last executing test programs: 12m6.510757295s ago: executing program 4 (id=5): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000077215f926d95a8c8f4216bb39e3a66456393dd8e1f170253a9c28b1472670526ed10a55444667964c26de062563b429800326b41a11b9f218139524d91272518aa99fd9f147f7ab3bf1fe82602ff2b90df07b9a9ba047c548456521f7af41475176ee0d199a1d3168331cdc1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x28, 0x6, 0x0, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000010000000000000f03000000005f2a"], 0x0, 0x28}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000580), &(0x7f00000005c0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 12m2.977838671s ago: executing program 4 (id=10): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m59.787628528s ago: executing program 4 (id=14): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x0, 0xfffffffffffffbf4, 0x0, 0x0, 0x401, 0x400, 0x0, 0x0, 0x0, 0x20, 0x1a17}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x4) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000), 0x4) 11m44.302418861s ago: executing program 32 (id=14): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x0, 0xfffffffffffffbf4, 0x0, 0x0, 0x401, 0x400, 0x0, 0x0, 0x0, 0x20, 0x1a17}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x4) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000), 0x4) 9m41.893497413s ago: executing program 3 (id=533): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xf, 0x0, 0x0, 0x5d31, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x443, 0x0, @perf_bp={0x0}, 0x0, 0x8004, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, &(0x7f0000000500), 0x4) bpf$MAP_CREATE(0x180, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r3}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbf74}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m41.286927447s ago: executing program 3 (id=538): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x11, 0x20000000000000a, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/90, 0xffa3}, {&(0x7f0000000100)=""/176, 0xb0}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f00000005c0)=""/217, 0xd9}], 0x4}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa6b2}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000340)=""/142, 0x0, 0x8e, 0x80001}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015001800142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="090000000400000009000000ff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x21}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040000) sendmsg$sock(r3, &(0x7f00000009c0)={&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000500)="cd9f000234ef818e0c323588fa3b7ea4ea4b5d8cafb88594cfde2b111b1b0638208c76e4b6793045a1591210635df66c9d7cf73822f3c74691151d10b320818c02abbc922238627d12c9f616bb1b10e4c361a3f6139376298c89eb6816aeb5bb8fb23c11b9d8d680edc1318be1b5d431ab7ca2729738b44d121964aa9c1d127ac42fce2b550dddbfac3d9f2a91f910a2758858da6c29a321565b2fd3ff8eeeb03b4eb3af08c37ac8b408bb98fc526c", 0xaf}, {&(0x7f00000005c0)="84f4a49c4dd8ee83ac2555110a52e5391a01386fda5dfc7900adbebf74d5a1f9b7ee494ac94bb40c2becc3236f2b8ff508166c539e4856a253dcca75d768a0348d5c616aeda28514a2d9b536bdd627b4b92e44ddd87b42bc49a656398622a61bcd79dfa1add07c8a960a3e37dfdff77019bcaf290ad04d6e31aa4194f318e7fc88fcd6e0f725f76b024def4d32ed816d63578064b95846151a533634e253dc845e10c1fc0ef11f30d91a6dc2fae2293ede24a1a1554b360fe756deb9d63e78a73943186626877b36adb4dba95170c9b0264042", 0xd3}, {&(0x7f0000000740)="596be4b1ce57e3c42c531799e84eaa90904abf9ef9115d72063b569b1e0cbda5230ebcea9e5b044e405b9aa5271aeaece3c944610412924fb81777a9adeb6cc74136e4cea2dec5e4dd92d42f44f8d0eb27530035cf4ea7501cb612a23dc246d39d9fc5094e39de09c1da65b4e86f3b6c8cadb848705bb3299a98c89822986ad1e049bae16517fec522f16309d44236b9dedca53861518c83857847e97a994d090d72ffcde1410a708368ffab368871fe2cf839a563332d", 0xb7}, {&(0x7f0000000800)="b9f313eba7e5993b6200729a2159893c53831ea237ff584cd42f81e4e3aff2dd879300428b1a2355b8d455ec66e52e86ca8edd2735252a62200372e5f1f7caef8bf0bc48acc8e18e471111d215eeecc1e9493309d689cc777b97d150e4e56fe9e639d14bcbbc5987607ab909f521d3aa326a2f9436492f0f77d299531694017c6c537dfd9ad8ad15552516d9433ecb5a8a0fe262397fe0a6e181ebb5588a13abbe293d22b77d29c77d922fe0f01dd975907ecce0e49c2fcd72c4973ce91957748a6d776238f0744845b59b", 0xcb}], 0x4, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6, 0x5f, 0x2, 0x4}]}) 9m37.633239375s ago: executing program 3 (id=547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000040)={'wlan1\x00', @local}) 9m37.206314176s ago: executing program 3 (id=549): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000510000009c0000000080000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x627}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x91}, [], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01, 0xee01}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @local}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x9, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x7, 0x3}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0x2, 0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0xa, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x62, 0x61]}}, 0x0, 0x8d}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x80000001) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 9m34.5278075s ago: executing program 3 (id=554): syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x404, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x5, 0x400, 0xb, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x8, 0x9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000a00)=ANY=[], 0x38}, 0x41) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000050003800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x4a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x854}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x12, '\x00', r7, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2a07f, 0xffffffffffffffff, 0xa, &(0x7f00000002c0)=[r5, r5, 0xffffffffffffffff, r8], &(0x7f0000000300)=[{0x4, 0x4, 0x5, 0x7}, {0x1, 0x4, 0x5, 0x4}, {0x0, 0x4, 0xa, 0xa}, {0x1, 0x5, 0xe, 0xa}, {0x3, 0x1, 0x1, 0x7}, {0x2, 0x5, 0xa, 0x2}, {0x1, 0x5, 0x1, 0x4}, {0xfffffffd, 0x4, 0x4, 0x5}, {0x2, 0x5, 0x2, 0x7}, {0x1, 0x5, 0x6, 0xc}], 0x10, 0x4}, 0x94) 9m33.368137768s ago: executing program 3 (id=560): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x2, 0x6, 0x81, 0x0, 0x0, 0x4a0d, 0x72080, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x80}, 0x0, 0x7, 0x401, 0x6, 0xc1a, 0x7f, 0x0, 0x0, 0x92f, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e002900", 0x24}, {&(0x7f0000000080)="e46c0000", 0x4}, {&(0x7f00000001c0)="22903ecc2c1c", 0x6}], 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x4c31}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="7f28b50cdb12ff8a0b31d1938415980e04", @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f00000007c0)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000840)="a247a61871c1d7330428157d3b2e7e4e7c63f065363d0bb7fab3d021b1c9f339233985c4200d6b84ea99508897204a41e617e2b34668dfefb6295fd7d18f0d55c1b6f7e8b9bddc4aa588e1bdd0", 0x4d}], 0x1}, 0x4800) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, 0x0, &(0x7f0000000100)}, 0x20) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x16, 0x1, 0x0, 0xf8, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x6303, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0xfffffffe, 0x0, 0x8004}, 0xffffffffffffffff, 0x0, r4, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x830d}, 0x20, 0x2, 0xfffffffe, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xffffffffffffffd0}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="61df718305a25997984d4763fcac", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m17.90982022s ago: executing program 33 (id=560): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x2, 0x6, 0x81, 0x0, 0x0, 0x4a0d, 0x72080, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x80}, 0x0, 0x7, 0x401, 0x6, 0xc1a, 0x7f, 0x0, 0x0, 0x92f, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e002900", 0x24}, {&(0x7f0000000080)="e46c0000", 0x4}, {&(0x7f00000001c0)="22903ecc2c1c", 0x6}], 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x4c31}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="7f28b50cdb12ff8a0b31d1938415980e04", @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f00000007c0)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000840)="a247a61871c1d7330428157d3b2e7e4e7c63f065363d0bb7fab3d021b1c9f339233985c4200d6b84ea99508897204a41e617e2b34668dfefb6295fd7d18f0d55c1b6f7e8b9bddc4aa588e1bdd0", 0x4d}], 0x1}, 0x4800) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, 0x0, &(0x7f0000000100)}, 0x20) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x16, 0x1, 0x0, 0xf8, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x6303, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0xfffffffe, 0x0, 0x8004}, 0xffffffffffffffff, 0x0, r4, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x830d}, 0x20, 0x2, 0xfffffffe, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xffffffffffffffd0}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="61df718305a25997984d4763fcac", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.430288821s ago: executing program 6 (id=3554): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x1, 0x6, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0xc}, 0x1c108, 0x3, 0x7f, 0x6, 0x7, 0x6, 0x2, 0x0, 0x3c}, 0x0, 0x2, 0xffffffffffffffff, 0x18) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') close(0x3) 12.412978461s ago: executing program 6 (id=3556): socket$kcm(0xa, 0x1, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$sock(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001900)="f4aa6a", 0x3}], 0x1}, 0x8001) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 12.256776965s ago: executing program 6 (id=3561): close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x602000, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047452, &(0x7f0000001200)) 11.971130692s ago: executing program 6 (id=3566): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x48000) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x3c, &(0x7f0000000040), 