last executing test programs: 21m26.023575982s ago: executing program 32 (id=4248): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0x32f7cb41, 0xffff, 0x0, 0x8, 0x0, 0x100024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), 0x4) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000000c0601"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x0, 0xf, 0x0, 0x29) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 21m9.773281248s ago: executing program 33 (id=4349): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000801) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8094) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000fdffffff0000000000000000", @ANYRES32, @ANYBLOB="0000000000000000000a0000000000ad8a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000000000000f00"/28], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 21m1.705488294s ago: executing program 34 (id=4391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x800000000000000, 0x4008005}, 0x4000004) 19m56.600574989s ago: executing program 5 (id=4764): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x401, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r4}, &(0x7f0000001780)=0x4, 0x0}, 0x20) write$cgroup_int(r3, &(0x7f00000000c0)=0x100000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) write$cgroup_subtree(r5, &(0x7f0000000780)={[{0x2d, 'rdma'}, {0x2d, 'rlimit'}, {0x0, 'hugetlb'}, {0x2b, 'memory'}, {0x2b, 'net'}, {0x2d, 'rdma'}, {0x2b, 'cpu'}]}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xffff, 0x7, 0xfffffffe, 0x48010, 0xffffffffffffffff, 0x6, '\x00', 0x0, r5, 0x5, 0x4, 0x5, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f00000006c0)=""/63}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x5, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210b, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14905, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x3f, 0x50, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627a", 0x0, 0x3}, 0x50) close(r1) socketpair(0x1e, 0xa, 0x0, &(0x7f0000000000)) 19m55.094990246s ago: executing program 5 (id=4766): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000000000007112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 19m54.08607085s ago: executing program 5 (id=4771): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@generic={0x0, r2}, 0x18) 19m51.842481985s ago: executing program 5 (id=4778): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e0000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0) 19m46.538883437s ago: executing program 4 (id=4789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xd}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 19m37.423978997s ago: executing program 4 (id=4812): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 19m37.24627882s ago: executing program 5 (id=4814): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b0af8ff00000000bda107000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x34, &(0x7f0000000040)=""/52, 0x41000, 0x9, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000080)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380), &(0x7f00000003c0)=[{0x1, 0x5, 0x9, 0xc}, {0x2, 0x1, 0xc, 0x6}, {0x2, 0x5, 0x8, 0x7}, {0x2, 0x5, 0x0, 0x3}, {0x5, 0x2, 0xd, 0x7}, {0x0, 0x3, 0x5, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg(r2, &(0x7f0000000b40)={&(0x7f0000000980)=@ll={0x11, 0x8, r6, 0x1, 0x6}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000380)="7971cda36f4bbdfb094a3bd2efbbcfb0d2f54e0b8e34f3b2a34b3b3a7b35b7a1", 0x20}, {&(0x7f0000000a00)="8f449d41a04c1329d6b9cb6ef14c9b25fff522015320934bdb7c9cc8aaea14ad0b2567045b3538c9466fbf7a302ec0aeecdad462c1245e6db111324a725431ed6d341776966eaf4795e52bfbfd6e3fe8af9f5421de251df2ad7a44b1a30bc52f633bbf460d1507c0f6aa1fbea4c53149494a095a0114799690ddf4f5413fe3a8c08476ed73c95c828228ab5f732589fc38fe85514131977d8ea48c23830fd5d747a909908344a25655d4531baafda07400223eea67aabad6b3524500630ff33139b9b40dbdb7a54cb33c2e6eb101889eaa456356357f2fb0c5b8e6bcbd", 0xdd}], 0x2, &(0x7f0000001140)=[{0xf8, 0x108, 0x0, "781c214c7e739fc71c6201ab0e55a6c77c186918aae7de4b927545f0064a59e50e4efb144066aa2fe8dd5dd7dc0cd4fb31acd8ff85354ac54aabb08495aa5635d74e8a70cbc34e6e345c7c0338cce331adc3320d30df691987347da481124a7dfe770d6811caa4a525189abea0a05a3edcf8012d6dc5270877b716b1e90b0388dcf1ed8da720c116b3b1a4b3b9a72830c9a9c8650c2d36b72822e6ffd1138cbad4bcdeab8b7ec05c9829f54716c787b962dc33c5eb7462aa9bb2cd76f8d96d3a2f64ca3f10828d27b41f97cb709368e13d828dea3fa851a8654afbbac16d262ca9ccc09b97"}, {0xa8, 0x116, 0x6, "8dcaed5215c28a057fcfc080f5b471c869c78d830eedb1e9b3f94a711a17d81bb63f51ff8248f83f677698875af9d8359392f6d6c48a8954f2c308d5e19f0855ef8e93de38d8ad02ea61dfe8bf0e10cb5d49a9b8990d5809e1cb3a7b40067fae8be0f8c7fc3e6e339a2b3066c73f0bbc9f005e95285b3c6d9d0c39d8c8e0bc8e80359feb4e45a00f41e6c664aee7775a26"}, {0xe0, 0x1, 0x2, "d7a9fdc587a05086db013ab245291a0fe6dd7c0016e7abf9d88813f8080a1aea46446d8224bf0447111099f8b3d8d32f97a48eacacb2b4604b72ad9a13b6cc79d8ea68a654b1ecd370906e73be4d6ec1349f8b663e88a0e147be3389f35a02665f7450524a1a22eb0ca44457af94ec844cc5c361f33cec3e13dc12fb888ad111f218734316548d4a9d58e6355bf3447c8e14716cac6fd2e94f9ff6481a7e51de424231ad2b7a94f605caf6c44309ff80c07b2e5245845e409567d782f26641965f176fd3c9b219078053"}, {0x68, 0x117, 0x2, "6426a70244466fdd3650fc2cdb751de5d238b86a77400f3a880012512ade123aa19ccf31b42cb4f0cff81f449e41babc728cd285cdcad29d3206f4ba4f6d5453fa5feedbf7a7c589217a8697131fa96031c4abdd07"}, {0x10, 0x114, 0x100}, {0x48, 0x29, 0xd74, "45e8eb88abb58db837d4a38b6ee32bc2f56c2e30a3da6018b0308a72ff1375ee47b4970732694654ec69401b7ce8653087dd0c1ed7019797"}, {0x68, 0x112, 0x80000001, "182003fe5074a5233d9e87eaf1e17d46b8578aaddb735c0f12db47fea8d94eeaf15fd38e4848f07fc94d9804af57d9d44755929cf514c3538c69c2a046c0e01071b15658f1dc01c127c28c1388373d903f9c166e05"}, {0x88, 0x112, 0x10, "a6848d3faf44ade88487d54e5279652f8e2e02c9642c4c09e833c9e768293030ad6a8cd9b7db30d70703ac528619bb368b1fdb23db7ffd4070fb56ec02dfdb57b6d73515f9234caaed5f522b66ff322341056345d61a1ec9185f6f84e53735c22161f5c3e97e849f551cd5af9f0f9956f052e024f21ead"}, {0xb0, 0x10f, 0x8001, "caf659a581e5f0f2ee5e9b42000af25a4df4745a06c32cd2b3ac9c1166e8113090d6dc87785586590f39fecfb66392b099642b729d1588f0904693691a29e8f82199c1cbd1477bd365e661efcc391e06173ba3f3e628c2e857f971fbc053fad6f3a5a8b0d7d92f85013afccd4e858d68537a66d3d319da00569f8bcadbdcf5fca361a424d5a1db7dbbf229de8ec6467ad55a2d968b2bc6b88279cd"}, {0xe0, 0x104, 0x1, "c963621c2dec8870c515410ecb1e1cc7361e72801b3832c3b6dfe60784a4d3ef77dc99ab512986dd9cfc47124c491f7985627c38fd9fb89c9a81159dced62d6ff3f772a926820666764e16e693e19dc83d97d691212be11f24bb247d56f91268a5b3e27c82dcfa5aae26a124eb70e03d940599522022462008135ad75f84b4f2958c838ab4cfd224160beb6d2eafcdf5668dcb42fbc1a984431cca843cf09955c8d77d5cbf7636437a419929ac0bc0de4736c287fded9359138d0a70575720db4b5949c6631849fd57eb"}], 0x5c0}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x4, 0x12}, 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x5, 0x808}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="1f00"], 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 19m34.013948698s ago: executing program 4 (id=4821): bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x103, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x8f36, 0x1}, 0x0, 0x0, 0x2, 0x7}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xbc7ae83238fbe995}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETLINK(r2, 0x400454cd, 0x301) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000340)={0x4, 0x80, 0xb, 0x9, 0x9e, 0x63, 0x0, 0x200, 0x80080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x1}, 0x118001, 0x4, 0x5, 0x1, 0x0, 0x6, 0x3, 0x0, 0xfffffffa, 0x0, 0x447}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000008b000000050000000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000055a60701000000008100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x202, 0x1, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700e0ff0300000008027b"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 19m33.560239347s ago: executing program 6 (id=4822): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x13bb711e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 19m31.673611619s ago: executing program 6 (id=4823): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x42, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fce11541afa09784623932822e9241294f7eb18f3944a94cb2a4c627cbf88fe3cbffff865a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 19m31.25903754s ago: executing program 5 (id=4824): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6c, 0x4, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0x9}, 0x8600, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45e9, 0x0, 0x4}, r0, 0xfefffffffffffffd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19m20.870946388s ago: executing program 35 (id=4819): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x894a, &(0x7f0000000500)='lo:\x96o8\x15d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x96\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xfc\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xf6\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x40002000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 19m13.386123649s ago: executing program 4 (id=4834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000711021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf14"], 0xffdd) 18m58.221514695s ago: executing program 38 (id=4833): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x40002000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 18m57.055908255s ago: executing program 39 (id=4834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000711021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf14"], 0xffdd) 17m8.757246308s ago: executing program 3 (id=5219): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e9cf783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a800080008000a4004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x44) 17m8.382853527s ago: executing program 3 (id=5226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x2, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 17m7.789415389s ago: executing program 3 (id=5231): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91f, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x18404, 0x2, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'}) socketpair(0x1a, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xb1f9, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0xad, 0x1, 0x0, 0x0, 0x0, 0x1b3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0xfffffffffffffffd}, 0x0, 0x0, 0xcd, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40001ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x1120000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) 17m6.849965313s ago: executing program 3 (id=5241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x2, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 17m5.982201382s ago: executing program 3 (id=5249): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 17m5.600425769s ago: executing program 3 (id=5252): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0xf, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) fstat(0xffffffffffffffff, 0x0) (async) fstat(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fstat(r0, &(0x7f00000003c0)) (async) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000480)={[{@uid={'uid', 0x3d, r1}}]}) syz_clone(0x1023100, 0x0, 0xfffffffffffffdee, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 16m50.140824718s ago: executing program 40 (id=5252): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0xf, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) fstat(0xffffffffffffffff, 0x0) (async) fstat(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fstat(r0, &(0x7f00000003c0)) (async) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000480)={[{@uid={'uid', 0x3d, r1}}]}) syz_clone(0x1023100, 0x0, 0xfffffffffffffdee, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 6m39.621857573s ago: executing program 2 (id=8912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x40) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={r0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9e, 0x5c, 0x8, 0x5c, 0x0}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x80, 0x0}, 0x24000059) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) close(r8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xf1}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xdd01, 0x5, 0x0, 0x3, 0x8, 0x2, 0x8, 0x7fff, 0x31a3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xcb, 0x1, 0xc87f, 0xffffffff, 0x1, 0x3, 0x5, 0x2}}, {0x8, 0x2, [0x0, 0xa1]}}]}]}, 0x80}}, 0x4000010) 6m39.241979637s ago: executing program 2 (id=8920): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x8a80, 0x0, 0x3, 0x8, 0x3, 0x7ffffff7, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000006c0)='%', 0x1}], 0x1}, 0x0) 6m37.991372979s ago: executing program 2 (id=8928): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba80000012", 0x2d}], 0x1, 0x0, 0x0, 0xc9e}, 0x600) 6m37.949784227s ago: executing program 2 (id=8929): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x8a80, 0x0, 0x3, 0x8, 0x3, 0x7ffffff7, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)}, 0x0) 6m37.728752237s ago: executing program 2 (id=8934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000040) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r4 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84020, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000800)=r2, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18) 6m35.462551372s ago: executing program 2 (id=8961): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m20.310263666s ago: executing program 41 (id=8961): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.562296232s ago: executing program 0 (id=12057): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x5) setsockopt$sock_attach_bpf(r3, 0x29, 0x31, 0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x43, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xffffffffffffff6d, 0x10, 0x1, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xf}, {0xe, 0x2}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15.936928846s ago: executing program 0 (id=12063): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00008000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48881}, 0xc000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x10000000, 0x0, 0x8000, 0x2224, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) 5.655916363s ago: executing program 7 (id=12140): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000180)=0x20) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x88, 0x0, 0x0) 4.410338056s ago: executing program 7 (id=12151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001000000060006"], 0xe4}}, 0x0) 4.322445419s ago: executing program 8 (id=12153): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x80, 0x13, 0x53b, 0x0, 0x25dfdbfc, {}, [{0x6c, 0x1, [@m_sample={0x68, 0x8, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x3350, 0x5, 0x9, 0xa}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x8, 0x6, 0x101, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x14048c81}, 0x60004) 4.303694065s ago: executing program 0 (id=12068): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020400060a000000ffffffff000004e401"], 0x50}, 0x1, 0x7}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fc, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x8, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xd, 0x0, &(0x7f0000000200)="54ae1f82387f8ae18d9f195606", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0x2ffe}], 0x1}, 0x40000102) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0xffffffffffffff33, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) fstat(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r9, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1e0, 0xf, 0xa, 0x201, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x7}, [@generic="97eae46ffc39adfa8fcdb3b33bbf33f94923cdcf47d09caf3d17037e67fe2b63cd9a52b3f2bff03da44ff16a77de2058a289c44e9f8b1ff22fd8c4f2ac77fe85bdb33960e1e8c91bad6977331c99cb3b626424059d43cb02a3df", @typed={0x8, 0x147, 0x0, 0x0, @u32=0x2}, @generic="b2b1490d324e1343dfc8775665f5d14ca4a12ab3a494ba7c91e3c20f9ea484", @nested={0xf8, 0x3b, 0x0, 0x1, [@generic="b63835b2f52ada63f3000d6b57a9acb0cb702a6f5da1fb97c79da1057ece10ed6cb7ea12be2ac30c0ad6b7fc831bd42521f1c373361a0683c8ecef390a2d78a0e08a141e2b2313088aea53d6d517efb6143398", @generic="bb", @generic="f8684c0a3f686c5c2e83e108687dd77ddf5c5578fc09d5f56335fe2b3369e9cff0b4721fa4098d727c9e8d517ef18a7d0319f128b6cf41e1606cf1d6c4022a9e27e55c642849afb27b38a02cfc33611dbd52d94983073dfbc4f89e81913bd4825bea0bc34f95c78c92757ac5797defa85ea7d5f681541da68809da5150c472f7a35604575188753b524f38cb3957a7838adbeece", @typed={0x8, 0x13b, 0x0, 0x0, @uid=r10}, @nested={0x4, 0xd1}]}, @generic="01f552d3a9488013410cc667e31826875c11ad027ccba5b9c4739ef7b8ca97eafa0176719648974189975b55ad548aa49951d0bfe1fcb01b1398727f24cbfd2e14d2eab8c0f502df16", @typed={0x8, 0xbe, 0x0, 0x0, @pid}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4001}, 0x90) 4.210232427s ago: executing program 1 (id=12155): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x23) 4.166665607s ago: executing program 7 (id=12156): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="54020000100001000000000008000800fe8000000000000000000000000000bb0000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000006401010100000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000003000000000000000a000000ad00"], 0x254}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 4.134227038s ago: executing program 8 (id=12158): socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.046910377s ago: executing program 1 (id=12159): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) 4.018359867s ago: executing program 9 (id=12160): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.997391708s ago: executing program 7 (id=12161): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, [@generic={0x73, 0x1, 0x1, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.921967659s ago: executing program 9 (id=12162): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x180a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4010, r2}, 0x18) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r4, 0x4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.879133416s ago: executing program 7 (id=12163): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x62a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5) r4 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0)) write$cgroup_type(r4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x4, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0xe000001}, 0x23) syz_clone(0x200000, &(0x7f0000000240)="fce2", 0x2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f00000014c0)='\x14\xbe\x19J\xea\xb9*\xf6g\xf2\x84\xbfZ\xb91P9Lv\x92\xaf\x97\"a\x01\x00\x00\x00\x00\x00\x00\x00\xf6\x06\xf2P\x9c^\t\x9fGwI\xb5\x98\xcf/\x13\xc6\x80:\f\xa9\"Rhb\v\xf5`8\xc8\xe8*\xf0\xd0B\x1c\xea\x80\xcb\"\x182\xdb\xfd%MBl\xbd\x840&Tq\xc6\x1f\xd0i\xbf\xef\xfdi\xb9\x1bv\xf4Ii\xca\x01\x00\x00\x80\a\x00\x00\x00\x00\x00\x00\x00\xa5c\xb8S\x9d\xa8\x8f\xc8\xcb\x9e\x89\x00\x00\x00\x00\xbe\xc1\x81\x0e\x81\x19%\xcd\xde\x7f\xce\x06\xa6\xdbD\xf3\xb9rB\xda\x90\xf2\tJn\x9a\x0e[h\xf2Z\xcc\x87\xbdg\\\xcfO\x9e\xd6\xb8\xa0') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x37) 3.717468064s ago: executing program 8 (id=12164): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4329}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg(0xffffffffffffffff, 0x0, 0x4004080) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 2.647310627s ago: executing program 0 (id=12165): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4}, 0x48) 2.569720632s ago: executing program 9 (id=12166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r0}, 0xc) 2.569410251s ago: executing program 8 (id=12167): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0xfffffffe, 0x2, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 2.430144345s ago: executing program 1 (id=12168): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0xea}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) 2.429596756s ago: executing program 7 (id=12169): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xf}, 0xae31cbdd1917bd33, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000}, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000001080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') 1.928812473s ago: executing program 9 (id=12170): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000860b040a"], 0x40}, 0xfffe) 1.536544909s ago: executing program 0 (id=12171): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004012200a4e2000001"], 0x48) 1.271738446s ago: executing program 1 (id=12172): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="00cdd5f0e82f3f"], 0x48) 1.227012423s ago: executing program 9 (id=12173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), &(0x7f0000000300)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.077958548s ago: executing program 8 (id=12174): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8000000}, 0x48) 430.298619ms ago: executing program 0 (id=12175): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(0xffffffffffffffff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) 429.93007ms ago: executing program 1 (id=12176): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 396.801659ms ago: executing program 8 (id=12177): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 366.216691ms ago: executing program 9 (id=12178): socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=12179): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16], 0x10) kernel console output (not intermixed with test programs): eth2 [ 1647.888172][ T8129] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1648.000515][ T8293] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1649.194619][ T36] hsr_slave_0: left promiscuous mode [ 1649.333534][ T2162] Bluetooth: hci4: command tx timeout [ 1649.496923][ T36] hsr_slave_1: left promiscuous mode [ 1649.597563][ T8333] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10376'. [ 1649.607636][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.726870][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.758496][ T8333] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10376'. [ 1649.847795][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.863140][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.168445][ T36] veth1_macvtap: left promiscuous mode [ 1650.182800][ T36] veth0_macvtap: left promiscuous mode [ 1650.194534][ T36] veth1_vlan: left promiscuous mode [ 1650.201985][ T36] veth0_vlan: left promiscuous mode [ 1650.900057][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1650.946472][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1651.491609][ T8359] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1651.527709][ T8359] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1651.538808][ T8359] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1651.571549][ T8129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.616262][ T8129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.661065][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.668253][ T8231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.679015][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.686361][ T8231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.008999][ T8377] netlink: 'syz.1.10385': attribute type 10 has an invalid length. [ 1652.103068][ T8377] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 1652.113150][ T8377] netdevsim netdevsim1 ÿÿÿÿÿÿ: left promiscuous mode [ 1652.136485][ T8377] team0: Port device ÿÿÿÿÿÿ added [ 1652.185528][ T8129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.774625][ T8400] netlink: 10420 bytes leftover after parsing attributes in process `syz.7.10391'. [ 1652.813165][ T8129] veth0_vlan: entered promiscuous mode [ 1652.843228][ T8129] veth1_vlan: entered promiscuous mode [ 1652.963686][ T8129] veth0_macvtap: entered promiscuous mode [ 1652.985274][ T8129] veth1_macvtap: entered promiscuous mode [ 1653.034141][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1653.064279][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.114519][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.133813][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.146484][ T8402] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10392'. [ 1653.180826][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.218026][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.300245][ T8417] netlink: 'syz.1.10399': attribute type 10 has an invalid length. [ 1654.020298][T18123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.040422][T18123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.132038][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.153891][ T8423] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10401'. [ 1654.163897][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.222147][ T8429] netlink: 10420 bytes leftover after parsing attributes in process `syz.7.10402'. [ 1654.382308][ T8430] netlink: 'syz.1.10403': attribute type 1 has an invalid length. [ 1655.770083][ T8468] netlink: 10420 bytes leftover after parsing attributes in process `syz.1.10415'. [ 1655.792883][ T8469] netlink: 'syz.8.10414': attribute type 10 has an invalid length. [ 1655.824091][ T8469] team0: Port device netdevsim0 added [ 1656.300667][ T8483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1656.310145][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10425'. [ 1659.018482][ T8526] FAULT_INJECTION: forcing a failure. [ 1659.018482][ T8526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1659.057271][ T8526] CPU: 1 UID: 0 PID: 8526 Comm: syz.0.10434 Not tainted syzkaller #0 PREEMPT(full) [ 1659.057297][ T8526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1659.057307][ T8526] Call Trace: [ 1659.057315][ T8526] [ 1659.057323][ T8526] dump_stack_lvl+0xe8/0x150 [ 1659.057351][ T8526] should_fail_ex+0x412/0x560 [ 1659.057378][ T8526] _copy_from_iter+0x1d3/0x1670 [ 1659.057408][ T8526] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1659.057436][ T8526] ? __pfx__copy_from_iter+0x10/0x10 [ 1659.057459][ T8526] ? __build_skb_around+0x22d/0x3c0 [ 1659.057481][ T8526] ? __alloc_skb+0x193/0x390 [ 1659.057500][ T8526] ? netlink_sendmsg+0x650/0xb40 [ 1659.057517][ T8526] ? skb_put+0x11b/0x210 [ 1659.057541][ T8526] netlink_sendmsg+0x6c0/0xb40 [ 1659.057570][ T8526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1659.057593][ T8526] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1659.057615][ T8526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1659.057637][ T8526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1659.057664][ T8526] ____sys_sendmsg+0xa68/0xad0 [ 1659.057685][ T8526] ? __might_fault+0xaf/0x130 [ 1659.057716][ T8526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1659.057748][ T8526] ? import_iovec+0x73/0xa0 [ 1659.057775][ T8526] ___sys_sendmsg+0x2a5/0x360 [ 1659.057794][ T8526] ? __lock_acquire+0x6b5/0x2cf0 [ 1659.057821][ T8526] ? __pfx____sys_sendmsg+0x10/0x10 [ 1659.057883][ T8526] ? __fget_files+0x2a/0x420 [ 1659.057900][ T8526] ? __fget_files+0x3a0/0x420 [ 1659.057930][ T8526] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1659.057950][ T8526] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 1659.057970][ T8526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1659.058002][ T8526] ? __pfx_ksys_write+0x10/0x10 [ 1659.058038][ T8526] do_syscall_64+0xe2/0xf80 [ 1659.058057][ T8526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.058073][ T8526] ? trace_irq_disable+0x37/0x100 [ 1659.058089][ T8526] ? clear_bhb_loop+0x60/0xb0 [ 1659.058109][ T8526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.058126][ T8526] RIP: 0033:0x7f79ab59aeb9 [ 1659.058142][ T8526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1659.058156][ T8526] RSP: 002b:00007f79ac3b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1659.058176][ T8526] RAX: ffffffffffffffda RBX: 00007f79ab816090 RCX: 00007f79ab59aeb9 [ 1659.058188][ T8526] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1659.058199][ T8526] RBP: 00007f79ac3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1659.058210][ T8526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1659.058220][ T8526] R13: 00007f79ab816128 R14: 00007f79ab816090 R15: 00007ffcfc005b08 [ 1659.058253][ T8526] [ 1659.685423][ T8536] netlink: 7 bytes leftover after parsing attributes in process `syz.8.10439'. [ 1659.765837][ T8536] netlink: 7 bytes leftover after parsing attributes in process `syz.8.10439'. [ 1660.521673][ T8559] netlink: 7 bytes leftover after parsing attributes in process `syz.9.10444'. [ 1660.827172][ T8559] netlink: 7 bytes leftover after parsing attributes in process `syz.9.10444'. [ 1661.152098][ T8576] netlink: 10420 bytes leftover after parsing attributes in process `syz.7.10449'. [ 1661.163889][ T8577] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10451'. [ 1661.227666][ T8577] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10451'. [ 1661.513463][ T8594] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10457'. [ 1661.678264][ T8593] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1661.776009][ T8594] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10457'. [ 1662.018302][ T8608] netlink: 'syz.8.10463': attribute type 10 has an invalid length. [ 1663.028155][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10466'. [ 1663.039817][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10466'. [ 1663.049553][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10466'. [ 1663.061557][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10466'. [ 1663.243990][ T8631] netlink: 'syz.9.10468': attribute type 4 has an invalid length. [ 1663.605132][ T8639] netlink: 'syz.8.10473': attribute type 46 has an invalid length. [ 1664.327539][ T8650] netlink: 'syz.7.10476': attribute type 10 has an invalid length. [ 1664.390496][ T8650] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 1664.469143][ T8650] netdevsim netdevsim7 ÿÿÿÿÿÿ: left promiscuous mode [ 1664.476397][ T8650] netdevsim netdevsim7 ÿÿÿÿÿÿ: left allmulticast mode [ 1664.610164][ T8650] team0: Port device ÿÿÿÿÿÿ added [ 1665.794810][ T8671] netlink: 'syz.0.10482': attribute type 4 has an invalid length. [ 1666.071160][ T8686] cgroup: Unknown subsys name 'hash' [ 1666.500832][ T8697] __nla_validate_parse: 14 callbacks suppressed [ 1666.500866][ T8697] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10490'. [ 1666.585158][ T8697] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10490'. [ 1666.767012][ T8699] netlink: 'syz.7.10492': attribute type 1 has an invalid length. [ 1666.878652][ T8702] netlink: 10420 bytes leftover after parsing attributes in process `syz.0.10493'. [ 1666.936075][ T8704] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10494'. [ 1666.967150][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10494'. [ 1666.983336][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10494'. [ 1666.992863][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10494'. [ 1667.006247][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10494'. [ 1667.015526][ T8704] netlink: 5 bytes leftover after parsing attributes in process `syz.9.10494'. [ 1667.044995][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10494'. [ 1667.217762][ T8715] netlink: 'syz.7.10497': attribute type 4 has an invalid length. [ 1667.546130][ T8729] netlink: 'syz.7.10503': attribute type 1 has an invalid length. [ 1668.560824][ T8748] netdevsim netdevsim8 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 1668.745526][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.752916][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.872143][ T8763] netlink: 'syz.0.10516': attribute type 4 has an invalid length. [ 1669.056714][ T8779] netlink: 'syz.8.10521': attribute type 10 has an invalid length. [ 1669.678662][ T8805] netlink: 'syz.1.10532': attribute type 4 has an invalid length. [ 1670.141131][ T8823] netlink: 'syz.0.10540': attribute type 46 has an invalid length. [ 1670.665600][ T8849] netlink: 'syz.8.10545': attribute type 4 has an invalid length. [ 1671.297416][ T8875] netlink: 'syz.8.10556': attribute type 46 has an invalid length. [ 1671.319547][ T8876] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1671.498853][ T8884] netlink: 'syz.7.10560': attribute type 46 has an invalid length. [ 1671.749392][ T8886] netlink: 'syz.0.10561': attribute type 4 has an invalid length. [ 1671.821980][ T8886] __nla_validate_parse: 45 callbacks suppressed [ 1671.822000][ T8886] netlink: 17 bytes leftover after parsing attributes in process `syz.0.10561'. [ 1672.277972][ T8912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10569'. [ 1672.287318][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10569'. [ 1672.305378][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10569'. [ 1672.320439][ T8909] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.10570'. [ 1672.325841][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10569'. [ 1672.389763][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10569'. [ 1672.407712][ T8912] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10569'. [ 1672.423014][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10569'. [ 1672.504867][ T8924] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10571'. [ 1672.539035][ T8920] netlink: 'syz.8.10573': attribute type 46 has an invalid length. [ 1672.998382][ T8942] netlink: 'syz.7.10579': attribute type 4 has an invalid length. [ 1673.674044][ T8968] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1674.323105][ T8983] netlink: 'syz.7.10593': attribute type 4 has an invalid length. [ 1675.575471][ T9041] netlink: 'syz.7.10609': attribute type 4 has an invalid length. [ 1676.409901][ T9080] netlink: 'syz.0.10625': attribute type 10 has an invalid length. [ 1676.423397][ T9077] netlink: 'syz.1.10626': attribute type 4 has an invalid length. [ 1676.476408][ T9080] team0: Port device ÿÿÿÿÿÿ added [ 1677.757511][ T9119] __nla_validate_parse: 39 callbacks suppressed [ 1677.757545][ T9119] netlink: 7 bytes leftover after parsing attributes in process `syz.9.10642'. [ 1677.789830][ T9119] netlink: 7 bytes leftover after parsing attributes in process `syz.9.10642'. [ 1677.814772][ T9117] netlink: 'syz.7.10641': attribute type 4 has an invalid length. [ 1677.823284][ T9117] netlink: 17 bytes leftover