Call Trace: [ 970.668193][T20758] [ 970.671155][T20758] dump_stack_lvl+0x188/0x250 [ 970.675868][T20758] ? show_regs_print_info+0x20/0x20 [ 970.681122][T20758] ? load_image+0x400/0x400 [ 970.685669][T20758] ? __lock_acquire+0x7d10/0x7d10 [ 970.690745][T20758] should_fail+0x38c/0x4c0 [ 970.695201][T20758] _copy_to_user+0x2e/0x130 [ 970.699737][T20758] simple_read_from_buffer+0xe3/0x150 [ 970.705150][T20758] proc_fail_nth_read+0x1a6/0x220 [ 970.710245][T20758] ? proc_fault_inject_write+0x310/0x310 [ 970.716009][T20758] ? fsnotify_perm+0x254/0x560 [ 970.720818][T20758] ? proc_fault_inject_write+0x310/0x310 [ 970.726487][T20758] vfs_read+0x301/0xd60 [ 970.730684][T20758] ? kernel_read+0x1e0/0x1e0 [ 970.735316][T20758] ? __fget_files+0x40f/0x480 [ 970.740126][T20758] ? mutex_lock_nested+0x17/0x20 [ 970.745112][T20758] ? __fdget_pos+0x2bf/0x370 [ 970.750082][T20758] ? ksys_read+0x71/0x260 [ 970.754456][T20758] ksys_read+0x152/0x260 [ 970.758745][T20758] ? vfs_write+0xd60/0xd60 [ 970.763196][T20758] ? lockdep_hardirqs_on+0x94/0x140 [ 970.768435][T20758] do_syscall_64+0x4c/0xa0 [ 970.772896][T20758] ? clear_bhb_loop+0x30/0x80 [ 970.777606][T20758] ? clear_bhb_loop+0x30/0x80 [ 970.782317][T20758] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 970.788243][T20758] RIP: 0033:0x7f7cefeba78e [ 970.792693][T20758] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 970.812341][T20758] RSP: 002b:00007f7cee154fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 970.820807][T20758] RAX: ffffffffffffffda RBX: 00007f7cee1556c0 RCX: 00007f7cefeba78e [ 970.828825][T20758] RDX: 000000000000000f RSI: 00007f7cee1550a0 RDI: 0000000000000004 [ 970.836852][T20758] RBP: 00007f7cee155090 R08: 0000000000000000 R09: 0000000000000000 [ 970.844866][T20758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.852890][T20758] R13: 00007f7cf0175038 R14: 00007f7cf0174fa0 R15: 00007ffc67b88088 [ 970.860942][T20758] [ 972.272338][T20793] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5164'. [ 975.020716][T20862] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5180'. [ 978.592240][T20955] netlink: 'syz.3.5200': attribute type 29 has an invalid length. [ 978.627697][T20955] netlink: 'syz.3.5200': attribute type 29 has an invalid length. [ 978.690676][T20959] netlink: 'syz.3.5200': attribute type 2 has an invalid length. [ 978.722051][T20959] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5200'. [ 978.995859][T20959] device syzkaller0 entered promiscuous mode [ 979.759041][T19395] Bluetooth: hci5: command 0x0406 tx timeout [ 983.396316][T21076] netlink: 'syz.3.5239': attribute type 7 has an invalid length. [ 985.664204][T21132] FAULT_INJECTION: forcing a failure. [ 985.664204][T21132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.740059][T21132] CPU: 0 PID: 21132 Comm: syz.3.5256 Not tainted syzkaller #0 [ 985.747671][T21132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 985.757793][T21132] Call Trace: [ 985.761187][T21132] [ 985.764145][T21132] dump_stack_lvl+0x188/0x250 [ 985.768872][T21132] ? show_regs_print_info+0x20/0x20 [ 985.774206][T21132] ? load_image+0x400/0x400 [ 985.778744][T21132] ? alloc_skb_with_frags+0x5a8/0x730 [ 985.784151][T21132] ? __lock_acquire+0x7d10/0x7d10 [ 985.789213][T21132] should_fail+0x38c/0x4c0 [ 985.793694][T21132] _copy_from_iter+0x22e/0x1170 [ 985.798571][T21132] ? __lock_acquire+0x7d10/0x7d10 [ 985.803637][T21132] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 985.809046][T21132] ? __local_bh_enable_ip+0x136/0x1c0 [ 985.814457][T21132] ? __virt_addr_valid+0x3c6/0x470 [ 985.819613][T21132] ? __phys_addr_symbol+0x2b/0x70 [ 985.824663][T21132] ? __check_object_size+0x30c/0x410 [ 985.830069][T21132] rawv6_send_hdrinc+0x7c7/0x1690 [ 985.835137][T21132] ? rawv6_probe_proto_opt+0x300/0x300 [ 985.840627][T21132] ? txopt_get+0x303/0x3c0 [ 985.845066][T21132] ? fl6_sock_lookup+0xc0/0xc0 [ 985.849878][T21132] rawv6_sendmsg+0x11b1/0x1700 [ 985.854686][T21132] ? compat_rawv6_ioctl+0x60/0x60 [ 985.859759][T21132] ? aa_af_perm+0x340/0x340 [ 985.864295][T21132] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 985.870750][T21132] ? sock_rps_record_flow+0x17/0x3b0 [ 985.876069][T21132] ? inet_sendmsg+0x78/0x2f0 [ 985.880720][T21132] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 985.886046][T21132] ? security_socket_sendmsg+0x7c/0xa0 [ 985.891551][T21132] ? inet_send_prepare+0x260/0x260 [ 985.896719][T21132] ____sys_sendmsg+0x5b7/0x8f0 [ 985.901539][T21132] ? __sys_sendmsg_sock+0x30/0x30 [ 985.906606][T21132] ? import_iovec+0x6f/0xa0 [ 985.911140][T21132] ___sys_sendmsg+0x236/0x2e0 [ 985.915842][T21132] ? __sys_sendmsg+0x2a0/0x2a0 [ 985.920653][T21132] __se_sys_sendmsg+0x1af/0x290 [ 985.925528][T21132] ? __x64_sys_sendmsg+0x80/0x80 [ 985.930483][T21132] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 985.936502][T21132] ? lockdep_hardirqs_on+0x94/0x140 [ 985.941745][T21132] do_syscall_64+0x4c/0xa0 [ 985.946189][T21132] ? clear_bhb_loop+0x30/0x80 [ 985.950886][T21132] ? clear_bhb_loop+0x30/0x80 [ 985.955587][T21132] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 985.961495][T21132] RIP: 0033:0x7f4cc5eceeb9 [ 985.965937][T21132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.985562][T21132] RSP: 002b:00007f4cc412a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.994012][T21132] RAX: ffffffffffffffda RBX: 00007f4cc6149fa0 RCX: 00007f4cc5eceeb9 [ 986.002002][T21132] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 986.009989][T21132] RBP: 00007f4cc412a090 R08: 0000000000000000 R09: 0000000000000000 [ 986.017976][T21132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.026083][T21132] R13: 00007f4cc614a038 R14: 00007f4cc6149fa0 R15: 00007fff460b29d8 [ 986.034112][T21132] [ 986.740270][T21155] netlink: 'syz.2.5264': attribute type 3 has an invalid length. [ 986.779203][T21155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5264'. [ 988.512332][T21195] device syzkaller0 entered promiscuous mode [ 992.115048][T21231] netlink: 'syz.6.5285': attribute type 10 has an invalid length. [ 992.258312][T21231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.281689][T21231] team0: Port device bond0 added [ 993.030428][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.037054][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.780861][T21266] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5294'. [ 994.485518][T21285] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5300'. [ 994.647749][T21285] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.846707][T21285] device bridge_slave_0 left promiscuous mode [ 994.854255][T21285] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.044382][T21297] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.5303'. [ 995.082741][T21297] netlink: 6332 bytes leftover after parsing attributes in process `syz.6.5303'. [ 995.340749][T21292] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.5303'. [ 996.605213][T21332] netlink: 62176 bytes leftover after parsing attributes in process `syz.2.5314'. [ 996.759415][T21338] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.5316'. [ 996.821732][T21334] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5314'. [ 997.492384][T21341] netlink: 'syz.6.5315': attribute type 39 has an invalid length. [ 997.591073][T21340] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.5316'. [ 997.622788][T21340] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.5316'. [ 998.233426][T21351] Ÿë: port 1(ip6gretap0) entered blocking state [ 998.254485][T21351] Ÿë: port 1(ip6gretap0) entered disabled state [ 998.264305][T21351] device ip6gretap0 entered promiscuous mode [ 999.559217][T21380] FAULT_INJECTION: forcing a failure. [ 999.559217][T21380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.646779][T21381] __nla_validate_parse: 1 callbacks suppressed [ 999.646797][T21381] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5330'. [ 999.663216][T21380] CPU: 1 PID: 21380 Comm: syz.6.5329 Not tainted syzkaller #0 [ 999.670731][T21380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 999.680813][T21380] Call Trace: [ 999.684144][T21380] [ 999.687098][T21380] dump_stack_lvl+0x188/0x250 [ 999.691823][T21380] ? show_regs_print_info+0x20/0x20 [ 999.697060][T21380] ? load_image+0x400/0x400 [ 999.701608][T21380] ? __lock_acquire+0x7d10/0x7d10 [ 999.706682][T21380] should_fail+0x38c/0x4c0 [ 999.711146][T21380] _copy_to_user+0x2e/0x130 [ 999.715690][T21380] simple_read_from_buffer+0xe3/0x150 [ 999.721159][T21380] proc_fail_nth_read+0x1a6/0x220 [ 999.726222][T21380] ? proc_fault_inject_write+0x310/0x310 [ 999.731916][T21380] ? fsnotify_perm+0x254/0x560 [ 999.736719][T21380] ? proc_fault_inject_write+0x310/0x310 [ 999.742386][T21380] vfs_read+0x301/0xd60 [ 999.746590][T21380] ? kernel_read+0x1e0/0x1e0 [ 999.751221][T21380] ? __fget_files+0x40f/0x480 [ 999.755942][T21380] ? mutex_lock_nested+0x17/0x20 [ 999.760909][T21380] ? __fdget_pos+0x2bf/0x370 [ 999.765530][T21380] ? ksys_read+0x71/0x260 [ 999.769894][T21380] ksys_read+0x152/0x260 [ 999.774172][T21380] ? vfs_write+0xd60/0xd60 [ 999.778631][T21380] ? lockdep_hardirqs_on+0x94/0x140 [ 999.783885][T21380] do_syscall_64+0x4c/0xa0 [ 999.788342][T21380] ? clear_bhb_loop+0x30/0x80 [ 999.793055][T21380] ? clear_bhb_loop+0x30/0x80 [ 999.797766][T21380] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 999.803702][T21380] RIP: 0033:0x7fbfec2c078e [ 999.808149][T21380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 999.827868][T21380] RSP: 002b:00007fbfea55afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 999.836310][T21380] RAX: ffffffffffffffda RBX: 00007fbfea55b6c0 RCX: 00007fbfec2c078e [ 999.844307][T21380] RDX: 000000000000000f RSI: 00007fbfea55b0a0 RDI: 0000000000000005 [ 999.852299][T21380] RBP: 00007fbfea55b090 R08: 0000000000000000 R09: 0000000000000000 [ 999.860306][T21380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.868292][T21380] R13: 00007fbfec57b038 R14: 00007fbfec57afa0 R15: 00007ffd57530078 [ 999.876305][T21380] [ 1000.430315][T21394] netlink: 62176 bytes leftover after parsing attributes in process `syz.3.5332'. [ 1000.800057][T21394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5332'. [ 1000.977515][T21400] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5333'. [ 1001.117180][T21403] Ÿë: port 1(ip6gretap0) entered blocking state [ 1001.139839][T21403] Ÿë: port 1(ip6gretap0) entered disabled state [ 1001.167935][T21403] device ip6gretap0 entered promiscuous mode [ 1003.265378][T21435] netlink: 'syz.4.5346': attribute type 39 has an invalid length. [ 1004.228580][T21456] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.5351'. [ 1004.272978][T21456] netlink: zone id is out of range [ 1004.287140][T21456] netlink: zone id is out of range [ 1004.292315][T21456] netlink: zone id is out of range [ 1004.328165][T21456] netlink: zone id is out of range [ 1004.394198][T21456] netlink: zone id is out of range [ 1004.459301][T21456] netlink: zone id is out of range [ 1004.464484][T21456] netlink: zone id is out of range [ 1004.515135][T21456] netlink: zone id is out