0xcf) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=0x1, 0x12, 0x1, 0x10000, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002ac0)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYBLOB, @ANYRESOCT], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000210000000000001ea3acf06587abced10000000000009500000000000000822bddf2a5277368bd4ef42cbcc001ca5a9eb6f97e9a42c575c7c1fbe9c6818d19a191253d1189780d0000000489ce9f1800000000d6ea4b521abaca7d0df74534d9f859a210"], 0x0, 0x5, 0xe2, &(0x7f00000002c0)=""/226}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r4 = perf_event_open(&(0x7f0000000240)={0x5, 0xc1, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0xc100, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x0, 0x0, 0x7, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, 0x0, &(0x7f00000001c0)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="8c"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) 8.998571753s ago: executing program 6 (id=3604): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x3, 0xe000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000180)={0xf, 0x80, 0xb, 0x2, 0x49, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000, 0x1}, 0x110010, 0x3, 0x40000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 8.832662537s ago: executing program 6 (id=3606): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x3f}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xc8, 0x0, 0x7, 0x4000000000, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc00000000000000000000000000007f"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 3.021674237s ago: executing program 2 (id=3669): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/209, 0xd1}, 0x40002000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0xea, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) 2.550802729s ago: executing program 0 (id=3675): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a800160005000140030000000360", 0x3e}], 0x1}, 0x40000f0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@restrict={0xf}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x20}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x4, 0x5}, @enum64={0x8, 0x1, 0x0, 0x13, 0x1, 0x0, [{0xd, 0x80000000, 0xd31}]}, @func={0x5, 0x0, 0x0, 0xc, 0x5}, @ptr={0x6}, @volatile={0x5, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61, 0x2e, 0x5f, 0x61]}}, &(0x7f00000007c0)=""/160, 0x92, 0xa0, 0x0, 0x5, 0x10000, @value=r1}, 0x28) write$cgroup_int(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0100eb000000000000"]) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0x2000000000000044, &(0x7f0000000280)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000002c0)={'syz_tun\x00', @random='D\x00\x00\x00(E'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001140)={&(0x7f0000000140)={0x2, 0xffff, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)}], 0x1}, 0x20040000) 1.465563305s ago: executing program 1 (id=3677): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x3, 0xe000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000180)={0xf, 0x80, 0xb, 0x2, 0x49, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000, 0x1}, 0x110010, 0x3, 0x40000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 1.412505096s ago: executing program 0 (id=3678): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x1, 0x6, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0xc}, 0x1c108, 0x3, 0x7f, 0x6, 0x7, 0x6, 0x2, 0x0, 0x3c}, 0x0, 0x2, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') close(0x3) 1.341602038s ago: executing program 2 (id=3679): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x7, 0x4, 0x6, 0x2, 0x0, 0x7fffffffffffffff, 0x53, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeda, 0x1, @perf_bp={&(0x7f0000000440), 0x5}, 0x610, 0x400000000000000, 0x0, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x114905, 0x8, 0x5, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x1, r0, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e2978296329cdae664315115bd5dc53136264f16bc9e986a0e5dceec59de7e11990f8a302c2e6213818896e645050f5ce1b2ca9d22974a534e44de0f4f8bf31a58aa3459b182446beffb012fe653e8f25231ec1dbcae747a0382ef6fe4cfebe503e66db579db5d1efc0320590830f84ace48ffd45830fa5bdd8b2bc388e531228a82c04592f02bfe7a0fd0a1dd14ecb46820661cb5bc7c9b260f2f542438cec3eafe5f22ec92201d0c60d8f8cba729", 0xaf}], 0x1}, 0x81) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 1.287852239s ago: executing program 5 (id=3680): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x3f}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xc8, 0x0, 0x7, 0x4000000000, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc00000000000000000000000000007f"], 0xfdef) 1.23808167s ago: executing program 0 (id=3681): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) 1.105803094s ago: executing program 5 (id=3682): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x3f}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xc8, 0x0, 0x7, 0x4000000000, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc00000000000000000000000000007f"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 1.100288164s ago: executing program 1 (id=3683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.030814805s ago: executing program 2 (id=3684): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.021281036s ago: executing program 0 (id=3685): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x1, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0xa, &(0x7f00000002c0), 0x4) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @mcast1, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a0012e2440102800200121f", 0x74}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xa, 0x0, &(0x7f0000000680)="b14b34c6dc80e53b0fe6", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94) r8 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xee, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) 861.47245ms ago: executing program 1 (id=3686): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x100, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x6, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4862}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 858.79367ms ago: executing program 5 (id=3687): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r1) 808.775841ms ago: executing program 2 (id=3688): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/209, 0xd1}, 0x40002000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0xea, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) 757.522462ms ago: executing program 5 (id=3689): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x602000, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047452, &(0x7f0000001200)) 588.066796ms ago: executing program 1 (id=3690): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x1, 0x6, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0xc}, 0x1c108, 0x3, 0x7f, 0x6, 0x7, 0x6, 0x2, 0x0, 0x3c}, 0x0, 0x2, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') close(0x3) 438.440979ms ago: executing program 1 (id=3691): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x3f}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xc8, 0x0, 0x7, 0x4000000000, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc00000000000000000000000000007f"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 415.46172ms ago: executing program 2 (id=3692): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x3, 0xe000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000180)={0xf, 0x80, 0xb, 0x2, 0x49, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000, 0x1}, 0x110010, 0x3, 0x40000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 351.551372ms ago: executing program 5 (id=3693): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x7, 0x4, 0x6, 0x2, 0x0, 0x7fffffffffffffff, 0x53, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeda, 0x1, @perf_bp={&(0x7f0000000440), 0x5}, 0x610, 0x400000000000000, 0x0, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x114905, 0x8, 0x5, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x1, r0, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e2978296329cdae664315115bd5dc53136264f16bc9e986a0e5dceec59de7e11990f8a302c2e6213818896e645050f5ce1b2ca9d22974a534e44de0f4f8bf31a58aa3459b182446beffb012fe653e8f25231ec1dbcae747a0382ef6fe4cfebe503e66db579db5d1efc0320590830f84ace48ffd45830fa5bdd8b2bc388e531228a82c04592f02bfe7a0fd0a1dd14ecb46820661cb5bc7c9b260f2f542438cec3eafe5f22ec92201d0c60d8f8cba729", 0xaf}], 0x1}, 0x81) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 216.649865ms ago: executing program 0 (id=3694): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) 80.810878ms ago: executing program 0 (id=3695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 63.311799ms ago: executing program 1 (id=3696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 62.335149ms ago: executing program 5 (id=3697): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 0s ago: executing program 2 (id=3698): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r1) kernel console output (not intermixed with test programs): d syzkaller #0 [ 628.346448][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 628.356543][T12055] Call Trace: [ 628.359859][T12055] [ 628.362844][T12055] dump_stack_lvl+0x188/0x250 [ 628.367573][T12055] ? show_regs_print_info+0x20/0x20 [ 628.372824][T12055] ? load_image+0x410/0x410 [ 628.377442][T12055] ? __lock_acquire+0x7b50/0x7b50 [ 628.382523][T12055] should_fail+0x383/0x4b0 [ 628.386998][T12055] _copy_from_user+0x2e/0x170 [ 628.391780][T12055] perf_copy_attr+0x167/0x820 [ 628.396719][T12055] __se_sys_perf_event_open+0xf5/0x1bb0 [ 628.402352][T12055] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 628.408060][T12055] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 628.413924][T12055] do_syscall_64+0x4c/0xa0 [ 628.418486][T12055] ? clear_bhb_loop+0x30/0x80 [ 628.423359][T12055] ? clear_bhb_loop+0x30/0x80 [ 628.428123][T12055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 628.434078][T12055] RIP: 