last executing test programs: 30m3.556169094s ago: executing program 0 (id=6710): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x2, 0x3, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0xfffe, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x3eb}, {&(0x7f0000001740)="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", 0x623}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}], 0x20}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000bb0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x8, 0x40, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3, @perf_bp={0x0, 0x8}, 0x2a, 0x0, 0x5, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xfff0000000000002, r2, 0x8) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b", 0x7}, {0x0}], 0x2}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x3, 0x3a) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1001000, @remote, 0x47}, 0x80, 0x0}, 0x800) 30m2.471406217s ago: executing program 0 (id=6724): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB="23ffe86f3b0e438069ae4500fa130ffc99fb890e9f5a339413c9dfdc11f19c9b31cfd1c2a9efe3d236cc13c54300ae1d193d5f494938419ed22f89b3d4cea45b5ea56b8c70ed92709b38c66fe8db6c60e32af2e3b6bd3335c85124e4ba103c1401"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000000200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x27}, 0x101800}, 0xffffffffffffffff, 0xfffffffffeffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0xa, &(0x7f00000001c0)=[{0x42, 0x3, 0x2, 0x6}, {0x9, 0x0, 0xf9, 0x4}, {0x239b, 0x8, 0x4, 0x7}, {0xff, 0xd, 0x2, 0x2}, {0x3de, 0x9, 0xc, 0x4}, {0x9, 0x1, 0x7, 0xba92}, {0x1, 0x9, 0xc2, 0x3}, {0x7, 0x0, 0x9, 0x6f1b}, {0x647a, 0x8, 0x3f, 0x3}, {0x1, 0x7, 0x8, 0xf}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000f3000000f3000000060000000f00000006000005040000000300000003000000070000000600000003000000ff0f000001000000050000000600000004000000000000006e00000002000000b2ad7a90cb06cf4603000000030000007bf3ffff0900000002000013010000000f0000000e000000050000000200000006000000001000000d0000000500000f03000000010000000d000000a900000003000000002c00004b000000010000000200000004000000010000000700000002000000040000008d00000010000000b00ef30000000000000003000000000500000005000000040000000c0000020000000a000000000d00"], &(0x7f0000001340)=""/4096, 0x112, 0x1000, 0x1, 0x7}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0xffffff59}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x810) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x20000000) recvmsg$kcm(r4, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r6, 0x541b, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000122) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x480c4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x6, 0x582, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x10, 0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x8204a911, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) 29m59.825382s ago: executing program 0 (id=6721): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000019000000bf0900000000000026090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b700000000000000950000000000aa00"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000034c0)={r0, &(0x7f0000000680)="0312952b0157d27e60b0c784ba3a9dacdb7cbb9ae02c228a80da0189022b3e53ab5601126bf3cba1e4b4e9a09958a0a58bdf416e117a70c14c583964aa1811e9118830a46e1ec3c82c66e9b47daf216481a25e941810e0d791de9b95bebbeffaedbc3bed6f9ec5e6617c65d0498f5bb6720cf3766a34bb1549b259615ebc219a4b0d0f21b949c182371b49bce206658dd958fb2bc56487c14fefd00b9035e093ee9ce3fd", &(0x7f00000024c0)=""/4096, 0x4}, 0x20) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000f3000000f3000000060000000f00000006000005040000000300000003000000070000000600000003000000ff0f000001000000050000000600000004000000000000006e00000002000000b2ad7a90cb06cf4603000000030000007bf3ffff0900000002000013010000000f0000000e000000050000000200000006000000001000000d0000000500000f03000000010000000d000000a900000003000000002c00004b000000010000000200000004000000010000000700000002000000040000008d00000010000000b00ef30000000000000003000000000500000005000000040000000c0000020000000a000000000d00"], &(0x7f0000001340)=""/4096, 0x112, 0x1000, 0x1, 0x7}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$TUNGETVNETLE(r4, 0x8953, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, 0x0, 0x0) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x20000002) recvmsg$kcm(r5, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x480c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x3e064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10940, 0x100000001, 0x0, 0x1, 0x0, 0xfbff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 29m59.253985258s ago: executing program 0 (id=6722): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)=""/4096, 0x112, 0x1000, 0x1, 0x7}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$TUNGETVNETLE(r3, 0x8953, &(0x7f0000000040)) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x20000000) recvmsg$kcm(r4, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, 0x0, 0x480c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000000080)='GPL\x00', 0x179, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x1, 0x2, 0x1, 0x8}], 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x2, 0x800, 0x6, 0x400, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a000000000000611f5c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x3e064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10940, 0x100000001, 0x0, 0x1, 0x0, 0xfbff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 29m58.728031135s ago: executing program 0 (id=6723): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', @remote}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) ioctl$TUNGETVNETLE(r1, 0x8953, &(0x7f0000000040)) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) openat$cgroup_int(r3, &(0x7f0000000080)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) 29m58.707126695s ago: executing program 0 (id=6725): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)=""/4096, 0x112, 0x1000, 0x1, 0x7}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$TUNGETVNETLE(r3, 0x8953, &(0x7f0000000040)) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'bond_slave_0\x00', @random="013301320108"}) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x20000000) recvmsg$kcm(r4, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x480c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) 29m42.890474641s ago: executing program 32 (id=6725): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000f3000000f3000000060000000f00000006000005040000000300000003000000070000000600000003000000ff0f000001000000050000000600000004000000000000006e00000002000000b2ad7a90cb06cf4603000000030000007bf3ffff0900000002000013010000000f0000000e000000050000000200000006000000001000000d0000000500000f03000000010000000d000000a900000003000000002c00004b000000010000000200000004000000010000000700000002000000040000008d00000010000000b00ef30000000000000003000000000500000005000000040000000c0000020000000a000000000d00"], &(0x7f0000001340)=""/4096, 0x112, 0x1000, 0x1, 0x7}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$TUNGETVNETLE(r3, 0x8953, &(0x7f0000000040)) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'bond_slave_0\x00', @random="013301320108"}) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x20000000) recvmsg$kcm(r4, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x480c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) 22.859692218s ago: executing program 2 (id=12019): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x18, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9e57770e7e9882fd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x641a1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x140) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x2d, 0x0, 0x88) sendmsg$sock(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)='oe', 0x2}], 0x1, &(0x7f0000000100)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4000081) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x7) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x11, &(0x7f0000000140), 0x4) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$kcm(0x29, 0x7, 0x0) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x10}, 0x18) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x0, &(0x7f0000000380), 0x0, 0xe5a, 0x8c, &(0x7f0000000400)=""/140, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x8, 0x8, 0xffff55c0}, 0x10, 0x636a, 0xffffffffffffffff, 0x2, &(0x7f0000000500), &(0x7f0000000540)=[{0x2, 0x1, 0x1}, {0x0, 0x1, 0xc, 0x9}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYRES32=r12, @ANYBLOB='#\x00'/12, @ANYRES32=r13, @ANYBLOB="17a2abe90c784a16bb571f09b443931d2fa8fc0c88f641d2e62e0e9c87473e70fa48d24ce107a3e626c46752390cf9bb0879fd098c909c8755b6bbccba59b8d108c864bc3c6f030fef05de30ebd440677c1fb546a2fafcdfc8f7652b45562001c6e61991aaafa465019c6ce8acef5a637477e7df8e5bf7f171a48fcf3b752547c6c2e9d36afcf4696f449adca1a3323bc4c217725edf923ce8149f64d367d7846f74758e8f6e5cd1215ea88cbf1e153757fa0f7ecf4c9950c4b420c87ad2e149b26abceaec8ac24066b38dbe30beb0ebd43c731100"/228, @ANYRES64], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="1200000008000000", @ANYRES32=r11, @ANYBLOB="0dcb2bd15cfa6b548aec07528ff653ea090be9be8000caa1841793e5de2805a131f5ce9f0c2a7d8a82c7aa5b4380adacd11674948493c7479fff7c8345edeeaeca0f3ca67a52d93c2c7b697a607670b75db9f8ae49264de353c7c0cff935405f4b8fb6", @ANYRES32=r6, @ANYBLOB, @ANYRES64], 0x20) 20.56065289s ago: executing program 2 (id=12024): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e120800090000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r6, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) r7 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19.728067677s ago: executing program 2 (id=12028): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[], 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe80b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @multicast1}, 0x3, 0x3, 0xffff, 0x1}}, 0x80, 0x0}, 0x4048850) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005234538ba55"], 0xfe33) openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) close(0x3) 19.29729751s ago: executing program 2 (id=12031): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e120800090000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r7, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) r8 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18.272165253s ago: executing program 2 (id=12037): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e120800090000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r6, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r7 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$kcm(0xa, 0x1, 0x0) 17.439966249s ago: executing program 2 (id=12042): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e120800090000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f088484be0ffff00124000632f77fbac141416ac141416071818034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r7, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) r8 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13.27861452s ago: executing program 1 (id=12052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'pimreg1\x00', 0x400}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)={'ip_vti0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xf5, 0x8, 0x0, 0x0, 0x0, 0xa, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe88f5d9965ff4a44, @perf_config_ext={0x2, 0x7}, 0xe5f1, 0x4a, 0x0, 0x6, 0x0, 0x1ff, 0x7, 0x0, 0x0, 0x0, 0x400100}, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0xfc, 0x0, 0x7, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3}, 0xe004, 0xfffffffffffffd30, 0x1, 0x0, 0x2000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="3e9b1d"], 0xf9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x102300, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x100208, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000840)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000248330001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000975cff00000000bfa200000000000007020000f8ffffffb713000008000000b7040000010000008500000082000002183600000300000000000000000000008eb7823b", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000006280400e7840000"], &(0x7f0000000940)='syzkaller\x00', 0xfffffffc, 0x27, &(0x7f0000000980)=""/39, 0x40f00, 0x4f, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0x1, 0x4, 0x3}, 0x10, 0x30283, r6, 0x4, &(0x7f0000000a40)=[r5, r5, r2, r5, r5, 0x1, r2, r0], &(0x7f0000000a80)=[{0x1, 0x5, 0x1, 0x1}, {0x3, 0x5, 0x2, 0x5}, {0x4, 0x2, 0x10, 0xa}, {0x0, 0x3, 0xa, 0x3}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) 12.001244541s ago: executing program 1 (id=12057): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7fffffff) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000580)={0x1, 0x80, 0x8, 0x7f, 0x1, 0xfb, 0x0, 0x1587, 0x808, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000002c0), 0xc}, 0x10020, 0x80, 0x3, 0x2, 0x40, 0x1, 0xa, 0x0, 0x4b02, 0x0, 0x1}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') ioctl$TUNSETIFF(r4, 0xb701, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8917, &(0x7f0000000400)={'rose0\x00', @random="0200ff7fffff"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1d, 0x1, 0x6, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x18, 0x0, 0x1, 0x1}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.881570406s ago: executing program 1 (id=12061): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e120800090000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r6, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r7 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$kcm(0xa, 0x1, 0x0) 10.366561622s ago: executing program 1 (id=12066): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e120800090000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r7, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) r8 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.754499097s ago: executing program 1 (id=12071): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x4000, 0x2, 0x0, 0x0, 0xfa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x4, 0x1}, 0x810, 0x40000000000002, 0x0, 0x0, 0x0, 0xe0000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB='<'], 0x9a) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r3, 0x20, &(0x7f0000000440)={&(0x7f00000002c0)=""/105, 0x69, 0x0, &(0x7f0000000380)=""/130, 0x82}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd", 0x0, 0x8, 0x60000000, 0x0, 0x1, 0x0, &(0x7f0000001480)='H'}, 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000100100000c000000e800000000000000180000000000000010010000010000000000000200000000100000000000000002010000000700008aae34789a10457996119084b1213d2256fca74072a87a6b35b2a6a531d02554f6835075c0e65901ab0d423bb72663edf331ff0fe9ee5952569832f864d289b4398019208aeb8e3a4735d121f00aa58b24c4ca5f44"], 0x40}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x4, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)="1ac10b125d4c1fd7e9040bbaff0ba354063477817dd1be0a895dc238daa74bdae9bde891f5496d2f175caf65e76bce55bff8ef1d57d573a2702fb36886ff5d3d00fe1257ba157241f7", &(0x7f00000001c0)=""/63}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32], 0x20) syz_clone(0x800000, 0x0, 0x0, 0x0, &(0x7f0000002380), &(0x7f00000023c0)="4c5095f4cef3adb5a00dcc60b7d5af7b8184ff7727b3898e55cf094e2e4b5ddf86d0be75a3bf715185a76f7f0d8134bf5ae95d") 5.621143632s ago: executing program 1 (id=12075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x4, 0xed, &(0x7f00000000c0)=""/237, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x0, 0x3, 0x3, 0x8}, {0x0, 0x2, 0xb, 0x2}, {0x4, 0x1, 0x8, 0x1}, {0x4, 0x4, 0x6, 0x5}], 0x10, 0x4}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x2000, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18) syz_clone(0xc3000480, 0x0, 0x0, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="2d749115443e0fc696f38278d7c61a2d6ca6732c98d72ca2a5b1655cad6b92bf6fd479123bd61d7f6bbdfdef271ee56789a87cf5dafd3f9ec0f707139150f0308ec2b1e0c79c6169b2c876f617d8b0749feb9a245935927278a77891fa05352f93b0cc5cbe3b7343689405aa5d234b766d32dc8fc299611d2157b848") 5.441469318s ago: executing program 3 (id=12077): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffe61}, 0x24000804) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000, 0x7fff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e0260b0ff1e82bc957afa2de02b667adae1c4256"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x7}, {0x0, 0x3, 0xfffffffd, 0x1}, {0x5, 0x21, 0x10, 0x8}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x60cb01f8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020c0c000400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000840)='!