after parsing attributes in process `syz.7.10641'. [ 1677.856605][ T9121] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.10643'. [ 1677.910630][ T9124] netlink: 'syz.1.10644': attribute type 10 has an invalid length. [ 1678.043274][ T9135] netlink: 10420 bytes leftover after parsing attributes in process `syz.9.10648'. [ 1678.164692][ T9143] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1678.265117][ T9149] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10652'. [ 1678.621787][ T9160] netlink: 'syz.0.10657': attribute type 4 has an invalid length. [ 1678.647187][ T9160] netlink: 17 bytes leftover after parsing attributes in process `syz.0.10657'. [ 1679.147546][ T9181] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10664'. [ 1679.303991][ T9188] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10667'. [ 1679.474294][ T9194] netlink: 144 bytes leftover after parsing attributes in process `syz.8.10668'. [ 1680.160447][ T9205] netlink: 'syz.9.10672': attribute type 4 has an invalid length. [ 1680.326465][ T9213] netlink: 'syz.7.10675': attribute type 46 has an invalid length. [ 1681.922376][ T9251] netlink: 'syz.7.10687': attribute type 4 has an invalid length. [ 1682.989893][ T9289] __nla_validate_parse: 7 callbacks suppressed [ 1682.989927][ T9289] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10701'. [ 1683.178582][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10702'. [ 1683.211291][ T9292] netlink: 'syz.8.10703': attribute type 4 has an invalid length. [ 1683.219443][ T9292] netlink: 17 bytes leftover after parsing attributes in process `syz.8.10703'. [ 1683.309709][ T9297] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.10705'. [ 1685.228944][ T9344] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10716'. [ 1685.513754][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10717'. [ 1685.575750][ T9348] netlink: 'syz.8.10718': attribute type 4 has an invalid length. [ 1685.587409][ T9348] netlink: 17 bytes leftover after parsing attributes in process `syz.8.10718'. [ 1686.178557][ T9362] netlink: 144 bytes leftover after parsing attributes in process `syz.7.10724'. [ 1686.615931][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10729'. [ 1687.118527][ T9394] netlink: 68 bytes leftover after parsing attributes in process `syz.8.10732'. [ 1687.547409][ T9405] netlink: 'syz.9.10733': attribute type 4 has an invalid length. [ 1688.414766][ T9447] netlink: 'syz.7.10748': attribute type 4 has an invalid length. [ 1688.428623][ T9447] __nla_validate_parse: 4 callbacks suppressed [ 1688.428644][ T9447] netlink: 17 bytes leftover after parsing attributes in process `syz.7.10748'. [ 1688.631059][ T9459] netlink: 7 bytes leftover after parsing attributes in process `syz.9.10752'. [ 1688.651689][ T9459] netlink: 7 bytes leftover after parsing attributes in process `syz.9.10752'. [ 1689.430938][ T9481] netlink: 'syz.8.10763': attribute type 4 has an invalid length. [ 1689.445689][ T9481] netlink: 17 bytes leftover after parsing attributes in process `syz.8.10763'. [ 1689.681488][ T9490] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10766'. [ 1689.711020][ T9490] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10766'. [ 1689.823800][ T9496] netlink: 'syz.8.10768': attribute type 46 has an invalid length. [ 1689.946208][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10770'. [ 1689.956213][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10770'. [ 1690.161792][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10771'. [ 1690.435512][ T9523] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10779'. [ 1690.457548][ T9519] netlink: 'syz.1.10778': attribute type 4 has an invalid length. [ 1691.701449][ T9563] netlink: 'syz.1.10793': attribute type 4 has an invalid length. [ 1693.982051][ T9630] __nla_validate_parse: 13 callbacks suppressed [ 1693.982099][ T9630] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10816'. [ 1694.132297][ T9631] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10818'. [ 1695.587685][ T9649] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10822'. [ 1696.264378][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10829'. [ 1697.061504][ T9680] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10832'. [ 1697.597746][ T9690] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10835'. [ 1697.637481][ T9690] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10835'. [ 1697.667687][ T9688] netlink: 140 bytes leftover after parsing attributes in process `syz.9.10836'. [ 1697.941413][ T9702] netlink: 140 bytes leftover after parsing attributes in process `syz.9.10839'. [ 1698.556284][ T9717] netlink: 'syz.8.10845': attribute type 10 has an invalid length. [ 1698.568752][ T9715] netlink: 10420 bytes leftover after parsing attributes in process `syz.9.10844'. [ 1699.012766][ T9731] __nla_validate_parse: 1 callbacks suppressed [ 1699.012785][ T9731] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10848'. [ 1699.029770][ T9730] netlink: 7 bytes leftover after parsing attributes in process `syz.8.10850'. [ 1699.079763][ T9730] netlink: 7 bytes leftover after parsing attributes in process `syz.8.10850'. [ 1699.089739][ T9731] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10848'. [ 1699.290188][ T9740] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10854'. [ 1699.305947][ T9740] netlink: 7 bytes leftover after parsing attributes in process `syz.7.10854'. [ 1699.349842][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10855'. [ 1699.516396][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10859'. [ 1699.996298][ T9761] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1700.144563][ T9767] netlink: 'syz.8.10863': attribute type 1 has an invalid length. [ 1700.840828][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1700.850133][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1700.864632][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1700.873556][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1700.885562][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1701.208815][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.439455][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.459201][ T9787] lo speed is unknown, defaulting to 1000 [ 1701.517429][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.631292][ T12] team0: Port device ÿÿÿÿÿÿ removed [ 1701.642965][ T12] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.755049][ T9801] netlink: 140 bytes leftover after parsing attributes in process `syz.8.10875'. [ 1701.869303][ T9787] chnl_net:caif_netlink_parms(): no params data found [ 1702.294439][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.312384][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.345231][ T9787] bridge_slave_0: entered allmulticast mode [ 1702.366045][ T9787] bridge_slave_0: entered promiscuous mode [ 1702.424882][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.451894][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.478116][ T9787] bridge_slave_1: entered allmulticast mode [ 1702.506208][ T9787] bridge_slave_1: entered promiscuous mode [ 1702.711447][ T12] bridge_slave_1: left allmulticast mode [ 1702.734563][ T12] bridge_slave_1: left promiscuous mode [ 1702.759371][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.823354][ T9833] netlink: 'syz.0.10884': attribute type 4 has an invalid length. [ 1702.977859][ T2162] Bluetooth: hci3: command tx timeout [ 1702.987924][ T12] bridge_slave_0: left allmulticast mode [ 1703.105046][ T9833] netlink: 17 bytes leftover after parsing attributes in process `syz.0.10884'. [ 1703.150114][ T12] bridge_slave_0: left promiscuous mode [ 1703.184009][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.840241][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1703.848625][ T12] bridge0 (unregistering): left promiscuous mode [ 1703.907886][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1703.917005][ T12] bond_slave_0: left promiscuous mode [ 1703.924101][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1703.933266][ T12] bond_slave_1: left promiscuous mode [ 1703.943497][ T12] bond0 (unregistering): Released all slaves [ 1703.953497][ T9828] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1703.973270][ T9787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1704.006700][ T9787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1704.046283][ T12] tipc: Left network mode [ 1704.107885][ T9787] team0: Port device team_slave_0 added [ 1704.158701][ T9787] team0: Port device team_slave_1 added [ 1704.389291][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.396296][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.431737][ T9787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.473249][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1704.482702][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.541675][ T9787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.751093][ T9787] hsr_slave_0: entered promiscuous mode [ 1704.776231][ T9787] hsr_slave_1: entered promiscuous mode [ 1704.800115][ T9787] debugfs: 'hsr0' already exists in 'hsr' [ 1704.816139][ T9787] Cannot create hsr debugfs directory [ 1705.007082][ T9887] netlink: 140 bytes leftover after parsing attributes in process `syz.9.10896'. [ 1705.032444][ T9894] netlink: 'syz.0.10897': attribute type 4 has an invalid length. [ 1705.052064][ T9894] netlink: 17 bytes leftover after parsing attributes in process `syz.0.10897'. [ 1705.063841][ T2162] Bluetooth: hci3: command tx timeout [ 1705.388352][ T9907] netlink: 'syz.8.10902': attribute type 10 has an invalid length. [ 1706.114648][ T9932] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10910'. [ 1706.148818][ T9924] netlink: 140 bytes leftover after parsing attributes in process `syz.9.10907'. [ 1706.160326][ T9932] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10910'. [ 1706.193624][ T9926] netlink: 140 bytes leftover after parsing attributes in process `syz.7.10909'. [ 1706.392083][ T9940] netlink: 'syz.8.10912': attribute type 4 has an invalid length. [ 1706.417545][ T9940] netlink: 17 bytes leftover after parsing attributes in process `syz.8.10912'. [ 1706.459418][ T9944] netlink: 10420 bytes leftover after parsing attributes in process `syz.9.10914'. [ 1706.546958][ T9950] netlink: 'syz.0.10915': attribute type 46 has an invalid length. [ 1707.139612][ T2162] Bluetooth: hci3: command tx timeout [ 1707.379673][ T12] hsr_slave_0: left promiscuous mode [ 1707.390539][ T12] hsr_slave_1: left promiscuous mode [ 1707.398619][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1707.406170][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.419551][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1707.427222][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1707.451773][ T12] veth1_vlan: left promiscuous mode [ 1707.458220][ T12] veth0_vlan: left promiscuous mode [ 1707.934709][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1707.988383][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1708.425746][ T9975] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10921'. [ 1708.450432][ T9986] netlink: 140 bytes leftover after parsing attributes in process `syz.9.10925'. [ 1708.701264][ T9787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1708.759214][ T9787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1708.795094][ T9787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1709.025431][ T9999] netlink: 'syz.0.10930': attribute type 46 has an invalid length. [ 1709.216869][ T2162] Bluetooth: hci3: command tx timeout [ 1709.226925][ T9787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1709.749688][ T9787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1709.788348][ T9787] 8021q: adding VLAN 0 to HW filter on device team0 [ 1709.810744][T18123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.817911][T18123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1709.850386][T18123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.857549][T18123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1710.153366][T10032] __nla_validate_parse: 4 callbacks suppressed [ 1710.153398][T10032] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10936'. [ 1710.945666][ T9787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1711.100183][ T9787] veth0_vlan: entered promiscuous mode [ 1711.149084][ T9787] veth1_vlan: entered promiscuous mode [ 1711.457737][ T9787] veth0_macvtap: entered promiscuous mode [ 1711.592794][T10072] netlink: 'syz.0.10948': attribute type 1 has an invalid length. [ 1711.609637][ T9787] veth1_macvtap: entered promiscuous mode [ 1712.044477][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1712.079095][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1712.119040][ T8231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.145131][ T8231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.183409][ T8231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.193206][ T8231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.235425][T10104] netlink: 140 bytes leftover after parsing attributes in process `syz.8.10950'. [ 1712.389759][ T8231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.427974][ T8231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.569510][ T8231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.590650][ T8231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.885991][T10129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10867'. [ 1712.919575][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10867'. [ 1712.939007][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10867'. [ 1712.960759][T10133] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1712.974454][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10867'. [ 1712.992910][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10867'. [ 1713.002861][T10129] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10867'. [ 1713.014030][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10867'. [ 1713.630109][T10159] netlink: 140 bytes leftover after parsing attributes in process `syz.7.10965'. [ 1715.306287][T10217] __nla_validate_parse: 2 callbacks suppressed [ 1715.306308][T10217] netlink: 140 bytes leftover after parsing attributes in process `syz.8.10981'. [ 1717.858222][T10253] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10994'. [ 1719.538045][T10308] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11013'. [ 1719.603397][T10308] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11013'. [ 1720.997552][T10341] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11026'. [ 1721.310918][T10341] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11026'. [ 1721.666395][T10359] netlink: 7 bytes leftover after parsing attributes in process `syz.9.11032'. [ 1721.779608][T10359] netlink: 7 bytes leftover after parsing attributes in process `syz.9.11032'. [ 1722.963816][T10385] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11040'. [ 1723.014589][T10385] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11040'. [ 1723.283108][T10400] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11046'. [ 1723.296408][T10398] netlink: 144 bytes leftover after parsing attributes in process `syz.7.11044'. [ 1723.310818][T10402] netlink: 'syz.8.11047': attribute type 1 has an invalid length. [ 1723.326209][T10400] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11046'. [ 1723.518862][T10411] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11051'. [ 1724.789344][T10431] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1726.122381][T10477] __nla_validate_parse: 9 callbacks suppressed [ 1726.122414][T10477] netlink: 7 bytes leftover after parsing attributes in process `syz.9.11076'. [ 1726.611909][T10484] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11079'. [ 1727.268112][T10499] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11082'. [ 1727.292214][T10503] netlink: 'syz.8.11083': attribute type 46 has an invalid length. [ 1727.726572][T10522] netlink: 144 bytes leftover after parsing attributes in process `syz.9.11093'. [ 1728.175997][T10541] netlink: 'syz.1.11098': attribute type 46 has an invalid length. [ 1728.968608][T10563] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11107'. [ 1729.008057][T10558] netlink: 144 bytes leftover after parsing attributes in process `syz.8.11106'. [ 1730.198178][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.204877][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.636068][T10600] netlink: 10420 bytes leftover after parsing attributes in process `syz.9.11121'. [ 1730.643534][T10607] netlink: 'syz.0.11124': attribute type 46 has an invalid length. [ 1731.357125][T10629] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11132'. [ 1731.369761][T10629] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11132'. [ 1731.630833][T10640] netlink: 'syz.1.11137': attribute type 10 has an invalid length. [ 1731.672914][T10640] team0: Port device ÿÿÿÿÿÿ added [ 1732.633760][T10662] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11144'. [ 1732.991713][T10662] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11144'. [ 1734.200639][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1734.210602][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1734.219271][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1734.228697][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1734.237047][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1734.372212][T10693] lo