0033:0x7ff02cd8de99 [ 628.438549][T12055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.458621][T12055] RSP: 002b:00007ff02afe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 628.467095][T12055] RAX: ffffffffffffffda RBX: 00007ff02d015fa0 RCX: 00007ff02cd8de99 [ 628.475121][T12055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080 [ 628.483186][T12055] RBP: 00007ff02afe6090 R08: 0000000000000009 R09: 0000000000000000 [ 628.491378][T12055] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 628.499397][T12055] R13: 00007ff02d016038 R14: 00007ff02d015fa0 R15: 00007fff1944d988 [ 628.507528][T12055] [ 629.455351][T12069] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.2557'. [ 629.628536][T12071] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2558'. [ 629.814330][T12078] FAULT_INJECTION: forcing a failure. [ 629.814330][T12078] name failslab, interval 1, probability 0, space 0, times 0 [ 629.863646][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.870080][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.914222][T12078] CPU: 1 PID: 12078 Comm: syz.0.2561 Not tainted syzkaller #0 [ 629.921877][T12078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 629.931982][T12078] Call Trace: [ 629.935302][T12078] [ 629.938266][T12078] dump_stack_lvl+0x188/0x250 [ 629.943006][T12078] ? show_regs_print_info+0x20/0x20 [ 629.948254][T12078] ? load_image+0x410/0x410 [ 629.952803][T12078] ? __lock_acquire+0x7b50/0x7b50 [ 629.957877][T12078] should_fail+0x383/0x4b0 [ 629.962341][T12078] should_failslab+0x5/0x20 [ 629.966888][T12078] slab_pre_alloc_hook+0x51/0xc0 [ 629.971867][T12078] ? getname_flags+0xb7/0x4f0 [ 629.976706][T12078] kmem_cache_alloc+0x3d/0x280 [ 629.981529][T12078] getname_flags+0xb7/0x4f0 [ 629.986088][T12078] do_sys_openat2+0xdd/0x500 [ 629.990735][T12078] ? do_sys_open+0xe0/0xe0 [ 629.995344][T12078] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.001669][T12078] __x64_sys_openat+0x135/0x160 [ 630.006585][T12078] do_syscall_64+0x4c/0xa0 [ 630.011111][T12078] ? clear_bhb_loop+0x30/0x80 [ 630.015859][T12078] ? clear_bhb_loop+0x30/0x80 [ 630.020591][T12078] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 630.026659][T12078] RIP: 0033:0x7ff02cd8de99 [ 630.031124][T12078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.050776][T12078] RSP: 002b:00007ff02afe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 630.059506][T12078] RAX: ffffffffffffffda RBX: 00007ff02d015fa0 RCX: 00007ff02cd8de99 [ 630.067563][T12078] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 630.075756][T12078] RBP: 00007ff02afe6090 R08: 0000000000000000 R09: 0000000000000000 [ 630.083762][T12078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.091854][T12078] R13: 00007ff02d016038 R14: 00007ff02d015fa0 R15: 00007fff1944d988 [ 630.099871][T12078] [ 630.141972][T12078] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.2561'. [ 630.716592][T12091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2563'. [ 630.810263][T12103] validate_nla: 13 callbacks suppressed [ 630.810284][T12103] netlink: 'syz.2.2566': attribute type 29 has an invalid length. [ 630.911605][T12103] netlink: 'syz.2.2566': attribute type 29 has an invalid length. [ 630.986427][T12099] netlink: 'syz.2.2566': attribute type 29 has an invalid length. [ 631.020145][T12110] netlink: 'syz.6.2567': attribute type 29 has an invalid length. [ 631.092018][T12110] netlink: 'syz.6.2567': attribute type 29 has an invalid length. [ 631.243123][T12111] netlink: 'syz.6.2567': attribute type 29 has an invalid length. [ 631.314094][T12108] netlink: 'syz.1.2568': attribute type 10 has an invalid length. [ 632.084479][T12125] FAULT_INJECTION: forcing a failure. [ 632.084479][T12125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.130766][T12125] CPU: 1 PID: 12125 Comm: syz.5.2574 Not tainted syzkaller #0 [ 632.138318][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 632.148566][T12125] Call Trace: [ 632.152163][T12125] [ 632.155180][T12125] dump_stack_lvl+0x188/0x250 [ 632.159999][T12125] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 632.166228][T12125] ? show_regs_print_info+0x20/0x20 [ 632.171487][T12125] ? load_image+0x410/0x410 [ 632.176052][T12125] should_fail+0x383/0x4b0 [ 632.180511][T12125] _copy_from_user+0x2e/0x170 [ 632.185238][T12125] __copy_msghdr_from_user+0xc9/0x630 [ 632.190659][T12125] ? verify_lock_unused+0x140/0x140 [ 632.195918][T12125] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 632.201264][T12125] ___sys_sendmsg+0x19a/0x2e0 [ 632.206009][T12125] ? __sys_sendmsg+0x290/0x290 [ 632.210860][T12125] __se_sys_sendmsg+0x1b7/0x2a0 [ 632.215758][T12125] ? __x64_sys_sendmsg+0x80/0x80 [ 632.220750][T12125] ? syscall_enter_from_user_mode+0x2a/0x70 [ 632.226698][T12125] do_syscall_64+0x4c/0xa0 [ 632.231157][T12125] ? clear_bhb_loop+0x30/0x80 [ 632.236003][T12125] ? clear_bhb_loop+0x30/0x80 [ 632.240733][T12125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 632.247029][T12125] RIP: 0033:0x7fde2bf12e99 [ 632.251643][T12125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.271505][T12125] RSP: 002b:00007fde2a16b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.279968][T12125] RAX: ffffffffffffffda RBX: 00007fde2c19afa0 RCX: 00007fde2bf12e99 [ 632.287974][T12125] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 632.296113][T12125] RBP: 00007fde2a16b090 R08: 0000000000000000 R09: 0000000000000000 [ 632.304211][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.312321][T12125] R13: 00007fde2c19b038 R14: 00007fde2c19afa0 R15: 00007ffdcd398538 [ 632.320497][T12125] [ 632.502424][T12131] netlink: 'syz.6.2575': attribute type 10 has an invalid length. [ 636.397726][T12133] netlink: 'syz.2.2577': attribute type 10 has an invalid length. [ 636.409530][T12133] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2577'. [ 636.935237][T12156] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2584'. [ 638.061205][T12187] FAULT_INJECTION: forcing a failure. [ 638.061205][T12187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.105768][T12187] CPU: 0 PID: 12187 Comm: syz.0.2593 Not tainted syzkaller #0 [ 638.113413][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 638.123605][T12187] Call Trace: [ 638.126927][T12187] [ 638.129899][T12187] dump_stack_lvl+0x188/0x250 [ 638.134631][T12187] ? show_regs_print_info+0x20/0x20 [ 638.140210][T12187] ? load_image+0x410/0x410 [ 638.145031][T12187] ? __lock_acquire+0x7b50/0x7b50 [ 638.150127][T12187] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 638.157016][T12187] should_fail+0x383/0x4b0 [ 638.161631][T12187] _copy_from_user+0x2e/0x170 [ 638.166468][T12187] __sys_bpf+0x26d/0x6f0 [ 638.171148][T12187] ? bpf_link_show_fdinfo+0x380/0x380 [ 638.176593][T12187] __x64_sys_bpf+0x78/0x90 [ 638.181071][T12187] do_syscall_64+0x4c/0xa0 [ 638.185548][T12187] ? clear_bhb_loop+0x30/0x80 [ 638.190299][T12187] ? clear_bhb_loop+0x30/0x80 [ 638.195043][T12187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 638.201117][T12187] RIP: 0033:0x7ff02cd8de99 [ 638.205832][T12187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.225634][T12187] RSP: 002b:00007ff02afc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 638.234106][T12187] RAX: ffffffffffffffda RBX: 00007ff02d016090 RCX: 00007ff02cd8de99 [ 638.242650][T12187] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 638.250811][T12187] RBP: 00007ff02afc5090 R08: 0000000000000000 R09: 0000000000000000 [ 638.258830][T12187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.266844][T12187] R13: 00007ff02d016128 R14: 00007ff02d016090 R15: 00007fff1944d988 [ 638.275038][T12187] [ 639.908135][T12197] FAULT_INJECTION: forcing a failure. [ 639.908135][T12197] name failslab, interval 1, probability 0, space 0, times 0 [ 640.025197][T12197] CPU: 1 PID: 12197 Comm: syz.5.2596 Not tainted syzkaller #0 [ 640.032950][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 640.043162][T12197] Call Trace: [ 640.046489][T12197] [ 640.049473][T12197] dump_stack_lvl+0x188/0x250 [ 640.054215][T12197] ? show_regs_print_info+0x20/0x20 [ 640.059544][T12197] ? load_image+0x410/0x410 [ 640.064099][T12197] ? __might_sleep+0xf0/0xf0 [ 640.068719][T12197] ? __lock_acquire+0x7b50/0x7b50 [ 640.073783][T12197] ? __local_bh_enable_ip+0x136/0x1c0 [ 640.079292][T12197] should_fail+0x383/0x4b0 [ 640.083749][T12197] should_failslab+0x5/0x20 [ 640.088284][T12197] slab_pre_alloc_hook+0x51/0xc0 [ 640.093264][T12197] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 640.099013][T12197] ? __get_vm_area_node+0x119/0x2d0 [ 640.104310][T12197] __get_vm_area_node+0x119/0x2d0 [ 640.109386][T12197] __vmalloc_node_range+0xef/0x8b0 [ 640.114544][T12197] ? netlink_sendmsg+0x5ec/0xbe0 [ 640.119781][T12197] ? netlink_data_ready+0x10/0x10 [ 640.124857][T12197] ? netlink_sendmsg+0x5ec/0xbe0 [ 640.129883][T12197] vmalloc+0x75/0x80 [ 640.133933][T12197] ? netlink_sendmsg+0x5ec/0xbe0 [ 640.138908][T12197] netlink_sendmsg+0x5ec/0xbe0 [ 640.143704][T12197] ? netlink_getsockopt+0x570/0x570 [ 640.148943][T12197] ? aa_sock_msg_perm+0x94/0x150 [ 640.154020][T12197] ? apparmor_socket_sendmsg+0x88/0x230 [ 640.159601][T12197] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 640.165022][T12197] ? security_socket_sendmsg+0x7c/0xa0 [ 640.170619][T12197] sock_write_iter+0x2a6/0x3a0 [ 640.175425][T12197] ? sock_read_iter+0x380/0x380 [ 640.180322][T12197] ? memset+0x1e/0x40 [ 640.184336][T12197] ? iov_iter_init+0xb4/0x170 [ 640.189054][T12197] vfs_write+0x748/0xd70 [ 640.193341][T12197] ? file_end_write+0x250/0x250 [ 640.198252][T12197] ? __fget_files+0x402/0x470 [ 640.202980][T12197] ? __fdget_pos+0x1e2/0x370 [ 640.207824][T12197] ? ksys_write+0x70/0x260 [ 640.212388][T12197] ksys_write+0x153/0x260 [ 640.216764][T12197] ? __ia32_sys_read+0x80/0x80 [ 640.221571][T12197] ? lockdep_hardirqs_on+0x94/0x140 [ 640.226804][T12197] do_syscall_64+0x4c/0xa0 [ 640.231254][T12197] ? clear_bhb_loop+0x30/0x80 [ 640.235971][T12197] ? clear_bhb_loop+0x30/0x80 [ 640.240724][T12197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 640.246654][T12197] RIP: 0033:0x7fde2bf12e99 [ 640.251114][T12197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.271681][T12197] RSP: 