of range [ 1004.526742][T21456] netlink: zone id is out of range [ 1004.532072][T21456] netlink: zone id is out of range [ 1004.878657][T21476] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1005.492210][T21488] netlink: 'syz.3.5361': attribute type 10 has an invalid length. [ 1005.512150][T21488] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5361'. [ 1006.613935][T21517] delete_channel: no stack [ 1006.864213][T21529] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1007.802699][T21545] netlink: 'syz.6.5376': attribute type 10 has an invalid length. [ 1007.817325][T21545] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5376'. [ 1008.175130][T21545] team0: Port device bond0 removed [ 1008.893396][ T4371] wlan1: Trigger new scan to find an IBSS to join [ 1009.696844][T21582] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1011.907031][T12664] wlan1: Creating new IBSS network, BSSID a2:12:a9:fc:62:4d [ 1012.120742][T21656] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.5409'. [ 1012.167224][T21656] net_ratelimit: 6 callbacks suppressed [ 1012.167241][T21656] netlink: zone id is out of range [ 1012.206746][T21656] netlink: zone id is out of range [ 1012.246633][T21656] netlink: zone id is out of range [ 1012.296653][T21656] netlink: zone id is out of range [ 1012.329225][T21656] netlink: zone id is out of range [ 1012.386051][T21656] netlink: zone id is out of range [ 1012.434526][T21656] netlink: zone id is out of range [ 1012.455995][T21656] netlink: zone id is out of range [ 1012.494339][T21656] netlink: zone id is out of range [ 1012.512933][T21672] netlink: 'syz.7.5414': attribute type 1 has an invalid length. [ 1012.590673][T21656] netlink: zone id is out of range [ 1012.607955][T21672] netlink: 154788 bytes leftover after parsing attributes in process `syz.7.5414'. [ 1012.866819][T21684] netlink: 'syz.2.5418': attribute type 10 has an invalid length. [ 1013.226304][T21684] team0: Device hsr_slave_0 failed to register rx_handler [ 1014.149505][T21722] netlink: 203516 bytes leftover after parsing attributes in process `syz.7.5431'. [ 1015.454939][T21764] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1015.808723][T21776] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5447'. [ 1016.836934][T21805] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1016.947682][T21812] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.5461'. [ 1017.612723][T21834] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5471'. [ 1018.148600][T21845] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5475'. [ 1019.199548][T21886] FAULT_INJECTION: forcing a failure. [ 1019.199548][T21886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.266686][T21886] CPU: 1 PID: 21886 Comm: syz.7.5489 Not tainted syzkaller #0 [ 1019.274219][T21886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1019.284294][T21886] Call Trace: [ 1019.287595][T21886] [ 1019.290542][T21886] dump_stack_lvl+0x188/0x250 [ 1019.295343][T21886] ? show_regs_print_info+0x20/0x20 [ 1019.300564][T21886] ? load_image+0x400/0x400 [ 1019.305097][T21886] ? __lock_acquire+0x7d10/0x7d10 [ 1019.310148][T21886] ? vfs_write+0x8b2/0xd60 [ 1019.314592][T21886] should_fail+0x38c/0x4c0 [ 1019.319077][T21886] _copy_from_user+0x2e/0x170 [ 1019.323794][T21886] __sys_bpf+0x26d/0x6f0 [ 1019.328074][T21886] ? bpf_link_show_fdinfo+0x380/0x380 [ 1019.333474][T21886] ? rcu_nmi_exit+0x6f/0xf0 [ 1019.338025][T21886] ? vtime_user_exit+0x2c8/0x3e0 [ 1019.342994][T21886] __x64_sys_bpf+0x78/0x90 [ 1019.347442][T21886] do_syscall_64+0x4c/0xa0 [ 1019.351874][T21886] ? clear_bhb_loop+0x30/0x80 [ 1019.356580][T21886] ? clear_bhb_loop+0x30/0x80 [ 1019.361287][T21886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1019.367237][T21886] RIP: 0033:0x7f08ec90beb9 [ 1019.371687][T21886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.391420][T21886] RSP: 002b:00007f08eab67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1019.399867][T21886] RAX: ffffffffffffffda RBX: 00007f08ecb86fa0 RCX: 00007f08ec90beb9 [ 1019.407877][T21886] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 1019.415889][T21886] RBP: 00007f08eab67090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.424015][T21886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.432013][T21886] R13: 00007f08ecb87038 R14: 00007f08ecb86fa0 R15: 00007ffc65c2ad08 [ 1019.440033][T21886] [ 1019.813714][T21905] netlink: 'syz.4.5501': attribute type 9 has an invalid length. [ 1019.864598][T21905] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5501'. [ 1019.974538][T21908] netlink: 'syz.4.5501': attribute type 9 has an invalid length. [ 1020.022853][T21908] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5501'. [ 1020.153272][T21917] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.5506'. [ 1020.239428][T21924] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.5508'. [ 1021.006171][T21942] netlink: 'syz.7.5512': attribute type 2 has an invalid length. [ 1021.113778][T21942] netlink: 119 bytes leftover after parsing attributes in process `syz.7.5512'. [ 1021.496542][T21963] netlink: 'syz.4.5520': attribute type 46 has an invalid length. [ 1021.533486][T21963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5520'. [ 1021.825053][T21976] netlink: 'syz.4.5526': attribute type 29 has an invalid length. [ 1021.875257][T21976] netlink: 'syz.4.5526': attribute type 29 has an invalid length. [ 1022.968846][T22016] netlink: 'syz.7.5540': attribute type 12 has an invalid length. [ 1022.988641][T22016] netlink: 14585 bytes leftover after parsing attributes in process `syz.7.5540'. [ 1024.418189][T22077] netlink: 'syz.4.5561': attribute type 10 has an invalid length. [ 1024.489921][T22077] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5561'. [ 1024.543023][T22077] net_ratelimit: 18 callbacks suppressed [ 1024.543042][T22077] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1025.461375][T22113] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5573'. [ 1025.530143][T22118] netlink: 'syz.7.5575': attribute type 13 has an invalid length. [ 1025.596093][T22118] netlink: 'syz.7.5575': attribute type 3 has an invalid length. [ 1025.628197][T22118] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.5575'. [ 1025.826261][T22128] netlink: 'syz.4.5577': attribute type 10 has an invalid length. [ 1025.844827][T22128] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5577'. [ 1025.869523][T22128] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1026.337677][T22148] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.5586'. [ 1026.370210][T22148] netlink: del zone limit has 8 unknown bytes [ 1026.492568][T22154] netlink: 'syz.7.5587': attribute type 21 has an invalid length. [ 1026.526960][T22154] IPv6: NLM_F_CREATE should be specified when creating new route [ 1026.536317][T22154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1026.543747][T22154] IPv6: NLM_F_CREATE should be set when creating new route [ 1026.551908][T22154] IPv6: NLM_F_CREATE should be set when creating new route [ 1026.559535][T22154] IPv6: NLM_F_CREATE should be set when creating new route [ 1028.223844][T22216] FAULT_INJECTION: forcing a failure. [ 1028.223844][T22216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.324044][T22216] CPU: 1 PID: 22216 Comm: syz.6.5611 Not tainted syzkaller #0 [ 1028.331589][T22216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1028.341779][T22216] Call Trace: [ 1028.345096][T22216] [ 1028.348342][T22216] dump_stack_lvl+0x188/0x250 [ 1028.353075][T22216] ? show_regs_print_info+0x20/0x20 [ 1028.358417][T22216] ? load_image+0x400/0x400 [ 1028.362976][T22216] ? __lock_acquire+0x7d10/0x7d10 [ 1028.368039][T22216] ? tomoyo_path_number_perm+0x5b4/0x660 [ 1028.373720][T22216] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1028.380415][T22216] should_fail+0x38c/0x4c0 [ 1028.384993][T22216] _copy_from_user+0x2e/0x170 [ 1028.389720][T22216] wext_handle_ioctl+0xc4/0x1d0 [ 1028.394623][T22216] ? call_commit_handler+0xf0/0xf0 [ 1028.399796][T22216] sock_ioctl+0x143/0x710 [ 1028.404309][T22216] ? sock_poll+0x410/0x410 [ 1028.408796][T22216] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1028.413776][T22216] ? security_file_ioctl+0x7c/0xa0 [ 1028.418932][T22216] ? sock_poll+0x410/0x410 [ 1028.423419][T22216] __se_sys_ioctl+0xfa/0x170 [ 1028.428052][T22216] do_syscall_64+0x4c/0xa0 [ 1028.432507][T22216] ? clear_bhb_loop+0x30/0x80 [ 1028.437220][T22216] ? clear_bhb_loop+0x30/0x80 [ 1028.441945][T22216] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1028.448108][T22216] RIP: 0033:0x7fbfec2ffeb9 [ 1028.452572][T22216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.472325][T22216] RSP: 002b:00007fbfea55b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.480796][T22216] RAX: ffffffffffffffda RBX: 00007fbfec57afa0 RCX: 00007fbfec2ffeb9 [ 1028.488809][T22216] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000004 [ 1028.496828][T22216] RBP: 00007fbfea55b090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.504844][T22216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.512865][T22216] R13: 00007fbfec57b038 R14: 00007fbfec57afa0 R15: 00007ffd57530078 [ 1028.520903][T22216] [ 1032.663319][T22270] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1032.885928][T22280] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.5632'. [ 1032.968188][T22280] netlink: zone id is out of range [ 1032.973474][T22280] netlink: zone id is out of range [ 1033.026320][T22280] netlink: zone id is out of range [ 1033.032894][T22280] netlink: zone id is out of range [ 1033.038920][T22280] netlink: zone id is out of range [ 1033.044228][T22280] netlink: zone id is out of range [ 1033.050034][T22280] netlink: zone id is out of range [ 1033.055611][T22280] netlink: zone id is out of range [ 1033.061993][T22280] netlink: zone id is out of range [ 1033.093545][T22287] netlink: 'syz.7.5619': attribute type 10 has an invalid length. [ 1033.111952][T22287] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5619'. [ 1034.035547][T22312] netlink: 'syz.2.5644': attribute type 39 has an invalid length. [ 1034.191261][T22322] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.5648'. [ 1034.217495][T22317] netlink: 'syz.4.5647': attribute type 10 has an invalid length. [ 1034.240152][T22317] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5647'. [ 1034.980199][T22358] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.5661'. [ 1035.656836][T22371] netlink: 'syz.4.5665': attribute type 39 has an invalid length. [ 1037.225785][T22419] netlink: 'syz.3.5683': attribute type 10 has an invalid length. [ 1037.265882][T22419] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5683'. [ 1037.961395][T22431] net_ratelimit: 21 callbacks suppressed [ 1037.961417][T22431] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1038.441033][T22446] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.5691'. [ 1038.481978][T22446] netlink: zone id is out of range [ 1038.502208][T22446] netlink: zone id is out of range [ 1038.530677][T22446] netlink: zone id is out