\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x4000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.401551466s ago: executing program 3 (id=12080): write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2020) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x50) sendmsg$sock(r0, &(0x7f00000005c0)={&(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000240)="44ee5ed78fe1ef6cb49c583a76a1", 0xe}], 0x2}, 0x40000) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x17) r2 = socket$kcm(0x28, 0x1, 0x0) recvmsg(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05197e434c036b004200000040000000c0000000a637903080f2aeaf2324670f39edd025940488e35d8b83d1f17d1e25fbbc78", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) 1.332715208s ago: executing program 4 (id=12081): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e1"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r3], 0xfe33) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000100111000100000000000000000000001000000000000000100100000e"], 0x28}, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) 1.206462482s ago: executing program 4 (id=12082): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f00000017c0)="ea0189", 0x3}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000040)=0x2) 1.170854322s ago: executing program 3 (id=12083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000016c0)={@cgroup=r0, r0, 0x2e}, 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r2, 0x0, r1}, 0x10) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, @perf_config_ext, 0x0, 0x201, 0x0, 0x7, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0xa9dc) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r8], 0xfe33) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000100)=0x1000000000000000) 1.009340968s ago: executing program 4 (id=12084): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e120800090000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r6, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r7 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$kcm(0xa, 0x1, 0x0) 570.195662ms ago: executing program 4 (id=12085): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x61]}}, 0x0, 0x1b}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) sendmsg$inet(r8, 0x0, 0x0) gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x10090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a4590112", 0xa1}, {&(0x7f0000000440)="6f4720baeb5434a1c17a4b697e4611c434c1947fafd44daee2d61fadd23c3505eee0cc5b6c76cf081390ae92516d567c4b49af0f4b3df75ae92efbfb0fbe60ac8c4e546500f4f8f3885d5622072fb9e9b948a5edc65602c644bee9ad04b655279f383ce068ad0c202a57f9a8804b73d1241fb306b2acd9d5e26a71b19a0b9859ff0f0d7cdbd80fdfacdf9f1d02a37ae44bb6ddd978d4a0e6d61b68f629915748d6d3d184ca2b4164192c60a3a383821d0e85f04d09b712814d4b0664799b7ae6657b7452214608d01d31bd7d9e03107c638353d89515692c24b11490b9e75cfcb489e80b9334f4660204b2a17409993ddc4b0d004709cd46cb2488cf3cecd965e978182dd42cfbbfa4ebda17cce9cfc970959fd29e1a802809aa4a65c8f1c6dd14fca85d83fc995f097a62c6f04fb0d1f0dec0faa41fe09b1eae67606123d908dd74c62e66ee2635ec9da7bc74103debf3e31f0794ca5fc2268bcb8a03aeb3bf860d164e0a6cba7c8dc469147cc7e1bb94731ec450525cf19275d4af40b115f2420ff7ab4eeb41c5ddc19aae1b2e535b796c0e7aa6e71b4e13c8023806a08638d13a8595e310321860c8d7670cf167c67b3b5217a66329505cdcdc3afb3233dbaec65ff45b0bfc3cfbd309a7ffd26507a8ffe782f3b84ad9dfc2b4f44d6716e8ad892ffc3acf6e7e09018041a27fcad1ee957d6fddccc3d41f9b04127dee7c471acf9fdc32f204afffc52b22b73844154285ce5ec58ec57b40ccf7b70215a4a27f9de2c2719dcb5897bc302ebb027c019e40aa6fc85d5b670aef709e40cbe597139537c10d2483b67c02ca781c5ce6c014b13c8dee248e8b75831cbee8f29cad33139e0b5bc86c203c71f54ad11573e8801b8cc623571b9c53ac723b51b2cdd09b60cf8a3a205a70814107251d962d603bf21f42e946462bf3d8bca96d7bdbdfa9ced20f6e9edba4ac6aea0a68c08a3f8076274bece6d676d64975dc1e611806feb81cbac4b38453a756845c866f0458fb61cd12a135e1dfa76d85a3b2972b6517b57bc35a0398f7b87ee0b697c84c629e8a62a7d1dab6459a71f7aad2fac7a1a4c019479b1f31dc017f3fa896000b8bcc0b1ca993447351fa0529a5be311faa90b6d8f0a5ce5fe2adfd4995ba13920826d27677d8dac9ef0aac4cea1517ff318a864b3ea3bcc45d6cbd91e4a8da09c2e320957fcada6a4e", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f000001f4c0)="550c6d32758c9c16ffa4f109b112c63389068bee461d1744b4bf458233d3294ababe6c28c97e2640f849c401a026827bfb3d48b3b006ca", 0x37}, {&(0x7f0000000340)="87", 0x1}, {&(0x7f0000001580)="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", 0x978}], 0x8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206, 0x0, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)="84"}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5f, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xca, 0x0, r3, 0x80000001, '\x00', r10, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES16=r2], 0x48) 556.560372ms ago: executing program 3 (id=12086): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000400)=[{&(0x7f0000000480)="0a031c00f40e1400020000000000000006e1f000000089093500000283fcf91a82963d2bd4b836954268e611650795bb1a8691bff647f8f4c334e80a4bf4e8162f88d24619732526e96e7085a8b56c67ad33d065c2ff4e6c493e2acaab51", 0x5e}], 0x1}, 0x2004408d) 341.567889ms ago: executing program 3 (id=12087): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff6ecd, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x7, 0x4004, 0x2000004, 0xff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f0000000600)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) 299.07998ms ago: executing program 4 (id=12088): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff6ecd, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x7, 0x4004, 0x2000004, 0xff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c12400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r1) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) 139.252855ms ago: executing program 3 (id=12089): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000bacd32000000000000007fff92e", 0x14}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r1, 0x26, 0x1, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 0s ago: executing program 4 (id=12090): r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000cc0)="2701000001f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4131accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0x44}, {&(0x7f0000000200)="68af78cb67d00ea949962672", 0xc}], 0x2}, 0x811) mkdir(&(0x7f0000000180)='./file0\x00', 0xd7) unlink(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000600)="1b96ba6124c39f69e4def755acf53c06f3a347d62d9d39ebac4499e1c12ade6f5d0585a0a232120770e84abbb491834961433d5a965300b445982768db59e54249758bf08579c9a9c9b31708b54f266f89c3fad6ec0377416714f1f6c36b42c614612dad7f13c9ac5636b9168d6a164d87d48e7f2dbf2a65d3b5a49a30fa11ef6e584151ba9fd08b3efc74181299b8b6f35feae3b9e1037bc4fbf182fbe64bbf0296ba23eb9cd7e037e6b563463bf650d8e6fd35b32bf236feb27168fe07e29eda766c3c3c49b55373b4f9a7b103b33f514d", 0xd2}, {&(0x7f0000000700)="96254a6e38eec88b863d26cbdaf909dd6817799edf2855aea1948ef617e2f62fbcc35a3401aec60ad095d41f05635fd9c3bbef88c4d51cf9fb498f44e9d592671251b0d57c05cfe6833b1754bf5465330d9863568b4114cd441dfd6a049f3d90072b24e14954dc24b75b6cce948b43baf5a4f96e13990161742dee6031f04e98bdb8ae0eeeae448917df2df723d1730e165ce67d69f27734fe146596a031babc95caba9da4dc79929fd9806c95990b172526ae622545c2504da5f6f7e5e96ae0ca6d5618f363642a23632da0178fb2744f4e32fbbb6151a2baeb85f437c794abfa13d2cc7208a7965f144cb636fb31a63c4f7f6c61d02c90", 0xf8}, {&(0x7f0000000900)="857ed7d834ca76247767cc330547c0267d1bd43d4cc5e739136743296a6f449aad2be5432cc8d7e124c53efee1c82d21fcf646097b258d4a5c7681c5d20be61acec04df445e4f855c9c7180927e9ed4dc42b8441383d381d66aa8cc50b3f86ea51de5b11a9e48966c3dfc687fb2992e15d58afbfe97128d3fc6faa8d919ef82cefb8fdd8781213b2a589d94c44a84749851a92141138279d8c06435b3ac51dd2d13ffaff114801082a174bb3a2136e716a1b40d3eccf9d3aa3e75f900a15e93bc4aaef305f17d96c478a8d211c358fef6b82d56fe4aa74370930fb18b45193edf09bed7c", 0xe4}, {&(0x7f0000000a00)="b647edb225bce58100e622e547a775a6690886889511acad9b2044b629f1d1a1233410fb0027a17b323cc6cf91780556b521eb7fdfccbefeb38567fe8e1f5041ac3505ea3f0fb52e4631674ed0e003a80ec8d928843ad7190607fa2cfa346d5c8bfdcddf80ccb5aac1903afd893dfb376c09c26fc90cda293e9abcf47cd85d88a6565472184c496551c54be83879c15d27", 0x91}], 0x4, &(0x7f0000000b00)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0xfffffffa, 0x18}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, r3, 0x5, 0x4, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x3ff, 0xfffffffa, 0x40, r4, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x21) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r5, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x3ff, 0xf1, 0x6, 0x800, r5, 0xcb0, '\x00', r7, r3, 0x4, 0x2, 0x10000004, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r6}, 0xc) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20040811) kernel console output (not intermixed with test programs): x90 [ 3243.004877][ T7407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3243.010806][ T7407] RIP: 0033:0x7f2c0eb9ce59 [ 3243.015251][ T7407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3243.034884][ T7407] RSP: 002b:00007f2c0faaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3243.043429][ T7407] RAX: ffffffffffffffda RBX: 00007f2c0ee15fa0 RCX: 00007f2c0eb9ce59 [ 3243.051431][ T7407] RDX: 0000000004008844 RSI: 00002000000006c0 RDI: 0000000000000003 [ 3243.059444][ T7407] RBP: 00007f2c0faaa090 R08: 0000000000000000 R09: 0000000000000000 [ 3243.067440][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3243.075435][ T7407] R13: 00007f2c0ee16038 R14: 00007f2c0ee15fa0 R15: 00007ffd1ba51398 [ 3243.083449][ T7407] [ 3243.480534][ T7419] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11348'. [ 3243.589317][ T7426] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11346'. [ 3243.635413][ T7426] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11346'. [ 3246.747320][ T7454] FAULT_INJECTION: forcing a failure. [ 3246.747320][ T7454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3246.761921][ T7454] CPU: 0 PID: 7454 Comm: syz.4.11358 Not tainted syzkaller #0 [ 3246.769439][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3246.779548][ T7454] Call Trace: [ 3246.782875][ T7454] [ 3246.785848][ T7454] dump_stack_lvl+0x18c/0x250 [ 3246.790585][ T7454] ? show_regs_print_info+0x20/0x20 [ 3246.795836][ T7454] ? load_image+0x420/0x420 [ 3246.800384][ T7454] ? __might_fault+0xaa/0x120 [ 3246.805103][ T7454] ? __lock_acquire+0x7d40/0x7d40 [ 3246.810190][ T7454] should_fail_ex+0x39d/0x4d0 [ 3246.814925][ T7454] _copy_from_user+0x2f/0xe0 [ 3246.819560][ T7454] __sys_bpf+0x23e/0x890 [ 3246.823843][ T7454] ? bpf_link_show_fdinfo+0x390/0x390 [ 3246.829268][ T7454] ? lock_chain_count+0x20/0x20 [ 3246.834175][ T7454] __x64_sys_bpf+0x7c/0x90 [ 3246.838635][ T7454] do_syscall_64+0x55/0xb0 [ 3246.843097][ T7454] ? clear_bhb_loop+0x40/0x90 [ 3246.847809][ T7454] ? clear_bhb_loop+0x40/0x90 [ 3246.852525][ T7454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3246.858500][ T7454] RIP: 0033:0x7f2c0eb9ce59 [ 3246.862961][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3246.882616][ T7454] RSP: 002b:00007f2c0faaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3246.891089][ T7454] RAX: ffffffffffffffda RBX: 00007f2c0ee15fa0 RCX: 00007f2c0eb9ce59 [ 3246.899100][ T7454] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 3246.907109][ T7454] RBP: 00007f2c0faaa090 R08: 0000000000000000 R09: 0000000000000000 [ 3246.915122][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3246.923135][ T7454] R13: 00007f2c0ee16038 R14: 00007f2c0ee15fa0 R15: 00007ffd1ba51398 [ 3246.931173][ T7454] [ 3247.101787][ T7456] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11359'. [ 3247.286303][ T7465] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11362'. [ 3247.324941][ T7465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11362'. [ 3248.542518][ T7490] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11372'. [ 3248.646091][ T7491] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.11369'. [ 3248.792073][ T7499] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3251.558145][ T7506] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11375'. [ 3251.578711][ T7506] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11375'. [ 3255.027318][ T7521] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11382'. [ 3255.215934][ T7529] netlink: 'syz.1.11384': attribute type 21 has an invalid length. [ 3255.229496][ T7529] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11384'. [ 3255.422938][ T7533] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11387'. [ 3255.448107][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11387'. [ 3255.654695][ T7538] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.11388'. [ 3258.195643][ T7551] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3258.494321][ T7556] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11393'. [ 3258.771695][ T7567] netlink: 'syz.1.11396': attribute type 21 has an invalid length. [ 3258.781207][ T7567] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11396'. [ 3258.944209][ T7570] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11397'. [ 3259.020989][ T7570] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11397'. [ 3261.918581][ T7591] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11402'. [ 3262.145367][ T7415] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3262.275398][ T7597] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3262.514506][ T7606] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11407'. [ 3262.547716][ T7606] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11407'. [ 3263.432036][ T7631] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11414'. [ 3266.276606][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.283267][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.568982][ T7647] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11420'. [ 3266.585822][ T7649] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11420'. [ 3266.601047][ T7648] mac80211_hwsim hwsim51 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3266.892022][ T7660] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11425'. [ 3267.007989][ T7668] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.11427'. [ 3267.385427][ T7678] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11431'. [ 3267.443884][ T7678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11431'. [ 3267.782126][ T7692] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11436'. [ 3267.857270][ T7694] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.11437'. [ 3267.998993][ T7697] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11438'. [ 3268.038452][ T7697] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11438'. [ 3268.347408][ T7709] netlink: 'syz.3.11442': attribute type 21 has an invalid length. [ 3268.374719][ T7709] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11442'. [ 3268.461089][ T7711] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11443'. [ 3268.498337][ T7711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11443'. [ 3268.908581][ T7734] FAULT_INJECTION: forcing a failure. [ 3268.908581][ T7734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3268.930295][ T7734] CPU: 1 PID: 7734 Comm: syz.4.11453 Not tainted syzkaller #0 [ 3268.937832][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3268.947937][ T7734] Call Trace: [ 3268.951267][ T7734] [ 3268.954248][ T7734] dump_stack_lvl+0x18c/0x250 [ 3268.958998][ T7734] ? show_regs_print_info+0x20/0x20 [ 3268.964298][ T7734] ? load_image+0x420/0x420 [ 3268.968864][ T7734] ? __lock_acquire+0x7d40/0x7d40 [ 3268.973949][ T7734] ? snprintf+0xe9/0x140 [ 3268.978260][ T7734] should_fail_ex+0x39d/0x4d0 [ 3268.983010][ T7734] _copy_to_user+0x2f/0xa0 [ 3268.987506][ T7734] simple_read_from_buffer+0xe7/0x150 [ 3268.992953][ T7734] proc_fail_nth_read+0x1e8/0x260 [ 3268.998042][ T7734] ? proc_fault_inject_write+0x360/0x360 [ 3269.003745][ T7734] ? fsnotify_perm+0x271/0x5e0 [ 3269.008558][ T7734] ? proc_fault_inject_write+0x360/0x360 [ 3269.014257][ T7734] vfs_read+0x28b/0x970 [ 3269.018491][ T7734] ? kernel_read+0x1e0/0x1e0 [ 3269.023146][ T7734] ? __fget_files+0x28/0x4b0 [ 3269.027805][ T7734] ? __fget_files+0x28/0x4b0 [ 3269.032465][ T7734] ? __fget_files+0x43d/0x4b0 [ 3269.037210][ T7734] ? __fdget_pos+0x2a3/0x330 [ 3269.041898][ T7734] ? ksys_read+0x75/0x260 [ 3269.046294][ T7734] ksys_read+0x150/0x260 [ 3269.050599][ T7734] ? vfs_write+0x990/0x990 [ 3269.055084][ T7734] ? lockdep_hardirqs_on+0x98/0x150 [ 3269.060344][ T7734] do_syscall_64+0x55/0xb0 [ 3269.064817][ T7734] ? clear_bhb_loop+0x40/0x90 [ 3269.069544][ T7734] ? clear_bhb_loop+0x40/0x90 [ 3269.074282][ T7734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3269.080236][ T7734] RIP: 0033:0x7f2c0eb5d68e [ 3269.084703][ T7734] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3269.104369][ T7734] RSP: 002b:00007f2c0faa9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3269.112842][ T7734] RAX: ffffffffffffffda RBX: 00007f2c0faaa6c0 RCX: 00007f2c0eb5d68e [ 3269.120867][ T7734] RDX: 000000000000000f RSI: 00007f2c0faaa0a0 RDI: 0000000000000004 [ 3269.128893][ T7734] RBP: 00007f2c0faaa090 R08: 0000000000000000 R09: 0000000000000000 [ 3269.136916][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3269.144934][ T7734] R13: 00007f2c0ee16038 R14: 00007f2c0ee15fa0 R15: 00007ffd1ba51398 [ 3269.152991][ T7734] [ 3269.342446][ T7739] netlink: 'syz.4.11455': attribute type 21 has an invalid length. [ 3269.924610][ T7751] syzkaller0: entered promiscuous mode [ 3269.940467][ T7751] syzkaller0: entered allmulticast mode [ 3273.389286][ T7780] netlink: 'syz.2.11470': attribute type 21 has an invalid length. [ 3273.409322][ T7780] __nla_validate_parse: 9 callbacks suppressed [ 3273.409340][ T7780] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11470'. [ 3273.483828][ T7781] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11471'. [ 3273.858278][ T7789] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.11474'. [ 3274.387829][ T7806] netlink: 'syz.1.11478': attribute type 10 has an invalid length. [ 3274.630971][ T7817] netlink: 'syz.1.11481': attribute type 21 has an invalid length. [ 3274.667219][ T7817] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11481'. [ 3274.921026][ T7819] syzkaller0: entered promiscuous mode [ 3274.928272][ T7819] syzkaller0: entered allmulticast mode [ 3275.212915][ T7822] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11483'. [ 3277.320865][ T7825] netlink: 'syz.4.11485': attribute type 12 has an invalid length. [ 3277.339536][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11485'. [ 3277.693179][ T7832] syzkaller0: entered promiscuous mode [ 3277.698755][ T7832] syzkaller0: entered allmulticast mode [ 3277.706729][ T7831] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.11487'. [ 3280.336683][ T7841] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.11497'. [ 3280.948128][ T7859] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11494'. [ 3281.255124][ T7871] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.11501'. [ 3281.278199][ T7872] sit0: entered allmulticast mode [ 3281.303384][ T7872] sit0: entered promiscuous mode [ 3281.528609][ T7877] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.11510'. [ 3282.199753][ T7883] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.11512'. [ 3282.321002][ T7890] FAULT_INJECTION: forcing a failure. [ 3282.321002][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3282.362411][ T7890] CPU: 0 PID: 7890 Comm: syz.2.11505 Not tainted syzkaller #0 [ 3282.370003][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3282.380101][ T7890] Call Trace: [ 3282.383424][ T7890] [ 3282.386390][ T7890] dump_stack_lvl+0x18c/0x250 [ 3282.391132][ T7890] ? show_regs_print_info+0x20/0x20 [ 3282.396400][ T7890] ? load_image+0x420/0x420 [ 3282.400967][ T7890] ? __lock_acquire+0x7d40/0x7d40 [ 3282.406047][ T7890] ? snprintf+0xe9/0x140 [ 3282.410343][ T7890] should_fail_ex+0x39d/0x4d0 [ 3282.415070][ T7890] _copy_to_user+0x2f/0xa0 [ 3282.419539][ T7890] simple_read_from_buffer+0xe7/0x150 [ 3282.424962][ T7890] proc_fail_nth_read+0x1e8/0x260 [ 3282.430019][ T7890] ? proc_fault_inject_write+0x360/0x360 [ 3282.435701][ T7890] ? fsnotify_perm+0x271/0x5e0 [ 3282.440489][ T7890] ? proc_fault_inject_write+0x360/0x360 [ 3282.446242][ T7890] vfs_read+0x28b/0x970 [ 3282.450437][ T7890] ? kernel_read+0x1e0/0x1e0 [ 3282.455057][ T7890] ? __fget_files+0x28/0x4b0 [ 3282.459713][ T7890] ? __fget_files+0x28/0x4b0 [ 3282.464344][ T7890] ? __fget_files+0x43d/0x4b0 [ 3282.469058][ T7890] ? __fdget_pos+0x2a3/0x330 [ 3282.473761][ T7890] ? ksys_read+0x75/0x260 [ 3282.478126][ T7890] ksys_read+0x150/0x260 [ 3282.482412][ T7890] ? vfs_write+0x990/0x990 [ 3282.486871][ T7890] ? lockdep_hardirqs_on+0x98/0x150 [ 3282.492103][ T7890] do_syscall_64+0x55/0xb0 [ 3282.496544][ T7890] ? clear_bhb_loop+0x40/0x90 [ 3282.501240][ T7890] ? clear_bhb_loop+0x40/0x90 [ 3282.505944][ T7890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3282.511864][ T7890] RIP: 0033:0x7f19b6f5d68e [ 3282.516303][ T7890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3282.535937][ T7890] RSP: 002b:00007f19b7df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3282.544382][ T7890] RAX: ffffffffffffffda RBX: 00007f19b7df66c0 RCX: 00007f19b6f5d68e [ 3282.552398][ T7890] RDX: 000000000000000f RSI: 00007f19b7df60a0 RDI: 0000000000000005 [ 3282.560397][ T7890] RBP: 