speed is unknown, defaulting to 1000 [ 1734.437405][T10698] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11154'. [ 1734.570052][T10709] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11156'. [ 1734.705176][T10712] netlink: 'syz.1.11158': attribute type 10 has an invalid length. [ 1734.804550][T10709] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11156'. [ 1734.993786][T10693] chnl_net:caif_netlink_parms(): no params data found [ 1735.654854][T10737] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11163'. [ 1735.676276][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11163'. [ 1735.701903][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11163'. [ 1735.876998][ T8231] team0: Port device ÿÿÿÿÿÿ removed [ 1736.346958][ T5836] Bluetooth: hci1: command tx timeout [ 1736.649859][T10693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.663357][T10693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.672250][T10693] bridge_slave_0: entered allmulticast mode [ 1736.680617][T10693] bridge_slave_0: entered promiscuous mode [ 1736.690549][T10693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.699389][T10753] __nla_validate_parse: 5 callbacks suppressed [ 1736.699407][T10753] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11168'. [ 1736.716429][T10693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.725033][T10693] bridge_slave_1: entered allmulticast mode [ 1736.759693][T10693] bridge_slave_1: entered promiscuous mode [ 1736.901734][T10693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1736.939476][T10693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1737.046362][T10693] team0: Port device team_slave_0 added [ 1737.061548][T10757] netlink: 'syz.1.11170': attribute type 10 has an invalid length. [ 1737.136276][T10693] team0: Port device team_slave_1 added [ 1737.391153][T10693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.406523][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.464483][T10768] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11171'. [ 1737.492005][T10693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.505117][T10693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.512476][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.540477][T10693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.700478][T10693] hsr_slave_0: entered promiscuous mode [ 1737.709024][T10693] hsr_slave_1: entered promiscuous mode [ 1737.715702][T10693] debugfs: 'hsr0' already exists in 'hsr' [ 1737.722179][T10693] Cannot create hsr debugfs directory [ 1738.053225][T10771] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11174'. [ 1738.062633][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11174'. [ 1738.112878][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11174'. [ 1738.132492][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11174'. [ 1738.148315][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11174'. [ 1738.158415][T10771] netlink: 5 bytes leftover after parsing attributes in process `syz.9.11174'. [ 1738.158545][ T8231] bond0: left allmulticast mode [ 1738.168100][T10771] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11174'. [ 1738.186955][ T8231] @ÿ: left allmulticast mode [ 1738.191764][ T8231] bond_slave_1: left allmulticast mode [ 1738.198708][ T8231] bridge0: port 3(bond0) entered disabled state [ 1738.211555][ T8231] bridge_slave_1: left allmulticast mode [ 1738.218290][ T8231] bridge_slave_1: left promiscuous mode [ 1738.224232][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.261764][ T8231] bridge_slave_0: left allmulticast mode [ 1738.275385][ T8231] bridge_slave_0: left promiscuous mode [ 1738.288842][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.417788][ T5836] Bluetooth: hci1: command tx timeout [ 1738.571508][T10797] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11178'. [ 1739.167648][T10818] netlink: 'syz.0.11182': attribute type 10 has an invalid length. [ 1739.318293][ T8231] bond0 (unregistering): (slave 5@ÿ): Releasing backup interface [ 1739.326620][ T8231] @ÿ: left promiscuous mode [ 1739.332849][ T8231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.342041][ T8231] bond_slave_1: left promiscuous mode [ 1739.350197][ T8231] bond0 (unregistering): Released all slaves [ 1739.444630][ T8231] : left promiscuous mode [ 1739.567546][T10824] netlink: 'syz.0.11184': attribute type 10 has an invalid length. [ 1740.507122][ T5836] Bluetooth: hci1: command tx timeout [ 1740.525723][T10853] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1741.047623][T10872] netlink: 'syz.9.11196': attribute type 1 has an invalid length. [ 1741.438816][T10693] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1741.510098][T10693] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1741.583329][T10693] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1741.635253][T10693] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1741.808325][T10895] __nla_validate_parse: 20 callbacks suppressed [ 1741.808345][T10895] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11202'. [ 1741.946665][T10895] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11202'. [ 1742.175516][T10911] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1742.212399][T10916] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11206'. [ 1742.281847][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11206'. [ 1742.297152][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11206'. [ 1742.308706][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11206'. [ 1742.319824][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11206'. [ 1742.329494][T10916] netlink: 5 bytes leftover after parsing attributes in process `syz.8.11206'. [ 1742.378341][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11206'. [ 1742.396083][T10920] netlink: 140 bytes leftover after parsing attributes in process `syz.9.11208'. [ 1742.578050][ T5836] Bluetooth: hci1: command tx timeout [ 1743.045786][T10693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1743.156996][ T8231] hsr_slave_0: left promiscuous mode [ 1743.175283][ T8231] hsr_slave_1: left promiscuous mode [ 1743.207586][ T8231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1743.234293][ T8231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1744.676320][ T8231] team0 (unregistering): Port device team_slave_1 removed [ 1744.732505][ T8231] team0 (unregistering): Port device team_slave_0 removed [ 1745.118506][T10693] 8021q: adding VLAN 0 to HW filter on device team0 [ 1745.121259][T10967] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1745.136512][T28980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.143629][T28980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1745.152368][T10967] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1745.182407][T10967] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1745.184425][T28980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.198345][T28980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1745.221570][T10983] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1745.231393][T10983] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1745.245522][T10983] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1745.925471][T10693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1746.048680][T11024] netlink: 'syz.0.11231': attribute type 10 has an invalid length. [ 1746.602019][T10693] veth0_vlan: entered promiscuous mode [ 1746.661435][T10693] veth1_vlan: entered promiscuous mode [ 1746.691088][T10693] veth0_macvtap: entered promiscuous mode [ 1746.701295][T10693] veth1_macvtap: entered promiscuous mode [ 1746.899623][T11051] __nla_validate_parse: 16 callbacks suppressed [ 1746.899640][T11051] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11238'. [ 1746.901364][T10693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1747.002295][T10693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1747.073558][T18123] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.106745][T18123] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.132069][T18123] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.148393][T18123] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.195497][T11057] netlink: 'syz.1.11242': attribute type 10 has an invalid length. [ 1747.366398][T11062] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11244'. [ 1747.394122][T28980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.412214][T28980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.462687][T18123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.499668][T18123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.509578][T11066] netlink: 'syz.1.11245': attribute type 10 has an invalid length. [ 1747.647389][T11068] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11247'. [ 1747.744139][T11075] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1747.821689][T11077] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1747.921519][T11081] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11252'. [ 1748.560039][T11094] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11256'. [ 1748.731165][T11102] netlink: 'syz.0.11260': attribute type 10 has an invalid length. [ 1749.686649][T11137] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11270'. [ 1750.655695][T11180] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11285'. [ 1750.713092][T11180] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11285'. [ 1751.725469][T11190] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1752.418555][T11198] netlink: 140 bytes leftover after parsing attributes in process `syz.9.11292'. [ 1764.317964][T11205] Bluetooth: hci4: command 0x0406 tx timeout [ 1766.275139][T11249] netlink: 'syz.7.11307': attribute type 4 has an invalid length. [ 1766.294787][T11249] netlink: 17 bytes leftover after parsing attributes in process `syz.7.11307'. [ 1766.628008][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11311'. [ 1767.065103][T11274] netlink: 'syz.0.11317': attribute type 1 has an invalid length. [ 1767.657965][T11290] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1768.060035][T11309] netlink: 140 bytes leftover after parsing attributes in process `syz.9.11328'. [ 1768.649390][T11329] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11336'. [ 1768.673284][T11329] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11336'. [ 1768.695353][T11332] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11337'. [ 1768.712529][T11332] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11337'. [ 1768.830032][T11336] netlink: 'syz.7.11340': attribute type 1 has an invalid length. [ 1769.988851][T11373] netlink: 140 bytes leftover after parsing attributes in process `syz.7.11353'. [ 1770.016516][T11380] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1770.316289][T11387] netlink: 'syz.0.11358': attribute type 1 has an invalid length. [ 1770.631967][T11394] netlink: 'syz.7.11359': attribute type 1 has an invalid length. [ 1770.645389][T11393] netlink: 7 bytes leftover after parsing attributes in process `syz.9.11360'. [ 1770.683513][T11393] netlink: 7 bytes leftover after parsing attributes in process `syz.9.11360'. [ 1771.364939][T11416] netlink: 'syz.7.11371': attribute type 1 has an invalid length. [ 1773.885962][T11507] __nla_validate_parse: 1 callbacks suppressed [ 1773.885979][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11404'. [ 1773.934118][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11407'. [ 1774.002401][T11509] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11405'. [ 1774.315803][T11521] netlink: 140 bytes leftover after parsing attributes in process `syz.7.11408'. [ 1774.362418][T11523] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11409'. [ 1774.667556][T11531] netlink: 'syz.8.11412': attribute type 4 has an invalid length. [ 1774.675514][T11531] netlink: 17 bytes leftover after parsing attributes in process `syz.8.11412'. [ 1775.071821][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11417'. [ 1775.768344][T11554] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11422'. [ 1776.380127][T11565] netlink: 'syz.8.11426': attribute type 4 has an invalid length. [ 1776.406000][T11566] netlink: 140 bytes leftover after parsing attributes in process `syz.7.11425'. [ 1776.419435][T11565] netlink: 17 bytes leftover after parsing attributes in process `syz.8.11426'. [ 1776.787907][T11589] FAULT_INJECTION: forcing a failure. [ 1776.787907][T11589] name failslab, interval 1, probability 0, space 0, times 0 [ 1776.826076][T11589] CPU: 1 UID: 0 PID: 11589 Comm: syz.7.11433 Not tainted syzkaller #0 PREEMPT(full) [ 1776.826102][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1776.826113][T11589] Call Trace: [ 1776.826119][T11589] [ 1776.826126][T11589] dump_stack_lvl+0xe8/0x150 [ 1776.826152][T11589] should_fail_ex+0x412/0x560 [ 1776.826175][T11589] should_failslab+0xa8/0x100 [ 1776.826195][T11589] __kmalloc_cache_node_noprof+0x87/0x6d0 [ 1776.826215][T11589] ? __get_vm_area_node+0x13f/0x300 [ 1776.826238][T11589] __get_vm_area_node+0x13f/0x300 [ 1776.826263][T11589] __vmalloc_node_range_noprof+0x372/0x1730 [ 1776.826279][T11589] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1776.826307][T11589] ? trace_call_bpf+0x7d0/0xb70 [ 1776.826337][T11589] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1776.826354][T11589] ? lock_acquire+0x106/0x330 [ 1776.826390][T11589] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1776.826405][T11589] __vmalloc_noprof+0xd2/0x120 [ 1776.826421][T11589] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1776.826438][T11589] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1776.826459][T11589] bpf_prog_alloc+0x3c/0x1a0 [ 1776.826479][T11589] bpf_prog_load+0x7ba/0x1ae0 [ 1776.826509][T11589] ? __pfx_bpf_prog_load+0x10/0x10 [ 1776.826526][T11589] ? __might_fault+0xaf/0x130 [ 1776.826563][T11589] ? bpf_lsm_bpf+0x9/0x20 [ 1776.826580][T11589] ? security_bpf+0x7e/0x2d0 [ 1776.826600][T11589] __sys_bpf+0x570/0x920 [ 1776.826618][T11589] ? __pfx___sys_bpf+0x10/0x10 [ 1776.826649][T11589] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1776.826666][T11589] ? ksys_write+0x242/0x270 [ 1776.826690][T11589] ? __pfx_ksys_write+0x10/0x10 [ 1776.826718][T11589] __x64_sys_bpf+0x7c/0x90 [ 1776.826742][T11589] do_syscall_64+0xe2/0xf80 [ 1776.826760][T11589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.826774][T11589] ? clear_bhb_loop+0x60/0xb0 [ 1776.826791][T11589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.826805][T11589] RIP: 0033:0x7fab9b59aeb9 [ 1776.826821][T11589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.826835][T11589] RSP: 002b:00007fab9c479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1776.826854][T11589] RAX: ffffffffffffffda RBX: 00007fab9b816090 RCX: 00007fab9b59aeb9 [ 1776.826866][T11589] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 1776.826878][T11589] RBP: 00007fab9c479090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.826887][T11589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.826898][T11589] R13: 00007fab9b816128 R14: 00007fab9b816090 R15: 00007ffe7d018238 [ 1776.826926][T11589] [ 1777.115929][T11589] syz.7.11433: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1777.133278][T11589] CPU: 1 UID: 0 PID: 11589 Comm: syz.7.11433 Not tainted syzkaller #0 PREEMPT(full) [ 1777.133303][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1777.133313][T11589] Call Trace: [ 1777.133320][T11589] [ 1777.133328][T11589] dump_stack_lvl+0xe8/0x150 [ 1777.133354][T11589] warn_alloc+0x249/0x340 [ 1777.133381][T11589] ? __pfx_warn_alloc+0x10/0x10 [ 1777.133401][T11589] ? __get_vm_area_node+0x13f/0x300 [ 1777.133431][T11589] ? __get_vm_area_node+0x2b5/0x300 [ 1777.133462][T11589] __vmalloc_node_range_noprof+0x397/0x1730 [ 1777.133499][T11589] ? trace_call_bpf+0x7d0/0xb70 [ 1777.133531][T11589] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1777.133549][T11589] ? lock_acquire+0x106/0x330 [ 1777.133584][T11589] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1777.133600][T11589] __vmalloc_noprof+0xd2/0x120 [ 1777.133628][T11589] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1777.133653][T11589] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 1777.133677][T11589] bpf_prog_alloc+0x3c/0x1a0 [ 1777.133699][T11589] bpf_prog_load+0x7ba/0x1ae0 [ 1777.133733][T11589] ? __pfx_bpf_prog_load+0x10/0x10 [ 1777.133752][T11589] ? __might_fault+0xaf/0x130 [ 1777.133795][T11589] ? bpf_lsm_bpf+0x9/0x20 [ 1777.133813][T11589] ? security_bpf+0x7e/0x2d0 [ 1777.133836][T11589] __sys_bpf+0x570/0x920 [ 1777.133856][T11589] ? __pfx___sys_bpf+0x10/0x10 [ 1777.133891][T11589] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1777.133909][T11589] ? ksys_write+0x242/0x270 [ 1777.133932][T11589] ? __pfx_ksys_write+0x10/0x10 [ 1777.133963][T11589] __x64_sys_bpf+0x7c/0x90 [ 1777.133986][T11589] do_syscall_64+0xe2/0xf80 [ 1777.134004][T11589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.134021][T11589] ? clear_bhb_loop+0x60/0xb0 [ 1777.134042][T11589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.134058][T11589] RIP: 0033:0x7fab9b59aeb9 [ 1777.134075][T11589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.134090][T11589] RSP: 