of range [ 1038.545353][T22446] netlink: zone id is out of range [ 1038.568672][T22446] netlink: zone id is out of range [ 1038.596778][T22446] netlink: zone id is out of range [ 1038.635516][T22446] netlink: zone id is out of range [ 1038.665523][T22446] netlink: zone id is out of range [ 1038.698632][T22446] netlink: zone id is out of range [ 1038.731458][T22450] netlink: 'syz.4.5694': attribute type 12 has an invalid length. [ 1038.742690][T22450] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.5694'. [ 1038.938990][T22455] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.5695'. [ 1039.007884][T22462] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1039.086832][T22470] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.5700'. [ 1040.858171][T22498] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1041.091922][T22507] netlink: 'syz.7.5714': attribute type 12 has an invalid length. [ 1041.136076][T22507] netlink: 14585 bytes leftover after parsing attributes in process `syz.7.5714'. [ 1042.557623][T22548] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1043.349043][T22580] net_ratelimit: 11 callbacks suppressed [ 1043.349066][T22580] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1044.105893][T22602] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1044.204475][T22601] netlink: 'syz.3.5747': attribute type 12 has an invalid length. [ 1044.235793][T22601] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.5747'. [ 1044.628347][T22617] netlink: 'syz.6.5753': attribute type 7 has an invalid length. [ 1044.687951][T22617] netlink: 140 bytes leftover after parsing attributes in process `syz.6.5753'. [ 1044.778469][T22622] netlink: 'syz.7.5756': attribute type 10 has an invalid length. [ 1044.846849][T22622] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5756'. [ 1044.979040][T22630] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.5759'. [ 1045.047722][T22630] netlink: del zone limit has 8 unknown bytes [ 1045.513690][T22641] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1045.818649][T22650] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.5764'. [ 1046.143239][T22666] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1046.698800][T22671] netlink: 'syz.4.5771': attribute type 7 has an invalid length. [ 1046.716378][T22671] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5771'. [ 1046.840487][T22674] netlink: 'syz.7.5772': attribute type 10 has an invalid length. [ 1046.886520][T22674] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5772'. [ 1046.918664][T22676] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.5773'. [ 1046.996882][T22676] netlink: del zone limit has 8 unknown bytes [ 1048.303008][T22713] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1048.421172][T22717] netlink: 'syz.3.5785': attribute type 7 has an invalid length. [ 1048.471299][T22717] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5785'. [ 1048.880786][T22734] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.5789'. [ 1048.955827][T22734] netlink: del zone limit has 8 unknown bytes [ 1048.976858][T22722] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1049.454197][T22739] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1050.018488][T22757] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1050.236789][T22760] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1050.678795][T22751] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1050.821906][T22776] netlink: 'syz.3.5806': attribute type 10 has an invalid length. [ 1050.857697][T22776] __nla_validate_parse: 1 callbacks suppressed [ 1050.857716][T22776] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5806'. [ 1050.927764][T22776] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1051.070717][T22779] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1051.373880][T22795] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1052.007410][T22812] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1053.185809][T22843] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1053.378782][T22850] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1053.699735][T22857] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1054.226237][T22872] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1054.470530][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.477427][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.138917][T22895] netlink: 'syz.2.5841': attribute type 9 has an invalid length. [ 1055.177452][T22895] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5841'. [ 1055.410390][T22909] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.5846'. [ 1055.497122][T22909] netlink: zone id is out of range [ 1055.526483][T22909] netlink: zone id is out of range [ 1055.531826][T22909] netlink: zone id is out of range [ 1055.553552][T22909] netlink: zone id is out of range [ 1055.586594][T22909] netlink: zone id is out of range [ 1055.591865][T22909] netlink: zone id is out of range [ 1055.626553][T22909] netlink: del zone limit has 8 unknown bytes [ 1055.895806][T22917] netlink: 'syz.3.5848': attribute type 2 has an invalid length. [ 1055.966605][T22917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5848'. [ 1056.308104][T22928] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1057.130356][T22950] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1057.536323][T22962] netlink: 'syz.3.5862': attribute type 9 has an invalid length. [ 1057.565996][T22962] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5862'. [ 1057.866860][T22962] can: request_module (can-proto-3) failed. [ 1058.185429][T22978] netlink: 'syz.6.5867': attribute type 10 has an invalid length. [ 1058.247095][T22978] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5867'. [ 1058.319794][T22978] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1059.322403][T23003] net_ratelimit: 1 callbacks suppressed [ 1059.322422][T23003] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1059.625006][T23010] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1060.020679][T23021] netlink: 'syz.6.5880': attribute type 10 has an invalid length. [ 1060.106239][T23021] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5880'. [ 1060.200175][T23021] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1060.773975][T23044] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1061.986086][T23070] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1063.720613][T23111] netlink: 'syz.3.5911': attribute type 10 has an invalid length. [ 1063.753841][T23111] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5911'. [ 1063.791300][T23111] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1064.048872][T23122] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1064.967656][T23148] netlink: 203516 bytes leftover after parsing attributes in process `syz.7.5923'. [ 1064.999278][T23148] netlink: zone id is out of range [ 1065.004665][T23148] netlink: del zone limit has 8 unknown bytes [ 1066.252199][T23191] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1067.361092][T23218] netlink: 'syz.6.5949': attribute type 10 has an invalid length. [ 1067.401299][T23218] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5949'. [ 1067.472883][T23218] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1067.673418][T23227] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.5953'. [ 1067.758234][T23227] netlink: zone id is out of range [ 1067.776489][T23227] netlink: del zone limit has 8 unknown bytes [ 1068.057582][T23239] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1068.333571][T23247] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1068.544028][T23262] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1068.759527][T23267] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5966'. [ 1068.771511][T23265] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1068.842688][T23270] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1068.902851][T23270] netlink: zone id is out of range [ 1068.949584][T23273] netlink: 'syz.7.5977': attribute type 10 has an invalid length. [ 1069.015320][T23273] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5977'. [ 1069.644250][T23296] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1070.023047][T23307] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5980'. [ 1070.532116][T23319] net_ratelimit: 2 callbacks suppressed [ 1070.532135][T23319] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1070.540891][T23324] netlink: 'syz.6.5986': attribute type 10 has an invalid length. [ 1070.618710][T23324] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5986'. [ 1070.668277][T23324] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1071.545264][T23357] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5995'. [ 1071.871138][T23368] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1072.171863][T23377] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1072.208426][T23378] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1072.549849][T23384] netlink: 'syz.3.6004': attribute type 10 has an invalid length. [ 1072.598543][T23384] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6004'. [ 1072.647721][T23384] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1072.882491][T23393] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1072.982201][T23399] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6009'. [ 1073.302408][T23409] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1073.693137][T23425] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1073.894376][T23429] netlink: 'syz.2.6020': attribute type 10 has an invalid length. [ 1073.965457][T23429] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6020'. [ 1073.981116][T23429] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1074.172413][T23439] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6024'. [ 1075.065382][T23472] device syzkaller0 entered promiscuous mode [ 1075.113506][T23474] netlink: 'syz.4.6037': attribute type 10 has an invalid length. [ 1075.142108][T23474] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6037'. [ 1075.780837][T23493] net_ratelimit: 3 callbacks suppressed [ 1075.780856][T23493] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1076.489786][T23512] netlink: 'syz.4.6050': attribute type 10 has an invalid length. [ 1076.542576][T23512] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6050'. [ 1076.631318][T23512] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1077.795950][T23551] FAULT_INJECTION: forcing a failure. [ 1077.795950][T23551] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.820118][T23551] CPU: 1 PID: 23551 Comm: syz.2.6062 Not tainted syzkaller #0 [ 1077.827667][T23551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1077.837788][T23551] Call Trace: [ 1077.841115][T23551] [ 1077.844094][T23551] dump_stack_lvl+0x188/0x250 [ 1077.848846][T23551] ? show_regs_print_info+0x20/0x20 [ 1077.854107][T23551] ? load_image+0x400/0x400 [ 1077.858690][T23551] ? __might_sleep+0xf0/0xf0 [ 1077.863340][T23551] ? __lock_acquire+0x7d10/0x7d10 [ 