00007f19b7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 3282.568401][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3282.576397][ T7890] R13: 00007f19b7216038 R14: 00007f19b7215fa0 R15: 00007fff061b6f58 [ 3282.584416][ T7890] [ 3282.958912][ T7897] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11507'. [ 3283.358444][ T7911] netlink: 'syz.4.11514': attribute type 11 has an invalid length. [ 3283.388613][ T7911] netlink: 'syz.4.11514': attribute type 1 has an invalid length. [ 3283.411835][ T7911] netlink: 'syz.4.11514': attribute type 1 has an invalid length. [ 3283.428424][ T7911] netlink: 'syz.4.11514': attribute type 2 has an invalid length. [ 3283.448346][ T7911] netlink: 198100 bytes leftover after parsing attributes in process `syz.4.11514'. [ 3283.918496][ T7924] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.11519'. [ 3283.979556][ T7927] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11520'. [ 3284.375875][ T7937] netlink: 'syz.3.11523': attribute type 9 has an invalid length. [ 3284.446661][ T7937] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11523'. [ 3286.500740][ T7942] netlink: 'syz.4.11525': attribute type 9 has an invalid length. [ 3286.508814][ T7942] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11525'. [ 3286.557195][ T7942] netlink: 'syz.4.11525': attribute type 9 has an invalid length. [ 3286.565295][ T7942] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11525'. [ 3287.254489][ T7957] netlink: 'syz.1.11538': attribute type 21 has an invalid length. [ 3287.290798][ T7957] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11538'. [ 3287.404884][ T7961] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11531'. [ 3287.620289][ T7972] FAULT_INJECTION: forcing a failure. [ 3287.620289][ T7972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3287.642366][ T7972] CPU: 0 PID: 7972 Comm: syz.4.11536 Not tainted syzkaller #0 [ 3287.649948][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3287.660051][ T7972] Call Trace: [ 3287.663388][ T7972] [ 3287.666374][ T7972] dump_stack_lvl+0x18c/0x250 [ 3287.671096][ T7972] ? show_regs_print_info+0x20/0x20 [ 3287.676325][ T7972] ? load_image+0x420/0x420 [ 3287.680860][ T7972] ? __might_fault+0xaa/0x120 [ 3287.685568][ T7972] ? __lock_acquire+0x7d40/0x7d40 [ 3287.690629][ T7972] should_fail_ex+0x39d/0x4d0 [ 3287.695347][ T7972] _copy_from_user+0x2f/0xe0 [ 3287.699971][ T7972] ip6_tnl_siocdevprivate+0x1d9/0xab0 [ 3287.705442][ T7972] ? __mutex_lock+0x315/0xcc0 [ 3287.710152][ T7972] ? ip6_tnl_start_xmit+0x11c0/0x11c0 [ 3287.715563][ T7972] ? dev_ioctl+0x83c/0x1140 [ 3287.720158][ T7972] ? __lock_acquire+0x7d40/0x7d40 [ 3287.725245][ T7972] ? dev_ifsioc+0x958/0xc40 [ 3287.729805][ T7972] dev_ioctl+0x84c/0x1140 [ 3287.734174][ T7972] sock_ioctl+0x74c/0x7e0 [ 3287.738536][ T7972] ? sock_poll+0x3e0/0x3e0 [ 3287.743005][ T7972] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3287.747993][ T7972] ? security_file_ioctl+0x80/0xa0 [ 3287.753128][ T7972] ? sock_poll+0x3e0/0x3e0 [ 3287.757579][ T7972] __se_sys_ioctl+0xfd/0x170 [ 3287.762216][ T7972] do_syscall_64+0x55/0xb0 [ 3287.766672][ T7972] ? clear_bhb_loop+0x40/0x90 [ 3287.771382][ T7972] ? clear_bhb_loop+0x40/0x90 [ 3287.776088][ T7972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3287.782016][ T7972] RIP: 0033:0x7f2c0eb9ce59 [ 3287.786468][ T7972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3287.806102][ T7972] RSP: 002b:00007f2c0faaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3287.814565][ T7972] RAX: ffffffffffffffda RBX: 00007f2c0ee15fa0 RCX: 00007f2c0eb9ce59 [ 3287.822571][ T7972] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 3287.830566][ T7972] RBP: 00007f2c0faaa090 R08: 0000000000000000 R09: 0000000000000000 [ 3287.838569][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3287.846580][ T7972] R13: 00007f2c0ee16038 R14: 00007f2c0ee15fa0 R15: 00007ffd1ba51398 [ 3287.854611][ T7972] [ 3287.982028][ T7975] netlink: 'syz.4.11537': attribute type 9 has an invalid length. [ 3287.991545][ T7975] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11537'. [ 3288.099915][ T7975] netlink: 'syz.4.11537': attribute type 9 has an invalid length. [ 3288.110707][ T7975] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11537'. [ 3288.232072][ T7978] bridge_slave_1: left allmulticast mode [ 3288.238886][ T7978] bridge_slave_1: left promiscuous mode [ 3288.253889][ T7978] bridge0: port 2(bridge_slave_1) entered disabled state [ 3290.500089][ T7978] bridge_slave_0: left allmulticast mode [ 3290.506435][ T7978] bridge_slave_0: left promiscuous mode [ 3290.544212][ T7978] bridge0: port 1(bridge_slave_0) entered disabled state [ 3290.879578][ T7988] syz.2.11540: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 3290.922369][ T7988] CPU: 0 PID: 7988 Comm: syz.2.11540 Not tainted syzkaller #0 [ 3290.929917][ T7988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3290.940020][ T7988] Call Trace: [ 3290.943343][ T7988] [ 3290.946317][ T7988] dump_stack_lvl+0x18c/0x250 [ 3290.951078][ T7988] ? show_regs_print_info+0x20/0x20 [ 3290.956343][ T7988] ? load_image+0x420/0x420 [ 3290.960902][ T7988] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3290.967367][ T7988] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 3290.973911][ T7988] warn_alloc+0x246/0x340 [ 3290.978270][ T7988] ? stack_trace_save+0xaa/0x100 [ 3290.983249][ T7988] ? zone_watermark_ok_safe+0x230/0x230 [ 3290.988839][ T7988] ? kasan_set_track+0x5f/0x70 [ 3290.993630][ T7988] ? kasan_set_track+0x4e/0x70 [ 3290.998415][ T7988] ? __kasan_kmalloc+0x8f/0xa0 [ 3291.003206][ T7988] ? xsk_init_queue+0xad/0x100 [ 3291.008064][ T7988] ? xsk_setsockopt+0x4e5/0x760 [ 3291.012942][ T7988] ? do_sock_setsockopt+0x175/0x1a0 [ 3291.018172][ T7988] ? __x64_sys_setsockopt+0x182/0x200 [ 3291.023577][ T7988] __vmalloc_node_range+0x126/0x1330 [ 3291.028938][ T7988] ? free_vm_area+0x50/0x50 [ 3291.033488][ T7988] vmalloc_user+0x74/0x80 [ 3291.037862][ T7988] ? xskq_create+0xbf/0x170 [ 3291.042394][ T7988] xskq_create+0xbf/0x170 [ 3291.046757][ T7988] xsk_init_queue+0xad/0x100 [ 3291.051383][ T7988] xsk_setsockopt+0x4e5/0x760 [ 3291.056103][ T7988] ? xsk_poll+0x680/0x680 [ 3291.060484][ T7988] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3291.066444][ T7988] ? __fget_files+0x28/0x4b0 [ 3291.071067][ T7988] ? __fget_files+0x28/0x4b0 [ 3291.075686][ T7988] ? aa_sock_opt_perm+0x74/0x100 [ 3291.080657][ T7988] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 3291.086236][ T7988] ? security_socket_setsockopt+0x7e/0xa0 [ 3291.092077][ T7988] ? xsk_poll+0x680/0x680 [ 3291.096434][ T7988] do_sock_setsockopt+0x175/0x1a0 [ 3291.101490][ T7988] ? __fdget+0x180/0x210 [ 3291.105774][ T7988] __x64_sys_setsockopt+0x182/0x200 [ 3291.111006][ T7988] do_syscall_64+0x55/0xb0 [ 3291.115455][ T7988] ? clear_bhb_loop+0x40/0x90 [ 3291.120160][ T7988] ? clear_bhb_loop+0x40/0x90 [ 3291.124860][ T7988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3291.130786][ T7988] RIP: 0033:0x7f19b6f9ce59 [ 3291.135222][ T7988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3291.154854][ T7988] RSP: 002b:00007f19b7dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3291.163386][ T7988] RAX: ffffffffffffffda RBX: 00007f19b7216090 RCX: 00007f19b6f9ce59 [ 3291.171467][ T7988] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 3291.179476][ T7988] RBP: 00007f19b7032d6f R08: 0000000000000004 R09: 0000000000000000 [ 3291.187478][ T7988] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 3291.195477][ T7988] R13: 00007f19b7216128 R14: 00007f19b7216090 R15: 00007fff061b6f58 [ 3291.203520][ T7988] [ 3291.253953][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11537'. [ 3291.263776][ T7988] Mem-Info: [ 3291.266957][ T7988] active_anon:6014 inactive_anon:0 isolated_anon:0 [ 3291.266957][ T7988] active_file:18355 inactive_file:42631 isolated_file:0 [ 3291.266957][ T7988] unevictable:768 dirty:187 writeback:0 [ 3291.266957][ T7988] slab_reclaimable:10503 slab_unreclaimable:98450 [ 3291.266957][ T7988] mapped:30532 shmem:1373 pagetables:646 [ 3291.266957][ T7988] sec_pagetables:0 bounce:0 [ 3291.266957][ T7988] kernel_misc_reclaimable:0 [ 3291.266957][ T7988] free:1336546 free_pcp:4815 free_cma:0 [ 3291.384139][ T7988] Node 0 active_anon:24156kB inactive_anon:0kB active_file:73420kB inactive_file:170320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126228kB dirty:748kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10736kB pagetables:2584kB sec_pagetables:0kB all_unreclaimable? no [ 3291.463765][ T7988] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3291.515003][ T7988] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3291.565905][ T7988] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 3291.571807][ T7988] Node 0 DMA32 free:1434688kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24220kB inactive_anon:0kB active_file:73420kB inactive_file:169504kB unevictable:1536kB writepending:748kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:4716kB local_pcp:2164kB free_cma:0kB [ 3291.607591][ T7988] lowmem_reserve[]: 0 0 0 0 0 [ 3291.612796][ T7988] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 3291.652565][ T7988] lowmem_reserve[]: 0 0 0 0 0 [ 3291.657404][ T7988] Node 1 Normal free:3896516kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15936kB local_pcp:8480kB free_cma:0kB [ 3291.743208][ T7988] lowmem_reserve[]: 0 0 0 0 0 [ 3291.765037][ T7988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3291.798313][ T7999] netlink: 'syz.1.11542': attribute type 21 has an invalid length. [ 3291.818847][ T7999] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11542'. [ 3291.842254][ T7988] Node 0 DMA32: 2920*4kB (UE) 1452*8kB (UME) 2330*16kB (UME) 941*32kB (UME) 742*64kB (UME) 735*128kB (UME) 227*256kB (UME) 169*512kB (UM) 65*1024kB (UME) 32*2048kB (UME) 226*4096kB (UM) = 1434688kB [ 3291.862653][ T7988] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3291.876209][ T7998] netlink: 'syz.3.11543': attribute type 10 has an invalid length. [ 3291.884371][ T7988] Node 1 Normal: 221*4kB (UME) 58*8kB (UME) 38*16kB (UME) 83*32kB (UME) 25*64kB (UE) 7*128kB (UME) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3896516kB [ 3291.907514][ T7998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11543'. [ 3291.921113][ T7988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3291.931513][ T7998] vcan0: entered promiscuous mode [ 3291.937589][ T7998] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 3291.953827][ T7988] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3291.973068][ T7988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3291.989792][ T7988] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3291.999735][ T7988] 62359 total pagecache pages [ 3292.009742][ T7988] 0 pages in swap cache [ 3292.014738][ T7988] Free swap = 124728kB [ 3292.018959][ T7988] Total swap = 124996kB [ 3292.052124][ T7988] 2097051 pages RAM [ 3292.062523][ T7988] 0 pages HighMem/MovableOnly [ 3292.082791][ T7988] 416933 pages reserved [ 3292.087021][ T7988] 0 pages cma reserved [ 3292.378625][ T8005] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.11544'. [ 3292.949523][ T8018] FAULT_INJECTION: forcing a failure. [ 3292.949523][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 3292.982629][ T8018] CPU: 1 PID: 8018 Comm: syz.1.11549 Not tainted syzkaller #0 [ 3292.990180][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3293.000290][ T8018] Call Trace: [ 3293.003611][ T8018] [ 3293.006604][ T8018] dump_stack_lvl+0x18c/0x250 [ 3293.011362][ T8018] ? show_regs_print_info+0x20/0x20 [ 3293.016635][ T8018] ? load_image+0x420/0x420 [ 3293.021190][ T8018] ? __might_sleep+0xe0/0xe0 [ 3293.025841][ T8018] ? __lock_acquire+0x7d40/0x7d40 [ 3293.030948][ T8018] should_fail_ex+0x39d/0x4d0 [ 3293.035733][ T8018] should_failslab+0x9/0x20 [ 3293.040286][ T8018] slab_pre_alloc_hook+0x59/0x310 [ 3293.045363][ T8018] ? __lock_acquire+0x7d40/0x7d40 [ 3293.050426][ T8018] ? kvmalloc_node+0x70/0x180 [ 3293.055142][ T8018] ? kvmalloc_node+0x70/0x180 [ 3293.059847][ T8018] __kmem_cache_alloc_node+0x53/0x250 [ 3293.066301][ T8018] ? __schedule_delayed_monitor_work+0x200/0x200 [ 3293.072674][ T8018] ? kvmalloc_node+0x70/0x180 [ 3293.077386][ T8018] __kmalloc_node+0xa4/0x230 [ 3293.082013][ T8018] kvmalloc_node+0x70/0x180 [ 3293.086549][ T8018] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 3293.091965][ T8018] ? 0xffffffffa0004740 [ 3293.096153][ T8018] ? 0xffffffffa0004740 [ 3293.100339][ T8018] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 3293.106260][ T8018] ? 0xffffffffa0004740 [ 3293.110451][ T8018] ? xdp_convert_md_to_buff+0x330/0x330 [ 3293.116079][ T8018] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 3293.122359][ T8018] ? _copy_from_user+0xa5/0xe0 [ 3293.127184][ T8018] ? bpf_test_init+0x119/0x140 [ 3293.131978][ T8018] ? xdp_convert_md_to_buff+0x5b/0x330 [ 3293.137471][ T8018] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 3293.142893][ T8018] ? dev_put+0x80/0x80 [ 3293.147004][ T8018] ? dev_put+0x80/0x80 [ 3293.151104][ T8018] bpf_prog_test_run+0x321/0x390 [ 3293.156072][ T8018] __sys_bpf+0x49d/0x890 [ 3293.160346][ T8018] ? bpf_link_show_fdinfo+0x390/0x390 [ 3293.165751][ T8018] ? lock_chain_count+0x20/0x20 [ 3293.170684][ T8018] __x64_sys_bpf+0x7c/0x90 [ 3293.175134][ T8018] do_syscall_64+0x55/0xb0 [ 3293.179590][ T8018] ? clear_bhb_loop+0x40/0x90 [ 3293.184288][ T8018] ? clear_bhb_loop+0x40/0x90 [ 3293.189020][ T8018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3293.194957][ T8018] RIP: 0033:0x7ff429f9ce59 [ 3293.199413][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3293.219058][ T8018] RSP: 002b:00007ff42aedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3293.227500][ T8018] RAX: ffffffffffffffda RBX: 00007ff42a215fa0 RCX: 00007ff429f9ce59 [ 3293.235517][ T8018] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 3293.243511][ T8018] RBP: 00007ff42aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 3293.251500][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3293.259498][ T8018] R13: 00007ff42a216038 R14: 00007ff42a215fa0 R15: 00007fffc14607b8 [ 3293.267507][ T8018] [ 3293.313079][ T8027] netlink: 'syz.2.11552': attribute type 21 has an invalid length. [ 3293.321084][ T8027] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11552'. [ 3296.340268][ T8058] netlink: 'syz.2.11562': attribute type 9 has an invalid length. [ 3296.348800][ T8058] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11562'. [ 3296.800015][ T8072] netlink: 'syz.2.11568': attribute type 21 has an invalid length. [ 3296.815602][ T8072] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11568'. [ 3297.558762][ T8088] FAULT_INJECTION: forcing a failure. [ 3297.558762][ T8088] name failslab, interval 1, probability 0, space 0, times 0 [ 3297.622855][ T8088] CPU: 1 PID: 8088 Comm: syz.3.11574 Not tainted syzkaller #0 [ 3297.630431][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3297.640539][ T8088] Call Trace: [ 3297.643869][ T8088] [ 3297.646848][ T8088] dump_stack_lvl+0x18c/0x250 [ 3297.651588][ T8088] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3297.657814][ T8088] ? show_regs_print_info+0x20/0x20 [ 3297.663071][ T8088] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3297.669302][ T8088] should_fail_ex+0x39d/0x4d0 [ 3297.674051][ T8088] should_failslab+0x9/0x20 [ 3297.678614][ T8088] slab_pre_alloc_hook+0x59/0x310 [ 3297.683703][ T8088] ? apparmor_sk_alloc_security+0x77/0x100 [ 3297.689552][ T8088] __kmem_cache_alloc_node+0x53/0x250 [ 3297.694964][ T8088] ? apparmor_sk_alloc_security+0x77/0x100 [ 3297.700802][ T8088] kmalloc_trace+0x2a/0xe0 [ 3297.705259][ T8088] apparmor_sk_alloc_security+0x77/0x100 [ 3297.710964][ T8088] security_sk_alloc+0x6e/0xa0 [ 3297.715784][ T8088] sk_prot_alloc+0x101/0x210 [ 3297.720442][ T8088] sk_alloc+0x3a/0x360 [ 3297.724555][ T8088] unix_create1+0xb0/0x790 [ 3297.729017][ T8088] unix_create+0x154/0x1f0 [ 3297.733466][ T8088] __sock_create+0x4a6/0x940 [ 3297.738090][ T8088] __sys_socketpair+0x1c1/0x550 [ 3297.742980][ T8088] __x64_sys_socketpair+0x9b/0xb0 [ 3297.748053][ T8088] do_syscall_64+0x55/0xb0 [ 3297.752511][ T8088] ? clear_bhb_loop+0x40/0x90 [ 3297.757207][ T8088] ? clear_bhb_loop+0x40/0x90 [ 3297.761907][ T8088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3297.767828][ T8088] RIP: 0033:0x7f015c99ce59 [ 3297.772270][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3297.791923][ T8088] RSP: 002b:00007f015d841028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3297.800383][ T8088] RAX: ffffffffffffffda RBX: 00007f015cc15fa0 RCX: 00007f015c99ce59 [ 3297.808375][ T8088] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3297.816369][ T8088] RBP: 00007f015d841090 R08: 0000000000000000 R09: 0000000000000000 [ 3297.824372][ T8088] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 3297.832467][ T8088] R13: 00007f015cc16038 R14: 00007f015cc15fa0 R15: 00007ffd182b2398 [ 3297.840481][ T8088] [ 3298.542679][ T8099] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11577'. [ 3298.615764][ T8104] netlink: 'syz.1.11578': attribute type 21 has an invalid length. [ 3298.632272][ T8104] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11578'. [ 3303.779011][ T8133] netlink: 'syz.1.11587': attribute type 9 has an invalid length. [ 3303.846189][ T8133] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11587'. [ 3303.991818][ T8139] netlink: 'syz.2.11589': attribute type 21 has an invalid length. [ 3304.019455][ T8139] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11589'. [ 3304.152350][ T8136] netlink: 'syz.1.11587': attribute type 9 has an invalid length. [ 3304.191124][ T8136] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11587'. [ 3304.313674][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11587'. [ 3304.761813][T28848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3304.782964][T28848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3304.792992][T28848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3304.811781][T28848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3304.821624][T28848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3304.830000][T28848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3305.149755][ T8150] chnl_net:caif_netlink_parms(): no params data found [ 3305.278979][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 3305.302315][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 3305.311950][ T8150] bridge_slave_0: entered allmulticast mode [ 3305.334654][ T8150] bridge_slave_0: entered promiscuous mode [ 3305.347984][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 3305.359678][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 3305.371928][ T8150] bridge_slave_1: entered allmulticast mode [ 3305.384744][ T8150] bridge_slave_1: entered promiscuous mode [ 3305.448901][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3305.476678][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3305.550813][ T8150] team0: Port device team_slave_0 added [ 3305.571049][ T8150] team0: Port device team_slave_1 added [ 3305.635961][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3305.647101][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3305.679828][ T8150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3305.706183][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3305.720555][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3305.755224][ T8150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3307.660910][ T8150] hsr_slave_0: entered promiscuous mode [ 3307.693339][ T8150] hsr_slave_1: entered promiscuous mode [ 3307.721644][ T8150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3307.738214][ T8150] Cannot create hsr debugfs directory [ 3307.838448][ T8160] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11593'. [ 3307.886881][ T8160] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11593'. [ 3309.632783][ T1108] Bluetooth: hci0: command tx timeout [ 3311.084035][ T7414] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3311.137935][ T8171] netlink: 'syz.2.11597': attribute type 21 has an invalid length. [ 3311.157982][ T8171] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11597'. [ 3311.716719][ T1108] Bluetooth: hci0: command tx timeout [ 3313.792799][ T1108] Bluetooth: hci0: command tx timeout [ 3314.127059][ T7414] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3314.481573][ T8191] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11603'. [ 3314.539386][ T8191] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11603'. [ 3315.872630][ T1108] Bluetooth: hci0: command tx timeout [ 3317.963485][ T7414] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3318.009770][ T8208] netlink: 'syz.1.11607': attribute type 21 has an invalid length. [ 3318.022368][ T8208] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11607'. [ 3318.422788][ T7414] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3322.060122][ T8245] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11613'. [ 3322.158489][ T8245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11613'. [ 3326.382239][ T8278] netlink: 'syz.1.11617': attribute type 21 has an invalid length. [ 3326.409087][ T8278] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11617'. [ 3327.594234][ T8298] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11624'. [ 3327.613575][ T8300] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11624'. [ 3327.717629][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.727311][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.764937][ T8150] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3327.781467][ T8150] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3327.818850][ T8150] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3330.953402][ T8150] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3331.100091][ T8314] netlink: 'syz.2.11628': attribute type 21 has an invalid length. [ 3331.108228][ T8314] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11628'. [ 3331.805783][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3331.865502][ T8150] 8021q: adding VLAN 0 to HW filter on device team0 [ 3331.958309][ T7415] bridge0: port 1(bridge_slave_0) entered blocking state [ 3331.965605][ T7415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3332.007788][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 3332.015015][ T7411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3332.401915][ T8150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3332.413501][ T8150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3332.435762][ T8340] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11634'. [ 3332.675919][ T8343] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11634'. [ 3333.019130][ T7414] hsr_slave_0: left promiscuous mode [ 3333.039752][ T7414] hsr_slave_1: left promiscuous mode [ 3333.056066][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3333.080810][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3335.672529][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3335.695310][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3335.743973][ T7414] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 3335.774963][ T7414] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 3335.941784][ T7414] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 3335.979858][ T7414] batman_adv: batadv0: Removing interface: virt_wifi0 [ 3336.018670][ T7414] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 3336.052425][ T7414] batman_adv: batadv0: Removing interface: veth0_vlan [ 3336.234791][ T7414] veth1_macvtap: left promiscuous mode [ 3336.240608][ T7414] veth0_macvtap: left promiscuous mode [ 3336.246612][ T7414] veth1_vlan: left promiscuous mode [ 3336.252325][ T7414] veth0_vlan: left promiscuous mode [ 3336.487016][ T7414] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 3337.185950][ T7414] team0 (unregistering): Port device team_slave_1 removed [ 3337.236502][ T7414] team0 (unregistering): Port device team_slave_0 removed [ 3337.289403][ T7414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3337.342287][ T7414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3337.728266][ T7414] bond0 (unregistering): (slave team0): Releasing backup interface [ 3337.767048][ T7414] bond0 (unregistering): Released all slaves [ 3337.809821][ T8362] netlink: 'syz.2.11638': attribute type 21 has an invalid length. [ 3337.818106][ T8362] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11638'. [ 3337.902860][ T8150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3338.201197][ T8386] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11644'. [ 3338.354828][ T8386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11644'. [ 3338.797629][ T8150] veth0_vlan: entered promiscuous mode [ 3338.814396][ T8150] veth1_vlan: entered promiscuous mode [ 3338.883637][ T8150] veth0_macvtap: entered promiscuous mode [ 3338.915294][ T8150] veth1_macvtap: entered promiscuous mode [ 3338.968219][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3338.979315][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3338.995223][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3339.012699][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3339.047018][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3339.060691][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3339.081100][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3339.110016][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3339.126204][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3339.138162][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3339.154080][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3339.168969][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3339.200872][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3339.231056][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3339.294044][ T8150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3339.320685][ T8150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3339.353029][ T8150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3339.378417][ T8150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3340.545011][ T7414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3340.573489][ T8434] netlink: 'syz.1.11650': attribute type 21 has an invalid length. [ 3340.581530][ T8434] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11650'. [ 3340.601746][ T7414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3340.668266][ T7412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3340.686202][ T7412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3342.540587][ T8443] TCP: TCP_TX_DELAY enabled [ 3342.560756][ T8443] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.11588'. [ 3342.888249][ T8449] FAULT_INJECTION: forcing a failure. [ 3342.888249][ T8449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3342.903228][ T8449] CPU: 0 PID: 8449 Comm: syz.4.11654 Not tainted syzkaller #0 [ 3342.910758][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3342.920892][ T8449] Call Trace: [ 3342.924224][ T8449] [ 3342.927199][ T8449] dump_stack_lvl+0x18c/0x250 [ 3342.931933][ T8449] ? show_regs_print_info+0x20/0x20 [ 3342.937184][ T8449] ? load_image+0x420/0x420 [ 3342.941738][ T8449] ? __might_fault+0xaa/0x120 [ 3342.946478][ T8449] ? __lock_acquire+0x7d40/0x7d40 [ 3342.951560][ T8449] should_fail_ex+0x39d/0x4d0 [ 3342.953337][ T8451] FAULT_INJECTION: forcing a failure. [ 3342.953337][ T8451] name failslab, interval 1, probability 0, space 0, times 0 [ 3342.956286][ T8449] _copy_from_iter+0x1d9/0x12e0 [ 3342.956324][ T8449] ? slab_post_alloc_hook+0x8a/0x4b0 [ 3342.956356][ T8449] ? __virt_addr_valid+0x18c/0x540 [ 3342.956387][ T8449] ? __lock_acquire+0x7d40/0x7d40 [ 3342.956411][ T8449] ? rcu_is_watching+0x15/0xb0 [ 3342.956443][ T8449] ? copyout_mc+0x70/0x70 [ 3342.956481][ T8449] ? __virt_addr_valid+0x18c/0x540 [ 3342.956507][ T8449] ? __virt_addr_valid+0x18c/0x540 [ 3342.956534][ T8449] ? __virt_addr_valid+0x469/0x540 [ 3342.956563][ T8449] ? __check_object_size+0x506/0xa20 [ 3342.956588][ T8449] netlink_sendmsg+0x76b/0xbf0 [ 3342.956622][ T8449] ? netlink_getsockopt+0x590/0x590 [ 3342.956649][ T8449] ? aa_sock_msg_perm+0x94/0x150 [ 3342.956680][ T8449] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3342.956706][ T8449] ? security_socket_sendmsg+0x80/0xa0 [ 3342.956731][ T8449] ? netlink_getsockopt+0x590/0x590 [ 3342.956755][ T8449] ____sys_sendmsg+0x5ba/0x960 [ 3342.956789][ T8449] ? __asan_memset+0x22/0x40 [ 3342.956816][ T8449] ? __sys_sendmsg_sock+0x30/0x30 [ 3342.956841][ T8449] ? __import_iovec+0x5f2/0x850 [ 3342.956870][ T8449] ? import_iovec+0x73/0xa0 [ 3342.956895][ T8449] ___sys_sendmsg+0x2a6/0x360 [ 3342.956919][ T8449] ? get_pid_task+0x20/0x1e0 [ 3342.956952][ T8449] ? __sys_sendmsg+0x2a0/0x2a0 [ 3342.956998][ T8449] ? __lock_acquire+0x7d40/0x7d40 [ 3342.957049][ T8449] __se_sys_sendmsg+0x1c2/0x2b0 [ 3342.957077][ T8449] ? __x64_sys_sendmsg+0x80/0x80 [ 3342.957119][ T8449] ? lockdep_hardirqs_on+0x98/0x150 [ 3342.957154][ T8449] do_syscall_64+0x55/0xb0 [ 3342.957177][ T8449] ? clear_bhb_loop+0x40/0x90 [ 3342.957196][ T8449] ? clear_bhb_loop+0x40/0x90 [ 3342.957217][ T8449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3342.957246][ T8449] RIP: 0033:0x7f007239ce59 [ 3342.957267][ T8449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3342.957285][ T8449] RSP: 002b:00007f007330b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3342.957309][ T8449] RAX: ffffffffffffffda RBX: 00007f0072615fa0 RCX: 00007f007239ce59 [ 3342.957326][ T8449] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000007 [ 3342.957339][ T8449] RBP: 00007f007330b090 R08: 0000000000000000 R09: 0000000000000000 [ 3342.957352][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3342.957365][ T8449] R13: 00007f0072616038 R14: 00007f0072615fa0 R15: 00007fff44729cc8 [ 3342.957397][ T8449] [ 3343.324043][ T8451] CPU: 0 PID: 8451 Comm: syz.2.11653 Not tainted syzkaller #0 [ 3343.331600][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3343.341698][ T8451] Call Trace: [ 3343.345030][ T8451] [ 3343.348014][ T8451] dump_stack_lvl+0x18c/0x250 [ 3343.352755][ T8451] ? show_regs_print_info+0x20/0x20 [ 3343.358010][ T8451] ? load_image+0x420/0x420 [ 3343.362553][ T8451] ? inet_netconf_fill_devconf+0x6c2/0x8f0 [ 3343.368434][ T8451] should_fail_ex+0x39d/0x4d0 [ 3343.373171][ T8451] should_failslab+0x9/0x20 [ 3343.377723][ T8451] slab_pre_alloc_hook+0x59/0x310 [ 3343.382841][ T8451] kmem_cache_alloc+0x5a/0x2d0 [ 3343.387653][ T8451] ? skb_clone+0x1eb/0x370 [ 3343.392156][ T8451] skb_clone+0x1eb/0x370 [ 3343.396460][ T8451] __netlink_deliver_tap+0x41c/0x830 [ 3343.401802][ T8451] ? netlink_deliver_tap+0x2e/0x1b0 [ 3343.407054][ T8451] netlink_deliver_tap+0x19c/0x1b0 [ 3343.412219][ T8451] netlink_dump+0x94b/0xe50 [ 3343.416780][ T8451] ? netlink_lookup+0x200/0x200 [ 3343.421695][ T8451] ? slab_free_freelist_hook+0x130/0x1a0 [ 3343.427376][ T8451] ? netlink_recvmsg+0x5e7/0xe60 [ 3343.432364][ T8451] ? kmem_cache_free+0xf8/0x270 [ 3343.437273][ T8451] netlink_recvmsg+0x693/0xe60 [ 3343.442103][ T8451] ? netlink_sendmsg+0xbf0/0xbf0 [ 3343.447093][ T8451] ? aa_af_perm+0x330/0x330 [ 3343.451638][ T8451] ? __lock_acquire+0x1273/0x7d40 [ 3343.456717][ T8451] ? verify_lock_unused+0x140/0x140 [ 3343.461966][ T8451] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 3343.467299][ T8451] ? security_socket_recvmsg+0x89/0xb0 [ 3343.472802][ T8451] ? netlink_sendmsg+0xbf0/0xbf0 [ 3343.477832][ T8451] ____sys_recvmsg+0x2ce/0x5e0 [ 3343.482661][ T8451] ? __sys_recvmsg_sock+0x50/0x50 [ 3343.487754][ T8451] ? import_iovec+0x73/0xa0 [ 3343.492308][ T8451] ___sys_recvmsg+0x216/0x590 [ 3343.497043][ T8451] ? __sys_recvmsg+0x2a0/0x2a0 [ 3343.501863][ T8451] ? ksys_write+0x1c4/0x260 [ 3343.506440][ T8451] ? __fget_files+0x43d/0x4b0 [ 3343.511185][ T8451] __x64_sys_recvmsg+0x20c/0x2e0 [ 3343.516184][ T8451] ? ___sys_recvmsg+0x590/0x590 [ 3343.521158][ T8451] ? lockdep_hardirqs_on+0x98/0x150 [ 3343.526422][ T8451] do_syscall_64+0x55/0xb0 [ 3343.530882][ T8451] ? clear_bhb_loop+0x40/0x90 [ 3343.535610][ T8451] ? clear_bhb_loop+0x40/0x90 [ 3343.540329][ T8451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3343.546280][ T8451] RIP: 0033:0x7f19b6f9ce59 [ 3343.550737][ T8451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3343.570385][ T8451] RSP: 002b:00007f19b7df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3343.578856][ T8451] RAX: ffffffffffffffda RBX: 00007f19b7215fa0 RCX: 00007f19b6f9ce59 [ 3343.586871][ T8451] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 3343.594888][ T8451] RBP: 00007f19b7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 3343.602902][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3343.610911][ T8451] R13: 00007f19b7216038 R14: 00007f19b7215fa0 R15: 00007fff061b6f58 [ 3343.618951][ T8451] [ 3347.580202][ T8498] FAULT_INJECTION: forcing a failure. [ 3347.580202][ T8498] name failslab, interval 1, probability 0, space 0, times 0 [ 3347.617855][ T8498] CPU: 0 PID: 8498 Comm: syz.1.11667 Not tainted syzkaller #0 [ 3347.625404][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3347.635517][ T8498] Call Trace: [ 3347.638841][ T8498] [ 3347.641819][ T8498] dump_stack_lvl+0x18c/0x250 [ 3347.646559][ T8498] ? show_regs_print_info+0x20/0x20 [ 3347.651901][ T8498] ? load_image+0x420/0x420 [ 3347.656448][ T8498] ? __might_sleep+0xe0/0xe0 [ 3347.661110][ T8498] ? __lock_acquire+0x7d40/0x7d40 [ 3347.666192][ T8498] should_fail_ex+0x39d/0x4d0 [ 3347.670935][ T8498] should_failslab+0x9/0x20 [ 3347.675508][ T8498] slab_pre_alloc_hook+0x59/0x310 [ 3347.680599][ T8498] ? __lock_acquire+0x7d40/0x7d40 [ 3347.685686][ T8498] kmem_cache_alloc+0x5a/0x2d0 [ 3347.690557][ T8498] ? security_file_alloc+0x34/0x120 [ 3347.695815][ T8498] security_file_alloc+0x34/0x120 [ 3347.700888][ T8498] init_file+0x94/0x1f0 [ 3347.705110][ T8498] alloc_empty_file+0xb7/0x1d0 [ 3347.709933][ T8498] path_openat+0x113/0x3230 [ 3347.714602][ T8498] ? __kasan_slab_alloc+0x6c/0x80 [ 3347.719676][ T8498] ? do_sys_openat2+0xda/0x1d0 [ 3347.724496][ T8498] ? __x64_sys_openat+0x139/0x160 [ 3347.729573][ T8498] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3347.735695][ T8498] ? verify_lock_unused+0x140/0x140 [ 3347.740942][ T8498] ? do_filp_open+0x430/0x430 [ 3347.745675][ T8498] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3347.751702][ T8498] ? __virt_addr_valid+0x18c/0x540 [ 3347.756878][ T8498] do_filp_open+0x1f5/0x430 [ 3347.761435][ T8498] ? vfs_tmpfile+0x490/0x490 [ 3347.766097][ T8498] ? _raw_spin_unlock+0x28/0x40 [ 3347.770998][ T8498] ? alloc_fd+0x58f/0x630 [ 3347.775389][ T8498] do_sys_openat2+0x134/0x1d0 [ 3347.780121][ T8498] ? hrtimer_interrupt+0x7bb/0x9c0 [ 3347.785287][ T8498] ? do_sys_open+0xe0/0xe0 [ 3347.789755][ T8498] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3347.795795][ T8498] ? lock_chain_count+0x20/0x20 [ 3347.800696][ T8498] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3347.806735][ T8498] __x64_sys_openat+0x139/0x160 [ 3347.811655][ T8498] do_syscall_64+0x55/0xb0 [ 3347.816123][ T8498] ? clear_bhb_loop+0x40/0x90 [ 3347.820842][ T8498] ? clear_bhb_loop+0x40/0x90 [ 3347.825562][ T8498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3347.831513][ T8498] RIP: 0033:0x7ff429f9ce59 [ 3347.836063][ T8498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3347.855719][ T8498] RSP: 002b:00007ff42aedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3347.864201][ T8498] RAX: ffffffffffffffda RBX: 00007ff42a215fa0 RCX: 00007ff429f9ce59 [ 3347.872218][ T8498] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 3347.880237][ T8498] RBP: 00007ff42aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 3347.888259][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3347.896277][ T8498] R13: 00007ff42a216038 R14: 00007ff42a215fa0 R15: 00007fffc14607b8 [ 3347.904301][ T8498] [ 3356.401805][ T8581] FAULT_INJECTION: forcing a failure. [ 3356.401805][ T8581] name failslab, interval 1, probability 0, space 0, times 0 [ 3356.441174][ T8581] CPU: 0 PID: 8581 Comm: syz.3.11691 Not tainted syzkaller #0 [ 3356.448721][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3356.458834][ T8581] Call Trace: [ 3356.462159][ T8581] [ 3356.465126][ T8581] dump_stack_lvl+0x18c/0x250 [ 3356.469865][ T8581] ? show_regs_print_info+0x20/0x20 [ 3356.475129][ T8581] ? load_image+0x420/0x420 [ 3356.479692][ T8581] ? perf_trace_lock+0xfc/0x3b0 [ 3356.484644][ T8581] should_fail_ex+0x39d/0x4d0 [ 3356.489394][ T8581] should_failslab+0x9/0x20 [ 3356.493955][ T8581] slab_pre_alloc_hook+0x59/0x310 [ 3356.499051][ T8581] kmem_cache_alloc+0x5a/0x2d0 [ 3356.503865][ T8581] ? skb_clone+0x1eb/0x370 [ 3356.508348][ T8581] skb_clone+0x1eb/0x370 [ 3356.512650][ T8581] __netlink_deliver_tap+0x41c/0x830 [ 3356.518000][ T8581] ? netlink_deliver_tap+0x2e/0x1b0 [ 3356.523247][ T8581] netlink_deliver_tap+0x19c/0x1b0 [ 3356.528402][ T8581] netlink_dump+0x94b/0xe50 [ 3356.532972][ T8581] ? netlink_lookup+0x200/0x200 [ 3356.537885][ T8581] ? slab_free_freelist_hook+0x130/0x1a0 [ 3356.543574][ T8581] ? netlink_recvmsg+0x5e7/0xe60 [ 3356.548568][ T8581] ? kmem_cache_free+0xf8/0x270 [ 3356.553476][ T8581] netlink_recvmsg+0x693/0xe60 [ 3356.558294][ T8581] ? netlink_sendmsg+0xbf0/0xbf0 [ 3356.563298][ T8581] ? aa_af_perm+0x330/0x330 [ 3356.567868][ T8581] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 3356.573204][ T8581] ? security_socket_recvmsg+0x89/0xb0 [ 3356.578725][ T8581] ? netlink_sendmsg+0xbf0/0xbf0 [ 3356.583710][ T8581] ____sys_recvmsg+0x2ce/0x5e0 [ 3356.588531][ T8581] ? __sys_recvmsg_sock+0x50/0x50 [ 3356.593624][ T8581] ? import_iovec+0x73/0xa0 [ 3356.598156][ T8581] ___sys_recvmsg+0x216/0x590 [ 3356.602893][ T8581] ? __sys_recvmsg+0x2a0/0x2a0 [ 3356.607699][ T8581] ? ksys_write+0x1c4/0x260 [ 3356.612262][ T8581] ? __fget_files+0x43d/0x4b0 [ 3356.616982][ T8581] __x64_sys_recvmsg+0x20c/0x2e0 [ 3356.621953][ T8581] ? ___sys_recvmsg+0x590/0x590 [ 3356.626851][ T8581] ? lockdep_hardirqs_on+0x98/0x150 [ 3356.632085][ T8581] do_syscall_64+0x55/0xb0 [ 3356.636657][ T8581] ? clear_bhb_loop+0x40/0x90 [ 3356.641361][ T8581] ? clear_bhb_loop+0x40/0x90 [ 3356.646150][ T8581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3356.652077][ T8581] RIP: 0033:0x7f015c99ce59 [ 3356.656524][ T8581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3356.676167][ T8581] RSP: 002b:00007f015d841028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3356.684622][ T8581] RAX: ffffffffffffffda RBX: 00007f015cc15fa0 RCX: 00007f015c99ce59 [ 3356.692624][ T8581] RDX: 0000000040000120 RSI: 0000200000002480 RDI: 0000000000000007 [ 3356.700709][ T8581] RBP: 00007f015d841090 R08: 0000000000000000 R09: 0000000000000000 [ 3356.708789][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3356.716789][ T8581] R13: 00007f015cc16038 R14: 00007f015cc15fa0 R15: 00007ffd182b2398 [ 3356.724808][ T8581] [ 3357.613892][ T8602] raw_sendmsg: syz.3.11695 forgot to set AF_INET. Fix it! [ 3376.662982][ T8760] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11749'. [ 3376.747474][ T8760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11749'. [ 3380.859588][ T8785] netlink: 'syz.2.11758': attribute type 10 has an invalid length. [ 3380.872914][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11758'. [ 3380.929966][ T8785] batman_adv: batadv0: Adding interface: virt_wifi0 [ 3380.960231][ T8785] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3381.135405][ T8785] batman_adv: batadv0: Interface activated: virt_wifi0 [ 3383.815153][ T8847] FAULT_INJECTION: forcing a failure. [ 3383.815153][ T8847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3383.829316][ T8847] CPU: 1 PID: 8847 Comm: syz.3.11775 Not tainted syzkaller #0 [ 3383.836866][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3383.846973][ T8847] Call Trace: [ 3383.850298][ T8847] [ 3383.853265][ T8847] dump_stack_lvl+0x18c/0x250 [ 3383.858009][ T8847] ? show_regs_print_info+0x20/0x20 [ 3383.863250][ T8847] ? load_image+0x420/0x420 [ 3383.867825][ T8847] ? __might_fault+0xaa/0x120 [ 3383.872546][ T8847] ? __lock_acquire+0x7d40/0x7d40 [ 3383.877630][ T8847] should_fail_ex+0x39d/0x4d0 [ 3383.882395][ T8847] _copy_from_user+0x2f/0xe0 [ 3383.887040][ T8847] __sys_bpf+0x23e/0x890 [ 3383.891345][ T8847] ? bpf_link_show_fdinfo+0x390/0x390 [ 3383.896767][ T8847] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3383.903001][ T8847] __x64_sys_bpf+0x7c/0x90 [ 3383.907445][ T8847] do_syscall_64+0x55/0xb0 [ 3383.911887][ T8847] ? clear_bhb_loop+0x40/0x90 [ 3383.916583][ T8847] ? clear_bhb_loop+0x40/0x90 [ 3383.921297][ T8847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3383.927222][ T8847] RIP: 0033:0x7f015c99ce59 [ 3383.931674][ T8847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3383.951747][ T8847] RSP: 002b:00007f015d841028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3383.960192][ T8847] RAX: ffffffffffffffda RBX: 00007f015cc15fa0 RCX: 00007f015c99ce59 [ 3383.968187][ T8847] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 3383.976267][ T8847] RBP: 00007f015d841090 R08: 0000000000000000 R09: 0000000000000000 [ 3383.984264][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3383.992256][ T8847] R13: 00007f015cc16038 R14: 00007f015cc15fa0 R15: 00007ffd182b2398 [ 3384.000270][ T8847] [ 3387.653794][ T8875] syzkaller0: entered promiscuous mode [ 3387.659337][ T8875] syzkaller0: entered allmulticast mode [ 3387.944192][ T8873] netlink: 'syz.2.11783': attribute type 10 has an invalid length. [ 3387.970603][ T8873] team0: Device ipvlan1 failed to register rx_handler [ 3388.672539][ T8902] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 3389.163129][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.169524][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 3391.661687][ T8913] FAULT_INJECTION: forcing a failure. [ 3391.661687][ T8913] name failslab, interval 1, probability 0, space 0, times 0 [ 3391.697547][ T8913] CPU: 1 PID: 8913 Comm: syz.1.11797 Not tainted syzkaller #0 [ 3391.705102][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3391.715211][ T8913] Call Trace: [ 3391.718533][ T8913] [ 3391.721504][ T8913] dump_stack_lvl+0x18c/0x250 [ 3391.726249][ T8913] ? show_regs_print_info+0x20/0x20 [ 3391.731495][ T8913] ? load_image+0x420/0x420 [ 3391.736070][ T8913] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3391.741508][ T8913] ? lockdep_hardirqs_on+0x98/0x150 [ 3391.746768][ T8913] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3391.752195][ T8913] should_fail_ex+0x39d/0x4d0 [ 3391.756945][ T8913] should_failslab+0x9/0x20 [ 3391.761593][ T8913] slab_pre_alloc_hook+0x59/0x310 [ 3391.766672][ T8913] ? sctp_get_port_local+0xe65/0x1620 [ 3391.772086][ T8913] ? sctp_add_bind_addr+0x8c/0x360 [ 3391.777238][ T8913] __kmem_cache_alloc_node+0x53/0x250 [ 3391.782910][ T8913] ? sctp_add_bind_addr+0x8c/0x360 [ 3391.788057][ T8913] kmalloc_trace+0x2a/0xe0 [ 3391.792507][ T8913] sctp_add_bind_addr+0x8c/0x360 [ 3391.797485][ T8913] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 3391.802977][ T8913] sctp_do_bind+0x616/0x990 [ 3391.807569][ T8913] sctp_connect_new_asoc+0x26a/0x6a0 [ 3391.812899][ T8913] ? __sctp_connect+0xd80/0xd80 [ 3391.817779][ T8913] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3391.823179][ T8913] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 3391.828930][ T8913] ? security_sctp_bind_connect+0x89/0xb0 [ 3391.834687][ T8913] sctp_sendmsg+0x15d2/0x2910 [ 3391.839411][ T8913] ? sctp_getsockopt+0xb60/0xb60 [ 3391.844383][ T8913] ? aa_sk_perm+0x83c/0x970 [ 3391.848915][ T8913] ? aa_af_perm+0x330/0x330 [ 3391.853441][ T8913] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 3391.859891][ T8913] ? sock_rps_record_flow+0x19/0x3f0 [ 3391.865215][ T8913] ? inet_sendmsg+0xe9/0x2f0 [ 3391.869844][ T8913] ? inet_send_prepare+0x260/0x260 [ 3391.875075][ T8913] ____sys_sendmsg+0x5ba/0x960 [ 3391.879873][ T8913] ? __lock_acquire+0x7d40/0x7d40 [ 3391.884934][ T8913] ? __asan_memset+0x22/0x40 [ 3391.889573][ T8913] ? __sys_sendmsg_sock+0x30/0x30 [ 3391.894625][ T8913] ? __import_iovec+0x5f2/0x850 [ 3391.899513][ T8913] ? import_iovec+0x73/0xa0 [ 3391.904052][ T8913] ___sys_sendmsg+0x2a6/0x360 [ 3391.908765][ T8913] ? get_pid_task+0x20/0x1e0 [ 3391.913391][ T8913] ? __sys_sendmsg+0x2a0/0x2a0 [ 3391.918216][ T8913] ? __lock_acquire+0x7d40/0x7d40 [ 3391.923290][ T8913] __se_sys_sendmsg+0x1c2/0x2b0 [ 3391.928168][ T8913] ? __x64_sys_sendmsg+0x80/0x80 [ 3391.933167][ T8913] ? lockdep_hardirqs_on+0x98/0x150 [ 3391.938398][ T8913] do_syscall_64+0x55/0xb0 [ 3391.942840][ T8913] ? clear_bhb_loop+0x40/0x90 [ 3391.947539][ T8913] ? clear_bhb_loop+0x40/0x90 [ 3391.952249][ T8913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3391.958178][ T8913] RIP: 0033:0x7ff429f9ce59 [ 3391.962616][ T8913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3391.982244][ T8913] RSP: 002b:00007ff42aedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3391.990694][ T8913] RAX: ffffffffffffffda RBX: 00007ff42a215fa0 RCX: 00007ff429f9ce59 [ 3391.998695][ T8913] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 3392.006687][ T8913] RBP: 00007ff42aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 3392.014690][ T8913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3392.022682][ T8913] R13: 00007ff42a216038 R14: 00007ff42a215fa0 R15: 00007fffc14607b8 [ 3392.030688][ T8913] [ 3392.091316][ T8920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11798'. [ 3392.122454][ T8920] netlink: 6 bytes leftover after parsing attributes in process `syz.2.11798'. [ 3398.415245][ T8958] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11812'. [ 3398.449295][ T8961] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11812'. [ 3398.888150][ T8978] warn_alloc: 2 callbacks suppressed [ 3398.888170][ T8978] syz.3.11818: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 3398.952429][ T8978] CPU: 0 PID: 8978 Comm: syz.3.11818 Not tainted syzkaller #0 [ 3398.960065][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3398.970191][ T8978] Call Trace: [ 3398.973520][ T8978] [ 3398.976503][ T8978] dump_stack_lvl+0x18c/0x250 [ 3398.981241][ T8978] ? show_regs_print_info+0x20/0x20 [ 3398.986496][ T8978] ? load_image+0x420/0x420 [ 3398.991053][ T8978] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3398.997522][ T8978] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 3399.004086][ T8978] warn_alloc+0x246/0x340 [ 3399.008475][ T8978] ? stack_trace_save+0xaa/0x100 [ 3399.013466][ T8978] ? zone_watermark_ok_safe+0x230/0x230 [ 3399.019090][ T8978] ? kasan_set_track+0x5f/0x70 [ 3399.023903][ T8978] ? kasan_set_track+0x4e/0x70 [ 3399.028706][ T8978] ? __kasan_kmalloc+0x8f/0xa0 [ 3399.033525][ T8978] ? xsk_init_queue+0xad/0x100 [ 3399.038336][ T8978] ? xsk_setsockopt+0x4e5/0x760 [ 3399.043224][ T8978] ? do_sock_setsockopt+0x175/0x1a0 [ 3399.048468][ T8978] ? __x64_sys_setsockopt+0x182/0x200 [ 3399.053896][ T8978] __vmalloc_node_range+0x126/0x1330 [ 3399.059263][ T8978] ? free_vm_area+0x50/0x50 [ 3399.063860][ T8978] vmalloc_user+0x74/0x80 [ 3399.068241][ T8978] ? xskq_create+0xbf/0x170 [ 3399.072791][ T8978] xskq_create+0xbf/0x170 [ 3399.077154][ T8978] xsk_init_queue+0xad/0x100 [ 3399.081774][ T8978] xsk_setsockopt+0x4e5/0x760 [ 3399.086475][ T8978] ? xsk_poll+0x680/0x680 [ 3399.090832][ T8978] ? __fget_files+0x28/0x4b0 [ 3399.095450][ T8978] ? __fget_files+0x28/0x4b0 [ 3399.100125][ T8978] ? aa_sock_opt_perm+0x74/0x100 [ 3399.105100][ T8978] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 3399.110691][ T8978] ? security_socket_setsockopt+0x7e/0xa0 [ 3399.116462][ T8978] ? xsk_poll+0x680/0x680 [ 3399.120821][ T8978] do_sock_setsockopt+0x175/0x1a0 [ 3399.125877][ T8978] ? __fdget+0x180/0x210 [ 3399.130157][ T8978] __x64_sys_setsockopt+0x182/0x200 [ 3399.135389][ T8978] do_syscall_64+0x55/0xb0 [ 3399.139834][ T8978] ? clear_bhb_loop+0x40/0x90 [ 3399.144536][ T8978] ? clear_bhb_loop+0x40/0x90 [ 3399.149233][ T8978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3399.155166][ T8978] RIP: 0033:0x7f015c99ce59 [ 3399.159630][ T8978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3399.179277][ T8978] RSP: 002b:00007f015d841028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3399.187742][ T8978] RAX: ffffffffffffffda RBX: 00007f015cc15fa0 RCX: 00007f015c99ce59 [ 3399.195741][ T8978] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 3399.203738][ T8978] RBP: 00007f015ca32d6f R08: 0000000000000004 R09: 0000000000000000 [ 3399.211736][ T8978] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 3399.219728][ T8978] R13: 00007f015cc16038 R14: 00007f015cc15fa0 R15: 00007ffd182b2398 [ 3399.227748][ T8978] [ 3399.282619][ T8978] Mem-Info: [ 3399.285911][ T8978] active_anon:5970 inactive_anon:0 isolated_anon:0 [ 3399.285911][ T8978] active_file:18355 inactive_file:42671 isolated_file:0 [ 3399.285911][ T8978] unevictable:768 dirty:299 writeback:0 [ 3399.285911][ T8978] slab_reclaimable:10493 slab_unreclaimable:99147 [ 3399.285911][ T8978] mapped:25395 shmem:1373 pagetables:609 [ 3399.285911][ T8978] sec_pagetables:0 bounce:0 [ 3399.285911][ T8978] kernel_misc_reclaimable:0 [ 3399.285911][ T8978] free:1327206 free_pcp:12543 free_cma:0 [ 3399.398310][ T8978] Node 0 active_anon:23780kB inactive_anon:0kB active_file:73420kB inactive_file:170480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101580kB dirty:1196kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10532kB pagetables:2436kB sec_pagetables:0kB all_unreclaimable? no [ 3399.439435][ T8978] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3399.494099][ T8978] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3399.522573][ T8978] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 3399.528569][ T8978] Node 0 DMA32 free:1396940kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23644kB inactive_anon:0kB active_file:73420kB inactive_file:169664kB unevictable:1536kB writepending:1196kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:35124kB local_pcp:13696kB free_cma:0kB [ 3399.584277][ T8978] lowmem_reserve[]: 0 0 0 0 0 [ 3399.608908][ T8978] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 3399.768983][ T8978] lowmem_reserve[]: 0 0 0 0 0 [ 3399.824940][ T8978] Node 1 Normal free:3896516kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15936kB local_pcp:7456kB free_cma:0kB [ 3399.932739][ T8978] lowmem_reserve[]: 0 0 0 0 0 [ 3399.937590][ T8978] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3399.973763][ T8978] Node 0 DMA32: 1839*4kB (UME) 614*8kB (UME) 1356*16kB (UME) 469*32kB (UME) 1094*64kB (UME) 676*128kB (UME) 182*256kB (UME) 170*512kB (UM) 65*1024kB (UME) 32*2048kB (UME) 226*4096kB (UM) = 1396940kB [ 3400.049402][ T8978] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3400.090071][ T8978] Node 1 Normal: 221*4kB (UME) 58*8kB (UME) 38*16kB (UME) 83*32kB (UME) 25*64kB (UE) 7*128kB (UME) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3896516kB [ 3400.162400][ T8978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3400.180692][ T8978] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3400.190693][ T8978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3400.220901][ T8978] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3400.232277][ T8978] 62399 total pagecache pages [ 3400.237037][ T8978] 0 pages in swap cache [ 3400.251523][ T8978] Free swap = 124728kB [ 3400.261673][ T8978] Total swap = 124996kB [ 3400.271842][ T8978] 2097051 pages RAM [ 3400.276163][ T8978] 0 pages HighMem/MovableOnly [ 3400.280916][ T8978] 416933 pages reserved [ 3400.296227][ T8978] 0 pages cma reserved [ 3400.520444][ T8994] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11823'. [ 3400.559217][ T8994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11823'. [ 3403.038694][ T9008] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11829'. [ 3403.122989][ T9008] netlink: 6 bytes leftover after parsing attributes in process `syz.4.11829'. [ 3403.830659][ T9022] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11834'. [ 3403.911695][ T9022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11834'. [ 3404.061636][ T9030] FAULT_INJECTION: forcing a failure. [ 3404.061636][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 3404.085871][ T9030] CPU: 1 PID: 9030 Comm: syz.1.11838 Not tainted syzkaller #0 [ 3404.093425][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3404.103621][ T9030] Call Trace: [ 3404.106953][ T9030] [ 3404.109933][ T9030] dump_stack_lvl+0x18c/0x250 [ 3404.114678][ T9030] ? show_regs_print_info+0x20/0x20 [ 3404.119941][ T9030] ? load_image+0x420/0x420 [ 3404.124519][ T9030] ? __might_sleep+0xe0/0xe0 [ 3404.129165][ T9030] ? __lock_acquire+0x7d40/0x7d40 [ 3404.134248][ T9030] should_fail_ex+0x39d/0x4d0 [ 3404.139008][ T9030] should_failslab+0x9/0x20 [ 3404.143584][ T9030] slab_pre_alloc_hook+0x59/0x310 [ 3404.148671][ T9030] ? up_read+0x20/0x20 [ 3404.152788][ T9030] ? ipv6_add_addr+0x566/0x10d0 [ 3404.157684][ T9030] __kmem_cache_alloc_node+0x53/0x250 [ 3404.163138][ T9030] ? ipv6_add_addr+0x566/0x10d0 [ 3404.168043][ T9030] kmalloc_trace+0x2a/0xe0 [ 3404.172564][ T9030] ipv6_add_addr+0x566/0x10d0 [ 3404.177298][ T9030] ? ipv6_count_addresses+0x190/0x190 [ 3404.182735][ T9030] ? __might_fault+0xaa/0x120 [ 3404.187474][ T9030] inet6_addr_add+0x57e/0xb60 [ 3404.192219][ T9030] addrconf_add_ifaddr+0x15a/0x1c0 [ 3404.197396][ T9030] ? addrconf_set_dstaddr+0x320/0x320 [ 3404.202822][ T9030] ? __lock_acquire+0x7d40/0x7d40 [ 3404.207893][ T9030] ? slab_free_freelist_hook+0x130/0x1a0 [ 3404.213578][ T9030] inet6_ioctl+0x14f/0x2d0 [ 3404.218060][ T9030] ? inet6_getname+0x650/0x650 [ 3404.222884][ T9030] ? tomoyo_path_number_perm+0x5b4/0x620 [ 3404.228571][ T9030] ? tomoyo_path_number_perm+0x217/0x620 [ 3404.234251][ T9030] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3404.239774][ T9030] sock_do_ioctl+0xfc/0x310 [ 3404.244338][ T9030] ? sock_show_fdinfo+0xb0/0xb0 [ 3404.249267][ T9030] sock_ioctl+0x5ba/0x7e0 [ 3404.253681][ T9030] ? sock_poll+0x3e0/0x3e0 [ 3404.258169][ T9030] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3404.263157][ T9030] ? security_file_ioctl+0x80/0xa0 [ 3404.268313][ T9030] ? sock_poll+0x3e0/0x3e0 [ 3404.272787][ T9030] __se_sys_ioctl+0xfd/0x170 [ 3404.277468][ T9030] do_syscall_64+0x55/0xb0 [ 3404.281954][ T9030] ? clear_bhb_loop+0x40/0x90 [ 3404.286690][ T9030] ? clear_bhb_loop+0x40/0x90 [ 3404.291415][ T9030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3404.297396][ T9030] RIP: 0033:0x7ff429f9ce59 [ 3404.301852][ T9030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3404.321534][ T9030] RSP: 002b:00007ff42aedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3404.329998][ T9030] RAX: ffffffffffffffda RBX: 00007ff42a215fa0 RCX: 00007ff429f9ce59 [ 3404.338040][ T9030] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 3404.346061][ T9030] RBP: 00007ff42aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 3404.354096][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3404.362105][ T9030] R13: 00007ff42a216038 R14: 00007ff42a215fa0 R15: 00007fffc14607b8 [ 3404.370179][ T9030] [ 3408.038595][ T9057] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11846'. [ 3408.167700][ T9057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11846'. [ 3408.825338][ T9074] FAULT_INJECTION: forcing a failure. [ 3408.825338][ T9074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3408.878919][ T9074] CPU: 0 PID: 9074 Comm: syz.1.11854 Not tainted syzkaller #0 [ 3408.886479][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3408.896592][ T9074] Call Trace: [ 3408.899920][ T9074] [ 3408.902898][ T9074] dump_stack_lvl+0x18c/0x250 [ 3408.907632][ T9074] ? show_regs_print_info+0x20/0x20 [ 3408.912895][ T9074] ? load_image+0x420/0x420 [ 3408.917457][ T9074] ? __lock_acquire+0x7d40/0x7d40 [ 3408.922577][ T9074] ? snprintf+0xe9/0x140 [ 3408.926890][ T9074] should_fail_ex+0x39d/0x4d0 [ 3408.931631][ T9074] _copy_to_user+0x2f/0xa0 [ 3408.936104][ T9074] simple_read_from_buffer+0xe7/0x150 [ 3408.941561][ T9074] proc_fail_nth_read+0x1e8/0x260 [ 3408.946657][ T9074] ? proc_fault_inject_write+0x360/0x360 [ 3408.952443][ T9074] ? fsnotify_perm+0x271/0x5e0 [ 3408.957271][ T9074] ? proc_fault_inject_write+0x360/0x360 [ 3408.962962][ T9074] vfs_read+0x28b/0x970 [ 3408.967183][ T9074] ? kernel_read+0x1e0/0x1e0 [ 3408.971843][ T9074] ? __fget_files+0x28/0x4b0 [ 3408.976474][ T9074] ? __fget_files+0x28/0x4b0 [ 3408.981120][ T9074] ? __fget_files+0x43d/0x4b0 [ 3408.985891][ T9074] ? __fdget_pos+0x2a3/0x330 [ 3408.990537][ T9074] ? ksys_read+0x75/0x260 [ 3408.994924][ T9074] ksys_read+0x150/0x260 [ 3408.999221][ T9074] ? vfs_write+0x990/0x990 [ 3409.003703][ T9074] ? lockdep_hardirqs_on+0x98/0x150 [ 3409.008957][ T9074] do_syscall_64+0x55/0xb0 [ 3409.013414][ T9074] ? clear_bhb_loop+0x40/0x90 [ 3409.018148][ T9074] ? clear_bhb_loop+0x40/0x90 [ 3409.022878][ T9074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3409.028843][ T9074] RIP: 0033:0x7ff429f5d68e [ 3409.033309][ T9074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3409.052976][ T9074] RSP: 002b:00007ff42aedefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3409.061438][ T9074] RAX: ffffffffffffffda RBX: 00007ff42aedf6c0 RCX: 00007ff429f5d68e [ 3409.069468][ T9074] RDX: 000000000000000f RSI: 00007ff42aedf0a0 RDI: 0000000000000005 [ 3409.077574][ T9074] RBP: 00007ff42aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 3409.085685][ T9074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3409.093703][ T9074] R13: 00007ff42a216038 R14: 00007ff42a215fa0 R15: 00007fffc14607b8 [ 3409.101745][ T9074] [ 3411.623608][ T9088] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11858'. [ 3411.676418][ T9088] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11858'. [ 3414.827235][ T9102] FAULT_INJECTION: forcing a failure. [ 3414.827235][ T9102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3414.840628][ T9102] CPU: 0 PID: 9102 Comm: syz.1.11872 Not tainted syzkaller #0 [ 3414.848152][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3414.858261][ T9102] Call Trace: [ 3414.861581][ T9102] [ 3414.864555][ T9102] dump_stack_lvl+0x18c/0x250 [ 3414.869296][ T9102] ? show_regs_print_info+0x20/0x20 [ 3414.874555][ T9102] ? load_image+0x420/0x420 [ 3414.879107][ T9102] ? __lock_acquire+0x7d40/0x7d40 [ 3414.884182][ T9102] ? snprintf+0xe9/0x140 [ 3414.888482][ T9102] should_fail_ex+0x39d/0x4d0 [ 3414.893213][ T9102] _copy_to_user+0x2f/0xa0 [ 3414.897705][ T9102] simple_read_from_buffer+0xe7/0x150 [ 3414.903125][ T9102] proc_fail_nth_read+0x1e8/0x260 [ 3414.908187][ T9102] ? proc_fault_inject_write+0x360/0x360 [ 3414.913864][ T9102] ? fsnotify_perm+0x271/0x5e0 [ 3414.918662][ T9102] ? proc_fault_inject_write+0x360/0x360 [ 3414.924327][ T9102] vfs_read+0x28b/0x970 [ 3414.928615][ T9102] ? kernel_read+0x1e0/0x1e0 [ 3414.933268][ T9102] ? __fget_files+0x28/0x4b0 [ 3414.937887][ T9102] ? __fget_files+0x28/0x4b0 [ 3414.942504][ T9102] ? __fget_files+0x43d/0x4b0 [ 3414.947212][ T9102] ? __fdget_pos+0x2a3/0x330 [ 3414.951827][ T9102] ? ksys_read+0x75/0x260 [ 3414.956190][ T9102] ksys_read+0x150/0x260 [ 3414.960466][ T9102] ? vfs_write+0x990/0x990 [ 3414.964918][ T9102] ? lockdep_hardirqs_on+0x98/0x150 [ 3414.970146][ T9102] do_syscall_64+0x55/0xb0 [ 3414.974589][ T9102] ? clear_bhb_loop+0x40/0x90 [ 3414.979285][ T9102] ? clear_bhb_loop+0x40/0x90 [ 3414.983989][ T9102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3414.989915][ T9102] RIP: 0033:0x7ff429f5d68e [ 3414.994356][ T9102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3415.013987][ T9102] RSP: 002b:00007ff42aedefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3415.022427][ T9102] RAX: ffffffffffffffda RBX: 00007ff42aedf6c0 RCX: 00007ff429f5d68e [ 3415.030420][ T9102] RDX: 000000000000000f RSI: 00007ff42aedf0a0 RDI: 0000000000000005 [ 3415.038417][ T9102] RBP: 00007ff42aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 3415.046414][ T9102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3415.054417][ T9102] R13: 00007ff42a216038 R14: 00007ff42a215fa0 R15: 00007fffc14607b8 [ 3415.062428][ T9102] [ 3415.302516][ T9109] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11865'. [ 3416.063321][ T9124] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11870'. [ 3416.113608][ T9124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11870'. [ 3416.723358][ T9137] FAULT_INJECTION: forcing a failure. [ 3416.723358][ T9137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3416.737738][ T9137] CPU: 1 PID: 9137 Comm: syz.2.11877 Not tainted syzkaller #0 [ 3416.745266][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3416.755370][ T9137] Call Trace: [ 3416.758690][ T9137] [ 3416.761650][ T9137] dump_stack_lvl+0x18c/0x250 [ 3416.766378][ T9137] ? show_regs_print_info+0x20/0x20 [ 3416.771633][ T9137] ? load_image+0x420/0x420 [ 3416.776183][ T9137] ? __lock_acquire+0x7d40/0x7d40 [ 3416.781258][ T9137] ? mark_lock+0x94/0x320 [ 3416.785638][ T9137] should_fail_ex+0x39d/0x4d0 [ 3416.790376][ T9137] prepare_alloc_pages+0x1e2/0x5f0 [ 3416.795541][ T9137] __alloc_pages+0x134/0x460 [ 3416.800187][ T9137] ? zone_statistics+0x170/0x170 [ 3416.805178][ T9137] ? do_wp_page+0x7ca/0x35f0 [ 3416.809820][ T9137] ? do_wp_page+0xfc5/0x35f0 [ 3416.814460][ T9137] __folio_alloc+0x10/0x20 [ 3416.818927][ T9137] vma_alloc_folio+0x47a/0x8f0 [ 3416.823744][ T9137] do_wp_page+0x1243/0x35f0 [ 3416.828299][ T9137] ? folio_put+0xd0/0xd0 [ 3416.832578][ T9137] ? do_raw_spin_lock+0x11f/0x2c0 [ 3416.837649][ T9137] ? __rwlock_init+0x150/0x150 [ 3416.842477][ T9137] handle_mm_fault+0x135d/0x4c00 [ 3416.847459][ T9137] ? handle_mm_fault+0xe7/0x4c00 [ 3416.852462][ T9137] ? numa_migrate_prep+0x350/0x350 [ 3416.857637][ T9137] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 3416.862973][ T9137] do_user_addr_fault+0x730/0x12c0 [ 3416.868163][ T9137] exc_page_fault+0x64/0x100 [ 3416.872800][ T9137] asm_exc_page_fault+0x26/0x30 [ 3416.877701][ T9137] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 3416.883562][ T9137] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 3416.903218][ T9137] RSP: 0018:ffffc900104d7658 EFLAGS: 00050206 [ 3416.909336][ T9137] RAX: ffffffff84281901 RBX: 1ffff9200209afc7 RCX: 00000000000007a4 [ 3416.917355][ T9137] RDX: 0000000000000000 RSI: ffff8880692c86d0 RDI: 0000200000003000 [ 3416.925374][ T9137] RBP: ffffc900104d77c0 R08: ffff8880692c8e73 R09: 1ffff1100d2591ce [ 3416.933380][ T9137] R10: dffffc0000000000 R11: ffffed100d2591cf R12: ffff8880692c8150 [ 3416.941399][ T9137] R13: 0000000000000d24 R14: 0000000000000d24 R15: ffffc900104d7e48 [ 3416.949430][ T9137] ? _copy_to_iter+0x1d1/0x1120 [ 3416.954371][ T9137] _copy_to_iter+0x24f/0x1120 [ 3416.959132][ T9137] ? iov_iter_init+0x1e0/0x1e0 [ 3416.963965][ T9137] ? __virt_addr_valid+0x18c/0x540 [ 3416.969141][ T9137] ? __virt_addr_valid+0x469/0x540 [ 3416.974301][ T9137] ? __phys_addr_symbol+0x2f/0x70 [ 3416.979476][ T9137] __skb_datagram_iter+0xdb/0x780 [ 3416.984545][ T9137] ? tsk_importance+0x150/0x150 [ 3416.989457][ T9137] ? skb_copy_datagram_iter+0x200/0x200 [ 3416.995044][ T9137] ? tipc_wait_for_rcvmsg+0x640/0x640 [ 3417.000501][ T9137] skb_copy_datagram_iter+0xb1/0x200 [ 3417.005840][ T9137] tipc_recvmsg+0x7cc/0x1400 [ 3417.010517][ T9137] ? tipc_send_packet+0x90/0x90 [ 3417.015427][ T9137] ? aa_sock_msg_perm+0x94/0x150 [ 3417.020415][ T9137] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 3417.025752][ T9137] ? security_socket_recvmsg+0x89/0xb0 [ 3417.031265][ T9137] ? tipc_send_packet+0x90/0x90 [ 3417.036180][ T9137] ____sys_recvmsg+0x2ce/0x5e0 [ 3417.041013][ T9137] ? __sys_recvmsg_sock+0x50/0x50 [ 3417.046119][ T9137] ? import_iovec+0x73/0xa0 [ 3417.050684][ T9137] ___sys_recvmsg+0x216/0x590 [ 3417.055414][ T9137] ? __sys_recvmsg+0x2a0/0x2a0 [ 3417.060226][ T9137] ? ksys_write+0x1c4/0x260 [ 3417.064789][ T9137] ? __fget_files+0x43d/0x4b0 [ 3417.069530][ T9137] __x64_sys_recvmsg+0x20c/0x2e0 [ 3417.074519][ T9137] ? ___sys_recvmsg+0x590/0x590 [ 3417.079440][ T9137] ? lockdep_hardirqs_on+0x98/0x150 [ 3417.084701][ T9137] do_syscall_64+0x55/0xb0 [ 3417.089158][ T9137] ? clear_bhb_loop+0x40/0x90 [ 3417.093909][ T9137] ? clear_bhb_loop+0x40/0x90 [ 3417.098631][ T9137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3417.104586][ T9137] RIP: 0033:0x7f19b6f9ce59 [ 3417.109046][ T9137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3417.128706][ T9137] RSP: 002b:00007f19b7dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3417.137172][ T9137] RAX: ffffffffffffffda RBX: 00007f19b7216090 RCX: 00007f19b6f9ce59 [ 3417.145207][ T9137] RDX: 0000000000010021 RSI: 0000200000000300 RDI: 0000000000000009 [ 3417.153229][ T9137] RBP: 00007f19b7dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 3417.161245][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3417.169264][ T9137] R13: 00007f19b7216128 R14: 00007f19b7216090 R15: 00007fff061b6f58 [ 3417.177312][ T9137] [ 3417.433474][ T9141] netlink: 'syz.4.11878': attribute type 21 has an invalid length. [ 3419.619106][ T9148] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11881'. [ 3419.646653][ T9148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11881'. [ 3420.350210][ T9169] FAULT_INJECTION: forcing a failure. [ 3420.350210][ T9169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3420.378503][ T9169] CPU: 0 PID: 9169 Comm: syz.2.11885 Not tainted syzkaller #0 [ 3420.386047][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3420.396155][ T9169] Call Trace: [ 3420.399476][ T9169] [ 3420.402448][ T9169] dump_stack_lvl+0x18c/0x250 [ 3420.407178][ T9169] ? show_regs_print_info+0x20/0x20 [ 3420.412449][ T9169] ? load_image+0x420/0x420 [ 3420.416995][ T9169] ? __might_fault+0xaa/0x120 [ 3420.421708][ T9169] ? __lock_acquire+0x7d40/0x7d40 [ 3420.426786][ T9169] should_fail_ex+0x39d/0x4d0 [ 3420.431517][ T9169] _copy_from_iter+0x1d9/0x12e0 [ 3420.436415][ T9169] ? slab_post_alloc_hook+0x8a/0x4b0 [ 3420.441737][ T9169] ? __virt_addr_valid+0x18c/0x540 [ 3420.446894][ T9169] ? __lock_acquire+0x7d40/0x7d40 [ 3420.451961][ T9169] ? rcu_is_watching+0x15/0xb0 [ 3420.456785][ T9169] ? copyout_mc+0x70/0x70 [ 3420.461174][ T9169] ? __virt_addr_valid+0x18c/0x540 [ 3420.466340][ T9169] ? __virt_addr_valid+0x18c/0x540 [ 3420.471491][ T9169] ? __virt_addr_valid+0x469/0x540 [ 3420.476661][ T9169] ? __check_object_size+0x506/0xa20 [ 3420.481985][ T9169] netlink_sendmsg+0x76b/0xbf0 [ 3420.486799][ T9169] ? netlink_getsockopt+0x590/0x590 [ 3420.492040][ T9169] ? aa_sock_msg_perm+0x94/0x150 [ 3420.497029][ T9169] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3420.502356][ T9169] ? security_socket_sendmsg+0x80/0xa0 [ 3420.507863][ T9169] ? netlink_getsockopt+0x590/0x590 [ 3420.513108][ T9169] ____sys_sendmsg+0x5ba/0x960 [ 3420.517942][ T9169] ? __asan_memset+0x22/0x40 [ 3420.522579][ T9169] ? __sys_sendmsg_sock+0x30/0x30 [ 3420.527650][ T9169] ? __import_iovec+0x5f2/0x850 [ 3420.532554][ T9169] ? import_iovec+0x73/0xa0 [ 3420.537105][ T9169] ___sys_sendmsg+0x2a6/0x360 [ 3420.541848][ T9169] ? __sys_sendmsg+0x2a0/0x2a0 [ 3420.546684][ T9169] ? __lock_acquire+0x7d40/0x7d40 [ 3420.551774][ T9169] __se_sys_sendmsg+0x1c2/0x2b0 [ 3420.556704][ T9169] ? __x64_sys_sendmsg+0x80/0x80 [ 3420.561710][ T9169] ? lockdep_hardirqs_on+0x98/0x150 [ 3420.566966][ T9169] do_syscall_64+0x55/0xb0 [ 3420.571412][ T9169] ? clear_bhb_loop+0x40/0x90 [ 3420.576126][ T9169] ? clear_bhb_loop+0x40/0x90 [ 3420.580847][ T9169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3420.586793][ T9169] RIP: 0033:0x7f19b6f9ce59 [ 3420.591247][ T9169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3420.610882][ T9169] RSP: 002b:00007f19b7df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3420.619375][ T9169] RAX: ffffffffffffffda RBX: 00007f19b7215fa0 RCX: 00007f19b6f9ce59 [ 3420.627389][ T9169] RDX: 0000000000008044 RSI: 0000200000000600 RDI: 0000000000000003 [ 3420.635395][ T9169] RBP: 00007f19b7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 3420.643394][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3420.651396][ T9169] R13: 00007f19b7216038 R14: 00007f19b7215fa0 R15: 00007fff061b6f58 [ 3420.659463][ T9169] [ 3420.994845][ T9177] netlink: 'syz.1.11890': attribute type 39 has an invalid length. [ 3423.465270][ T9183] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11892'. [ 3423.485609][ T9184] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11892'. [ 3424.143166][ T9203] netlink: 'syz.2.11897': attribute type 10 has an invalid length. [ 3424.182394][ T9203] hsr_slave_0: left promiscuous mode [ 3424.231685][ T9203] hsr_slave_1: left promiscuous mode [ 3424.843298][ T9213] netlink: 'syz.1.11901': attribute type 10 has an invalid length. [ 3424.872314][ T9213] team0: Device dummy0 is up. Set it down before adding it as a team port [ 3425.031966][ T9219] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11905'. [ 3425.051910][ T9219] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11905'. [ 3428.508479][ T9235] delete_channel: no stack [ 3428.819486][ T9245] netlink: 'syz.4.11914': attribute type 10 has an invalid length. [ 3428.922334][ T9245] hsr_slave_0: left promiscuous mode [ 3429.412371][ T9257] netlink: 'syz.2.11915': attribute type 10 has an invalid length. [ 3429.420450][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11915'. [ 3429.693299][ T9245] hsr_slave_1: left promiscuous mode [ 3429.886078][ T9257] netlink: 'syz.2.11915': attribute type 10 has an invalid length. [ 3429.906692][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11915'. [ 3429.937059][ T9261] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11917'. [ 3429.998190][ T9261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11917'. [ 3430.568659][ T9271] netlink: 'syz.2.11923': attribute type 10 has an invalid length. [ 3430.612562][ T9271] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 3432.202498][ T9265] Bluetooth: hci0: command 0x0406 tx timeout [ 3433.254175][ T9271] batman_adv: batadv0: Removing interface: virt_wifi0 [ 3433.307279][ T9271] team0: Port device virt_wifi0 added [ 3433.320691][ T9276] netlink: 'syz.2.11923': attribute type 12 has an invalid length. [ 3433.331606][ T9276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11923'. [ 3433.886038][ T9302] netlink: 'syz.3.11930': attribute type 10 has an invalid length. [ 3434.149480][ T9302] hsr_slave_0: left promiscuous mode [ 3434.196265][ T9302] hsr_slave_1: left promiscuous mode [ 3435.176411][ T9313] netlink: 'syz.1.11932': attribute type 10 has an invalid length. [ 3435.190129][ T9313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11932'. [ 3435.208818][ T9313] netlink: 'syz.1.11932': attribute type 10 has an invalid length. [ 3435.217607][ T9313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11932'. [ 3435.860547][ T9328] netlink: 'syz.3.11935': attribute type 10 has an invalid length. [ 3435.878827][ T9328] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 3435.904658][ T9328] batman_adv: batadv0: Removing interface: virt_wifi0 [ 3435.970660][ T9328] team0: Port device virt_wifi0 added [ 3435.979217][ T9330] netlink: 'syz.3.11935': attribute type 12 has an invalid length. [ 3435.988957][ T9330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11935'. [ 3439.766892][ T9368] netlink: 'syz.3.11946': attribute type 10 has an invalid length. [ 3439.832946][ T9368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11946'. [ 3439.843361][ T9368] netlink: 'syz.3.11946': attribute type 10 has an invalid length. [ 3439.884455][ T9368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11946'. [ 3440.706762][ T9381] netlink: 'syz.4.11952': attribute type 10 has an invalid length. [ 3440.743834][ T9381] team0: Port device virt_wifi0 added [ 3440.785760][ T9381] netlink: 'syz.4.11952': attribute type 12 has an invalid length. [ 3440.794949][ T9381] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11952'. [ 3441.849183][ T9410] veth1_macvtap: left promiscuous mode [ 3442.174253][ T9420] netlink: 'syz.4.11961': attribute type 10 has an invalid length. [ 3442.192308][ T9420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11961'. [ 3442.214095][ T9420] netlink: 'syz.4.11961': attribute type 10 has an invalid length. [ 3442.252342][ T9420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11961'. [ 3442.340892][ T9433] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 3442.865269][ T9446] netlink: 'syz.1.11968': attribute type 10 has an invalid length. [ 3442.970128][ T9448] netlink: 'syz.1.11968': attribute type 12 has an invalid length. [ 3442.989914][ T9448] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11968'. [ 3443.514546][ T9469] syz.4.11978: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 3443.578562][ T9469] CPU: 0 PID: 9469 Comm: syz.4.11978 Not tainted syzkaller #0 [ 3443.586110][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3443.596202][ T9469] Call Trace: [ 3443.599515][ T9469] [ 3443.602498][ T9469] dump_stack_lvl+0x18c/0x250 [ 3443.607228][ T9469] ? show_regs_print_info+0x20/0x20 [ 3443.612464][ T9469] ? load_image+0x420/0x420 [ 3443.617003][ T9469] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3443.623461][ T9469] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 3443.630005][ T9469] warn_alloc+0x246/0x340 [ 3443.634468][ T9469] ? stack_trace_save+0xaa/0x100 [ 3443.639445][ T9469] ? zone_watermark_ok_safe+0x230/0x230 [ 3443.645028][ T9469] ? kasan_set_track+0x5f/0x70 [ 3443.649820][ T9469] ? kasan_set_track+0x4e/0x70 [ 3443.654611][ T9469] ? __kasan_kmalloc+0x8f/0xa0 [ 3443.659397][ T9469] ? xsk_init_queue+0xad/0x100 [ 3443.664199][ T9469] ? xsk_setsockopt+0x4e5/0x760 [ 3443.669067][ T9469] ? do_sock_setsockopt+0x175/0x1a0 [ 3443.674291][ T9469] ? __x64_sys_setsockopt+0x182/0x200 [ 3443.679709][ T9469] __vmalloc_node_range+0x126/0x1330 [ 3443.685061][ T9469] ? free_vm_area+0x50/0x50 [ 3443.689624][ T9469] vmalloc_user+0x74/0x80 [ 3443.693984][ T9469] ? xskq_create+0xbf/0x170 [ 3443.698505][ T9469] xskq_create+0xbf/0x170 [ 3443.702945][ T9469] xsk_init_queue+0xad/0x100 [ 3443.707567][ T9469] xsk_setsockopt+0x4e5/0x760 [ 3443.712274][ T9469] ? xsk_poll+0x680/0x680 [ 3443.716626][ T9469] ? __fget_files+0x28/0x4b0 [ 3443.721259][ T9469] ? __fget_files+0x28/0x4b0 [ 3443.725879][ T9469] ? aa_sock_opt_perm+0x74/0x100 [ 3443.730838][ T9469] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 3443.736450][ T9469] ? security_socket_setsockopt+0x7e/0xa0 [ 3443.742192][ T9469] ? xsk_poll+0x680/0x680 [ 3443.746546][ T9469] do_sock_setsockopt+0x175/0x1a0 [ 3443.751602][ T9469] ? __fdget+0x180/0x210 [ 3443.755876][ T9469] __x64_sys_setsockopt+0x182/0x200 [ 3443.761103][ T9469] do_syscall_64+0x55/0xb0 [ 3443.765546][ T9469] ? clear_bhb_loop+0x40/0x90 [ 3443.770249][ T9469] ? clear_bhb_loop+0x40/0x90 [ 3443.774949][ T9469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3443.780874][ T9469] RIP: 0033:0x7f007239ce59 [ 3443.785313][ T9469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3443.804951][ T9469] RSP: 002b:00007f007330b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3443.813406][ T9469] RAX: ffffffffffffffda RBX: 00007f0072615fa0 RCX: 00007f007239ce59 [ 3443.821405][ T9469] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 3443.829414][ T9469] RBP: 00007f0072432d6f R08: 0000000000000004 R09: 0000000000000000 [ 3443.837414][ T9469] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 3443.845412][ T9469] R13: 00007f0072616038 R14: 00007f0072615fa0 R15: 00007fff44729cc8 [ 3443.853436][ T9469] [ 3443.892747][ T9469] Mem-Info: [ 3443.896101][ T9469] active_anon:5942 inactive_anon:0 isolated_anon:0 [ 3443.896101][ T9469] active_file:18355 inactive_file:42687 isolated_file:0 [ 3443.896101][ T9469] unevictable:768 dirty:176 writeback:0 [ 3443.896101][ T9469] slab_reclaimable:10576 slab_unreclaimable:97064 [ 3443.896101][ T9469] mapped:25383 shmem:1373 pagetables:611 [ 3443.896101][ T9469] sec_pagetables:0 bounce:0 [ 3443.896101][ T9469] kernel_misc_reclaimable:0 [ 3443.896101][ T9469] free:1331596 free_pcp:11002 free_cma:0 [ 3443.974117][ T9469] Node 0 active_anon:23768kB inactive_anon:0kB active_file:73420kB inactive_file:170544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101532kB dirty:704kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10560kB pagetables:2444kB sec_pagetables:0kB all_unreclaimable? no [ 3444.028890][ T9469] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3444.069334][ T9469] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3444.143649][ T9469] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 3444.149521][ T9469] Node 0 DMA32 free:1414248kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23832kB inactive_anon:0kB active_file:73420kB inactive_file:169728kB