002b:00007fde2a16b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 640.280201][T12197] RAX: ffffffffffffffda RBX: 00007fde2c19afa0 RCX: 00007fde2bf12e99 [ 640.288228][T12197] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 640.296256][T12197] RBP: 00007fde2a16b090 R08: 0000000000000000 R09: 0000000000000000 [ 640.304267][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.312271][T12197] R13: 00007fde2c19b038 R14: 00007fde2c19afa0 R15: 00007ffdcd398538 [ 640.320298][T12197] [ 640.358753][T12197] syz.5.2596: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 640.395441][T12197] CPU: 0 PID: 12197 Comm: syz.5.2596 Not tainted syzkaller #0 [ 640.403161][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 640.413277][T12197] Call Trace: [ 640.416599][T12197] [ 640.419571][T12197] dump_stack_lvl+0x188/0x250 [ 640.424294][T12197] ? rcu_lock_release+0x5/0x20 [ 640.429190][T12197] ? show_regs_print_info+0x20/0x20 [ 640.434435][T12197] ? load_image+0x410/0x410 [ 640.438991][T12197] warn_alloc+0x245/0x320 [ 640.443381][T12197] ? zone_watermark_ok_safe+0x250/0x250 [ 640.448962][T12197] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 640.454979][T12197] ? __get_vm_area_node+0x119/0x2d0 [ 640.460299][T12197] __vmalloc_node_range+0x2b1/0x8b0 [ 640.465546][T12197] ? netlink_data_ready+0x10/0x10 [ 640.470624][T12197] ? netlink_sendmsg+0x5ec/0xbe0 [ 640.475634][T12197] vmalloc+0x75/0x80 [ 640.479582][T12197] ? netlink_sendmsg+0x5ec/0xbe0 [ 640.484580][T12197] netlink_sendmsg+0x5ec/0xbe0 [ 640.489558][T12197] ? netlink_getsockopt+0x570/0x570 [ 640.494822][T12197] ? aa_sock_msg_perm+0x94/0x150 [ 640.500021][T12197] ? apparmor_socket_sendmsg+0x88/0x230 [ 640.505631][T12197] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 640.510976][T12197] ? security_socket_sendmsg+0x7c/0xa0 [ 640.516505][T12197] sock_write_iter+0x2a6/0x3a0 [ 640.521636][T12197] ? sock_read_iter+0x380/0x380 [ 640.526586][T12197] ? memset+0x1e/0x40 [ 640.530613][T12197] ? iov_iter_init+0xb4/0x170 [ 640.535473][T12197] vfs_write+0x748/0xd70 [ 640.539781][T12197] ? file_end_write+0x250/0x250 [ 640.544681][T12197] ? __fget_files+0x402/0x470 [ 640.549630][T12197] ? __fdget_pos+0x1e2/0x370 [ 640.554275][T12197] ? ksys_write+0x70/0x260 [ 640.558745][T12197] ksys_write+0x153/0x260 [ 640.563126][T12197] ? __ia32_sys_read+0x80/0x80 [ 640.567941][T12197] ? lockdep_hardirqs_on+0x94/0x140 [ 640.573178][T12197] do_syscall_64+0x4c/0xa0 [ 640.577630][T12197] ? clear_bhb_loop+0x30/0x80 [ 640.582345][T12197] ? clear_bhb_loop+0x30/0x80 [ 640.587075][T12197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 640.593041][T12197] RIP: 0033:0x7fde2bf12e99 [ 640.597503][T12197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.617159][T12197] RSP: 002b:00007fde2a16b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 640.625906][T12197] RAX: ffffffffffffffda RBX: 00007fde2c19afa0 RCX: 00007fde2bf12e99 [ 640.633946][T12197] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 640.642062][T12197] RBP: 00007fde2a16b090 R08: 0000000000000000 R09: 0000000000000000 [ 640.650233][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.658265][T12197] R13: 00007fde2c19b038 R14: 00007fde2c19afa0 R15: 00007ffdcd398538 [ 640.666299][T12197] [ 641.118283][T12217] netlink: 'syz.0.2602': attribute type 29 has an invalid length. [ 641.166954][T12217] netlink: 'syz.0.2602': attribute type 29 has an invalid length. [ 641.217741][T12218] netlink: 'syz.0.2602': attribute type 29 has an invalid length. [ 641.253771][T12219] netlink: 'syz.0.2602': attribute type 29 has an invalid length. [ 641.614225][T12197] Mem-Info: [ 641.652380][T12197] active_anon:295 inactive_anon:18427 isolated_anon:0 [ 641.652380][T12197] active_file:20285 inactive_file:41038 isolated_file:0 [ 641.652380][T12197] unevictable:768 dirty:669 writeback:0 [ 641.652380][T12197] slab_reclaimable:20666 slab_unreclaimable:96042 [ 641.652380][T12197] mapped:29829 shmem:13399 pagetables:778 bounce:0 [ 641.652380][T12197] kernel_misc_reclaimable:0 [ 641.652380][T12197] free:1354700 free_pcp:10766 free_cma:0 [ 641.876588][T12197] Node 0 active_anon:1148kB inactive_anon:56396kB active_file:80940kB inactive_file:164152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119316kB dirty:2676kB writeback:0kB shmem:34716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10780kB pagetables:3112kB all_unreclaimable? no [ 642.005209][T12197] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 642.109308][T12224] netlink: 'syz.6.2604': attribute type 10 has an invalid length. [ 642.146450][T12197] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.187633][T12224] bridge0: port 3(team0) entered disabled state [ 642.228803][T12197] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 642.261043][T12224] bridge0: port 3(team0) entered disabled state [ 642.293752][T12197] Node 0 DMA32 free:1503500kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1148kB inactive_anon:52048kB active_file:80948kB inactive_file:164152kB unevictable:1536kB writepending:2680kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:42952kB local_pcp:21344kB free_cma:0kB [ 642.343366][T12224] device team_slave_0 left promiscuous mode [ 642.358163][T12197] lowmem_reserve[]: 0 0 0 0 0 [ 642.375874][T12197] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 642.498940][T12224] team0 (unregistering): Port device team_slave_0 removed [ 642.506917][T12224] device team_slave_1 left promiscuous mode [ 642.515693][T12197] lowmem_reserve[]: 0 0 0 0 0 [ 642.581006][T12224] team0 (unregistering): Port device team_slave_1 removed [ 642.630202][T12197] Node 1 Normal free:3923584kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 642.670408][T12197] lowmem_reserve[]: 0 0 0 0 0 [ 642.675201][T12197] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 642.695836][T12197] Node 0 DMA32: 2965*4kB (UME) 2203*8kB (UME) 1424*16kB (UME) 1500*32kB (UME) 878*64kB (UME) 752*128kB (UM) 479*256kB (UM) 154*512kB (UME) 72*1024kB (UME) 9*2048kB (UM) 236*4096kB (M) = 1513004kB [ 642.727411][T12236] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2607'. [ 642.821357][T12197] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 642.896531][T12239] netlink: 'syz.1.2609': attribute type 10 has an invalid length. [ 642.919376][T12197] Node 1 Normal: 218*4kB (UME) 47*8kB (UE) 28*16kB (UME) 189*32kB (UME) 81*64kB (UME) 32*128kB (UE) 10*256kB (UM) 7*512kB (UE) 1*1024kB (U) 2*2048kB (UM) 951*4096kB (M) = 3923584kB [ 642.950229][T12239] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2609'. [ 643.088571][T12197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 643.178775][T12197] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 643.234662][T12197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 643.282684][T12197] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 643.314517][T12253] netlink: 'syz.0.2625': attribute type 10 has an invalid length. [ 643.357970][T12253] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2625'. [ 643.393961][T12197] 63376 total pagecache pages [ 643.481254][T12197] 0 pages in swap cache [ 643.508637][T12260] FAULT_INJECTION: forcing a failure. [ 643.508637][T12260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.539357][T12197] Swap cache stats: add 0, delete 0, find 0/0 [ 643.579979][T12197] Free swap = 124996kB [ 643.616130][T12197] Total swap = 124996kB [ 643.628864][T12260] CPU: 0 PID: 12260 Comm: syz.2.2616 Not tainted syzkaller #0 [ 643.636419][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 643.647037][T12260] Call Trace: [ 643.650365][T12260] [ 643.653337][T12260] dump_stack_lvl+0x188/0x250 [ 643.658077][T12260] ? show_regs_print_info+0x20/0x20 [ 643.658101][T12197] 2097051 pages RAM [ 643.658114][T12197] 0 pages HighMem/MovableOnly [ 643.663347][T12260] ? load_image+0x410/0x410 [ 643.663420][T12260] ? __lock_acquire+0x7b50/0x7b50 [ 643.663452][T12260] should_fail+0x383/0x4b0 [ 643.663483][T12260] _copy_to_user+0x2e/0x130 [ 643.663512][T12260] simple_read_from_buffer+0xe3/0x150 [ 643.697109][T12260] proc_fail_nth_read+0x1a6/0x220 [ 643.702290][T12260] ? proc_fault_inject_write+0x310/0x310 [ 643.707979][T12260] ? fsnotify_perm+0x254/0x560 [ 643.712914][T12260] ? proc_fault_inject_write+0x310/0x310 [ 643.718592][T12260] vfs_read+0x2ff/0xd50 [ 643.722840][T12260] ? __lock_acquire+0x7b50/0x7b50 [ 643.727924][T12260] ? kernel_read+0x1e0/0x1e0 [ 643.732768][T12260] ? mutex_lock_nested+0x17/0x20 [ 643.737851][T12260] ? __fdget_pos+0x2bf/0x370 [ 643.742491][T12260] ? ksys_read+0x70/0x260 [ 643.743140][T12197] 411499 pages reserved [ 643.746861][T12260] ksys_read+0x153/0x260 [ 643.746890][T12260] ? vfs_write+0xd70/0xd70 [ 643.746917][T12260] ? lockdep_hardirqs_on+0x94/0x140 [ 643.765074][T12260] do_syscall_64+0x4c/0xa0 [ 643.769536][T12260] ? clear_bhb_loop+0x30/0x80 [ 643.774537][T12260] ? clear_bhb_loop+0x30/0x80 [ 643.779271][T12260] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 643.785243][T12260] RIP: 0033:0x7f8c8679f6ce [ 643.789829][T12260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 643.807398][T12197] 0 pages cma reserved [ 643.810284][T12260] RSP: 002b:00007f8c84a15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.810318][T12260] RAX: ffffffffffffffda RBX: 00007f8c84a166c0 RCX: 00007f8c8679f6ce [ 643.810334][T12260] RDX: 000000000000000f RSI: 00007f8c84a160a0 RDI: 000000000000000b [ 643.810348][T12260] RBP: 00007f8c84a16090 R08: 0000000000000000 R09: 0000000000000000 [ 643.810362][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.810375][T12260] R13: 00007f8c86a67128 R14: 00007f8c86a67090 R15: 00007ffe1836b1e8 [ 643.810411][T12260] [ 646.457118][T12277] netlink: 'syz.2.2622': attribute type 10 has an invalid length. [ 646.647967][T12277] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2622'. [ 647.036961][T12290] netlink: 'syz.1.2628': attribute type 10 has an invalid length. [ 647.075405][T12287] netlink: 'syz.0.2627': attribute type 10 has an invalid length. [ 647.100817][T12287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2627'. [ 647.325546][T12299] netlink: 'syz.1.2631': attribute type 10 has an