1077.868438][T23551] should_fail+0x38c/0x4c0 [ 1077.872932][T23551] should_failslab+0x5/0x20 [ 1077.877486][T23551] slab_pre_alloc_hook+0x51/0xc0 [ 1077.882499][T23551] __kmalloc_node_track_caller+0x68/0x3a0 [ 1077.888274][T23551] ? netlink_sendmsg+0x654/0xbe0 [ 1077.893274][T23551] ? kmem_cache_alloc_node+0x162/0x2d0 [ 1077.898783][T23551] ? __alloc_skb+0xf4/0x750 [ 1077.903466][T23551] ? netlink_sendmsg+0x654/0xbe0 [ 1077.908460][T23551] __alloc_skb+0x22c/0x750 [ 1077.912955][T23551] netlink_sendmsg+0x654/0xbe0 [ 1077.917806][T23551] ? netlink_getsockopt+0x570/0x570 [ 1077.923060][T23551] ? aa_sock_msg_perm+0x94/0x150 [ 1077.928070][T23551] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1077.933401][T23551] ? security_socket_sendmsg+0x7c/0xa0 [ 1077.938914][T23551] ? netlink_getsockopt+0x570/0x570 [ 1077.944184][T23551] ____sys_sendmsg+0x5b7/0x8f0 [ 1077.949037][T23551] ? __sys_sendmsg_sock+0x30/0x30 [ 1077.954187][T23551] ? import_iovec+0x6f/0xa0 [ 1077.958758][T23551] ___sys_sendmsg+0x236/0x2e0 [ 1077.963536][T23551] ? __sys_sendmsg+0x2a0/0x2a0 [ 1077.968402][T23551] ? trace_event_raw_event_lock+0x270/0x270 [ 1077.974352][T23551] ? vfs_write+0x8b2/0xd60 [ 1077.978909][T23551] __se_sys_sendmsg+0x1af/0x290 [ 1077.983834][T23551] ? __x64_sys_sendmsg+0x80/0x80 [ 1077.988833][T23551] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1077.994920][T23551] ? lockdep_hardirqs_on+0x94/0x140 [ 1078.000200][T23551] do_syscall_64+0x4c/0xa0 [ 1078.004667][T23551] ? clear_bhb_loop+0x30/0x80 [ 1078.009414][T23551] ? clear_bhb_loop+0x30/0x80 [ 1078.014161][T23551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1078.020100][T23551] RIP: 0033:0x7f7cefef9eb9 [ 1078.024566][T23551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.044228][T23551] RSP: 002b:00007f7cee155028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1078.052720][T23551] RAX: ffffffffffffffda RBX: 00007f7cf0174fa0 RCX: 00007f7cefef9eb9 [ 1078.060752][T23551] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000010 [ 1078.068785][T23551] RBP: 00007f7cee155090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.076814][T23551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.084831][T23551] R13: 00007f7cf0175038 R14: 00007f7cf0174fa0 R15: 00007ffc67b88088 [ 1078.092932][T23551] [ 1078.249857][T23558] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1078.300999][T23561] netlink: 'syz.4.6065': attribute type 10 has an invalid length. [ 1078.322776][T23561] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6065'. [ 1078.354603][T23561] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1079.067992][T23591] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1079.349609][T23604] netlink: 'syz.6.6078': attribute type 28 has an invalid length. [ 1079.407212][T23604] netlink: 'syz.6.6078': attribute type 29 has an invalid length. [ 1079.466523][T23604] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6078'. [ 1079.497358][T23601] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1079.580082][T23610] netlink: 'syz.2.6080': attribute type 10 has an invalid length. [ 1079.610519][T23610] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6080'. [ 1079.649299][T23610] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1080.086308][T23622] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1080.595946][T23639] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6090'. [ 1080.874321][T23639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1081.164329][T23649] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1081.467006][T23667] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1081.740597][T23669] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6097'. [ 1081.818285][T23675] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6097'. [ 1081.981691][T23685] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6103'. [ 1082.072720][T23687] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1082.242001][T23691] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1082.367196][T23689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6106'. [ 1083.266787][T23722] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6117'. [ 1083.798939][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6119'. [ 1083.876822][T23735] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1084.143306][T23744] netlink: 'syz.7.6124': attribute type 10 has an invalid length. [ 1084.197016][T23744] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6124'. [ 1084.580293][T23758] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6128'. [ 1084.864894][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.043845][T23746] chnl_net:caif_netlink_parms(): no params data found [ 1085.146108][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.262664][T23764] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6129'. [ 1085.355489][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.586967][ T144] bond0: (slave netdevsim0): Releasing backup interface [ 1085.622723][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.034652][T23772] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1086.089633][T23746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.108742][T23746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.136224][T23746] device bridge_slave_0 entered promiscuous mode [ 1086.176956][T23784] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1086.197198][T23746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.216716][T23746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.225122][T23746] device bridge_slave_1 entered promiscuous mode [ 1086.428658][T23746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.466834][T19386] Bluetooth: hci4: command 0x0409 tx timeout [ 1086.494430][T23796] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6138'. [ 1086.508740][T23746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.828451][T23746] team0: Port device team_slave_0 added [ 1086.868700][T23746] team0: Port device team_slave_1 added [ 1086.936311][T23746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.946550][T23746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.034075][T23746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.132992][T23746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.145187][T23746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.244883][T23746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.310303][T23819] netlink: 'syz.3.6144': attribute type 10 has an invalid length. [ 1087.347671][T23819] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6144'. [ 1087.400805][T23819] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1087.702156][T23746] device hsr_slave_0 entered promiscuous mode [ 1087.728649][T23746] device hsr_slave_1 entered promiscuous mode [ 1087.768784][T23746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1087.799271][T23746] Cannot create hsr debugfs directory [ 1088.102998][T23834] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1088.240261][T23841] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6150'. [ 1088.414737][T23846] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1088.556556][T16382] Bluetooth: hci4: command 0x041b tx timeout [ 1088.827249][T23860] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1089.423511][T23878] netlink: 'syz.6.6159': attribute type 10 has an invalid length. [ 1089.546921][T23878] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6159'. [ 1089.629856][T23878] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1089.992651][T23746] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1090.075769][T23746] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1090.131737][T23889] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1090.239221][T23746] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1090.279815][T23746] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1090.311130][T23900] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.6164'. [ 1090.538681][T23905] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1090.629131][T19399] Bluetooth: hci4: command 0x040f tx timeout [ 1090.869634][T23746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.921748][ T144] device hsr_slave_0 left promiscuous mode [ 1090.949384][ T144] device hsr_slave_1 left promiscuous mode [ 1091.066791][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1091.074354][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1091.121108][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1091.146917][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.217920][ T144] device veth1_macvtap left promiscuous mode [ 1091.224052][ T144] device veth0_macvtap left promiscuous mode [ 1091.268575][ T144] device veth1_vlan left promiscuous mode [ 1091.332320][T23927] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1092.716812][T19399] Bluetooth: hci4: command 0x0419 tx timeout [ 1092.746698][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1092.829119][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1092.907292][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.957091][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.271423][ T144] bond0 (unregistering): Released all slaves [ 1093.390253][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1093.425105][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1093.464325][T23932] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1093.498198][T23746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.632329][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1093.657737][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1093.707176][T12664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.714310][T12664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.800006][T23944] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1093.886746][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1093.894971][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1093.921496][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1093.956821][T12664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.964118][T12664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.062841][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1094.118150][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1094.181776][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1094.200514][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1094.228399][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1094.261004][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1094.287753][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1094.340706][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1094.387694][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1094.432388][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1094.472386][T23746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1094.489322][T23967] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1094.527459][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1095.532889][T23992] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1095.603096][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1095.624287][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1095.661795][T23746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.869418][T24001] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1096.437269][T24014] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1096.768831][T24024] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6195'. [ 