002b:00007fab9c479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1777.134107][T11589] RAX: ffffffffffffffda RBX: 00007fab9b816090 RCX: 00007fab9b59aeb9 [ 1777.134118][T11589] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 1777.134129][T11589] RBP: 00007fab9c479090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.134139][T11589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.134150][T11589] R13: 00007fab9b816128 R14: 00007fab9b816090 R15: 00007ffe7d018238 [ 1777.134184][T11589] [ 1777.134220][T11589] Mem-Info: [ 1777.618242][T11589] active_anon:9223 inactive_anon:0 isolated_anon:0 [ 1777.618242][T11589] active_file:19646 inactive_file:42873 isolated_file:0 [ 1777.618242][T11589] unevictable:768 dirty:239 writeback:0 [ 1777.618242][T11589] slab_reclaimable:8245 slab_unreclaimable:108640 [ 1777.618242][T11589] mapped:30216 shmem:1376 pagetables:1922 [ 1777.618242][T11589] sec_pagetables:0 bounce:0 [ 1777.618242][T11589] kernel_misc_reclaimable:0 [ 1777.618242][T11589] free:1284018 free_pcp:23188 free_cma:0 [ 1777.708915][T11589] Node 0 active_anon:36892kB inactive_anon:0kB active_file:78584kB inactive_file:171288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:67616kB dirty:956kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13012kB pagetables:7552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1777.742718][T11589] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53248kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1777.884581][T11589] Node 0 DMA free:11188kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:76kB local_pcp:24kB free_cma:0kB [ 1777.914926][T11589] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1777.922790][T11589] Node 0 DMA32 free:1399680kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37068kB inactive_anon:0kB active_file:78584kB inactive_file:171296kB unevictable:1536kB writepending:924kB zspages:0kB present:3129332kB managed:2554128kB mlocked:0kB bounce:0kB free_pcp:36204kB local_pcp:19704kB free_cma:0kB [ 1777.957039][T11589] lowmem_reserve[]: 0 0 1 1 1 [ 1777.963099][T11589] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1777.999867][T11589] lowmem_reserve[]: 0 0 0 0 0 [ 1778.004752][T11589] Node 1 Normal free:3725604kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55044kB local_pcp:29412kB free_cma:0kB [ 1778.041194][T11589] lowmem_reserve[]: 0 0 0 0 0 [ 1778.046064][T11589] Node 0 DMA: 3*4kB (U) 1*8kB (U) 2*16kB (U) 0*32kB 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 11188kB [ 1778.062186][T11589] Node 0 DMA32: 10398*4kB (UM) 8997*8kB (UME) 6524*16kB (UME) 1013*32kB (UME) 1874*64kB (UME) 920*128kB (UME) 351*256kB (UME) 441*512kB (UME) 292*1024kB (U) 139*2048kB (U) 3*4096kB (U) = 1399680kB [ 1778.087480][T11589] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1778.109611][T11589] Node 1 Normal: 193*4kB (UME) 43*8kB (UME) 49*16kB (UME) 253*32kB (UME) 88*64kB (UME) 33*128kB (UME) 8*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (U) 902*4096kB (UM) = 3725708kB [ 1778.134085][T11589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1778.144444][T11589] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1778.180038][T11589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1778.191700][T11589] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1778.201280][T11589] 63893 total pagecache pages [ 1778.206173][T11589] 0 pages in swap cache [ 1778.213752][T11589] Free swap = 124996kB [ 1778.221153][T11589] Total swap = 124996kB [ 1778.225359][T11589] 2097051 pages RAM [ 1778.230783][T11589] 0 pages HighMem/MovableOnly [ 1778.235569][T11589] 426621 pages reserved [ 1778.240797][T11589] 0 pages cma reserved [ 1778.436003][T11603] netlink: 'syz.7.11439': attribute type 4 has an invalid length. [ 1778.712597][T11624] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1778.903132][T11631] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1779.124765][T11638] __nla_validate_parse: 4 callbacks suppressed [ 1779.124802][T11638] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11450'. [ 1779.478077][T11646] netlink: 'syz.0.11453': attribute type 6 has an invalid length. [ 1780.485280][T11666] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.11459'. [ 1780.627880][T11677] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1780.818919][T11680] netlink: 144 bytes leftover after parsing attributes in process `syz.9.11465'. [ 1781.375708][T11694] netlink: 'syz.0.11470': attribute type 4 has an invalid length. [ 1781.422049][T11694] netlink: 17 bytes leftover after parsing attributes in process `syz.0.11470'. [ 1781.680421][T11205] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1781.695085][T11205] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1781.706683][T11205] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1781.720043][T11205] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1781.737727][T11205] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1781.831328][T11695] lo speed is unknown, defaulting to 1000 [ 1783.870801][ T5836] Bluetooth: hci5: command tx timeout [ 1784.245255][T11727] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.11476'. [ 1784.866479][T11695] chnl_net:caif_netlink_parms(): no params data found [ 1784.948563][T17135] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.110841][T17135] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.388849][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11479'. [ 1785.805341][T11729] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11477'. [ 1786.002906][ T5836] Bluetooth: hci5: command tx timeout [ 1786.026330][T17135] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.049362][T11695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.086197][T11695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.099240][T11695] bridge_slave_0: entered allmulticast mode [ 1786.108969][T11695] bridge_slave_0: entered promiscuous mode [ 1786.118990][T11695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.126309][T11695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.133643][T11695] bridge_slave_1: entered allmulticast mode [ 1786.141279][T11695] bridge_slave_1: entered promiscuous mode [ 1786.203469][T11751] netlink: 'syz.7.11482': attribute type 4 has an invalid length. [ 1786.216366][T11751] netlink: 17 bytes leftover after parsing attributes in process `syz.7.11482'. [ 1786.261939][T17135] netdevsim netdevsim9 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.383387][T11755] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1786.433273][T11695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.456237][T11695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1786.569689][T11695] team0: Port device team_slave_0 added [ 1786.585519][T11695] team0: Port device team_slave_1 added [ 1786.702341][T17135] bridge_slave_1: left allmulticast mode [ 1786.712961][T17135] bridge_slave_1: left promiscuous mode [ 1786.732861][T17135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.788641][T11771] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11488'. [ 1786.895148][T11777] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11489'. [ 1786.927934][T17135] bridge_slave_0: left allmulticast mode [ 1786.936895][T17135] bridge_slave_0: left promiscuous mode [ 1786.942822][T17135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.964515][T17135] veth0_to_bridge: left allmulticast mode [ 1786.974005][T17135] veth0_to_bridge: left promiscuous mode [ 1786.988861][T17135] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 1787.119180][T11784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11491'. [ 1787.908053][T17135] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1788.016881][ T5836] Bluetooth: hci5: command tx timeout [ 1788.031833][T17135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1788.042381][T17135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1788.053732][T17135] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1788.063943][T17135] bond0 (unregistering): Released all slaves [ 1788.073427][T11695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.080753][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.109469][T11695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1788.122130][T11695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1788.129302][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.163743][T11695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1788.224688][T11779] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1788.255240][T11779] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1788.287401][T11779] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1788.484610][T11695] hsr_slave_0: entered promiscuous mode [ 1788.492294][T11695] hsr_slave_1: entered promiscuous mode [ 1788.500071][T11695] debugfs: 'hsr0' already exists in 'hsr' [ 1788.506171][T11695] Cannot create hsr debugfs directory [ 1788.515713][T11796] netlink: 'syz.8.11496': attribute type 1 has an invalid length. [ 1789.115845][T11821] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11501'. [ 1789.304103][T11833] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11505'. [ 1789.320719][T11833] netlink: 7 bytes leftover after parsing attributes in process `syz.7.11505'. [ 1789.687584][T11845] netlink: 'syz.8.11509': attribute type 1 has an invalid length. [ 1790.096842][ T5836] Bluetooth: hci5: command tx timeout [ 1790.301405][T17135] hsr_slave_0: left promiscuous mode [ 1790.324572][T11867] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11515'. [ 1790.339606][T17135] hsr_slave_1: left promiscuous mode [ 1790.356114][T17135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1790.379662][T17135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1790.453368][T17135] veth1_macvtap: left promiscuous mode [ 1790.467210][T17135] veth0_macvtap: left promiscuous mode [ 1790.472887][T17135] veth1_vlan: left promiscuous mode [ 1790.498018][T17135] veth0_vlan: left promiscuous mode [ 1791.051867][T11887] netlink: 'syz.8.11519': attribute type 9 has an invalid length. [ 1791.072054][T11887] netlink: 'syz.8.11519': attribute type 11 has an invalid length. [ 1791.095124][T11887] netlink: 'syz.8.11519': attribute type 12 has an invalid length. [ 1791.122986][T11887] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.11519'. [ 1791.145266][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11519'. [ 1791.625467][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.637164][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.650034][T11893] netlink: 'syz.1.11520': attribute type 4 has an invalid length. [ 1791.658311][T11893] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11520'. [ 1791.917566][T17135] team0 (unregistering): Port device team_slave_1 removed [ 1791.961304][T17135] team0 (unregistering): Port device team_slave_0 removed [ 1792.402065][T11878] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11516'. [ 1792.469990][T11896] netlink: 'syz.7.11521': attribute type 1 has an invalid length. [ 1792.525381][T11695] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1792.571681][T11695] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1792.588001][T11898] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11522'. [ 1792.614885][T11695] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1792.629906][T11898] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11522'. [ 1792.666566][T11695] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1793.036671][T11695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1793.045273][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11527'. [ 1793.070188][T11695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1793.092377][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.099732][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1793.161775][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.168970][ T8231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1793.668978][T11695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1793.695300][T11937] netlink: 'syz.0.11534': attribute type 1 has an invalid length. [ 1794.201111][T11695] veth0_vlan: entered promiscuous mode [ 1794.244982][T11695] veth1_vlan: entered promiscuous mode [ 1794.393614][T11695] veth0_macvtap: entered promiscuous mode [ 1794.449111][T11695] veth1_macvtap: entered promiscuous mode [ 1794.525570][T11695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1794.554695][T11695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1794.587277][T17135] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.698245][T17135] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.822140][T17135] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.904224][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.538956][T17135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1795.558932][T17135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1795.610560][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1795.628373][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1795.725948][T11972] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11544'. [ 1795.940731][T11983] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11548'. [ 1795.973167][T11983] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11548'. [ 1796.049354][T11990] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11549'. [ 1796.376238][T11998] netlink: 'syz.1.11553': attribute type 10 has an invalid length. [ 1796.392347][T11998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11553'. [ 1796.530020][T11998] veth0_vlan: entered allmulticast mode [ 1796.600639][T11998] bridge0: port 3(veth0_vlan) entered blocking state [ 1796.793192][T11998] bridge0: port 3(veth0_vlan) entered disabled state [ 1796.876161][T12000] netlink: 144 bytes leftover after parsing attributes in process `syz.7.11555'. [ 1796.912106][T12005] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11552'. [ 1797.172717][T11998] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1798.815429][T12023] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11562'. [ 1798.894772][T12028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11563'. [ 1799.564401][T12031] netlink: 140 bytes leftover after parsing attributes in process `syz.7.11565'. [ 1799.981698][T12051] FAULT_INJECTION: forcing a failure. [ 1799.981698][T12051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.996665][T12051] CPU: 1 UID: 0 PID: 12051 Comm: syz.8.11571 Not tainted syzkaller #0 PREEMPT(full) [ 1799.996689][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1799.996700][T12051] Call Trace: [ 1799.996707][T12051] [ 1799.996715][T12051] dump_stack_lvl+0xe8/0x150 [ 1799.996741][T12051] should_fail_ex+0x412/0x560 [ 1799.996766][T12051] _copy_from_iter+0x1d3/0x1670 [ 1799.996791][T12051] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1799.996817][T12051] ? __pfx__copy_from_iter+0x10/0x10 [ 1799.996837][T12051] ? __build_skb_around+0x22d/0x3c0 [ 1799.996858][T12051] ? __alloc_skb+0x193/0x390 [ 1799.996875][T12051] ? netlink_sendmsg+0x650/0xb40 [ 1799.996892][T12051] ? skb_put+0x11b/0x210 [ 1799.996913][T12051] netlink_sendmsg+0x6c0/0xb40 [ 1799.996938][T12051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1799.996959][T12051] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1799.996980][T12051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1799.997000][T12051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1799.997016][T12051] ____sys_sendmsg+0xa68/0xad0 [ 1799.997042][T12051] ? __might_fault+0xaf/0x130 [ 1799.997070][T12051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1799.997098][T12051] ? import_iovec+0x73/0xa0 [ 1799.997122][T12051] ___sys_sendmsg+0x2a5/0x360 [ 1799.997141][T12051] ? __lock_acquire+0x6b5/0x2cf0 [ 1799.997166][T12051] ? __pfx____sys_sendmsg+0x10/0x10 [ 1799.997217][T12051] ? __fget_files+0x2a/0x420 [ 1799.997234][T12051] ? __fget_files+0x3a0/0x420 [ 1799.997260][T12051] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1799.997284][T12051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1799.997313][T12051] ? __pfx_ksys_write+0x10/0x10 [ 1799.997345][T12051] do_syscall_64+0xe2/0xf80 [ 1799.997363][T12051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.997378][T12051] ? trace_irq_disable+0x37/0x100 [ 1799.997394][T12051] ? clear_bhb_loop+0x60/0xb0 [ 1799.997414][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.997430][T12051] RIP: 0033:0x7f7d7419aeb9 [ 1799.997446][T12051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1799.997460][T12051] RSP: 002b:00007f7d7510e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1799.997479][T12051] RAX: ffffffffffffffda RBX: 00007f7d74416090 RCX: 00007f7d7419aeb9 [ 1799.997492][T12051] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1799.997503][T12051] RBP: 00007f7d7510e090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.997514][T12051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.997524][T12051] R13: 00007f7d74416128 R14: 00007f7d74416090 R15: 00007fffb10d85d8 [ 1799.997551][T12051] [ 1801.784715][T12072] __nla_validate_parse: 1 callbacks suppressed [ 1801.784750][T12072] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11577'. [ 1801.848437][T12072] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11577'. [ 1804.656409][T12094] netlink: 140 bytes leftover after parsing attributes in process `syz.9.11585'. [ 