invalid length. [ 647.372361][T12299] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2631'. [ 647.484572][T12306] FAULT_INJECTION: forcing a failure. [ 647.484572][T12306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.550307][T12306] CPU: 0 PID: 12306 Comm: syz.6.2633 Not tainted syzkaller #0 [ 647.557868][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 647.568056][T12306] Call Trace: [ 647.571378][T12306] [ 647.574348][T12306] dump_stack_lvl+0x188/0x250 [ 647.579082][T12306] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 647.585295][T12306] ? show_regs_print_info+0x20/0x20 [ 647.590644][T12306] ? load_image+0x410/0x410 [ 647.595209][T12306] should_fail+0x383/0x4b0 [ 647.599805][T12306] _copy_to_user+0x2e/0x130 [ 647.604379][T12306] simple_read_from_buffer+0xe3/0x150 [ 647.609812][T12306] proc_fail_nth_read+0x1a6/0x220 [ 647.614947][T12306] ? proc_fault_inject_write+0x310/0x310 [ 647.620780][T12306] ? fsnotify_perm+0x254/0x560 [ 647.625776][T12306] ? proc_fault_inject_write+0x310/0x310 [ 647.631459][T12306] vfs_read+0x2ff/0xd50 [ 647.635676][T12306] ? __lock_acquire+0x7b50/0x7b50 [ 647.640752][T12306] ? kernel_read+0x1e0/0x1e0 [ 647.645415][T12306] ? mutex_lock_nested+0x17/0x20 [ 647.650415][T12306] ? __fdget_pos+0x2bf/0x370 [ 647.655046][T12306] ? ksys_read+0x70/0x260 [ 647.659462][T12306] ksys_read+0x153/0x260 [ 647.663924][T12306] ? vfs_write+0xd70/0xd70 [ 647.668519][T12306] ? lockdep_hardirqs_on+0x94/0x140 [ 647.673881][T12306] do_syscall_64+0x4c/0xa0 [ 647.678349][T12306] ? clear_bhb_loop+0x30/0x80 [ 647.683079][T12306] ? clear_bhb_loop+0x30/0x80 [ 647.687824][T12306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 647.693791][T12306] RIP: 0033:0x7faccbdc76ce [ 647.698266][T12306] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 647.718172][T12306] RSP: 002b:00007facca05efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.726642][T12306] RAX: ffffffffffffffda RBX: 00007facca05f6c0 RCX: 00007faccbdc76ce [ 647.734752][T12306] RDX: 000000000000000f RSI: 00007facca05f0a0 RDI: 0000000000000008 [ 647.742997][T12306] RBP: 00007facca05f090 R08: 0000000000000000 R09: 0000000000000000 [ 647.751021][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.759053][T12306] R13: 00007faccc08f038 R14: 00007faccc08efa0 R15: 00007ffcf2440928 [ 647.767089][T12306] [ 648.570865][T12329] netlink: 'syz.5.2641': attribute type 10 has an invalid length. [ 649.114854][T12338] netlink: 'syz.2.2645': attribute type 10 has an invalid length. [ 649.144502][T12338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2645'. [ 649.883993][T12352] FAULT_INJECTION: forcing a failure. [ 649.883993][T12352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.915855][T12350] netlink: 'syz.5.2649': attribute type 10 has an invalid length. [ 649.946186][T12350] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2649'. [ 649.961881][T12352] CPU: 0 PID: 12352 Comm: syz.6.2650 Not tainted syzkaller #0 [ 649.969476][T12352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 649.979577][T12352] Call Trace: [ 649.982895][T12352] [ 649.985853][T12352] dump_stack_lvl+0x188/0x250 [ 649.990575][T12352] ? lockdep_hardirqs_on+0x94/0x140 [ 649.995819][T12352] ? show_regs_print_info+0x20/0x20 [ 650.001205][T12352] ? audit_tree_destroy_watch+0x20/0x20 [ 650.007055][T12352] should_fail+0x383/0x4b0 [ 650.011533][T12352] _copy_from_user+0x2e/0x170 [ 650.016271][T12352] __sys_bpf+0x26d/0x6f0 [ 650.020558][T12352] ? bpf_link_show_fdinfo+0x380/0x380 [ 650.026019][T12352] __x64_sys_bpf+0x78/0x90 [ 650.030488][T12352] do_syscall_64+0x4c/0xa0 [ 650.034948][T12352] ? clear_bhb_loop+0x30/0x80 [ 650.039765][T12352] ? clear_bhb_loop+0x30/0x80 [ 650.044630][T12352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 650.050688][T12352] RIP: 0033:0x7faccbe06e99 [ 650.055154][T12352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.075020][T12352] RSP: 002b:00007facca05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 650.083501][T12352] RAX: ffffffffffffffda RBX: 00007faccc08efa0 RCX: 00007faccbe06e99 [ 650.091636][T12352] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 650.099649][T12352] RBP: 00007facca05f090 R08: 0000000000000000 R09: 0000000000000000 [ 650.107659][T12352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.115743][T12352] R13: 00007faccc08f038 R14: 00007faccc08efa0 R15: 00007ffcf2440928 [ 650.123763][T12352] [ 650.967628][T12384] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2662'. [ 650.986842][T12386] netlink: 'syz.2.2664': attribute type 10 has an invalid length. [ 651.096007][T12384] netlink: 'syz.0.2662': attribute type 2 has an invalid length. [ 651.134457][T12382] netlink: 'syz.5.2663': attribute type 10 has an invalid length. [ 651.191480][T12382] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2663'. [ 651.277819][T12391] netlink: 'syz.1.2665': attribute type 10 has an invalid length. [ 651.291392][T12391] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2665'. [ 651.422921][T12403] FAULT_INJECTION: forcing a failure. [ 651.422921][T12403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.436803][T12403] CPU: 0 PID: 12403 Comm: syz.2.2670 Not tainted syzkaller #0 [ 651.444323][T12403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 651.454424][T12403] Call Trace: [ 651.457754][T12403] [ 651.460719][T12403] dump_stack_lvl+0x188/0x250 [ 651.465453][T12403] ? show_regs_print_info+0x20/0x20 [ 651.470935][T12403] ? load_image+0x410/0x410 [ 651.475615][T12403] ? __lock_acquire+0x7b50/0x7b50 [ 651.480703][T12403] should_fail+0x383/0x4b0 [ 651.485187][T12403] _copy_from_user+0x2e/0x170 [ 651.489925][T12403] __copy_msghdr_from_user+0xc9/0x630 [ 651.495359][T12403] ? verify_lock_unused+0x140/0x140 [ 651.500621][T12403] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 651.506071][T12403] ___sys_sendmsg+0x19a/0x2e0 [ 651.510810][T12403] ? __sys_sendmsg+0x290/0x290 [ 651.515673][T12403] __se_sys_sendmsg+0x1b7/0x2a0 [ 651.520590][T12403] ? __x64_sys_sendmsg+0x80/0x80 [ 651.525603][T12403] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 651.531668][T12403] ? lockdep_hardirqs_on+0x94/0x140 [ 651.536918][T12403] do_syscall_64+0x4c/0xa0 [ 651.541379][T12403] ? clear_bhb_loop+0x30/0x80 [ 651.546122][T12403] ? clear_bhb_loop+0x30/0x80 [ 651.550845][T12403] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 651.556789][T12403] RIP: 0033:0x7f8c867dee99 [ 651.561253][T12403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.580907][T12403] RSP: 002b:00007f8c84a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.589379][T12403] RAX: ffffffffffffffda RBX: 00007f8c86a66fa0 RCX: 00007f8c867dee99 [ 651.597782][T12403] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 651.606246][T12403] RBP: 00007f8c84a37090 R08: 0000000000000000 R09: 0000000000000000 [ 651.614268][T12403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.622286][T12403] R13: 00007f8c86a67038 R14: 00007f8c86a66fa0 R15: 00007ffe1836b1e8 [ 651.630330][T12403] [ 652.278899][T12426] netlink: 'syz.1.2678': attribute type 10 has an invalid length. [ 652.384774][T12426] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2678'. [ 655.383315][T12438] netlink: 'syz.5.2684': attribute type 10 has an invalid length. [ 655.424356][T12438] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2684'. [ 656.020258][T12478] netlink: 'syz.5.2695': attribute type 10 has an invalid length. [ 656.028207][T12478] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2695'. [ 656.159610][T12465] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2694'. [ 656.814736][T12486] netlink: 'syz.0.2698': attribute type 10 has an invalid length. [ 656.830538][T12486] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2698'. [ 659.091856][T12491] netlink: 'syz.0.2702': attribute type 10 has an invalid length. [ 659.138893][T12491] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2702'. [ 659.390392][T12500] netlink: 'syz.5.2705': attribute type 10 has an invalid length. [ 659.470394][T12500] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2705'. [ 659.679893][T12514] FAULT_INJECTION: forcing a failure. [ 659.679893][T12514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.820276][T12517] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2710'. [ 659.839177][T12514] CPU: 1 PID: 12514 Comm: syz.2.2709 Not tainted syzkaller #0 [ 659.847049][T12514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 659.857160][T12514] Call Trace: [ 659.860612][T12514] [ 659.863585][T12514] dump_stack_lvl+0x188/0x250 [ 659.868326][T12514] ? show_regs_print_info+0x20/0x20 [ 659.873582][T12514] ? load_image+0x410/0x410 [ 659.878168][T12514] ? __lock_acquire+0x7b50/0x7b50 [ 659.883262][T12514] ? __lock_acquire+0x13dc/0x7b50 [ 659.888340][T12514] should_fail+0x383/0x4b0 [ 659.892811][T12514] strncpy_from_user+0x32/0x350 [ 659.897778][T12514] bpf_prog_load+0x1fd/0x14e0 [ 659.902521][T12514] ? map_freeze+0x360/0x360 [ 659.907066][T12514] ? __might_fault+0xb7/0x110 [ 659.911805][T12514] ? __might_fault+0xb3/0x110 [ 659.916532][T12514] ? bpf_lsm_bpf+0x5/0x10 [ 659.921138][T12514] ? security_bpf+0x7a/0xa0 [ 659.925696][T12514] __sys_bpf+0x532/0x6f0 [ 659.929986][T12514] ? bpf_link_show_fdinfo+0x380/0x380 [ 659.935430][T12514] __x64_sys_bpf+0x78/0x90 [ 659.940139][T12514] do_syscall_64+0x4c/0xa0 [ 659.944713][T12514] ? clear_bhb_loop+0x30/0x80 [ 659.949460][T12514] ? clear_bhb_loop+0x30/0x80 [ 659.954186][T12514] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 659.960119][T12514] RIP: 0033:0x7f8c867dee99 [ 659.964580][T12514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.984247][T12514] RSP: 002b:00007f8c84a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 659.992872][T12514] RAX: ffffffffffffffda RBX: 00007f8c86a66fa0 RCX: 00007f8c867dee99 [ 660.000891][T12514] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 660.008903][T12514] RBP: 00007f8c84a37090 R08: 0000000000000000 R09: 0000000000000000 [ 660.016922][T12514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.024934][T12514] R13: 00007f8c86a67038 R14: 00007f8c86a66fa0 R15: 00007ffe1836b1e8 [ 660.032964][T12514] [ 660.086077][T12523] netlink: 