1097.058208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1097.074489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1097.224674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1097.247572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1097.286233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1097.337455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1097.379976][T23746] device veth0_vlan entered promiscuous mode [ 1097.445912][T23746] device veth1_vlan entered promiscuous mode [ 1097.574142][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1097.608323][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1097.679298][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1097.732355][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1097.787857][T23746] device veth0_macvtap entered promiscuous mode [ 1097.846873][T23746] device veth1_macvtap entered promiscuous mode [ 1097.943830][T24048] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1098.019165][T23746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.053901][T23746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.085629][T23746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.128501][T23746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.166138][T23746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.206671][T23746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.249601][T23746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.318934][T23746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.350164][T23746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.407849][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1098.417137][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1098.457010][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1098.517859][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1098.536462][T24063] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1098.644274][T23746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.685743][T23746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.715329][T23746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.746221][T23746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.776516][T23746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.818049][T23746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.856453][T23746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.897198][T23746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.943954][T23746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.040299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1099.078372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1099.120151][T23746] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.148459][T23746] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.186439][T23746] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.195202][T23746] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.270709][T24090] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.6208'. [ 1099.542347][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.576535][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.690740][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1099.697360][T22046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.729353][T22046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.785818][T12664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1100.024680][T24107] netlink: 'syz.4.6120': attribute type 10 has an invalid length. [ 1100.074232][T24107] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6120'. [ 1100.120863][T24107] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1100.934284][T24122] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1101.162581][T24131] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1101.228752][T24132] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1102.097045][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.267614][T24150] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1102.320837][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.399589][T24153] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1102.507933][T24143] chnl_net:caif_netlink_parms(): no params data found [ 1102.655898][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.837921][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.185894][T24169] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1103.446774][T24143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.486809][T24143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.514383][T24143] device bridge_slave_0 entered promiscuous mode [ 1103.549392][T24143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.606507][T24143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.614122][T24178] netlink: 209660 bytes leftover after parsing attributes in process `syz.3.6232'. [ 1103.641830][T24143] device bridge_slave_1 entered promiscuous mode [ 1103.698459][T16063] Bluetooth: hci0: command 0x0409 tx timeout [ 1103.848047][ T144] device ip6gretap0 left promiscuous mode [ 1103.910424][ T144] Ÿë: port 1(ip6gretap0) entered disabled state [ 1103.994765][T24182] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1104.029267][T24143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.089870][T24143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.150932][T24195] netlink: 'syz.3.6237': attribute type 10 has an invalid length. [ 1104.195346][T24195] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6237'. [ 1104.299954][T24195] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1104.357026][T24202] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1104.441518][T24143] team0: Port device team_slave_0 added [ 1104.548157][T24143] team0: Port device team_slave_1 added [ 1104.765167][T24143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.781758][T24143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.868207][T22046] wlan1: Trigger new scan to find an IBSS to join [ 1104.897913][T24143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.934827][T24207] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1105.045482][T24143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.059187][T24143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.175121][T24143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.591153][T24143] device hsr_slave_0 entered promiscuous mode [ 1105.624348][T24143] device hsr_slave_1 entered promiscuous mode [ 1105.651330][T24232] netlink: 209660 bytes leftover after parsing attributes in process `syz.7.6246'. [ 1105.662073][T24143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1105.682175][T24143] Cannot create hsr debugfs directory [ 1105.746794][T19386] Bluetooth: hci0: command 0x041b tx timeout [ 1105.768128][T24228] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1106.053334][T24237] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1106.087410][T24241] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1106.176660][T24244] netlink: 'syz.6.6251': attribute type 10 has an invalid length. [ 1106.227419][T24244] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6251'. [ 1106.308111][T24244] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1107.106861][ T144] device hsr_slave_0 left promiscuous mode [ 1107.116153][ T144] device hsr_slave_1 left promiscuous mode [ 1107.141519][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1107.156785][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.189050][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1107.213400][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.321327][ T144] device veth1_macvtap left promiscuous mode [ 1107.331847][ T144] device veth1_vlan left promiscuous mode [ 1107.362907][ T144] device veth0_vlan left promiscuous mode [ 1107.826726][T16382] Bluetooth: hci0: command 0x040f tx timeout [ 1108.413685][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1108.460694][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1108.495025][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.525103][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.665837][ T144] bond0 (unregistering): (slave team0): Releasing backup interface [ 1108.722915][ T144] bond0 (unregistering): Released all slaves [ 1108.776223][T24281] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1108.850929][T24289] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1108.995487][T24143] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1109.049405][T24143] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1109.110128][T24143] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1109.170647][T24143] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1109.348189][T24305] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1109.638095][T24321] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1109.683767][T24143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.762210][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1109.773727][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1109.798895][T24143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.819913][T24329] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1109.889193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1109.906975][T19386] Bluetooth: hci0: command 0x0419 tx timeout [ 1109.926914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1109.956488][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.963774][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.005903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1110.099687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1110.157841][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.165037][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.232802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1110.288823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1110.325751][T24336] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1110.506585][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1110.541998][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1110.615886][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1110.707508][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1110.747404][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1110.794096][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1110.843826][T24143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1110.941813][T12664] wlan1: Trigger new scan to find an IBSS to join [ 