1804.858252][T12102] netlink: 'syz.0.11587': attribute type 1 has an invalid length. [ 1805.273685][T12117] netlink: 10420 bytes leftover after parsing attributes in process `syz.9.11592'. [ 1805.334110][T12119] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11593'. [ 1805.895103][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11599'. [ 1805.921640][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11599'. [ 1806.037399][T12137] netlink: 10420 bytes leftover after parsing attributes in process `syz.8.11598'. [ 1806.513100][T12139] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11600'. [ 1806.686498][T12152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1806.868298][T12164] netlink: 144 bytes leftover after parsing attributes in process `syz.7.11608'. [ 1806.915689][T12168] netlink: 'syz.8.11607': attribute type 13 has an invalid length. [ 1806.959371][T12165] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11606'. [ 1807.049268][T12165] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11606'. [ 1807.688131][T12181] netlink: 10420 bytes leftover after parsing attributes in process `syz.8.11613'. [ 1807.836992][T12183] netlink: 140 bytes leftover after parsing attributes in process `syz.7.11614'. [ 1808.325630][T12200] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11621'. [ 1808.460014][T12196] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11620'. [ 1808.696196][T12213] netlink: 10420 bytes leftover after parsing attributes in process `syz.7.11626'. [ 1808.948157][T12220] netlink: 140 bytes leftover after parsing attributes in process `syz.7.11628'. [ 1809.027708][T12226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1809.327552][T12238] netlink: 7 bytes leftover after parsing attributes in process `syz.9.11634'. [ 1809.634874][T12254] netlink: 'syz.1.11641': attribute type 10 has an invalid length. [ 1809.645315][T12254] bond0: entered promiscuous mode [ 1809.650849][T12254] bond_slave_0: entered promiscuous mode [ 1809.667082][T12254] bond_slave_1: entered promiscuous mode [ 1809.673187][T12254] bridge0: port 3(bond0) entered blocking state [ 1809.710565][T12254] bridge0: port 3(bond0) entered disabled state [ 1809.718990][T12254] bond0: entered allmulticast mode [ 1809.724228][T12254] bond_slave_0: entered allmulticast mode [ 1809.730135][T12254] bond_slave_1: entered allmulticast mode [ 1809.740965][T12254] bridge0: port 3(bond0) entered blocking state [ 1809.747372][T12254] bridge0: port 3(bond0) entered forwarding state [ 1810.397873][T12265] netlink: 'syz.0.11645': attribute type 10 has an invalid length. [ 1810.901080][T12281] FAULT_INJECTION: forcing a failure. [ 1810.901080][T12281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1811.017410][T12281] CPU: 0 UID: 0 PID: 12281 Comm: syz.0.11650 Not tainted syzkaller #0 PREEMPT(full) [ 1811.017436][T12281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1811.017447][T12281] Call Trace: [ 1811.017455][T12281] [ 1811.017463][T12281] dump_stack_lvl+0xe8/0x150 [ 1811.017489][T12281] should_fail_ex+0x412/0x560 [ 1811.017514][T12281] _copy_from_iter+0x3b0/0x1670 [ 1811.017547][T12281] ? __pfx__copy_from_iter+0x10/0x10 [ 1811.017569][T12281] ? __build_skb_around+0x22d/0x3c0 [ 1811.017591][T12281] ? __alloc_skb+0x193/0x390 [ 1811.017609][T12281] ? netlink_sendmsg+0x650/0xb40 [ 1811.017627][T12281] ? skb_put+0x11b/0x210 [ 1811.017649][T12281] netlink_sendmsg+0x6c0/0xb40 [ 1811.017666][T12281] ? irqentry_exit+0x59c/0x620 [ 1811.017691][T12281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1811.017711][T12281] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1811.017733][T12281] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1811.017753][T12281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1811.017770][T12281] ____sys_sendmsg+0xa68/0xad0 [ 1811.017799][T12281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1811.017828][T12281] ? import_iovec+0x73/0xa0 [ 1811.017853][T12281] ___sys_sendmsg+0x2a5/0x360 [ 1811.017873][T12281] ? __lock_acquire+0x6b5/0x2cf0 [ 1811.017897][T12281] ? __pfx____sys_sendmsg+0x10/0x10 [ 1811.017955][T12281] ? __fget_files+0x2a/0x420 [ 1811.017972][T12281] ? __fget_files+0x3a0/0x420 [ 1811.017999][T12281] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1811.018022][T12281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1811.018041][T12281] ? perf_trace_preemptirq_template+0xab/0x340 [ 1811.018068][T12281] ? __pfx_ksys_write+0x10/0x10 [ 1811.018101][T12281] do_syscall_64+0xe2/0xf80 [ 1811.018118][T12281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.018135][T12281] ? trace_irq_disable+0x37/0x100 [ 1811.018150][T12281] ? clear_bhb_loop+0x60/0xb0 [ 1811.018170][T12281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.018186][T12281] RIP: 0033:0x7f79ab59aeb9 [ 1811.018203][T12281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1811.018217][T12281] RSP: 002b:00007f79ac3d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1811.018236][T12281] RAX: ffffffffffffffda RBX: 00007f79ab815fa0 RCX: 00007f79ab59aeb9 [ 1811.018249][T12281] RDX: 0000000000000600 RSI: 0000200000000040 RDI: 0000000000000003 [ 1811.018260][T12281] RBP: 00007f79ac3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.018271][T12281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.018281][T12281] R13: 00007f79ab816038 R14: 00007f79ab815fa0 R15: 00007ffcfc005b08 [ 1811.018309][T12281] [ 1811.631759][T12294] netlink: 'syz.0.11655': attribute type 1 has an invalid length. [ 1811.913445][T12314] FAULT_INJECTION: forcing a failure. [ 1811.913445][T12314] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.926553][T12314] CPU: 0 UID: 0 PID: 12314 Comm: syz.1.11662 Not tainted syzkaller #0 PREEMPT(full) [ 1811.926577][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1811.926589][T12314] Call Trace: [ 1811.926599][T12314] [ 1811.926610][T12314] dump_stack_lvl+0xe8/0x150 [ 1811.926656][T12314] should_fail_ex+0x412/0x560 [ 1811.926705][T12314] should_failslab+0xa8/0x100 [ 1811.926738][T12314] __kmalloc_noprof+0xde/0x7e0 [ 1811.926766][T12314] ? tomoyo_encode+0x28b/0x550 [ 1811.926813][T12314] tomoyo_encode+0x28b/0x550 [ 1811.926865][T12314] tomoyo_mount_permission+0x3a2/0x9d0 [ 1811.926904][T12314] ? stack_depot_save_flags+0x33/0x810 [ 1811.926922][T12314] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 1811.926948][T12314] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1811.927207][T12314] security_sb_mount+0xe4/0x320 [ 1811.927251][T12314] path_mount+0xbc/0x10e0 [ 1811.927272][T12314] ? kmem_cache_free+0x195/0x610 [ 1811.927340][T12314] __se_sys_mount+0x31d/0x420 [ 1811.927392][T12314] ? __pfx___se_sys_mount+0x10/0x10 [ 1811.927444][T12314] ? __x64_sys_mount+0x20/0xc0 [ 1811.927480][T12314] do_syscall_64+0xe2/0xf80 [ 1811.927502][T12314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.927518][T12314] ? trace_irq_disable+0x37/0x100 [ 1811.927534][T12314] ? clear_bhb_loop+0x60/0xb0 [ 1811.927570][T12314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.927588][T12314] RIP: 0033:0x7f6135b9aeb9 [ 1811.927610][T12314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1811.927624][T12314] RSP: 002b:00007f61369ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1811.927648][T12314] RAX: ffffffffffffffda RBX: 00007f6135e15fa0 RCX: 00007f6135b9aeb9 [ 1811.927661][T12314] RDX: 00002000000002c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 1811.927673][T12314] RBP: 00007f61369ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.927684][T12314] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.927695][T12314] R13: 00007f6135e16038 R14: 00007f6135e15fa0 R15: 00007ffeadc483d8 [ 1811.927784][T12314] [ 1812.149435][T12315] __nla_validate_parse: 9 callbacks suppressed [ 1812.149453][T12315] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11661'. [ 1812.190591][T12315] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11661'. [ 1813.125875][T12332] netlink: 144 bytes leftover after parsing attributes in process `syz.7.11667'. [ 1813.297185][T12344] netlink: 68 bytes leftover after parsing attributes in process `syz.9.11671'. [ 1813.317014][T12337] netlink: 140 bytes leftover after parsing attributes in process `syz.8.11669'. [ 1813.471872][T12350] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11673'. [ 1813.692470][T12353] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11675'. [ 1813.756080][T12353] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11675'. [ 1813.815515][T12355] netlink: 140 bytes leftover after parsing attributes in process `syz.7.11674'. [ 1813.866331][T12358] netlink: 'syz.9.11676': attribute type 4 has an invalid length. [ 1813.897779][T12358] netlink: 17 bytes leftover after parsing attributes in process `syz.9.11676'. [ 1815.344122][T12419] FAULT_INJECTION: forcing a failure. [ 1815.344122][T12419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1815.359228][T12419] CPU: 1 UID: 0 PID: 12419 Comm: syz.1.11696 Not tainted syzkaller #0 PREEMPT(full) [ 1815.359259][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1815.359271][T12419] Call Trace: [ 1815.359278][T12419] [ 1815.359286][T12419] dump_stack_lvl+0xe8/0x150 [ 1815.359313][T12419] should_fail_ex+0x412/0x560 [ 1815.359338][T12419] _copy_to_user+0x31/0xb0 [ 1815.359363][T12419] simple_read_from_buffer+0xe1/0x170 [ 1815.359386][T12419] proc_fail_nth_read+0x1bb/0x230 [ 1815.359411][T12419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1815.359436][T12419] ? rw_verify_area+0x2a6/0x4d0 [ 1815.359458][T12419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1815.359480][T12419] vfs_read+0x20c/0xa70 [ 1815.359500][T12419] ? fdget_pos+0x246/0x320 [ 1815.359521][T12419] ? __pfx___mutex_lock+0x10/0x10 [ 1815.359541][T12419] ? __pfx_vfs_read+0x10/0x10 [ 1815.359563][T12419] ? __fget_files+0x2a/0x420 [ 1815.359585][T12419] ? __fget_files+0x3a0/0x420 [ 1815.359601][T12419] ? __fget_files+0x2a/0x420 [ 1815.359627][T12419] ksys_read+0x150/0x270 [ 1815.359651][T12419] ? __pfx_ksys_read+0x10/0x10 [ 1815.359683][T12419] do_syscall_64+0xe2/0xf80 [ 1815.359701][T12419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.359716][T12419] ? trace_irq_disable+0x37/0x100 [ 1815.359733][T12419] ? clear_bhb_loop+0x60/0xb0 [ 1815.359752][T12419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.359769][T12419] RIP: 0033:0x7f6135b5b78e [ 1815.359784][T12419] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1815.359798][T12419] RSP: 002b:00007f61369adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1815.359816][T12419] RAX: ffffffffffffffda RBX: 00007f61369ae6c0 RCX: 00007f6135b5b78e [ 1815.359829][T12419] RDX: 000000000000000f RSI: 00007f61369ae0a0 RDI: 0000000000000004 [ 1815.359840][T12419] RBP: 00007f61369ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.359851][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.359861][T12419] R13: 00007f6135e16038 R14: 00007f6135e15fa0 R15: 00007ffeadc483d8 [ 1815.359890][T12419] [ 1816.649823][T12447] netlink: 'syz.7.11705': attribute type 1 has an invalid length. [ 1817.590405][T12470] __nla_validate_parse: 12 callbacks suppressed [ 1817.590439][T12470] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11714'. [ 1817.727370][T12478] netlink: 'syz.0.11716': attribute type 4 has an invalid length. [ 1817.735431][T12478] netlink: 17 bytes leftover after parsing attributes in process `syz.0.11716'. [ 1817.755019][T12470] netlink: 7 bytes leftover after parsing attributes in process `syz.8.11714'. [ 1817.776412][T12476] netlink: 'syz.9.11717': attribute type 4 has an invalid length. [ 1817.819909][T12476] netlink: 17 bytes leftover after parsing attributes in process `syz.9.11717'. [ 1818.285149][T12495] netlink: 'syz.0.11721': attribute type 1 has an invalid length. [ 1818.366573][T12496] netlink: 10420 bytes leftover after parsing attributes in process `syz.8.11720'. [ 1818.728259][T12504] netlink: 'syz.8.11725': attribute type 4 has an invalid length. [ 1818.774590][T12504] netlink: 17 bytes leftover after parsing attributes in process `syz.8.11725'. [ 1819.009752][T12511] netlink: 140 bytes leftover after parsing attributes in process `syz.7.11726'. [ 1819.098099][T12522] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11730'. [ 1819.121188][T12522] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11730'. [ 1819.246014][T12527] netlink: 'syz.0.11732': attribute type 4 has an invalid length. [ 1819.247740][T12530] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.11731'. [ 1819.403867][T12534] netlink: 'syz.8.11735': attribute type 1 has an invalid length. [ 1819.717908][T12545] netlink: 'syz.9.11739': attribute type 4 has an invalid length. [ 1820.221668][T12573] netlink: 'syz.7.11747': attribute type 4 has an invalid length. [ 1820.579546][T12581] netlink: 'syz.8.11751': attribute type 1 has an invalid length. [ 1821.753149][T12634] validate_nla: 2 callbacks suppressed [ 1821.753165][T12634] netlink: 'syz.8.11770': attribute type 4 has an invalid length. [ 1822.951455][T12646] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1823.093014][T12659] __nla_validate_parse: 21 callbacks suppressed [ 1823.093047][T12659] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11778'. [ 1823.113854][T12659] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11778'. [ 1823.116140][T12660] netlink: 10420 bytes leftover after parsing attributes in process `syz.7.11777'. [ 1823.176037][T12663] netlink: 'syz.9.11779': attribute type 4 has an invalid length. [ 1823.196882][T12663] netlink: 17 bytes leftover after parsing attributes in process `syz.9.11779'. [ 1823.314013][T12667] netlink: 144 bytes leftover after parsing attributes in process `syz.8.11781'. [ 1823.506145][T12672] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.11782'. [ 1823.673395][T12677] netlink: 140 bytes leftover after parsing attributes in process `syz.8.11785'. [ 1824.127794][T12691] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11789'. [ 1824.196889][T12693] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11790'. [ 1824.817846][T11205] Bluetooth: hci3: command 0x0406 tx timeout [ 1824.840705][T12704] netlink: 'syz.7.11794': attribute type 4 has an invalid length. [ 1824.881120][T12704] netlink: 17 bytes leftover after parsing attributes in process `syz.7.11794'. [ 1825.467434][T12731] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1827.883957][T12807] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1828.633765][T12812] __nla_validate_parse: 14 callbacks suppressed [ 1828.633778][T12812] netlink: 140 bytes leftover after parsing attributes in process `syz.9.11829'. [ 1829.636638][T12841] netlink: 10420 bytes leftover after parsing attributes in process `syz.1.11836'. [ 1829.689081][T12836] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11837'. [ 1829.823268][T12847] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11840'. [ 1830.061094][T12851] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1830.305930][T12857] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11845'. [ 1830.597609][T12878] netlink: 10420 bytes leftover after parsing attributes in process `syz.8.11851'. [ 1830.826268][T12886] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11854'. [ 1830.852898][T12887] netlink: 'syz.9.11855': attribute type 1 has an invalid length. [ 1831.010369][T12893] FAULT_INJECTION: forcing a failure. [ 1831.010369][T12893] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.026912][T12893] CPU: 1 UID: 0 PID: 12893 Comm: syz.0.11857 Not tainted syzkaller #0 PREEMPT(full) [ 1831.026935][T12893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1831.026946][T12893] Call Trace: [ 1831.026954][T12893] [ 1831.026962][T12893] dump_stack_lvl+0xe8/0x150 [ 1831.026988][T12893] should_fail_ex+0x412/0x560 [ 1831.027020][T12893] should_failslab+0xa8/0x100 [ 1831.027040][T12893] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1831.027060][T12893] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1831.027085][T12893] ? skb_clone+0x212/0x3a0 [ 1831.027109][T12893] skb_clone+0x212/0x3a0 [ 1831.027134][T12893] __netlink_deliver_tap+0x404/0x850 [ 1831.027165][T12893] ? netlink_deliver_tap+0x2e/0x1b0 [ 1831.027184][T12893] netlink_deliver_tap+0x19c/0x1b0 [ 1831.027203][T12893] netlink_unicast+0x7e3/0x9b0 [ 1831.027234][T12893] ? __pfx_netlink_unicast+0x10/0x10 [ 1831.027256][T12893] ? __alloc_skb+0x193/0x390 [ 1831.027275][T12893] ? netlink_sendmsg+0x650/0xb40 [ 1831.027291][T12893] ? skb_put+0x11b/0x210 [ 1831.027313][T12893] netlink_sendmsg+0x813/0xb40 [ 1831.027342][T12893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1831.027364][T12893] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1831.027387][T12893] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1831.027407][T12893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1831.027424][T12893] ____sys_sendmsg+0xa68/0xad0 [ 1831.027446][T12893] ? __might_fault+0xaf/0x130 [ 1831.027476][T12893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1831.027508][T12893] ? import_iovec+0x73/0xa0 [ 1831.027535][T12893] ___sys_sendmsg+0x2a5/0x360 [ 1831.027554][T12893] ? __lock_acquire+0x6b5/0x2cf0 [ 1831.027581][T12893] ? __pfx____sys_sendmsg+0x10/0x10 [ 1831.027641][T12893] ? __fget_files+0x2a/0x420 [ 1831.027657][T12893] ? __fget_files+0x3a0/0x420 [ 1831.027685][T12893] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1831.027715][T12893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1831.027734][T12893] ? perf_trace_preemptirq_template+0xab/0x340 [ 1831.027763][T12893] ? __pfx_ksys_write+0x10/0x10 [ 1831.027799][T12893] do_syscall_64+0xe2/0xf80 [ 1831.027818][T12893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.027834][T12893] ? trace_irq_disable+0x37/0x100 [ 1831.027849][T12893] ? clear_bhb_loop+0x60/0xb0 [ 1831.027870][T12893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.027886][T12893] RIP: 0033:0x7f79ab59aeb9 [ 1831.027903][T12893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.027917][T12893] RSP: 002b:00007f79ac3d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1831.027940][T12893] RAX: ffffffffffffffda RBX: 00007f79ab815fa0 RCX: 00007f79ab59aeb9 [ 1831.027953][T12893] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1831.027964][T12893] RBP: 00007f79ac3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.027975][T12893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1831.027986][T12893] R13: 00007f79ab816038 R14: 00007f79ab815fa0 R15: 00007ffcfc005b08 [ 1831.028027][T12893] [ 1831.028463][T12893] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11857'. [ 1831.192623][T12897] netlink: 'syz.9.11859': attribute type 1 has an invalid length. [ 1831.692250][T12905] netlink: 140 bytes leftover after parsing attributes in process `syz.7.11862'. [ 1831.858306][T12915] netlink: 10420 bytes leftover after parsing attributes in process `syz.0.11865'. [ 1833.024150][T12929] netlink: 'syz.1.11869': attribute type 10 has an invalid length. [ 1833.299785][T12941] FAULT_INJECTION: forcing a failure. [ 1833.299785][T12941] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.317330][T12941] CPU: 0 UID: 0 PID: 12941 Comm: syz.1.11874 Not tainted syzkaller #0 PREEMPT(full) [ 1833.317354][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1833.317365][T12941] Call Trace: [ 1833.317372][T12941] [ 1833.317380][T12941] dump_stack_lvl+0xe8/0x150 [ 1833.317407][T12941] should_fail_ex+0x412/0x560 [ 1833.317431][T12941] should_failslab+0xa8/0x100 [ 1833.317451][T12941] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1833.317475][T12941] ? __alloc_skb+0x193/0x390 [ 1833.317492][T12941] ? __alloc_skb+0x1d7/0x390 [ 1833.317509][T12941] ? __local_bh_enable_ip+0xd0/0x130 [ 1833.317526][T12941] ? __alloc_skb+0x193/0x390 [ 1833.317544][T12941] __alloc_skb+0x1d7/0x390 [ 1833.317566][T12941] netlink_sendmsg+0x5d4/0xb40 [ 1833.317592][T12941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1833.317611][T12941] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1833.317634][T12941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1833.317654][T12941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1833.317671][T12941] ____sys_sendmsg+0xa68/0xad0 [ 1833.317691][T12941] ? __might_fault+0xaf/0x130 [ 1833.317719][T12941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1833.317755][T12941] ? import_iovec+0x73/0xa0 [ 1833.317780][T12941] ___sys_sendmsg+0x2a5/0x360 [ 1833.317800][T12941] ? __lock_acquire+0x6b5/0x2cf0 [ 1833.317825][T12941] ? __pfx____sys_sendmsg+0x10/0x10 [ 1833.317876][T12941] ? __fget_files+0x2a/0x420 [ 1833.317893][T12941] ? __fget_files+0x3a0/0x420 [ 1833.317919][T12941] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1833.317943][T12941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1833.317962][T12941] ? perf_trace_preemptirq_template+0xab/0x340 [ 1833.317988][T12941] ? __pfx_ksys_write+0x10/0x10 [ 1833.318020][T12941] do_syscall_64+0xe2/0xf80 [ 1833.318038][T12941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.318054][T12941] ? trace_irq_disable+0x37/0x100 [ 1833.318069][T12941] ? clear_bhb_loop+0x60/0xb0 [ 1833.318088][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.318104][T12941] RIP: 0033:0x7f6135b9aeb9 [ 1833.318120][T12941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1833.318134][T12941] RSP: 002b:00007f61369ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1833.318153][T12941] RAX: ffffffffffffffda RBX: 00007f6135e15fa0 RCX: 00007f6135b9aeb9 [ 1833.318166][T12941] RDX: 0000000020044084 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1833.318178][T12941] RBP: 00007f61369ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1833.318188][T12941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1833.318199][T12941] R13: 00007f6135e16038 R14: 00007f6135e15fa0 R15: 00007ffeadc483d8 [ 1833.318227][T12941] [ 1833.823307][T12948] netlink: 'syz.9.11877': attribute type 4 has an invalid length. [ 1833.831887][T12948] __nla_validate_parse: 1 callbacks suppressed [ 1833.831904][T12948] netlink: 17 bytes leftover after parsing attributes in process `syz.9.11877'. [ 1833.833165][T12952] netlink: 10420 bytes leftover after parsing attributes in process `syz.8.11878'. [ 1833.845551][T12946] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11876'. [ 1834.019216][T12956] sch_tbf: burst 1 is lower than device veth0_to_bridge mtu (1514) ! [ 1835.079319][T12979] netlink: 'syz.9.11885': attribute type 4 has an invalid length. [ 1835.117938][T12979] netlink: 17 bytes leftover after parsing attributes in process `syz.9.11885'. [ 1835.359365][T12983] netlink: 10420 bytes leftover after parsing attributes in process `syz.0.11890'. [ 1836.002119][T13000] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11894'. [ 1837.849014][T13020] netlink: 'syz.1.11902': attribute type 4 has an invalid length. [ 1837.864537][T13020] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11902'. [ 1838.083163][T13035] netlink: 'syz.7.11908': attribute type 23 has an invalid length. [ 1839.375718][T13048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11912'. [ 1839.389145][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11912'. [ 1839.421607][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11912'. [ 1839.432254][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11912'. [ 1839.442669][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11912'. [ 1839.452390][T13048] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11912'. [ 1839.463268][T13048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11912'. [ 1839.646218][T13064] netlink: 140 bytes leftover after parsing attributes in process `syz.8.11914'. [ 1839.683508][T13063] netlink: 'syz.9.11917': attribute type 4 has an invalid length. [ 1839.697957][T13063] netlink: 17 bytes leftover after parsing attributes in process `syz.9.11917'. [ 1839.973542][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11920'. [ 1840.005491][T13078] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 1840.464873][T13102] netlink: 'syz.9.11930': attribute type 4 has an invalid length. [ 1840.933387][T13119] FAULT_INJECTION: forcing a failure. [ 1840.933387][T13119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1840.950418][T13119] CPU: 1 UID: 0 PID: 13119 Comm: syz.7.11937 Not tainted syzkaller #0 PREEMPT(full) [ 1840.950443][T13119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1840.950454][T13119] Call Trace: [ 1840.950461][T13119] [ 1840.950470][T13119] dump_stack_lvl+0xe8/0x150 [ 1840.950496][T13119] should_fail_ex+0x412/0x560 [ 1840.950522][T13119] _copy_from_user+0x2d/0xb0 [ 1840.950546][T13119] __sys_bpf+0x229/0x920 [ 1840.950566][T13119] ? __pfx___sys_bpf+0x10/0x10 [ 1840.950598][T13119] ? ksys_write+0x242/0x270 [ 1840.950622][T13119] ? __pfx_ksys_write+0x10/0x10 [ 1840.950652][T13119] __x64_sys_bpf+0x7c/0x90 [ 1840.950675][T13119] do_syscall_64+0xe2/0xf80 [ 1840.950693][T13119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.950709][T13119] ? trace_irq_disable+0x37/0x100 [ 1840.950733][T13119] ? clear_bhb_loop+0x60/0xb0 [ 1840.950753][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.950770][T13119] RIP: 0033:0x7fab9b59aeb9 [ 1840.950786][T13119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1840.950801][T13119] RSP: 002b:00007fab9c49a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1840.950821][T13119] RAX: ffffffffffffffda RBX: 00007fab9b815fa0 RCX: 00007fab9b59aeb9 [ 1840.950834][T13119] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 1840.950845][T13119] RBP: 00007fab9c49a090 R08: 0000000000000000 R09: 0000000000000000 [ 1840.950856][T13119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1840.950866][T13119] R13: 00007fab9b816038 R14: 00007fab9b815fa0 R15: 00007ffe7d018238 [ 1840.950894][T13119] [ 1841.670008][T13130] netlink: 'syz.8.11939': attribute type 4 has an invalid length. [ 1843.438784][T13210] netdevsim netdevsim7 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1844.567253][T13239] netlink: 'syz.1.11978': attribute type 1 has an invalid length. [ 1844.823884][T13244] __nla_validate_parse: 35 callbacks suppressed [ 1844.823904][T13244] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11979'. [ 1844.861408][T13243] netdevsim netdevsim9 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1844.878698][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11979'. [ 1844.892224][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11979'. [ 1844.917353][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11979'. [ 1844.936674][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11979'. [ 1844.958469][T13244] netlink: 5 bytes leftover after parsing attributes in process `syz.9.11979'. [ 1844.987320][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11979'. [ 1845.089009][T13256] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.11984'. [ 1847.206537][T13293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11995'. [ 1847.227251][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11995'. [ 1847.971556][T13325] netlink: 'syz.9.12006': attribute type 1 has an invalid length. [ 1850.575659][T13347] netlink: 'syz.7.12012': attribute type 1 has an invalid length. [ 1850.656698][T13349] __nla_validate_parse: 8 callbacks suppressed [ 1850.671564][T13349] netlink: 7 bytes leftover after parsing attributes in process `syz.8.12013'. [ 1850.698425][T13349] netlink: 7 bytes leftover after parsing attributes in process `syz.8.12013'. [ 1850.731771][T13352] netlink: 'syz.1.12014': attribute type 1 has an invalid length. [ 1850.804175][T13355] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12015'. [ 1852.113714][T13385] netlink: 'syz.1.12024': attribute type 9 has an invalid length. [ 1852.126905][T13385] netlink: 'syz.1.12024': attribute type 11 has an invalid length. [ 1852.195977][T13385] netlink: 'syz.1.12024': attribute type 12 has an invalid length. [ 1852.225627][T13385] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.12024'. [ 1852.239547][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12024'. [ 1852.521460][T13395] netlink: 'syz.9.12026': attribute type 1 has an invalid length. [ 1852.524227][T13393] netlink: 7 bytes leftover after parsing attributes in process `syz.7.12027'. [ 1852.551474][T13393] netlink: 7 bytes leftover after parsing attributes in process `syz.7.12027'. [ 1852.606348][T13398] netlink: 7 bytes leftover after parsing attributes in process `syz.0.12028'. [ 1852.633271][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12029'. [ 1852.652373][T13398] netlink: 7 bytes leftover after parsing attributes in process `syz.0.12028'. [ 1852.690754][T13399] FAULT_INJECTION: forcing a failure. [ 1852.690754][T13399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.705147][T13404] netlink: 'syz.7.12031': attribute type 10 has an invalid length. [ 1852.723300][T13399] CPU: 1 UID: 0 PID: 13399 Comm: syz.1.12029 Not tainted syzkaller #0 PREEMPT(full) [ 1852.723324][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1852.723334][T13399] Call Trace: [ 1852.723342][T13399] [ 1852.723350][T13399] dump_stack_lvl+0xe8/0x150 [ 1852.723376][T13399] should_fail_ex+0x412/0x560 [ 1852.723402][T13399] _copy_from_user+0x2d/0xb0 [ 1852.723425][T13399] ___sys_sendmsg+0x1c6/0x360 [ 1852.723445][T13399] ? __lock_acquire+0x6b5/0x2cf0 [ 1852.723471][T13399] ? __pfx____sys_sendmsg+0x10/0x10 [ 1852.723522][T13399] ? __fget_files+0x2a/0x420 [ 1852.723540][T13399] ? __fget_files+0x3a0/0x420 [ 1852.723575][T13399] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1852.723599][T13399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1852.723628][T13399] ? __pfx_ksys_write+0x10/0x10 [ 1852.723660][T13399] do_syscall_64+0xe2/0xf80 [ 1852.723678][T13399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.723693][T13399] ? trace_irq_disable+0x37/0x100 [ 1852.723709][T13399] ? clear_bhb_loop+0x60/0xb0 [ 1852.723729][T13399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.723745][T13399] RIP: 0033:0x7f6135b9aeb9 [ 1852.723761][T13399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.723775][T13399] RSP: 002b:00007f61369ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1852.723793][T13399] RAX: ffffffffffffffda RBX: 00007f6135e15fa0 RCX: 00007f6135b9aeb9 [ 1852.723805][T13399] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b [ 1852.723816][T13399] RBP: 00007f61369ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.723827][T13399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.723837][T13399] R13: 00007f6135e16038 R14: 00007f6135e15fa0 R15: 00007ffeadc483d8 [ 1852.723866][T13399] [ 1852.737436][T13404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.901697][T13408] netlink: 'syz.0.12033': attribute type 10 has an invalid length. [ 1852.903961][T13404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.955371][T13404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.962575][T13404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1852.970117][T13404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.977246][T13404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.989895][T13404] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1853.037794][T13408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.045208][T13408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.061843][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.070159][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.100274][T13413] netlink: 'syz.1.12034': attribute type 16 has an invalid length. [ 1853.255148][T13418] FAULT_INJECTION: forcing a failure. [ 1853.255148][T13418] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.277323][T13418] CPU: 0 UID: 0 PID: 13418 Comm: syz.0.12036 Not tainted syzkaller #0 PREEMPT(full) [ 1853.277348][T13418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1853.277358][T13418] Call Trace: [ 1853.277366][T13418] [ 1853.277374][T13418] dump_stack_lvl+0xe8/0x150 [ 1853.277399][T13418] should_fail_ex+0x412/0x560 [ 1853.277426][T13418] should_failslab+0xa8/0x100 [ 1853.277449][T13418] kmem_cache_alloc_lru_noprof+0x8c/0x6c0 [ 1853.277475][T13418] ? sock_alloc_inode+0x28/0xc0 [ 1853.277505][T13418] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1853.277521][T13418] sock_alloc_inode+0x28/0xc0 [ 1853.277538][T13418] alloc_inode+0x6a/0x1b0 [ 1853.277559][T13418] __sock_create+0x12d/0x9d0 [ 1853.277577][T13418] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1853.277598][T13418] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1853.277624][T13418] __sys_socket+0xd6/0x1b0 [ 1853.277647][T13418] __x64_sys_socket+0x7a/0x90 [ 1853.277668][T13418] do_syscall_64+0xe2/0xf80 [ 1853.277685][T13418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.277702][T13418] ? clear_bhb_loop+0x60/0xb0 [ 1853.277724][T13418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.277740][T13418] RIP: 0033:0x7f79ab59aeb9 [ 1853.277757][T13418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.277771][T13418] RSP: 002b:00007f79ac3d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1853.277789][T13418] RAX: ffffffffffffffda RBX: 00007f79ab815fa0 RCX: 00007f79ab59aeb9 [ 1853.277802][T13418] RDX: 000000000000003a RSI: 000000000000000a RDI: 000000000000000a [ 1853.277812][T13418] RBP: 00007f79ac3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1853.277822][T13418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1853.277833][T13418] R13: 00007f79ab816038 R14: 00007f79ab815fa0 R15: 00007ffcfc005b08 [ 1853.277871][T13418] [ 1853.277907][T13418] socket: no more sockets [ 1853.310964][T13413] mac80211_hwsim hwsim450 ..