unevictable:1536kB writepending:704kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:28728kB local_pcp:14660kB free_cma:0kB [ 3444.186665][ T9469] lowmem_reserve[]: 0 0 0 0 0 [ 3444.191498][ T9469] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 3444.270968][ T9469] lowmem_reserve[]: 0 0 0 0 0 [ 3444.281096][ T9469] Node 1 Normal free:3896516kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15936kB local_pcp:8480kB free_cma:0kB [ 3444.349281][ T9469] lowmem_reserve[]: 0 0 0 0 0 [ 3444.364510][ T9469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3444.412505][ T9469] Node 0 DMA32: 619*4kB (U) 1773*8kB (UME) 2175*16kB (UME) 1146*32kB (UME) 689*64kB (UME) 743*128kB (UME) 188*256kB (UME) 171*512kB (UM) 65*1024kB (UME) 32*2048kB (UME) 226*4096kB (UM) = 1420804kB [ 3444.462612][ T9469] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3444.482140][ T9469] Node 1 Normal: 221*4kB (UME) 58*8kB (UME) 38*16kB (UME) 83*32kB (UME) 25*64kB (UE) 7*128kB (UME) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3896516kB [ 3444.544708][ T9469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3444.602484][ T9469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3444.612230][ T9469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3444.641063][ T9469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3444.683925][ T9469] 62415 total pagecache pages [ 3444.708696][ T9469] 0 pages in swap cache [ 3444.726842][ T9469] Free swap = 124728kB [ 3444.749710][ T9469] Total swap = 124996kB [ 3444.762235][ T9469] 2097051 pages RAM [ 3444.766120][ T9469] 0 pages HighMem/MovableOnly [ 3444.770834][ T9469] 416933 pages reserved [ 3444.796496][ T9469] 0 pages cma reserved [ 3445.152250][ T9265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3445.168288][ T9265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3445.185340][ T9265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3445.195288][ T9265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3445.224283][ T9265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3445.232002][ T9265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3445.295030][ T7421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3447.312544][ T9265] Bluetooth: hci3: command tx timeout [ 3448.341014][ T7421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3448.539052][ T7421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3449.091548][ T7421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3449.225209][ T9490] chnl_net:caif_netlink_parms(): no params data found [ 3449.368736][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state [ 3449.377407][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 3449.384851][ T9490] bridge_slave_0: entered allmulticast mode [ 3449.392604][ T9265] Bluetooth: hci3: command tx timeout [ 3449.394406][ T9490] bridge_slave_0: entered promiscuous mode [ 3449.507449][ T9490] bridge0: port 2(bridge_slave_1) entered blocking state [ 3449.576476][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 3449.612986][ T9490] bridge_slave_1: entered allmulticast mode [ 3449.639748][ T9490] bridge_slave_1: entered promiscuous mode [ 3449.855392][ T9490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3450.030638][ T9490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3450.168862][ T9490] team0: Port device team_slave_0 added [ 3450.298385][ T9490] team0: Port device team_slave_1 added [ 3450.409562][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3450.455128][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3450.488662][ T9490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3450.501746][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3450.509343][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3450.536478][ T9490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3450.600134][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.608224][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.036172][ T9490] hsr_slave_0: entered promiscuous mode [ 3451.081761][ T9490] hsr_slave_1: entered promiscuous mode [ 3451.482374][ T9265] Bluetooth: hci3: command tx timeout [ 3453.552361][ T9265] Bluetooth: hci3: command tx timeout [ 3455.173542][ T9601] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12011'. [ 3455.211489][ T9606] netlink: 'syz.4.12011': attribute type 12 has an invalid length. [ 3455.242744][ T9606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12011'. [ 3456.336963][ T9490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3456.799181][ T9490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3456.816922][ T9490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3456.843171][ T9490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3456.999411][ T7421] hsr_slave_0: left promiscuous mode [ 3457.022662][ T7421] hsr_slave_1: left promiscuous mode [ 3457.041529][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3457.051151][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3457.068696][ T7421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3457.079450][ T7421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3457.096101][ T7421] bridge_slave_1: left allmulticast mode [ 3457.101928][ T7421] bridge_slave_1: left promiscuous mode [ 3457.120356][ T7421] bridge0: port 2(bridge_slave_1) entered disabled state [ 3457.143466][ T7421] bridge_slave_0: left allmulticast mode [ 3457.159460][ T7421] bridge_slave_0: left promiscuous mode [ 3457.177282][ T7421] bridge0: port 1(bridge_slave_0) entered disabled state [ 3457.253401][ T9642] FAULT_INJECTION: forcing a failure. [ 3457.253401][ T9642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3457.268411][ T9642] CPU: 1 PID: 9642 Comm: syz.4.12021 Not tainted syzkaller #0 [ 3457.275940][ T9642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3457.286068][ T9642] Call Trace: [ 3457.289389][ T9642] [ 3457.292362][ T9642] dump_stack_lvl+0x18c/0x250 [ 3457.297120][ T9642] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3457.303336][ T9642] ? show_regs_print_info+0x20/0x20 [ 3457.308590][ T9642] ? load_image+0x420/0x420 [ 3457.313160][ T9642] should_fail_ex+0x39d/0x4d0 [ 3457.317899][ T9642] _copy_from_iter+0x1d9/0x12e0 [ 3457.322823][ T9642] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3457.329091][ T9642] ? 0xffffffff81000000 [ 3457.333297][ T9642] ? copyout_mc+0x70/0x70 [ 3457.337703][ T9642] ? __phys_addr_symbol+0x48/0x70 [ 3457.342784][ T9642] ? __check_object_size+0x506/0xa20 [ 3457.348119][ T9642] netlink_sendmsg+0x76b/0xbf0 [ 3457.352941][ T9642] ? netlink_getsockopt+0x590/0x590 [ 3457.358185][ T9642] ? ____sys_sendmsg+0xa1/0x960 [ 3457.363110][ T9642] ? aa_sock_msg_perm+0x94/0x150 [ 3457.368108][ T9642] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3457.373453][ T9642] ? security_socket_sendmsg+0x80/0xa0 [ 3457.378955][ T9642] ? netlink_getsockopt+0x590/0x590 [ 3457.384191][ T9642] ____sys_sendmsg+0x5ba/0x960 [ 3457.388997][ T9642] ? __asan_memset+0x22/0x40 [ 3457.393640][ T9642] ? __sys_sendmsg_sock+0x30/0x30 [ 3457.398694][ T9642] ? __import_iovec+0x5f2/0x850 [ 3457.403593][ T9642] ? import_iovec+0x73/0xa0 [ 3457.408125][ T9642] ___sys_sendmsg+0x2a6/0x360 [ 3457.412841][ T9642] ? __sys_sendmsg+0x2a0/0x2a0 [ 3457.417653][ T9642] ? trace_call_bpf+0xc3/0x6c0 [ 3457.422455][ T9642] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 3457.428761][ T9642] __se_sys_sendmsg+0x1c2/0x2b0 [ 3457.433646][ T9642] ? __x64_sys_sendmsg+0x80/0x80 [ 3457.438618][ T9642] ? lockdep_hardirqs_on+0x98/0x150 [ 3457.443854][ T9642] do_syscall_64+0x55/0xb0 [ 3457.448298][ T9642] ? clear_bhb_loop+0x40/0x90 [ 3457.453024][ T9642] ? clear_bhb_loop+0x40/0x90 [ 3457.457726][ T9642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3457.463676][ T9642] RIP: 0033:0x7f007239ce59 [ 3457.468118][ T9642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3457.487750][ T9642] RSP: 002b:00007f007330b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3457.496203][ T9642] RAX: ffffffffffffffda RBX: 00007f0072615fa0 RCX: 00007f007239ce59 [ 3457.504198][ T9642] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3457.512221][ T9642] RBP: 00007f007330b090 R08: 0000000000000000 R09: 0000000000000000 [ 3457.520219][ T9642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3457.528212][ T9642] R13: 00007f0072616038 R14: 00007f0072615fa0 R15: 00007fff44729cc8 [ 3457.536223][ T9642] [ 3457.638655][ T7421] veth1_macvtap: left promiscuous mode [ 3457.647152][ T7421] veth0_macvtap: left promiscuous mode [ 3457.660021][ T7421] veth1_vlan: left promiscuous mode [ 3457.677183][ T7421] veth0_vlan: left promiscuous mode [ 3458.226288][ T7421] team0 (unregistering): Port device virt_wifi0 removed [ 3458.491981][ T7421] team0 (unregistering): Port device team_slave_1 removed [ 3458.539647][ T7421] team0 (unregistering): Port device team_slave_0 removed [ 3459.040642][ T9638] netlink: 'syz.2.12019': attribute type 21 has an invalid length. [ 3459.048726][ T9638] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12019'. [ 3459.058466][ T9638] netlink: 'syz.2.12019': attribute type 4 has an invalid length. [ 3459.067575][ T9638] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12019'. [ 3459.084613][ T9655] netlink: 'syz.4.12023': attribute type 10 has an invalid length. [ 3459.126940][ T9655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12023'. [ 3459.142241][ T9655] team0: entered promiscuous mode [ 3459.147337][ T9655] team_slave_0: entered promiscuous mode [ 3459.158860][ T9655] team_slave_1: entered promiscuous mode [ 3459.164997][ T9655] virt_wifi0: entered promiscuous mode [ 3459.171192][ T9655] team0: entered allmulticast mode [ 3459.181831][ T9655] team_slave_0: entered allmulticast mode [ 3459.202325][ T9655] team_slave_1: entered allmulticast mode [ 3459.208123][ T9655] virt_wifi0: entered allmulticast mode [ 3459.221988][ T9655] bridge0: port 3(team0) entered blocking state [ 3459.228516][ T9655] bridge0: port 3(team0) entered disabled state [ 3459.248327][ T9655] bridge0: port 3(team0) entered blocking state [ 3459.254827][ T9655] bridge0: port 3(team0) entered forwarding state [ 3459.380739][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3459.518448][ T9490] 8021q: adding VLAN 0 to HW filter on device team0 [ 3459.610104][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state [ 3459.617375][ T7412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3459.663592][ T9662] netlink: 'syz.3.12025': attribute type 10 has an invalid length. [ 3459.692838][ T9662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12025'. [ 3459.763513][ T7415] bridge0: port 2(bridge_slave_1) entered blocking state [ 3459.770769][ T7415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3460.242785][ T9682] netlink: 'syz.2.12028': attribute type 3 has an invalid length. [ 3460.272349][ T9682] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.12028'. [ 3460.718047][ T9490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3460.934013][ T9490] veth0_vlan: entered promiscuous mode [ 3461.029728][ T9490] veth1_vlan: entered promiscuous mode [ 3461.158616][ T9490] veth0_macvtap: entered promiscuous mode [ 3461.238339][ T9490] veth1_macvtap: entered promiscuous mode [ 3461.328446][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3461.371920][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.388215][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3461.399026][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.409173][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3461.420638][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.474530][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3461.495248][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3461.532158][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.542048][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3461.605359][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.626283][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3461.674457][ T9723] netlink: 'syz.4.12038': attribute type 2 has an invalid length. [ 3461.700108][ T9723] netlink: 'syz.4.12038': attribute type 1 has an invalid length. [ 3461.708472][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.726773][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3461.735794][ T9723] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12038'. [ 3461.853206][ T9490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3461.862017][ T9490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3461.922540][ T9490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3461.959025][ T9490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3462.255595][ T7416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3462.280107][ T7416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3462.370000][ T7414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3462.406023][ T7414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3462.424964][ T9738] netlink: 'syz.4.12041': attribute type 21 has an invalid length. [ 3462.452897][ T9738] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12041'. [ 3462.482847][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12041'. [ 3462.515845][ T9744] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12041'. [ 3463.422624][ T9766] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12046'. [ 3463.444514][ T9766] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 3463.547892][ T9768] FAULT_INJECTION: forcing a failure. [ 3463.547892][ T9768] name failslab, interval 1, probability 0, space 0, times 0 [ 3463.561087][ T9768] CPU: 1 PID: 9768 Comm: syz.4.12047 Not tainted syzkaller #0 [ 3463.568603][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3463.578723][ T9768] Call Trace: [ 3463.582059][ T9768] [ 3463.585042][ T9768] dump_stack_lvl+0x18c/0x250 [ 3463.589776][ T9768] ? lockdep_hardirqs_on+0x98/0x150 [ 3463.595036][ T9768] ? show_regs_print_info+0x20/0x20 [ 3463.600297][ T9768] ? _printk+0x123/0x130 [ 3463.604582][ T9768] should_fail_ex+0x39d/0x4d0 [ 3463.609329][ T9768] should_failslab+0x9/0x20 [ 3463.613895][ T9768] slab_pre_alloc_hook+0x59/0x310 [ 3463.619073][ T9768] kmem_cache_alloc+0x5a/0x2d0 [ 3463.623910][ T9768] ? radix_tree_node_alloc+0x7e/0x3a0 [ 3463.629383][ T9768] radix_tree_node_alloc+0x7e/0x3a0 [ 3463.634651][ T9768] idr_get_free+0x2b3/0xa60 [ 3463.639243][ T9768] idr_alloc_cyclic+0x27b/0x5d0 [ 3463.644181][ T9768] ? idr_alloc+0x2f0/0x2f0 [ 3463.648668][ T9768] ? do_raw_spin_lock+0x11f/0x2c0 [ 3463.653764][ T9768] ? __radix_tree_preload+0x82/0x880 [ 3463.659103][ T9768] ? bpf_link_prime+0x4c/0x1d0 [ 3463.663913][ T9768] bpf_link_prime+0x6b/0x1d0 [ 3463.668586][ T9768] bpf_xdp_link_attach+0x260/0x730 [ 3463.673761][ T9768] ? dev_xdp_prog+0x100/0x100 [ 3463.678536][ T9768] ? attach_type_to_prog_type+0x330/0x3a0 [ 3463.684317][ T9768] ? bpf_prog_attach_check_attach_type+0x2d8/0x440 [ 3463.690909][ T9768] link_create+0x3ff/0x720 [ 3463.695387][ T9768] __sys_bpf+0x4d7/0x890 [ 3463.699685][ T9768] ? bpf_link_show_fdinfo+0x390/0x390 [ 3463.705117][ T9768] ? lock_chain_count+0x20/0x20 [ 3463.710004][ T9768] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3463.716073][ T9768] __x64_sys_bpf+0x7c/0x90 [ 3463.720545][ T9768] do_syscall_64+0x55/0xb0 [ 3463.725013][ T9768] ? clear_bhb_loop+0x40/0x90 [ 3463.729732][ T9768] ? clear_bhb_loop+0x40/0x90 [ 3463.734456][ T9768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3463.740402][ T9768] RIP: 0033:0x7f007239ce59 [ 3463.744890][ T9768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3463.764547][ T9768] RSP: 002b:00007f00732ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3463.773026][ T9768] RAX: ffffffffffffffda RBX: 00007f0072616090 RCX: 00007f007239ce59 [ 3463.781043][ T9768] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 3463.789067][ T9768] RBP: 00007f00732ea090 R08: 0000000000000000 R09: 0000000000000000 [ 3463.797088][ T9768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3463.805110][ T9768] R13: 00007f0072616128 R14: 00007f0072616090 R15: 00007fff44729cc8 [ 3463.813145][ T9768] [ 3467.068687][ T1108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3467.079475][ T1108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3467.092347][ T1108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3467.102015][ T1108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3467.114742][ T1108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3467.123287][ T1108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3467.794710][ T9816] chnl_net:caif_netlink_parms(): no params data found [ 3467.937260][ T9816] bridge0: port 1(bridge_slave_0) entered blocking state [ 3467.944765][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 3467.952020][ T9816] bridge_slave_0: entered allmulticast mode [ 3467.960541][ T9816] bridge_slave_0: entered promiscuous mode [ 3467.970717][ T9816] bridge0: port 2(bridge_slave_1) entered blocking state [ 3467.978155][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state [ 3467.985732][ T9816] bridge_slave_1: entered allmulticast mode [ 3467.995894][ T9816] bridge_slave_1: entered promiscuous mode [ 3468.309057][ T7414] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3468.836268][ T9816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3468.869131][ T9816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3469.169811][ T7414] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3469.233692][ T1108] Bluetooth: hci2: command tx timeout [ 3469.330818][ T9816] team0: Port device team_slave_0 added [ 3469.415714][ T7414] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3469.439149][ T9816] team0: Port device team_slave_1 added [ 3469.584176][ T7414] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3469.631194][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3469.645146][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3469.671805][ T9816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3469.687190][ T9816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3469.694563][ T9816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3469.742276][ T9816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3471.322412][ T1108] Bluetooth: hci2: command tx timeout [ 3472.875996][ T9816] hsr_slave_0: entered promiscuous mode [ 3472.889668][ T9816] hsr_slave_1: entered promiscuous mode [ 3472.896678][ T9816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3472.906583][ T9816] Cannot create hsr debugfs directory [ 3473.392523][ T1108] Bluetooth: hci2: command tx timeout [ 3474.580886][ T9913] FAULT_INJECTION: forcing a failure. [ 3474.580886][ T9913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3474.682735][ T9913] CPU: 1 PID: 9913 Comm: syz.4.12078 Not tainted syzkaller #0 [ 3474.690281][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3474.700382][ T9913] Call Trace: [ 3474.703707][ T9913] [ 3474.706698][ T9913] dump_stack_lvl+0x18c/0x250 [ 3474.711436][ T9913] ? show_regs_print_info+0x20/0x20 [ 3474.716711][ T9913] ? load_image+0x420/0x420 [ 3474.721265][ T9913] ? __might_fault+0xaa/0x120 [ 3474.725990][ T9913] ? __lock_acquire+0x7d40/0x7d40 [ 3474.731084][ T9913] should_fail_ex+0x39d/0x4d0 [ 3474.735832][ T9913] _copy_from_iter+0x1d9/0x12e0 [ 3474.740747][ T9913] ? slab_post_alloc_hook+0x8a/0x4b0 [ 3474.746104][ T9913] ? __virt_addr_valid+0x18c/0x540 [ 3474.751280][ T9913] ? __lock_acquire+0x7d40/0x7d40 [ 3474.756427][ T9913] ? rcu_is_watching+0x15/0xb0 [ 3474.761250][ T9913] ? copyout_mc+0x70/0x70 [ 3474.765634][ T9913] ? __virt_addr_valid+0x18c/0x540 [ 3474.770832][ T9913] ? __virt_addr_valid+0x18c/0x540 [ 3474.775985][ T9913] ? __virt_addr_valid+0x469/0x540 [ 3474.781131][ T9913] ? __check_object_size+0x506/0xa20 [ 3474.786462][ T9913] netlink_sendmsg+0x76b/0xbf0 [ 3474.791280][ T9913] ? netlink_getsockopt+0x590/0x590 [ 3474.796529][ T9913] ? aa_sock_msg_perm+0x94/0x150 [ 3474.801526][ T9913] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3474.806893][ T9913] ? security_socket_sendmsg+0x80/0xa0 [ 3474.812381][ T9913] ? netlink_getsockopt+0x590/0x590 [ 3474.817603][ T9913] ____sys_sendmsg+0x5ba/0x960 [ 3474.822398][ T9913] ? __asan_memset+0x22/0x40 [ 3474.827013][ T9913] ? __sys_sendmsg_sock+0x30/0x30 [ 3474.832079][ T9913] ? __import_iovec+0x5f2/0x850 [ 3474.836985][ T9913] ? import_iovec+0x73/0xa0 [ 3474.841518][ T9913] ___sys_sendmsg+0x2a6/0x360 [ 3474.846247][ T9913] ? __sys_sendmsg+0x2a0/0x2a0 [ 3474.851061][ T9913] ? trace_call_bpf+0xc3/0x6c0 [ 3474.855884][ T9913] __se_sys_sendmsg+0x1c2/0x2b0 [ 3474.860774][ T9913] ? __x64_sys_sendmsg+0x80/0x80 [ 3474.865767][ T9913] ? lockdep_hardirqs_on+0x98/0x150 [ 3474.871002][ T9913] do_syscall_64+0x55/0xb0 [ 3474.875455][ T9913] ? clear_bhb_loop+0x40/0x90 [ 3474.880145][ T9913] ? clear_bhb_loop+0x40/0x90 [ 3474.884840][ T9913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3474.890763][ T9913] RIP: 0033:0x7f007239ce59 [ 3474.895204][ T9913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3474.914842][ T9913] RSP: 002b:00007f007330b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3474.923293][ T9913] RAX: ffffffffffffffda RBX: 00007f0072615fa0 RCX: 00007f007239ce59 [ 3474.931303][ T9913] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3474.939316][ T9913] RBP: 00007f007330b090 R08: 0000000000000000 R09: 0000000000000000 [ 3474.947317][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3474.955318][ T9913] R13: 00007f0072616038 R14: 00007f0072615fa0 R15: 00007fff44729cc8 [ 3474.963326][ T9913] [ 3475.124756][ T9917] netlink: 'syz.3.12077': attribute type 1 has an invalid length. [ 3475.153361][ T9917] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.12077'. [ 3475.472916][ T1108] Bluetooth: hci2: command tx timeout [ 3478.500085][ T9816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3478.540173][ T9816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3478.643518][ T9816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3478.688409][ T9816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3478.987003][ T9935] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.12083'. [ 3479.007863][ T9943] netlink: 'syz.3.12083': attribute type 7 has an invalid length. [ 3479.022712][ T9943] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.12083'. [ 3479.361900][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3479.509895][ T9960] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12087'. [ 3479.537193][ T9962] netlink: 'syz.4.12088': attribute type 1 has an invalid length. [ 3479.571737][ T9962] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.12088'. [ 3479.650798][ T9962] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12088'. [ 3479.687879][ T9816] 8021q: adding VLAN 0 to HW filter on device team0 [ 3479.718503][ T7415] bridge0: port 1(bridge_slave_0) entered blocking state [ 3479.725753][ T7415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3479.776702][ T7414] [ 3479.779103][ T7414] ====================================================== [ 3479.786157][ T7414] WARNING: possible circular locking dependency detected [ 3479.793207][ T7414] syzkaller #0 Not tainted [ 3479.797631][ T7414] ------------------------------------------------------ [ 3479.804661][ T7414] kworker/u4:10/7414 is trying to acquire lock: [ 3479.810905][ T7414] ffff8880314fcd80 (team->team_lock_key#18){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 3479.820606][ T7414] [ 3479.820606][ T7414] but task is already holding lock: [ 3479.827977][ T7414] ffff88801bb00768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 3479.838426][ T7414] [ 3479.838426][ T7414] which lock already depends on the new lock. [ 3479.838426][ T7414] [ 3479.848837][ T7414] [ 3479.848837][ T7414] the existing dependency chain (in reverse order) is: [ 3479.857875][ T7414] [ 3479.857875][ T7414] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 3479.865645][ T7414] __mutex_lock+0x136/0xcc0 [ 3479.870697][ T7414] ieee80211_open+0x144/0x200 [ 3479.875930][ T7414] __dev_open+0x2cb/0x430 [ 3479.880810][ T7414] dev_open+0xab/0x190 [ 3479.885426][ T7414] team_add_slave+0x75f/0x29a0 [ 3479.890847][ T7414] do_setlink+0xdfe/0x4130 [ 3479.895887][ T7414] rtnl_newlink+0x17da/0x20a0 [ 3479.901126][ T7414] rtnetlink_rcv_msg+0x869/0xfa0 [ 3479.906617][ T7414] netlink_rcv_skb+0x241/0x4d0 [ 3479.911937][ T7414] netlink_unicast+0x751/0x8d0 [ 3479.917233][ T7414] netlink_sendmsg+0x8d0/0xbf0 [ 3479.922534][ T7414] ____sys_sendmsg+0x5ba/0x960 [ 3479.927855][ T7414] ___sys_sendmsg+0x2a6/0x360 [ 3479.933077][ T7414] __se_sys_sendmsg+0x1c2/0x2b0 [ 3479.938466][ T7414] do_syscall_64+0x55/0xb0 [ 3479.943509][ T7414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3479.949957][ T7414] [ 3479.949957][ T7414] -> #0 (team->team_lock_key#18){+.+.}-{3:3}: [ 3479.958237][ T7414] __lock_acquire+0x2df1/0x7d40 [ 3479.963650][ T7414] lock_acquire+0x19e/0x420 [ 3479.968686][ T7414] __mutex_lock+0x136/0xcc0 [ 3479.973729][ T7414] team_del_slave+0x32/0x1c0 [ 3479.978866][ T7414] team_device_event+0x28d/0xa20 [ 3479.984341][ T7414] notifier_call_chain+0x197/0x380 [ 3479.989998][ T7414] unregister_netdevice_many_notify+0x100d/0x1900 [ 3479.996954][ T7414] unregister_netdevice_queue+0x32c/0x370 [ 3480.003212][ T7414] _cfg80211_unregister_wdev+0x16b/0x580 [ 3480.009467][ T7414] ieee80211_remove_interfaces+0x49e/0x690 [ 3480.015816][ T7414] ieee80211_unregister_hw+0x5d/0x2a0 [ 3480.021732][ T7414] mac80211_hwsim_del_radio+0x289/0x480 [ 3480.027841][ T7414] hwsim_exit_net+0x58d/0x650 [ 3480.033086][ T7414] cleanup_net+0x70a/0xbb0 [ 3480.038050][ T7414] process_scheduled_works+0xa5d/0x15d0 [ 3480.044138][ T7414] worker_thread+0xa55/0xfc0 [ 3480.049266][ T7414] kthread+0x2fa/0x390 [ 3480.053869][ T7414] ret_from_fork+0x48/0x80 [ 3480.058824][ T7414] ret_from_fork_asm+0x11/0x20 [ 3480.064148][ T7414] [ 3480.064148][ T7414] other info that might help us debug this: [ 3480.064148][ T7414] [ 3480.074387][ T7414] Possible unsafe locking scenario: [ 3480.074387][ T7414] [ 3480.081883][ T7414] CPU0 CPU1 [ 3480.087268][ T7414] ---- ---- [ 3480.092646][ T7414] lock(&rdev->wiphy.mtx); [ 3480.097169][ T7414] lock(team->team_lock_key#18); [ 3480.104737][ T7414] lock(&rdev->wiphy.mtx); [ 3480.111793][ T7414] lock(team->team_lock_key#18); [ 3480.116860][ T7414] [ 3480.116860][ T7414] *** DEADLOCK *** [ 3480.116860][ T7414] [ 3480.125014][ T7414] 5 locks held by kworker/u4:10/7414: [ 3480.130389][ T7414] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 3480.141290][ T7414] #1: ffffc9000ca27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 3480.151835][ T7414] #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 3480.161264][ T7414] #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 3480.171126][ T7414] #4: ffff88801bb00768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 3480.181942][ T7414] [ 3480.181942][ T7414] stack backtrace: [ 3480.187843][ T7414] CPU: 0 PID: 7414 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 3480.195514][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3480.205599][ T7414] Workqueue: netns cleanup_net [ 3480.210403][ T7414] Call Trace: [ 3480.213709][ T7414] [ 3480.216685][ T7414] dump_stack_lvl+0x18c/0x250 [ 3480.221391][ T7414] ? load_image+0x420/0x420 [ 3480.225930][ T7414] ? show_regs_print_info+0x20/0x20 [ 3480.231145][ T7414] ? print_circular_bug+0x12b/0x1a0 [ 3480.236363][ T7414] check_noncircular+0x2fc/0x400 [ 3480.241327][ T7414] ? print_deadlock_bug+0x5d0/0x5d0 [ 3480.246546][ T7414] ? lockdep_lock+0xf5/0x230 [ 3480.251155][ T7414] ? __lock_acquire+0x1273/0x7d40 [ 3480.256205][ T7414] ? _find_first_zero_bit+0xd3/0x100 [ 3480.261524][ T7414] __lock_acquire+0x2df1/0x7d40 [ 3480.266410][ T7414] ? verify_lock_unused+0x140/0x140 [ 3480.271629][ T7414] ? verify_lock_unused+0x140/0x140 [ 3480.276855][ T7414] lock_acquire+0x19e/0x420 [ 3480.281378][ T7414] ? team_del_slave+0x32/0x1c0 [ 3480.286165][ T7414] ? __might_sleep+0xe0/0xe0 [ 3480.290790][ T7414] ? read_lock_is_recursive+0x20/0x20 [ 3480.296208][ T7414] __mutex_lock+0x136/0xcc0 [ 3480.300754][ T7414] ? team_del_slave+0x32/0x1c0 [ 3480.305538][ T7414] ? __lock_acquire+0x7d40/0x7d40 [ 3480.310588][ T7414] ? rcu_is_watching+0x15/0xb0 [ 3480.315405][ T7414] ? trace_contention_end+0x39/0xe0 [ 3480.320627][ T7414] ? __mutex_lock+0x315/0xcc0 [ 3480.325345][ T7414] ? team_del_slave+0x32/0x1c0 [ 3480.330129][ T7414] ? mutex_lock_nested+0x20/0x20 [ 3480.335082][ T7414] ? bond_netdev_event+0xeb/0xf20 [ 3480.340133][ T7414] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 3480.345829][ T7414] team_del_slave+0x32/0x1c0 [ 3480.350495][ T7414] team_device_event+0x28d/0xa20 [ 3480.355460][ T7414] notifier_call_chain+0x197/0x380 [ 3480.360610][ T7414] unregister_netdevice_many_notify+0x100d/0x1900 [ 3480.367051][ T7414] ? lock_chain_count+0x20/0x20 [ 3480.371928][ T7414] ? unregister_netdevice_many+0x20/0x20 [ 3480.377587][ T7414] ? kernfs_remove_by_name_ns+0x117/0x150 [ 3480.383342][ T7414] ? __lock_acquire+0x7d40/0x7d40 [ 3480.388387][ T7414] unregister_netdevice_queue+0x32c/0x370 [ 3480.394143][ T7414] ? list_netdevice+0x730/0x730 [ 3480.399030][ T7414] ? kernfs_remove_by_name_ns+0x117/0x150 [ 3480.404805][ T7414] _cfg80211_unregister_wdev+0x16b/0x580 [ 3480.410520][ T7414] ieee80211_remove_interfaces+0x49e/0x690 [ 3480.416354][ T7414] ? ieee80211_do_stop+0x1e20/0x1e20 [ 3480.421659][ T7414] ? rcu_is_watching+0x15/0xb0 [ 3480.426442][ T7414] ieee80211_unregister_hw+0x5d/0x2a0 [ 3480.431844][ T7414] mac80211_hwsim_del_radio+0x289/0x480 [ 3480.437409][ T7414] ? rhashtable_remove_fast+0xc00/0xc00 [ 3480.442979][ T7414] hwsim_exit_net+0x58d/0x650 [ 3480.447691][ T7414] ? hwsim_init_net+0x90/0x90 [ 3480.452395][ T7414] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 3480.458309][ T7414] cleanup_net+0x70a/0xbb0 [ 3480.462791][ T7414] ? ops_free_list+0x3b0/0x3b0 [ 3480.467594][ T7414] ? _raw_spin_unlock_irq+0x23/0x50 [ 3480.472848][ T7414] ? process_scheduled_works+0x96f/0x15d0 [ 3480.478581][ T7414] ? process_scheduled_works+0x96f/0x15d0 [ 3480.484315][ T7414] process_scheduled_works+0xa5d/0x15d0 [ 3480.489890][ T7414] ? worker_attach_to_pool+0x380/0x380 [ 3480.495389][ T7414] ? assign_work+0x3d2/0x5d0 [ 3480.500009][ T7414] worker_thread+0xa55/0xfc0 [ 3480.504618][ T7414] kthread+0x2fa/0x390 [ 3480.508698][ T7414] ? pr_cont_work+0x560/0x560 [ 3480.513397][ T7414] ? kthread_blkcg+0xd0/0xd0 [ 3480.518008][ T7414] ret_from_fork+0x48/0x80 [ 3480.522443][ T7414] ? kthread_blkcg+0xd0/0xd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3480.527044][ T7414] ret_from_fork_asm+0x11/0x20 [ 3480.531837][ T7414] [ 3480.543608][ T7414] team0: Port device wlan1 removed [ 3481.132746][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3481.140201][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3481.178415][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3481.186099][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3481.207637][ T7414] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 3481.232441][ T7414] batman_adv: batadv0: Removing interface: veth0_vlan [ 3481.244328][ T7414] bridge_slave_1: left allmulticast mode [ 3481.250084][ T7414] bridge_slave_1: left promiscuous mode [ 3481.262524][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 3481.273825][ T7414] bridge_slave_0: left allmulticast mode [ 3481.279493][ T7414] bridge_slave_0: left promiscuous mode [ 3481.295884][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 3481.306111][ T7414] veth0_macvtap: left promiscuous mode [ 3481.311688][ T7414] veth1_vlan: left promiscuous mode [ 3481.318165][ T7414] veth0_vlan: left promiscuous mode [ 3481.531548][ T7414] team0 (unregistering): Port device virt_wifi0 removed [ 3481.617708][ T7414] team0 (unregistering): Port device team_slave_1 removed [ 3481.650203][ T7414] team0 (unregistering): Port device C removed [ 3482.481534][ T7414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3482.537504][ T7414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3482.580317][ T7414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3482.637804][ T7414] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3482.739151][ T7414] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3482.814857][ T7414] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3482.889425][ T7414] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3482.947697][ T7414] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3483.334911][ T7414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3483.390223][ T7414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3483.470189][ T7414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3483.535020][ T7414] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3485.014170][ T7414] hsr_slave_0: left promiscuous mode [ 3485.020468][ T7414] hsr_slave_1: left promiscuous mode [ 3485.028728][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3485.036452][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3485.044625][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3485.052288][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3485.060215][ T7414] bridge_slave_1: left allmulticast mode [ 3485.072173][ T7414] bridge_slave_1: left promiscuous mode [ 3485.077934][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 3485.089973][ T7414] bridge_slave_0: left allmulticast mode [ 3485.095871][ T7414] bridge_slave_0: left promiscuous mode [ 3485.101598][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 3485.115107][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3485.123419][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3485.131199][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3485.140443][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3485.148576][ T7414] bridge0: port 3(team0) entered disabled state [ 3485.156939][ T7414] bridge_slave_1: left allmulticast mode [ 3485.162757][ T7414] bridge_slave_1: left promiscuous mode [ 3485.168471][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 3485.177889][ T7414] bridge_slave_0: left allmulticast mode [ 3485.183827][ T7414] bridge_slave_0: left promiscuous mode [ 3485.189545][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 3485.204211][ T7414] hsr_slave_0: left promiscuous mode [ 3485.210172][ T7414] hsr_slave_1: left promiscuous mode [ 3485.216477][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3485.224397][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3485.232589][ T7414] bridge_slave_1: left allmulticast mode [ 3485.238283][ T7414] bridge_slave_1: left promiscuous mode [ 3485.245922][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 3485.255207][ T7414] bridge_slave_0: left allmulticast mode [ 3485.260896][ T7414] bridge_slave_0: left promiscuous mode [ 3485.267180][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 3485.281116][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3485.288694][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3485.298405][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3485.305877][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3485.313635][ T7414] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 3485.320685][ T7414] batman_adv: batadv0: Removing interface: veth0_vlan [ 3485.328131][ T7414] bridge_slave_1: left allmulticast mode [ 3485.333870][ T7414] bridge_slave_1: left promiscuous mode [ 3485.339526][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 3485.347920][ T7414] bridge_slave_0: left allmulticast mode [ 3485.353653][ T7414] bridge_slave_0: left promiscuous mode [ 3485.359324][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 3485.373383][ T7414] veth1_macvtap: left promiscuous mode [ 3485.378923][ T7414] veth0_macvtap: left promiscuous mode [ 3485.385257][ T7414] veth1_vlan: left promiscuous mode [ 3485.390536][ T7414] veth0_vlan: left promiscuous mode [ 3485.397062][ T7414] veth1_macvtap: left promiscuous mode [ 3485.402719][ T7414] veth0_macvtap: left promiscuous mode [ 3485.408296][ T7414] veth1_vlan: left promiscuous mode [ 3485.413670][ T7414] veth0_vlan: left promiscuous mode [ 3485.420299][ T7414] veth1_macvtap: left promiscuous mode [ 3485.426150][ T7414] veth0_macvtap: left promiscuous mode [ 3485.431710][ T7414] veth1_vlan: left promiscuous mode [ 3485.438704][ T7414] veth0_vlan: left promiscuous mode [ 3485.803843][ T7414] team0 (unregistering): Port device team_slave_1 removed [ 3485.838503][ T7414] team0 (unregistering): Port device team_slave_0 removed [ 3485.866143][ T7414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3485.895546][ T7414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3485.971549][ T7414] bond0 (unregistering): Released all slaves [ 3486.100027][ T7414] virt_wifi0 (unregistering): left promiscuous mode [ 3486.110805][ T7414] virt_wifi0 (unregistering): left allmulticast mode [ 3486.119668][ T7414] team0 (unregistering): Port device virt_wifi0 removed [ 3486.191916][ T7414] team_slave_1 (unregistering): left promiscuous mode [ 3486.199977][ T7414] team_slave_1 (unregistering): left allmulticast mode [ 3486.207649][ T7414] team0 (unregistering): Port device team_slave_1 removed [ 3486.233315][ T7414] team_slave_0 (unregistering): left promiscuous mode [ 3486.240111][ T7414] team_slave_0 (unregistering): left allmulticast mode [ 3486.248147][ T7414] team0 (unregistering): Port device team_slave_0 removed [ 3486.277034][ T7414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3486.308496][ T7414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3486.406311][ T7414] bond0 (unregistering): Released all slaves [ 3486.585535][ T7414] team0 (unregistering): Port device team_slave_1 removed [ 3486.617485][ T7414] team0 (unregistering): Port device team_slave_0 removed [ 3486.629888][ T7414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3486.646969][ T7414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3486.719889][ T7414] bond0 (unregistering): Released all slaves [ 3486.845955][ T7414] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 3486.920911][ T7414] team0 (unregistering): Port device virt_wifi0 removed [ 3486.971323][ T7414] team0 (unregistering): Port device team_slave_1 removed [ 3487.005644][ T7414] team0 (unregistering): Port device C removed [ 3487.030473][ T7414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3487.062328][ T7414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3487.182241][ T7414] bond0 (unregistering): Released all slaves