1110.950992][T24143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1111.020786][T24351] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1111.063624][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1111.102135][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1111.169725][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1111.256835][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1111.265541][T22046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1111.291210][T24358] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1111.503111][T24370] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1111.645117][T24375] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1111.782041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1111.799940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1111.838989][T24143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.383849][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1112.444770][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1112.468014][T24394] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1112.523241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1112.547743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1112.613627][T24143] device veth0_vlan entered promiscuous mode [ 1112.650848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1112.677812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1112.723601][T24143] device veth1_vlan entered promiscuous mode [ 1112.809496][T24405] netlink: 'syz.3.6293': attribute type 21 has an invalid length. [ 1112.850074][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1112.877991][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1112.887089][T24405] netlink: 'syz.3.6293': attribute type 1 has an invalid length. [ 1112.931578][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1112.977586][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1113.032960][T24143] device veth0_macvtap entered promiscuous mode [ 1113.070661][T24143] device veth1_macvtap entered promiscuous mode [ 1113.158077][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.220174][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.255391][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.298482][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.324167][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.368056][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.393160][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.420463][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.457594][T24143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.487164][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1113.503546][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1113.547539][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1113.617230][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1113.660615][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.688690][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.719119][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.766485][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.800192][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.838289][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.854247][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.878145][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.907940][T24143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.938737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1113.963556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1114.001938][T24143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.021101][T24143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.047341][T24143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.076425][T24143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.617368][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.640805][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.683631][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1115.707837][T24436] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1115.708161][T24435] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1115.748718][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.755159][T24437] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1115.777666][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.846521][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1115.919146][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.925612][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.281560][T24455] netlink: 'syz.7.6306': attribute type 10 has an invalid length. [ 1116.303681][T24455] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6306'. [ 1116.984448][T24468] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1117.160259][T24480] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1117.610644][T24490] netlink: 'syz.2.6318': attribute type 10 has an invalid length. [ 1117.622764][T24490] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6318'. [ 1117.747638][T24498] netlink: 'syz.2.6321': attribute type 10 has an invalid length. [ 1117.781747][T24498] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6321'. [ 1117.815585][T24498] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1118.195666][T24515] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1118.214556][T24508] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1118.410876][T24522] netlink: 'syz.2.6332': attribute type 10 has an invalid length. [ 1118.422436][T24522] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6332'. [ 1119.021035][T24542] netlink: 'syz.4.6338': attribute type 10 has an invalid length. [ 1119.066703][T24542] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6338'. [ 1119.199279][T24542] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1119.312812][T24548] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1119.404219][T24556] netlink: 'syz.4.6344': attribute type 10 has an invalid length. [ 1119.420335][T24553] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1119.434105][T24556] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6344'. [ 1119.852908][T24572] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1119.875796][T24571] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1120.051064][T24578] FAULT_INJECTION: forcing a failure. [ 1120.051064][T24578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.128379][T24578] CPU: 0 PID: 24578 Comm: syz.7.6353 Not tainted syzkaller #0 [ 1120.135918][T24578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.146021][T24578] Call Trace: [ 1120.149337][T24578] [ 1120.152291][T24578] dump_stack_lvl+0x188/0x250 [ 1120.157007][T24578] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1120.163216][T24578] ? show_regs_print_info+0x20/0x20 [ 1120.168458][T24578] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1120.174668][T24578] should_fail+0x38c/0x4c0 [ 1120.179131][T24578] _copy_to_user+0x2e/0x130 [ 1120.183670][T24578] simple_read_from_buffer+0xe3/0x150 [ 1120.189090][T24578] proc_fail_nth_read+0x1a6/0x220 [ 1120.194176][T24578] ? proc_fault_inject_write+0x310/0x310 [ 1120.199849][T24578] ? fsnotify_perm+0x254/0x560 [ 1120.204651][T24578] ? proc_fault_inject_write+0x310/0x310 [ 1120.210331][T24578] vfs_read+0x301/0xd60 [ 1120.214531][T24578] ? kernel_read+0x1e0/0x1e0 [ 1120.219154][T24578] ? rcu_nmi_exit+0x6f/0xf0 [ 1120.223701][T24578] ? __fget_files+0x40f/0x480 [ 1120.228417][T24578] ? mutex_lock_nested+0x17/0x20 [ 1120.233397][T24578] ? __fdget_pos+0x2bf/0x370 [ 1120.238017][T24578] ? ksys_read+0x71/0x260 [ 1120.242377][T24578] ksys_read+0x152/0x260 [ 1120.246649][T24578] ? vfs_write+0xd60/0xd60 [ 1120.251110][T24578] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1120.257067][T24578] do_syscall_64+0x4c/0xa0 [ 1120.261506][T24578] ? clear_bhb_loop+0x30/0x80 [ 1120.266217][T24578] ? clear_bhb_loop+0x30/0x80 [ 1120.270924][T24578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1120.276866][T24578] RIP: 0033:0x7f08ec8cc78e [ 1120.281320][T24578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1120.300960][T24578] RSP: 002b:00007f08eab66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1120.309415][T24578] RAX: ffffffffffffffda RBX: 00007f08eab676c0 RCX: 00007f08ec8cc78e [ 1120.317430][T24578] RDX: 000000000000000f RSI: 00007f08eab670a0 RDI: 0000000000000007 [ 1120.325443][T24578] RBP: 00007f08eab67090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.333454][T24578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.341560][T24578] R13: 00007f08ecb87038 R14: 00007f08ecb86fa0 R15: 00007ffc65c2ad08 [ 1120.349585][T24578] [ 1120.377678][T24587] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6355'. [ 1120.625180][T24602] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1120.672533][T24599] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1121.072173][T24611] netlink: 'syz.4.6363': attribute type 10 has an invalid length. [ 1121.100566][T24611] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6363'. [ 1121.165854][T24611] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1121.187094][T24613] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1121.379361][T24628] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6370'. [ 1121.532947][T24633] netlink: 'syz.4.6371': attribute type 4 has an invalid length. [ 1121.576264][T24633] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.6371'. [ 1121.836664][T24645] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1122.151098][T24653] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1122.334662][T24658] netlink: 'syz.3.6381': attribute type 10 has an invalid length. [ 1122.354792][T24658] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6381'. [ 1122.372990][T24658] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1122.670114][T24675] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6386'. [ 1122.821327][T24677] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1123.019217][T24691] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1123.664874][T24709] bridge0: port 3(ip6gretap0) entered blocking state [ 1123.680252][T24709] bridge0: port 3(ip6gretap0) entered disabled state [ 1123.705945][T24709] device ip6gretap0 entered promiscuous mode [ 1123.735528][T24709] bridge0: port 3(ip6gretap0) entered blocking state [ 1123.742609][T24709] bridge0: port 3(ip6gretap0) entered forwarding state [ 1123.771116][T24714] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.6401'. [ 1124.176978][T24727] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1124.257590][T24730] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1124.823653][T24745] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6414'. [ 1125.373079][T24763] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1125.383897][T24762] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1125.982226][T24784] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6429'. [ 1125.982379][T24777] can: request_module (can-proto-0) failed. [ 1126.443333][T24798] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1127.123716][T24811] netlink: 