ãc¤±: renamed from wlan1 (while UP) [ 1853.613244][T13431] netlink: 'syz.7.12039': attribute type 1 has an invalid length. [ 1853.721858][T13433] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1855.455772][T13494] FAULT_INJECTION: forcing a failure. [ 1855.455772][T13494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1855.580457][T13488] validate_nla: 1 callbacks suppressed [ 1855.580492][T13488] netlink: 'syz.8.12053': attribute type 1 has an invalid length. [ 1855.595352][T13494] CPU: 0 UID: 0 PID: 13494 Comm: syz.9.12055 Not tainted syzkaller #0 PREEMPT(full) [ 1855.595374][T13494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1855.595385][T13494] Call Trace: [ 1855.595393][T13494] [ 1855.595403][T13494] dump_stack_lvl+0xe8/0x150 [ 1855.595435][T13494] should_fail_ex+0x412/0x560 [ 1855.595472][T13494] _copy_from_user+0x2d/0xb0 [ 1855.595508][T13494] ___sys_sendmsg+0x1c6/0x360 [ 1855.595534][T13494] ? perf_trace_run_bpf_submit+0xee/0x170 [ 1855.595568][T13494] ? __pfx____sys_sendmsg+0x10/0x10 [ 1855.595645][T13494] ? __fget_files+0x2a/0x420 [ 1855.595696][T13494] ? __fget_files+0x2a/0x420 [ 1855.595715][T13494] ? __fget_files+0x3a0/0x420 [ 1855.595761][T13494] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1855.595782][T13494] ? perf_trace_run_bpf_submit+0x100/0x170 [ 1855.595807][T13494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1855.595854][T13494] ? __pfx_ksys_write+0x10/0x10 [ 1855.595908][T13494] do_syscall_64+0xe2/0xf80 [ 1855.595929][T13494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.595945][T13494] ? trace_irq_disable+0x37/0x100 [ 1855.595961][T13494] ? clear_bhb_loop+0x60/0xb0 [ 1855.595989][T13494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.596006][T13494] RIP: 0033:0x7f699ab9aeb9 [ 1855.596025][T13494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1855.596038][T13494] RSP: 002b:00007f699b9fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1855.596056][T13494] RAX: ffffffffffffffda RBX: 00007f699ae15fa0 RCX: 00007f699ab9aeb9 [ 1855.596069][T13494] RDX: 0000000024040808 RSI: 0000200000000380 RDI: 0000000000000008 [ 1855.596080][T13494] RBP: 00007f699b9fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1855.596090][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1855.596100][T13494] R13: 00007f699ae16038 R14: 00007f699ae15fa0 R15: 00007ffe039dff08 [ 1855.596157][T13494] [ 1855.718184][T13500] netlink: 'syz.0.12057': attribute type 4 has an invalid length. [ 1855.760637][T13501] __nla_validate_parse: 11 callbacks suppressed [ 1855.760654][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12058'. [ 1855.769808][T13500] netlink: 17 bytes leftover after parsing attributes in process `syz.0.12057'. [ 1855.848260][T13493] netlink: 7 bytes leftover after parsing attributes in process `syz.7.12056'. [ 1856.198858][T13523] netlink: 'syz.0.12063': attribute type 1 has an invalid length. [ 1856.232062][T13526] netlink: 'syz.9.12066': attribute type 4 has an invalid length. [ 1856.240116][T13526] netlink: 17 bytes leftover after parsing attributes in process `syz.9.12066'. [ 1856.591236][T11205] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1856.604222][T11205] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1856.615634][T11205] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1856.625459][T11205] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1856.633240][T11205] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1856.661342][T13537] netlink: 7 bytes leftover after parsing attributes in process `syz.8.12071'. [ 1856.698850][T13537] netlink: 7 bytes leftover after parsing attributes in process `syz.8.12071'. [ 1856.875833][T13549] netlink: 'syz.8.12074': attribute type 4 has an invalid length. [ 1856.887078][T13549] netlink: 17 bytes leftover after parsing attributes in process `syz.8.12074'. [ 1857.074725][ T8231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.159025][T13538] chnl_net:caif_netlink_parms(): no params data found [ 1857.413247][T13558] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12076'. [ 1857.532432][ T8231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.620560][ T8231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.660780][T13538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.672167][T13538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.679838][T13538] bridge_slave_0: entered allmulticast mode [ 1857.687995][T13538] bridge_slave_0: entered promiscuous mode [ 1857.712879][ T8231] team0: Port device ÿÿÿÿÿÿ removed [ 1857.720394][ T8231] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.741743][T13538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.749111][T13538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.757045][T13538] bridge_slave_1: entered allmulticast mode [ 1857.765675][T13538] bridge_slave_1: entered promiscuous mode [ 1857.775335][T13572] netlink: 1010 bytes leftover after parsing attributes in process `syz.7.12079'. [ 1857.824349][T13566] netlink: 'syz.7.12079': attribute type 10 has an invalid length. [ 1857.837176][T13538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1857.848953][T13566] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12079'. [ 1857.866611][T13538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1857.949955][T13566] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1857.956706][T13566] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1857.983813][T13566] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1858.075537][T13538] team0: Port device team_slave_0 added [ 1858.120538][T13538] team0: Port device team_slave_1 added [ 1858.203187][T13538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1858.247909][T13538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1858.327958][T13538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1858.392895][T13538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1858.402319][T13538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1858.431691][T13538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1858.455276][T13597] netlink: 'syz.9.12085': attribute type 4 has an invalid length. [ 1858.464937][ T8231] bridge_slave_1: left allmulticast mode [ 1858.474232][ T8231] bridge_slave_1: left promiscuous mode [ 1858.494647][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.547986][ T8231] bridge_slave_0: left allmulticast mode [ 1858.553677][ T8231] bridge_slave_0: left promiscuous mode [ 1858.573765][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.756153][ T5836] Bluetooth: hci0: command tx timeout [ 1859.302765][ T8231] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1859.377491][ T8231] bond0 (unregistering): (slave 5@ÿ): Releasing backup interface [ 1859.389446][ T8231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1859.400418][ T8231] bond0 (unregistering): (slave team0): Releasing backup interface [ 1859.409770][ T8231] bond0 (unregistering): Released all slaves [ 1859.427288][T13604] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1859.449092][T13604] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1859.459635][T13604] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1859.526316][T13621] netlink: 'syz.9.12092': attribute type 1 has an invalid length. [ 1859.539044][T13621] netlink: 'syz.9.12092': attribute type 1 has an invalid length. [ 1859.596468][T13538] hsr_slave_0: entered promiscuous mode [ 1859.657942][T13538] hsr_slave_1: entered promiscuous mode [ 1859.920104][T13633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1860.228719][T13647] netlink: 'syz.7.12101': attribute type 4 has an invalid length. [ 1860.264241][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 1860.341233][ T8231] hsr_slave_0: left promiscuous mode [ 1860.356193][ T8231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1860.379163][ T8231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1860.400544][ T8231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1860.420031][ T8231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1860.455268][ T8231] veth1_macvtap: left promiscuous mode [ 1860.461069][ T8231] veth0_macvtap: left promiscuous mode [ 1860.834955][ T5836] Bluetooth: hci0: command tx timeout [ 1861.132208][T13687] __nla_validate_parse: 12 callbacks suppressed [ 1861.132254][T13687] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.12111'. [ 1861.392769][ T8231] team0 (unregistering): Port device team_slave_1 removed [ 1861.450554][ T8231] team0 (unregistering): Port device team_slave_0 removed [ 1861.779043][T13694] netlink: 'syz.9.12114': attribute type 4 has an invalid length. [ 1861.788755][T13694] netlink: 17 bytes leftover after parsing attributes in process `syz.9.12114'. [ 1861.978269][T13668] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1862.009452][T13688] delete_channel: no stack [ 1862.015502][T13668] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1862.025552][T13668] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1862.218382][T13699] netlink: 'syz.1.12115': attribute type 1 has an invalid length. [ 1862.356217][T13706] netlink: 7 bytes leftover after parsing attributes in process `syz.9.12117'. [ 1862.395285][T13706] netlink: 7 bytes leftover after parsing attributes in process `syz.9.12117'. [ 1862.571316][T13714] option changes via remount are deprecated (pid=13709 comm=syz.8.12119) [ 1862.897913][ T5836] Bluetooth: hci0: command tx timeout [ 1862.926264][T13726] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12121'. [ 1862.990049][T13732] netlink: 'syz.9.12122': attribute type 1 has an invalid length. [ 1863.157248][T13538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1863.183716][T13538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1863.294693][T13538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1863.348263][T13745] netlink: 'syz.9.12126': attribute type 4 has an invalid length. [ 1863.353412][T13538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1863.363125][T13745] netlink: 17 bytes leftover after parsing attributes in process `syz.9.12126'. [ 1863.983249][T13538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1864.039731][T13538] 8021q: adding VLAN 0 to HW filter on device team0 [ 1864.074040][T15672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.081249][T15672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1864.131648][T15672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.138842][T15672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1864.193545][T13766] netlink: 'syz.7.12130': attribute type 1 has an invalid length. [ 1864.976835][ T5836] Bluetooth: hci0: command tx timeout [ 1865.208748][T13796] netlink: 'syz.8.12134': attribute type 1 has an invalid length. [ 1865.265722][T13796] netlink: 'syz.8.12134': attribute type 4 has an invalid length. [ 1865.282104][ T30] audit: type=1107 audit(1769458766.904:33): pid=13795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ˆ' [ 1865.284340][T13796] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.12134'. [ 1865.382813][T13801] FAULT_INJECTION: forcing a failure. [ 1865.382813][T13801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1865.467334][T13801] CPU: 1 UID: 0 PID: 13801 Comm: syz.1.12135 Not tainted syzkaller #0 PREEMPT(full) [ 1865.467359][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1865.467371][T13801] Call Trace: [ 1865.467382][T13801] [ 1865.467394][T13801] dump_stack_lvl+0xe8/0x150 [ 1865.467435][T13801] should_fail_ex+0x412/0x560 [ 1865.467489][T13801] _copy_to_user+0x31/0xb0 [ 1865.467530][T13801] simple_read_from_buffer+0xe1/0x170 [ 1865.467584][T13801] proc_fail_nth_read+0x1bb/0x230 [ 1865.467630][T13801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1865.467676][T13801] ? rw_verify_area+0x2a6/0x4d0 [ 1865.467703][T13801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1865.467742][T13801] vfs_read+0x20c/0xa70 [ 1865.467766][T13801] ? fdget_pos+0x246/0x320 [ 1865.467813][T13801] ? __pfx___mutex_lock+0x10/0x10 [ 1865.467841][T13801] ? __pfx_vfs_read+0x10/0x10 [ 1865.467881][T13801] ? __fget_files+0x2a/0x420 [ 1865.467927][T13801] ? __fget_files+0x3a0/0x420 [ 1865.467946][T13801] ? __fget_files+0x2a/0x420 [ 1865.468013][T13801] ksys_read+0x150/0x270 [ 1865.468057][T13801] ? __pfx_ksys_read+0x10/0x10 [ 1865.468150][T13801] do_syscall_64+0xe2/0xf80 [ 1865.468173][T13801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.468189][T13801] ? trace_irq_disable+0x37/0x100 [ 1865.468205][T13801] ? clear_bhb_loop+0x60/0xb0 [ 1865.468244][T13801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.468262][T13801] RIP: 0033:0x7f6135b5b78e [ 1865.468288][T13801] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1865.468302][T13801] RSP: 002b:00007f61369adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1865.468321][T13801] RAX: ffffffffffffffda RBX: 00007f61369ae6c0 RCX: 00007f6135b5b78e [ 1865.468334][T13801] RDX: 000000000000000f RSI: 00007f61369ae0a0 RDI: 0000000000000006 [ 1865.468345][T13801] RBP: 00007f61369ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1865.468356][T13801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1865.468366][T13801] R13: 00007f6135e16038 R14: 00007f6135e15fa0 R15: 00007ffeadc483d8 [ 1865.468462][T13801] [ 1866.062875][T13538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1866.144564][T13806] netlink: 'syz.9.12137': attribute type 4 has an invalid length. [ 1866.175958][T13538] veth0_vlan: entered promiscuous mode [ 1866.204113][T13806] netlink: 17 bytes leftover after parsing attributes in process `syz.9.12137'. [ 1866.348822][T13538] veth1_vlan: entered promiscuous mode [ 1866.469873][T13538] veth0_macvtap: entered promiscuous mode [ 1866.576039][T13538] veth1_macvtap: entered promiscuous mode [ 1866.716310][T13538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1866.793725][T13538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1866.844535][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.891851][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.959429][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.984141][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.222805][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1867.269888][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1867.298661][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12148'. [ 1867.319903][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12148'. [ 1867.339202][T13847] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12148'. [ 1867.356984][T13848] pimreg: tun_chr_ioctl cmd 1074812117 [ 1867.372586][T15672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1867.389535][T15672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1867.641276][T13856] netlink: 44 bytes leftover after parsing attributes in process `syz.7.12151'. [ 1867.651251][T13856] netlink: 51 bytes leftover after parsing attributes in process `syz.7.12151'. [ 1867.696365][T13856] netlink: 'syz.7.12151': attribute type 6 has an invalid length. [ 1867.739561][T13856] netlink: 51 bytes leftover after parsing attributes in process `syz.7.12151'. [ 1867.815889][T13865] netlink: 168 bytes leftover after parsing attributes in process `syz.9.12154'. [ 1867.930980][T13873] netlink: 356 bytes leftover after parsing attributes in process `syz.7.12156'. [ 1867.938789][T13866] netlink: 140 bytes leftover after parsing attributes in process `syz.0.12068'. [ 1868.279000][T13892] veth0_vlan: entered allmulticast mode [ 1868.309874][T13887] veth0_vlan: left promiscuous mode [ 1868.317726][T13887] veth0_vlan: entered promiscuous mode [ 1872.470165][T13942] [ 1872.472788][T13942] ============================= [ 1872.477738][T13942] WARNING: suspicious RCU usage [ 1872.482590][T13942] syzkaller #0 Not tainted [ 1872.487775][T13942] ----------------------------- [ 1872.492620][T13942] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1872.501768][T13942] [ 1872.501768][T13942] other info that might help us debug this: [ 1872.501768][T13942] [ 1872.512045][T13942] [ 1872.512045][T13942] rcu_scheduler_active = 2, debug_locks = 1 [ 1872.520203][T13942] 1 lock held by syz.9.12178/13942: [ 1872.525398][T13942] #0: ffffffff8e55a540 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x80 [ 1872.535661][T13942] [ 1872.535661][T13942] stack backtrace: [ 1872.541796][T13942] CPU: 1 UID: 0 PID: 13942 Comm: syz.9.12178 Not tainted syzkaller #0 PREEMPT(full) [ 1872.541819][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1872.541832][T13942] Call Trace: [ 1872.541840][T13942] [ 1872.541848][T13942] dump_stack_lvl+0xe8/0x150 [ 1872.541877][T13942] lockdep_rcu_suspicious+0x13f/0x1d0 [ 1872.541909][T13942] get_callchain_entry+0x2b6/0x3c0 [ 1872.541938][T13942] get_perf_callchain+0xcb/0x830 [ 1872.541970][T13942] ? __pfx_get_perf_callchain+0x10/0x10 [ 1872.542009][T13942] __bpf_get_stack+0x445/0xab0 [ 1872.542045][T13942] ? __pfx___bpf_get_stack+0x10/0x10 [ 1872.542077][T13942] ? __lock_acquire+0x6b5/0x2cf0 [ 1872.542106][T13942] bpf_get_stack+0x33/0x50 [ 1872.542130][T13942] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 1872.542148][T13942] bpf_get_stack_raw_tp+0x1a9/0x220 [ 1872.542181][T13942] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 1872.542200][T13942] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 1872.542228][T13942] bpf_prog_test_run_syscall+0x318/0x4c0 [ 1872.542252][T13942] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1872.542272][T13942] ? __fget_files+0x2a/0x420 [ 1872.542299][T13942] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1872.542322][T13942] bpf_prog_test_run+0x2c7/0x340 [ 1872.542347][T13942] __sys_bpf+0x5cb/0x920 [ 1872.542368][T13942] ? __pfx___sys_bpf+0x10/0x10 [ 1872.542408][T13942] ? rcu_is_watching+0x15/0xb0 [ 1872.542435][T13942] __x64_sys_bpf+0x7c/0x90 [ 1872.542462][T13942] do_syscall_64+0xe2/0xf80 [ 1872.542482][T13942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.542500][T13942] ? trace_irq_disable+0x37/0x100 [ 1872.542518][T13942] ? clear_bhb_loop+0x60/0xb0 [ 1872.542540][T13942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.542558][T13942] RIP: 0033:0x7f699ab9aeb9 [ 1872.542576][T13942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1872.542592][T13942] RSP: 002b:00007f699b9fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1872.542611][T13942] RAX: ffffffffffffffda RBX: 00007f699ae15fa0 RCX: 00007f699ab9aeb9 [ 1872.542626][T13942] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1872.542639][T13942] RBP: 00007f699ac08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1872.542651][T13942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1872.542662][T13942] R13: 00007f699ae16038 R14: 00007f699ae15fa0 R15: 00007ffe039dff08 [ 1872.542700][T13942]