'syz.6.6440': attribute type 12 has an invalid length. [ 1127.178268][T24811] netlink: 14585 bytes leftover after parsing attributes in process `syz.6.6440'. [ 1127.301608][T24828] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6445'. [ 1127.699615][T24838] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1128.248559][T24853] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1128.804442][T24879] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1128.902699][T24886] FAULT_INJECTION: forcing a failure. [ 1128.902699][T24886] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.935823][T24886] CPU: 1 PID: 24886 Comm: syz.2.6465 Not tainted syzkaller #0 [ 1128.943354][T24886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.953466][T24886] Call Trace: [ 1128.956775][T24886] [ 1128.959749][T24886] dump_stack_lvl+0x188/0x250 [ 1128.964472][T24886] ? show_regs_print_info+0x20/0x20 [ 1128.969713][T24886] ? load_image+0x400/0x400 [ 1128.974249][T24886] ? __might_sleep+0xf0/0xf0 [ 1128.978856][T24886] ? __lock_acquire+0x7d10/0x7d10 [ 1128.983919][T24886] ? mark_lock+0x94/0x320 [ 1128.988284][T24886] should_fail+0x38c/0x4c0 [ 1128.992753][T24886] should_failslab+0x5/0x20 [ 1128.997293][T24886] slab_pre_alloc_hook+0x51/0xc0 [ 1129.002280][T24886] __kmalloc+0x6b/0x330 [ 1129.006470][T24886] ? tomoyo_realpath_from_path+0x118/0x610 [ 1129.012513][T24886] tomoyo_realpath_from_path+0x118/0x610 [ 1129.018226][T24886] tomoyo_path_number_perm+0x242/0x660 [ 1129.023751][T24886] ? verify_lock_unused+0x140/0x140 [ 1129.029005][T24886] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1129.034503][T24886] ? ksys_write+0x1c6/0x260 [ 1129.039099][T24886] security_file_ioctl+0x6c/0xa0 [ 1129.044081][T24886] __se_sys_ioctl+0x48/0x170 [ 1129.048709][T24886] do_syscall_64+0x4c/0xa0 [ 1129.053152][T24886] ? clear_bhb_loop+0x30/0x80 [ 1129.057854][T24886] ? clear_bhb_loop+0x30/0x80 [ 1129.062572][T24886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1129.068509][T24886] RIP: 0033:0x7fa04d062eb9 [ 1129.072961][T24886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.092617][T24886] RSP: 002b:00007fa04b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1129.101087][T24886] RAX: ffffffffffffffda RBX: 00007fa04d2ddfa0 RCX: 00007fa04d062eb9 [ 1129.109104][T24886] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 1129.117118][T24886] RBP: 00007fa04b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.125130][T24886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.133146][T24886] R13: 00007fa04d2de038 R14: 00007fa04d2ddfa0 R15: 00007fff442a9568 [ 1129.141179][T24886] [ 1129.156939][T24886] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1129.341438][T24896] bridge0: port 3(ip6gretap0) entered blocking state [ 1129.384947][T24896] bridge0: port 3(ip6gretap0) entered disabled state [ 1129.504238][T24896] device ip6gretap0 entered promiscuous mode [ 1129.530167][T24896] bridge0: port 3(ip6gretap0) entered blocking state [ 1129.537178][T24896] bridge0: port 3(ip6gretap0) entered forwarding state [ 1129.566806][T24898] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1129.809550][T24916] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1130.845009][T24947] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1130.998816][T24958] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1131.369438][T24976] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.6494'. [ 1132.542172][T25000] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1132.694770][T25002] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1133.015145][T25011] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6506'. [ 1134.100781][T25043] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1134.431811][T25053] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6521'. [ 1134.488522][T25055] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6520'. [ 1134.675801][T25060] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1136.113418][T25102] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6536'. [ 1136.220298][T25107] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1137.681986][T25140] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1137.968832][T25149] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.6549'. [ 1140.013357][T25199] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6565'. [ 1140.225798][T25202] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1141.368988][T25240] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6576'. [ 1141.619479][T25248] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1141.822275][T25251] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1142.816898][T25284] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6591'. [ 1142.946868][T25288] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1143.736770][T25304] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1143.960848][T25310] FAULT_INJECTION: forcing a failure. [ 1143.960848][T25310] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.036684][T25310] CPU: 1 PID: 25310 Comm: syz.2.6599 Not tainted syzkaller #0 [ 1144.044296][T25310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1144.054396][T25310] Call Trace: [ 1144.057711][T25310] [ 1144.060667][T25310] dump_stack_lvl+0x188/0x250 [ 1144.065556][T25310] ? show_regs_print_info+0x20/0x20 [ 1144.070785][T25310] ? load_image+0x400/0x400 [ 1144.075330][T25310] ? __might_sleep+0xf0/0xf0 [ 1144.079961][T25310] ? __lock_acquire+0x7d10/0x7d10 [ 1144.085023][T25310] should_fail+0x38c/0x4c0 [ 1144.089572][T25310] should_failslab+0x5/0x20 [ 1144.094101][T25310] slab_pre_alloc_hook+0x51/0xc0 [ 1144.099082][T25310] __kmalloc+0x6b/0x330 [ 1144.103275][T25310] ? bpf_test_init+0xf8/0x1b0 [ 1144.107995][T25310] ? __lock_acquire+0x7d10/0x7d10 [ 1144.113091][T25310] bpf_test_init+0xf8/0x1b0 [ 1144.117678][T25310] bpf_prog_test_run_skb+0x181/0x1180 [ 1144.123095][T25310] ? __fget_files+0x40f/0x480 [ 1144.127846][T25310] ? cpu_online+0x60/0x60 [ 1144.132261][T25310] bpf_prog_test_run+0x31e/0x390 [ 1144.137328][T25310] __sys_bpf+0x5a5/0x6f0 [ 1144.141626][T25310] ? bpf_link_show_fdinfo+0x380/0x380 [ 1144.147058][T25310] __x64_sys_bpf+0x78/0x90 [ 1144.151603][T25310] do_syscall_64+0x4c/0xa0 [ 1144.156050][T25310] ? clear_bhb_loop+0x30/0x80 [ 1144.160762][T25310] ? clear_bhb_loop+0x30/0x80 [ 1144.165481][T25310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1144.171431][T25310] RIP: 0033:0x7fa04d062eb9 [ 1144.175884][T25310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.195532][T25310] RSP: 002b:00007fa04b2be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1144.204122][T25310] RAX: ffffffffffffffda RBX: 00007fa04d2ddfa0 RCX: 00007fa04d062eb9 [ 1144.212134][T25310] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1144.220233][T25310] RBP: 00007fa04b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.228233][T25310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.236247][T25310] R13: 00007fa04d2de038 R14: 00007fa04d2ddfa0 R15: 00007fff442a9568 [ 1144.244516][T25310] [ 1144.800267][T25325] netlink: 'syz.6.6603': attribute type 29 has an invalid length. [ 1145.046925][T25325] netlink: 'syz.6.6603': attribute type 29 has an invalid length. [ 1145.079947][T25327] netlink: 'syz.6.6603': attribute type 29 has an invalid length. [ 1145.375854][T25333] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1146.047043][T25354] netlink: 763 bytes leftover after parsing attributes in process `syz.2.6612'. [ 1146.065076][T25357] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1147.812266][T25389] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1147.980315][T25392] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1148.967103][T25412] netlink: 763 bytes leftover after parsing attributes in process `syz.7.6632'. [ 1150.328042][T25436] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1150.611942][T25444] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1151.209022][T25457] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6648'. [ 1151.582489][T25466] netlink: 763 bytes leftover after parsing attributes in process `syz.4.6652'. [ 1154.024632][T25523] netlink: 'syz.2.6670': attribute type 29 has an invalid length. [ 1154.279718][T25523] netlink: 'syz.2.6670': attribute type 29 has an invalid length. [ 1154.517334][T25525] netlink: 'syz.2.6670': attribute type 29 has an invalid length. [ 1156.269336][T25581] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6691'. [ 1159.049775][T25658] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1160.259237][T25694] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1160.519982][T25697] netlink: 184 bytes leftover after parsing attributes in process `syz.7.6729'. [ 1160.673433][T25702] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6731'. [ 1160.716722][T25705] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1161.105119][T25720] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1161.845785][T25724] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1161.957725][T25728] FAULT_INJECTION: forcing a failure. [ 1161.957725][T25728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.011820][T25728] CPU: 0 PID: 25728 Comm: syz.2.6742 Not tainted syzkaller #0 [ 1162.019360][T25728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1162.029455][T25728] Call Trace: [ 1162.033122][T25728] [ 1162.036080][T25728] dump_stack_lvl+0x188/0x250 [ 1162.040803][T25728] ? show_regs_print_info+0x20/0x20 [ 1162.046047][T25728] ? load_image+0x400/0x400 [ 1162.050589][T25728] ? __lock_acquire+0x7d10/0x7d10 [ 1162.055652][T25728] should_fail+0x38c/0x4c0 [ 1162.060111][T25728] _copy_to_user+0x2e/0x130 [ 1162.064829][T25728] simple_read_from_buffer+0xe3/0x150 [ 1162.070242][T25728] proc_fail_nth_read+0x1a6/0x220 [ 1162.075319][T25728] ? proc_fault_inject_write+0x310/0x310 [ 1162.080988][T25728] ? fsnotify_perm+0x254/0x560 [ 1162.085792][T25728] ? proc_fault_inject_write+0x310/0x310 [ 1162.091493][T25728] vfs_read+0x301/0xd60 [ 1162.095688][T25728] ? kernel_read+0x1e0/0x1e0 [ 1162.100311][T25728] ? __fget_files+0x40f/0x480 [ 1162.105037][T25728] ? mutex_lock_nested+0x17/0x20 [ 1162.110013][T25728] ? __fdget_pos+0x2bf/0x370 [ 1162.114634][T25728] ? ksys_read+0x71/0x260 [ 1162.119003][T25728] ksys_read+0x152/0x260 [ 1162.123279][T25728] ? vfs_write+0xd60/0xd60 [ 1162.127723][T25728] ? lockdep_hardirqs_on+0x94/0x140 [ 1162.132958][T25728] do_syscall_64+0x4c/0xa0 [ 1162.137416][T25728] ? clear_bhb_loop+0x30/0x80 [ 1162.142125][T25728] ? clear_bhb_loop+0x30/0x80 [ 1162.146840][T25728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1162.152871][T25728] RIP: 0033:0x7fa04d02378e [ 1162.157338][T25728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1162.176978][T25728] RSP: 002b:00007fa04b2bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1162.185443][T25728] RAX: ffffffffffffffda RBX: 00007fa04b2be6c0 RCX: 00007fa04d02378e [ 1162.193628][T25728] RDX: 000000000000000f RSI: 00007fa04b2be0a0 RDI: 0000000000000004 [ 1162.201739][T25728] RBP: 00007fa04b2be090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.209747][T25728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.217750][T25728] R13: 00007fa04d2de038 R14: 00007fa04d2ddfa0 R15: 00007fff442a9568 [ 1162.225771][T25728] [ 1162.348478][T25734] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6744'. [ 1162.481027][ T4196] Bluetooth: hci4: Dropping invalid advertising data [ 1162.488681][ T4196] Bluetooth: hci4: Dropping invalid advertising data [ 1162.495420][ T4196] Bluetooth: hci4: Malicious advertising data. [ 1163.051845][T25753] device sit0 entered promiscuous mode [ 1163.525725][ T4196] Bluetooth: hci0: Dropping invalid advertising data [ 1163.533095][ T4196] Bluetooth: hci0: Dropping invalid advertising data [ 1163.546255][ T4196] Bluetooth: hci0: Malicious advertising data. [ 1165.642419][T25842] device wg2 left promiscuous mode [ 1165.712296][T25844] device wg2 entered promiscuous mode [ 1166.311406][T25868] device syzkaller0 entered promiscuous mode [ 1166.329636][T25868] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1168.449823][T25916] device syzkaller0 entered promiscuous mode [ 1169.492877][T25946] device wg2 entered promiscuous mode [ 1170.535827][T25974] device wg2 entered promiscuous mode [ 1171.829197][T26014] device wg2 left promiscuous mode [ 1171.890390][T26014] device wg2 entered promiscuous mode [ 1172.423096][ T4196] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1172.725713][T26035] device syzkaller0 entered promiscuous mode [ 1172.741073][T26035] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1173.362403][ T4196] ================================================================== [ 1173.370999][ T4196] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 1173.378856][ T4196] Read of size 1 at addr ffff888077143604 by task kworker/u5:4/4196 [ 1173.386872][ T4196] [ 1173.389310][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1173.396995][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1173.407079][ T4196] Workqueue: hci0 hci_rx_work [ 1173.411802][ T4196] Call Trace: [ 1173.415108][ T4196] [ 1173.418056][ T4196] dump_stack_lvl+0x188/0x250 [ 1173.422767][ T4196] ? show_regs_print_info+0x20/0x20 [ 1173.428004][ T4196] ? load_image+0x400/0x400 [ 1173.432540][ T4196] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1173.438039][ T4196] ? mutex_lock_io_nested+0x60/0x60 [ 1173.443278][ T4196] print_address_description+0x60/0x2d0 [ 1173.448852][ T4196] ? hci_le_meta_evt+0x133f/0x3c90 [ 1173.454082][ T4196] kasan_report+0xdf/0x130 [ 1173.458644][ T4196] ? hci_le_meta_evt+0x133f/0x3c90 [ 1173.463799][ T4196] hci_le_meta_evt+0x133f/0x3c90 [ 1173.468793][ T4196] ? hci_remote_host_features_evt+0x280/0x280 [ 1173.474900][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1173.480576][ T4196] ? mark_lock+0x94/0x320 [ 1173.484931][ T4196] ? mutex_unlock+0x10/0x10 [ 1173.489468][ T4196] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1173.495506][ T4196] ? lock_chain_count+0x20/0x20 [ 1173.500428][ T4196] ? __rwlock_init+0x140/0x140 [ 1173.505223][ T4196] hci_event_packet+0xe48/0x1370 [ 1173.510197][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 1173.515606][ T4196] ? rcu_lock_release+0x20/0x20 [ 1173.520497][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 1173.525731][ T4196] hci_rx_work+0x255/0xa10 [ 1173.530197][ T4196] process_one_work+0x85f/0x1010 [ 1173.535178][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 1173.540838][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 1173.546204][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1173.551304][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1173.556898][ T4196] ? wq_worker_running+0x97/0x170 [ 1173.561957][ T4196] worker_thread+0xaa6/0x1290 [ 1173.566700][ T4196] kthread+0x436/0x520 [ 1173.570806][ T4196] ? rcu_lock_release+0x20/0x20 [ 1173.575683][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 1173.580333][ T4196] ret_from_fork+0x1f/0x30 [ 1173.584846][ T4196] [ 1173.587915][ T4196] [ 1173.590272][ T4196] Allocated by task 26055: [ 1173.594705][ T4196] __kasan_kmalloc+0xb5/0xf0 [ 1173.599326][ T4196] __alloc_skb+0x22c/0x750 [ 1173.603777][ T4196] vhci_write+0xbc/0x450 [ 1173.608064][ T4196] vfs_write+0x745/0xd60 [ 1173.612340][ T4196] ksys_write+0x152/0x260 [ 1173.616705][ T4196] do_syscall_64+0x4c/0xa0 [ 1173.621155][ T4196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1173.627170][ T4196] [ 1173.629524][ T4196] Last potentially related work creation: [ 1173.635264][ T4196] kasan_save_stack+0x35/0x60 [ 1173.639975][ T4196] kasan_record_aux_stack+0xb8/0x100 [ 1173.645290][ T4196] kvfree_call_rcu+0x105/0x7d0 [ 1173.650073][ T4196] drop_sysctl_table+0x359/0x4e0 [ 1173.655043][ T4196] drop_sysctl_table+0x348/0x4e0 [ 1173.660006][ T4196] unregister_sysctl_table+0x87/0x130 [ 1173.665408][ T4196] inetdev_event+0x6da/0x1370 [ 1173.670216][ T4196] raw_notifier_call_chain+0xcb/0x160 [ 1173.675615][ T4196] unregister_netdevice_many+0x1049/0x19f0 [ 1173.681467][ T4196] default_device_exit_batch+0x364/0x3c0 [ 1173.687137][ T4196] cleanup_net+0x791/0xba0 [ 1173.691610][ T4196] process_one_work+0x85f/0x1010 [ 1173.696581][ T4196] worker_thread+0xaa6/0x1290 [ 1173.701294][ T4196] kthread+0x436/0x520 [ 1173.705387][ T4196] ret_from_fork+0x1f/0x30 [ 1173.709824][ T4196] [ 1173.712171][ T4196] The buggy address belongs to the object at ffff888077143400 [ 1173.712171][ T4196] which belongs to the cache kmalloc-512 of size 512 [ 1173.726255][ T4196] The buggy address is located 4 bytes to the right of [ 1173.726255][ T4196] 512-byte region [ffff888077143400, ffff888077143600) [ 1173.740003][ T4196] The buggy address belongs to the page: [ 1173.745678][ T4196] page:ffffea0001dc5000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77140 [ 1173.755869][ T4196] head:ffffea0001dc5000 order:2 compound_mapcount:0 compound_pincount:0 [ 1173.764311][ T4196] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1173.772341][ T4196] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80 [ 1173.780962][ T4196] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1173.789574][ T4196] page dumped because: kasan: bad access detected [ 1173.796039][ T4196] page_owner tracks the page as allocated [ 1173.801790][ T4196] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 15873, ts 708984898991, free_ts 708046678748 [ 1173.822093][ T4196] get_page_from_freelist+0x1bbd/0x1ca0 [ 1173.827697][ T4196] __alloc_pages+0x1ee/0x480 [ 1173.832369][ T4196] new_slab+0xc0/0x4b0 [ 1173.836471][ T4196] ___slab_alloc+0x80a/0xdd0 [ 1173.841092][ T4196] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 1173.847070][ T4196] pskb_expand_head+0x127/0x10f0 [ 1173.852237][ T4196] bpf_clone_redirect+0x10f/0x390 [ 1173.857301][ T4196] 0xffffffffa001a049 [ 1173.861305][ T4196] bpf_test_run+0x4ae/0x800 [ 1173.865841][ T4196] bpf_prog_test_run_skb+0x9cc/0x1180 [ 1173.871248][ T4196] bpf_prog_test_run+0x31e/0x390 [ 1173.876215][ T4196] __sys_bpf+0x5a5/0x6f0 [ 1173.880475][ T4196] __x64_sys_bpf+0x78/0x90 [ 1173.885022][ T4196] do_syscall_64+0x4c/0xa0 [ 1173.889466][ T4196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1173.895398][ T4196] page last free stack trace: [ 1173.900095][ T4196] free_unref_page_prepare+0x637/0x6c0 [ 1173.905583][ T4196] free_unref_page+0x8f/0x2a0 [ 1173.910292][ T4196] __unfreeze_partials+0x1a5/0x200 [ 1173.915434][ T4196] put_cpu_partial+0x12d/0x190 [ 1173.920221][ T4196] qlist_free_all+0x35/0x90 [ 1173.924834][ T4196] kasan_quarantine_reduce+0x150/0x160 [ 1173.930307][ T4196] __kasan_kmalloc+0x2f/0xf0 [ 1173.934940][ T4196] wg_noise_handshake_begin_session+0xcc/0xb10 [ 1173.941121][ T4196] wg_packet_handshake_receive_worker+0x704/0xf60 [ 1173.947564][ T4196] process_one_work+0x85f/0x1010 [ 1173.952517][ T4196] worker_thread+0xaa6/0x1290 [ 1173.957218][ T4196] kthread+0x436/0x520 [ 1173.961339][ T4196] ret_from_fork+0x1f/0x30 [ 1173.965792][ T4196] [ 1173.968132][ T4196] Memory state around the buggy address: [ 1173.973782][ T4196] ffff888077143500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1173.981867][ T4196] ffff888077143580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1173.989942][ T4196] >ffff888077143600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1173.998021][ T4196] ^ [ 1174.002106][ T4196] ffff888077143680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1174.010183][ T4196] ffff888077143700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1174.018254][ T4196] ================================================================== [ 1174.026328][ T4196] Disabling lock debugging due to kernel taint [ 1174.036389][ T4196] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1174.043628][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 1174.052590][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1174.062683][ T4196] Workqueue: hci0 hci_rx_work [ 1174.067408][ T4196] Call Trace: [ 1174.070721][ T4196] [ 1174.073675][ T4196] dump_stack_lvl+0x188/0x250 [ 1174.078398][ T4196] ? show_regs_print_info+0x20/0x20 [ 1174.083627][ T4196] ? load_image+0x400/0x400 [ 1174.088174][ T4196] panic+0x2e5/0x810 [ 1174.092105][ T4196] ? bpf_jit_dump+0xd0/0xd0 [ 1174.096637][ T4196] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1174.102652][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 1174.107556][ T4196] ? hci_le_meta_evt+0x133f/0x3c90 [ 1174.112702][ T4196] check_panic_on_warn+0x80/0xa0 [ 1174.117666][ T4196] ? hci_le_meta_evt+0x133f/0x3c90 [ 1174.122805][ T4196] end_report+0x6d/0xf0 [ 1174.126991][ T4196] kasan_report+0x102/0x130 [ 1174.131529][ T4196] ? hci_le_meta_evt+0x133f/0x3c90 [ 1174.136670][ T4196] hci_le_meta_evt+0x133f/0x3c90 [ 1174.141648][ T4196] ? hci_remote_host_features_evt+0x280/0x280 [ 1174.147754][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1174.153424][ T4196] ? mark_lock+0x94/0x320 [ 1174.157778][ T4196] ? mutex_unlock+0x10/0x10 [ 1174.162310][ T4196] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1174.168323][ T4196] ? lock_chain_count+0x20/0x20 [ 1174.173205][ T4196] ? __rwlock_init+0x140/0x140 [ 1174.177999][ T4196] hci_event_packet+0xe48/0x1370 [ 1174.182963][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 1174.188198][ T4196] ? rcu_lock_release+0x20/0x20 [ 1174.193084][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 1174.198317][ T4196] hci_rx_work+0x255/0xa10 [ 1174.202793][ T4196] process_one_work+0x85f/0x1010 [ 1174.207770][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 1174.213428][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 1174.218754][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1174.223806][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1174.229397][ T4196] ? wq_worker_running+0x97/0x170 [ 1174.234678][ T4196] worker_thread+0xaa6/0x1290 [ 1174.239412][ T4196] kthread+0x436/0x520 [ 1174.243518][ T4196] ? rcu_lock_release+0x20/0x20 [ 1174.248403][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 1174.253015][ T4196] ret_from_fork+0x1f/0x30 [ 1174.257637][ T4196] [ 1174.260966][ T4196] Kernel Offset: disabled [ 1174.265320][ T4196] Rebooting in 86400 seconds..