'syz.5.2710': attribute type 1 has an invalid length. [ 660.162386][T12523] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.2710'. [ 660.253661][T12524] netlink: 'syz.0.2711': attribute type 10 has an invalid length. [ 660.285301][T12524] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2711'. [ 660.718782][T12538] netlink: 'syz.6.2713': attribute type 10 has an invalid length. [ 660.767955][T12538] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2713'. [ 660.882859][T12544] FAULT_INJECTION: forcing a failure. [ 660.882859][T12544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.964565][T12544] CPU: 1 PID: 12544 Comm: syz.1.2717 Not tainted syzkaller #0 [ 660.972121][T12544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 660.982321][T12544] Call Trace: [ 660.985647][T12544] [ 660.988618][T12544] dump_stack_lvl+0x188/0x250 [ 660.993540][T12544] ? show_regs_print_info+0x20/0x20 [ 660.998795][T12544] ? load_image+0x410/0x410 [ 661.003351][T12544] ? __lock_acquire+0x7b50/0x7b50 [ 661.008426][T12544] ? perf_tp_event+0xa7e/0xbe0 [ 661.013337][T12544] should_fail+0x383/0x4b0 [ 661.017805][T12544] strncpy_from_user+0x32/0x350 [ 661.022707][T12544] bpf_prog_load+0x1fd/0x14e0 [ 661.027673][T12544] ? map_freeze+0x360/0x360 [ 661.032233][T12544] ? __might_fault+0xb7/0x110 [ 661.037105][T12544] ? __might_fault+0xb3/0x110 [ 661.041842][T12544] ? bpf_lsm_bpf+0x5/0x10 [ 661.046330][T12544] ? security_bpf+0x7a/0xa0 [ 661.050888][T12544] __sys_bpf+0x532/0x6f0 [ 661.055176][T12544] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 661.061466][T12544] ? bpf_link_show_fdinfo+0x380/0x380 [ 661.066896][T12544] ? rcu_nmi_exit+0x6f/0xf0 [ 661.071471][T12544] __x64_sys_bpf+0x78/0x90 [ 661.075931][T12544] do_syscall_64+0x4c/0xa0 [ 661.080393][T12544] ? clear_bhb_loop+0x30/0x80 [ 661.085156][T12544] ? clear_bhb_loop+0x30/0x80 [ 661.089875][T12544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 661.096109][T12544] RIP: 0033:0x7fdd27798e99 [ 661.100574][T12544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.120309][T12544] RSP: 002b:00007fdd259f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 661.128870][T12544] RAX: ffffffffffffffda RBX: 00007fdd27a20fa0 RCX: 00007fdd27798e99 [ 661.136900][T12544] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 661.144915][T12544] RBP: 00007fdd259f1090 R08: 0000000000000000 R09: 0000000000000000 [ 661.152928][T12544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.160942][T12544] R13: 00007fdd27a21038 R14: 00007fdd27a20fa0 R15: 00007ffd24c50148 [ 661.168975][T12544] [ 661.971479][T12559] netlink: 'syz.0.2720': attribute type 10 has an invalid length. [ 661.989311][T12559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2720'. [ 663.932210][T12569] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2726'. [ 663.998519][T12565] netlink: 'syz.1.2727': attribute type 10 has an invalid length. [ 664.006964][T12565] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2727'. [ 664.194037][T12572] netlink: 'syz.2.2728': attribute type 10 has an invalid length. [ 664.382723][T12572] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2728'. [ 668.055217][T12612] netlink: 'syz.5.2739': attribute type 10 has an invalid length. [ 668.084527][T12612] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2739'. [ 668.122525][T12615] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2740'. [ 668.359157][T12622] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2741'. [ 668.481183][T12620] netlink: 'syz.1.2741': attribute type 1 has an invalid length. [ 668.541684][T12620] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2741'. [ 668.587221][T12628] netlink: 'syz.0.2745': attribute type 10 has an invalid length. [ 668.683805][T12628] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2745'. [ 670.018667][T12662] netlink: 'syz.0.2756': attribute type 10 has an invalid length. [ 670.026667][T12662] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2756'. [ 670.091765][T12654] netlink: 'syz.5.2754': attribute type 10 has an invalid length. [ 670.160473][T12654] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2754'. [ 671.105834][T12674] FAULT_INJECTION: forcing a failure. [ 671.105834][T12674] name failslab, interval 1, probability 0, space 0, times 0 [ 671.155454][T12674] CPU: 1 PID: 12674 Comm: syz.6.2759 Not tainted syzkaller #0 [ 671.163110][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 671.173212][T12674] Call Trace: [ 671.176536][T12674] [ 671.179499][T12674] dump_stack_lvl+0x188/0x250 [ 671.184240][T12674] ? show_regs_print_info+0x20/0x20 [ 671.189564][T12674] ? load_image+0x410/0x410 [ 671.194131][T12674] ? __might_sleep+0xf0/0xf0 [ 671.198760][T12674] ? __lock_acquire+0x7b50/0x7b50 [ 671.203833][T12674] should_fail+0x383/0x4b0 [ 671.208324][T12674] should_failslab+0x5/0x20 [ 671.212867][T12674] slab_pre_alloc_hook+0x51/0xc0 [ 671.218023][T12674] __kmalloc+0x6b/0x340 [ 671.222226][T12674] ? tomoyo_encode+0x28a/0x550 [ 671.227048][T12674] tomoyo_encode+0x28a/0x550 [ 671.231725][T12674] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 671.237418][T12674] tomoyo_path_number_perm+0x251/0x6b0 [ 671.242926][T12674] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 671.248427][T12674] ? perf_trace_lock+0xe4/0x390 [ 671.253398][T12674] security_file_ioctl+0x6c/0xa0 [ 671.258399][T12674] __se_sys_ioctl+0x48/0x170 [ 671.263058][T12674] do_syscall_64+0x4c/0xa0 [ 671.267518][T12674] ? clear_bhb_loop+0x30/0x80 [ 671.272240][T12674] ? clear_bhb_loop+0x30/0x80 [ 671.276973][T12674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 671.283131][T12674] RIP: 0033:0x7faccbe06e99 [ 671.287608][T12674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.307269][T12674] RSP: 002b:00007facca05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.315830][T12674] RAX: ffffffffffffffda RBX: 00007faccc08efa0 RCX: 00007faccbe06e99 [ 671.323859][T12674] RDX: 0000200000000180 RSI: 0000000000005452 RDI: 0000000000000003 [ 671.331865][T12674] RBP: 00007facca05f090 R08: 0000000000000000 R09: 0000000000000000 [ 671.340016][T12674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.348065][T12674] R13: 00007faccc08f038 R14: 00007faccc08efa0 R15: 00007ffcf2440928 [ 671.356109][T12674] [ 671.775044][T12674] ERROR: Out of memory at tomoyo_realpath_from_path. [ 673.101060][T12680] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2760'. [ 673.661489][T12698] netlink: 'syz.6.2766': attribute type 10 has an invalid length. [ 673.881030][T12698] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2766'. [ 674.560990][T12720] FAULT_INJECTION: forcing a failure. [ 674.560990][T12720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.598756][T12720] CPU: 1 PID: 12720 Comm: syz.5.2774 Not tainted syzkaller #0 [ 674.606304][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 674.616494][T12720] Call Trace: [ 674.619827][T12720] [ 674.622805][T12720] dump_stack_lvl+0x188/0x250 [ 674.627544][T12720] ? show_regs_print_info+0x20/0x20 [ 674.633540][T12720] ? load_image+0x410/0x410 [ 674.638112][T12720] ? __lock_acquire+0x7b50/0x7b50 [ 674.643211][T12720] should_fail+0x383/0x4b0 [ 674.647690][T12720] _copy_from_user+0x2e/0x170 [ 674.652429][T12720] __sys_bpf+0x26d/0x6f0 [ 674.656775][T12720] ? bpf_link_show_fdinfo+0x380/0x380 [ 674.662331][T12720] __x64_sys_bpf+0x78/0x90 [ 674.666923][T12720] do_syscall_64+0x4c/0xa0 [ 674.671397][T12720] ? clear_bhb_loop+0x30/0x80 [ 674.676118][T12720] ? clear_bhb_loop+0x30/0x80 [ 674.680847][T12720] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 674.687052][T12720] RIP: 0033:0x7fde2bf12e99 [ 674.691658][T12720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.711613][T12720] RSP: 002b:00007fde2a16b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 674.720101][T12720] RAX: ffffffffffffffda RBX: 00007fde2c19afa0 RCX: 00007fde2bf12e99 [ 674.728107][T12720] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 674.736124][T12720] RBP: 00007fde2a16b090 R08: 0000000000000000 R09: 0000000000000000 [ 674.744334][T12720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.752536][T12720] R13: 00007fde2c19b038 R14: 00007fde2c19afa0 R15: 00007ffdcd398538 [ 674.760809][T12720] [ 675.056208][T12726] netlink: 'syz.6.2775': attribute type 10 has an invalid length. [ 675.171793][T12726] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2775'. [ 675.416103][T12742] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2780'. [ 675.539982][T12739] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.2778'. [ 676.224511][T12762] FAULT_INJECTION: forcing a failure. [ 676.224511][T12762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.281604][T12762] CPU: 0 PID: 12762 Comm: syz.0.2787 Not tainted syzkaller #0 [ 676.289197][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 676.299304][T12762] Call Trace: [ 676.302624][T12762] [ 676.305588][T12762] dump_stack_lvl+0x188/0x250 [ 676.310323][T12762] ? show_regs_print_info+0x20/0x20 [ 676.315684][T12762] ? load_image+0x410/0x410 [ 676.320261][T12762] ? __lock_acquire+0x7b50/0x7b50 [ 676.325443][T12762] should_fail+0x383/0x4b0 [ 676.329921][T12762] _copy_from_user+0x2e/0x170 [ 676.334655][T12762] __copy_msghdr_from_user+0x48a/0x630 [ 676.340160][T12762] ? verify_lock_unused+0x140/0x140 [ 676.345518][T12762] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 676.351041][T12762] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 676.357086][T12762] ___sys_sendmsg+0x19a/0x2e0 [ 676.361826][T12762] ? __sys_sendmsg+0x290/0x290 [ 676.366681][T12762] __se_sys_sendmsg+0x1b7/0x2a0 [ 676.371659][T12762] ? __x64_sys_sendmsg+0x80/0x80 [ 676.376666][T12762] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 676.382720][T12762] ? lockdep_hardirqs_on+0x94/0x140 [ 676.387995][T12762] do_syscall_64+0x4c/0xa0 [ 676.392453][T12762] ? clear_bhb_loop+0x30/0x80 [ 676.397353][T12762] ? clear_bhb_loop+0x30/0x80 [ 676.402094][T12762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 676.408130][T12762] RIP: 0033:0x7ff02cd8de99 [ 676.412647][T12762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.432298][T12762] RSP: 002b:00007ff02afe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.440850][T12762] RAX: ffffffffffffffda RBX: 00007ff02d015fa0 RCX: 00007ff02cd8de99 [ 676.449063][T12762] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 676.457081][T12762] RBP: 00007ff02afe6090 R08: 0000000000000000 R09: 0000000000000000 [ 676.465099][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.473108][T12762] R13: 00007ff02d016038 R14: 00007ff02d015fa0 R15: 00007fff1944d988 [ 676.481178][T12762] [ 679.805241][T12786] netlink: 'syz.1.2796': attribute type 10 has an invalid length. [ 680.069297][T12786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2796'. [ 680.946791][T12823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2808'. [ 684.193718][T12844] FAULT_INJECTION: forcing a failure. [ 684.193718][T12844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.224662][T12844] CPU: 1 PID: 12844 Comm: syz.2.2817 Not tainted syzkaller #0 [ 684.232212][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 684.242737][T12844] Call Trace: [ 684.246051][T12844] [ 684.249016][T12844] dump_stack_lvl+0x188/0x250 [ 684.253740][T12844] ? show_regs_print_info+0x20/0x20 [ 684.259101][T12844] ? load_image+0x410/0x410 [ 684.263828][T12844] ? __lock_acquire+0x7b50/0x7b50 [ 684.268922][T12844] should_fail+0x383/0x4b0 [ 684.273486][T12844] _copy_to_user+0x2e/0x130 [ 684.278050][T12844] simple_read_from_buffer+0xe3/0x150 [ 684.283476][T12844] proc_fail_nth_read+0x1a6/0x220 [ 684.288549][T12844] ? proc_fault_inject_write+0x310/0x310 [ 684.294234][T12844] ? fsnotify_perm+0x254/0x560 [ 684.299046][T12844] ? proc_fault_inject_write+0x310/0x310 [ 684.304727][T12844] vfs_read+0x2ff/0xd50 [ 684.308934][T12844] ? __lock_acquire+0x7b50/0x7b50 [ 684.314151][T12844] ? kernel_read+0x1e0/0x1e0 [ 684.318812][T12844] ? mutex_lock_nested+0x17/0x20 [ 684.323814][T12844] ? __fdget_pos+0x2bf/0x370 [ 684.328556][T12844] ? ksys_read+0x70/0x260 [ 684.332961][T12844] ksys_read+0x153/0x260 [ 684.337270][T12844] ? vfs_write+0xd70/0xd70 [ 684.341741][T12844] ? lockdep_hardirqs_on+0x94/0x140 [ 684.347007][T12844] do_syscall_64+0x4c/0xa0 [ 684.351475][T12844] ? clear_bhb_loop+0x30/0x80 [ 684.356206][T12844] ? clear_bhb_loop+0x30/0x80 [ 684.361026][T12844] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 684.366978][T12844] RIP: 0033:0x7f8c8679f6ce [ 684.371438][T12844] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 684.391357][T12844] RSP: 002b:00007f8c84a36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 684.399831][T12844] RAX: ffffffffffffffda RBX: 00007f8c84a376c0 RCX: 00007f8c8679f6ce [ 684.407892][T12844] RDX: 000000000000000f RSI: 00007f8c84a370a0 RDI: 0000000000000004 [ 684.415913][T12844] RBP: 00007f8c84a37090 R08: 0000000000000000 R09: 0000000000000000 [ 684.423932][T12844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.431941][T12844] R13: 00007f8c86a67038 R14: 00007f8c86a66fa0 R15: 00007ffe1836b1e8 [ 684.440065][T12844] [ 684.840634][T12851] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2819'. [ 684.932153][T12851] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 685.058925][T12851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 687.611185][T12860] netlink: 'syz.5.2821': attribute type 10 has an invalid length. [ 687.649845][T12860] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2821'. [ 689.282716][T12902] netlink: 'syz.5.2835': attribute type 10 has an invalid length. [ 689.329415][T12902] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2835'. [ 689.363921][T12898] netlink: 'syz.2.2834': attribute type 10 has an invalid length. [ 689.488441][T12898] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2834'. [ 689.502695][T12887] chnl_net:caif_netlink_parms(): no params data found [ 689.987750][T12919] FAULT_INJECTION: forcing a failure. [ 689.987750][T12919] name failslab, interval 1, probability 0, space 0, times 0 [ 690.016685][T12919] CPU: 0 PID: 12919 Comm: syz.2.2837 Not tainted syzkaller #0 [ 690.024234][T12919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 690.034476][T12919] Call Trace: [ 690.037804][T12919] [ 690.040773][T12919] dump_stack_lvl+0x188/0x250 [ 690.045656][T12919] ? show_regs_print_info+0x20/0x20 [ 690.050912][T12919] ? load_image+0x410/0x410 [ 690.050909][T12887] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.055462][T12919] ? __might_sleep+0xf0/0xf0 [ 690.055498][T12919] ? __lock_acquire+0x7b50/0x7b50 [ 690.072639][T12919] should_fail+0x383/0x4b0 [ 690.077123][T12919] should_failslab+0x5/0x20 [ 690.081776][T12919] slab_pre_alloc_hook+0x51/0xc0 [ 690.086764][T12919] __kmalloc+0x6b/0x340 [ 690.090956][T12919] ? tomoyo_encode+0x28a/0x550 [ 690.095892][T12919] tomoyo_encode+0x28a/0x550 [ 690.095910][T12887] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.107690][T12919] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 690.112423][T12887] device bridge_slave_0 entered promiscuous mode [ 690.113401][T12919] tomoyo_path_number_perm+0x251/0x6b0 [ 690.125459][T12919] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 690.130976][T12919] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 690.137760][T12919] security_file_ioctl+0x6c/0xa0 [ 690.142753][T12919] __se_sys_ioctl+0x48/0x170 [ 690.147390][T12919] do_syscall_64+0x4c/0xa0 [ 690.151852][T12919] ? clear_bhb_loop+0x30/0x80 [ 690.156570][T12919] ? clear_bhb_loop+0x30/0x80 [ 690.161298][T12919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 690.167240][T12919] RIP: 0033:0x7f8c867dee99 [ 690.171699][T12919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.191754][T12919] RSP: 002b:00007f8c84a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.199375][T12887] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.200220][T12919] RAX: ffffffffffffffda RBX: 00007f8c86a67090 RCX: 00007f8c867dee99 [ 690.215401][T12919] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 690.223516][T12919] RBP: 00007f8c84a16090 R08: 0000000000000000 R09: 0000000000000000 [ 690.231636][T12919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.239302][T12887] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.239645][T12919] R13: 00007f8c86a67128 R14: 00007f8c86a67090 R15: 00007ffe1836b1e8 [ 690.254762][T12919] [ 690.277824][T12887] device bridge_slave_1 entered promiscuous mode [ 690.344055][T12887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.358715][T12919] ERROR: Out of memory at tomoyo_realpath_from_path. [ 690.390013][T12887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.526827][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.647727][T12921] netlink: 'syz.5.2838': attribute type 10 has an invalid length. [ 690.660044][T12921] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2838'. [ 690.701727][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.739058][ T4234] Bluetooth: hci3: command 0x0409 tx timeout [ 690.800116][T12887] team0: Port device team_slave_0 added [ 690.831708][T12887] team0: Port device team_slave_1 added [ 690.888377][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.019650][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.106018][T12887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.130581][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.232480][T12887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.301540][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.307956][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.354532][T12887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.411232][T12887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.579440][T12887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.657583][T12954] netlink: 'syz.2.2848': attribute type 3 has an invalid length. [ 691.695720][T12943] netlink: 'syz.5.2847': attribute type 10 has an invalid length. [ 691.724203][T12954] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2848'. [ 691.739894][T12943] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2847'. [ 691.889597][T12946] netlink: 'syz.2.2848': attribute type 2 has an invalid length. [ 692.000965][T12887] device hsr_slave_0 entered promiscuous mode [ 692.119087][T12887] device hsr_slave_1 entered promiscuous mode [ 692.126521][T12887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.150805][T12887] Cannot create hsr debugfs directory [ 692.676458][ T154] bridge0: port 3(ip6gretap0) entered disabled state [ 692.714935][ T154] device ip6gretap0 left promiscuous mode [ 692.743749][ T154] bridge0: port 3(ip6gretap0) entered disabled state [ 692.772005][T12967] netlink: 'syz.6.2854': attribute type 10 has an invalid length. [ 692.794230][T12977] FAULT_INJECTION: forcing a failure. [ 692.794230][T12977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.813974][T12967] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2854'. [ 692.819853][ T5598] Bluetooth: hci3: command 0x041b tx timeout [ 692.855149][T12977] CPU: 0 PID: 12977 Comm: syz.2.2858 Not tainted syzkaller #0 [ 692.862781][T12977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 692.872985][T12977] Call Trace: [ 692.876311][T12977] [ 692.879281][T12977] dump_stack_lvl+0x188/0x250 [ 692.884140][T12977] ? show_regs_print_info+0x20/0x20 [ 692.889405][T12977] ? load_image+0x410/0x410 [ 692.893977][T12977] ? __lock_acquire+0x7b50/0x7b50 [ 692.899064][T12977] should_fail+0x383/0x4b0 [ 692.903536][T12977] _copy_to_user+0x2e/0x130 [ 692.908096][T12977] simple_read_from_buffer+0xe3/0x150 [ 692.913612][T12977] proc_fail_nth_read+0x1a6/0x220 [ 692.918701][T12977] ? proc_fault_inject_write+0x310/0x310 [ 692.924391][T12977] ? fsnotify_perm+0x254/0x560 [ 692.929256][T12977] ? proc_fault_inject_write+0x310/0x310 [ 692.934954][T12977] vfs_read+0x2ff/0xd50 [ 692.939183][T12977] ? __lock_acquire+0x7b50/0x7b50 [ 692.944270][T12977] ? kernel_read+0x1e0/0x1e0 [ 692.948927][T12977] ? mutex_lock_nested+0x17/0x20 [ 692.953917][T12977] ? __fdget_pos+0x2bf/0x370 [ 692.958562][T12977] ? ksys_read+0x70/0x260 [ 692.962956][T12977] ksys_read+0x153/0x260 [ 692.967250][T12977] ? vfs_write+0xd70/0xd70 [ 692.971953][T12977] ? lockdep_hardirqs_on+0x94/0x140 [ 692.977215][T12977] do_syscall_64+0x4c/0xa0 [ 692.981684][T12977] ? clear_bhb_loop+0x30/0x80 [ 692.986415][T12977] ? clear_bhb_loop+0x30/0x80 [ 692.991295][T12977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 692.997245][T12977] RIP: 0033:0x7f8c8679f6ce [ 693.001825][T12977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 693.021605][T12977] RSP: 002b:00007f8c84a36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 693.030082][T12977] RAX: ffffffffffffffda RBX: 00007f8c84a376c0 RCX: 00007f8c8679f6ce [ 693.038105][T12977] RDX: 000000000000000f RSI: 00007f8c84a370a0 RDI: 0000000000000006 [ 693.046255][T12977] RBP: 00007f8c84a37090 R08: 0000000000000000 R09: 0000000000000000 [ 693.054322][T12977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.062387][T12977] R13: 00007f8c86a67038 R14: 00007f8c86a66fa0 R15: 00007ffe1836b1e8 [ 693.070446][T12977] [ 693.696405][T12985] netlink: 'syz.5.2859': attribute type 10 has an invalid length. [ 693.746863][T12985] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2859'. [ 694.510413][T12999] netlink: 'syz.6.2862': attribute type 10 has an invalid length. [ 694.528724][T12999] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2862'. [ 694.908620][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 695.304501][T13024] netlink: 'syz.6.2869': attribute type 10 has an invalid length. [ 695.340053][T13024] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2869'. [ 695.575216][T12887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 695.672738][T12887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 695.696835][T12887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 695.750504][T12887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 696.218867][T13048] netlink: 'syz.2.2872': attribute type 10 has an invalid length. [ 696.300506][T13048] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2872'. [ 696.363945][T12887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.772929][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 696.799066][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 696.854212][T12887] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.962676][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 696.982631][ T5598] Bluetooth: hci3: command 0x0419 tx timeout [ 697.011577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.051372][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.058754][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.322998][ T154] device hsr_slave_0 left promiscuous mode [ 697.443841][ T154] device hsr_slave_1 left promiscuous mode [ 697.454570][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.488079][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.541016][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.579128][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.622208][ T154] bridge0: port 5(bond0) entered disabled state [ 697.667052][ T154] bridge0: port 4(team0) entered disabled state [ 697.728797][ T154] device bridge_slave_1 left promiscuous mode [ 697.735252][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.756328][ T154] device bridge_slave_0 left promiscuous mode [ 697.771757][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.868005][ T154] device veth1_vlan left promiscuous mode [ 697.901505][ T154] device veth0_vlan left promiscuous mode [ 698.617660][ T154] device team_slave_1 left promiscuous mode [ 698.660043][ T154] team0 (unregistering): Port device team_slave_1 removed [ 698.719826][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.768813][ T154] device bond_slave_1 left promiscuous mode [ 698.813877][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.835133][ T154] device bond_slave_0 left promiscuous mode [ 699.108173][ T154] bond0 (unregistering): Released all slaves [ 699.194098][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 699.209232][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 699.240227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 699.259431][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.266588][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.290923][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 699.359700][T12887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 699.389454][T12887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.428726][T13081] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2881'. [ 699.532836][T13079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2880'. [ 699.684892][T13090] netlink: 'syz.6.2883': attribute type 10 has an invalid length. [ 699.721688][T13090] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2883'. [ 699.770552][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 699.798353][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 699.827290][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 699.851102][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 699.875400][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 699.898078][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 699.927528][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 699.953558][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 699.996330][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 700.021711][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 700.046127][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 700.238006][T13107] netlink: 'syz.2.2887': attribute type 10 has an invalid length. [ 700.259346][T13107] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2887'. [ 700.745322][T11126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.761906][T11126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 700.879195][T12887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.964373][T11126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 701.010059][T11126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 701.143391][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 701.159668][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 701.177624][T12887] device veth0_vlan entered promiscuous mode [ 701.200238][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 701.243918][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 701.285807][T12887] device veth1_vlan entered promiscuous mode [ 701.402920][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 701.435019][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 701.483913][T12887] device veth0_macvtap entered promiscuous mode [ 701.527897][T12887] device veth1_macvtap entered promiscuous mode [ 701.603583][T13128] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2894'. [ 701.707705][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.755539][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.786259][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.846839][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.927543][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.944620][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.978619][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.037197][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.092609][T12887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.125393][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 702.141457][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 702.199457][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 702.243215][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 702.283684][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.309017][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.342957][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.381109][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.429673][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.490501][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.548705][T12887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.592910][T12887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.639447][T12887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.809801][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 702.837361][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 702.882034][T12887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.918532][T12887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.927344][T12887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.978698][T12887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.000660][T13148] netlink: 'syz.6.2898': attribute type 10 has an invalid length. [ 703.068833][T13148] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2898'. [ 706.149458][T13177] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2905'. [ 706.987244][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.018544][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.085245][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 707.469505][T13198] netlink: 'syz.6.2911': attribute type 10 has an invalid length. [ 707.488710][ T6612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.524423][T13198] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2911'. [ 707.540613][ T6612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.717905][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 708.804648][T13212] netlink: 'syz.0.2915': attribute type 10 has an invalid length. [ 708.929724][T13212] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2915'. [ 708.967083][T13212] device bond0 entered promiscuous mode [ 709.044532][T13212] device bond_slave_0 entered promiscuous mode [ 709.185969][T13212] device bond_slave_1 entered promiscuous mode [ 709.351734][T13212] bridge0: port 3(bond0) entered blocking state [ 709.379699][T13212] bridge0: port 3(bond0) entered disabled state [ 709.426858][T13212] bridge0: port 3(bond0) entered blocking state [ 709.433280][T13212] bridge0: port 3(bond0) entered forwarding state [ 709.749442][T13223] netlink: 'syz.5.2919': attribute type 10 has an invalid length. [ 709.757727][T13223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2919'. [ 710.581319][T13243] netlink: 'syz.5.2927': attribute type 10 has an invalid length. [ 710.669592][T13243] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2927'. [ 712.403632][T13262] FAULT_INJECTION: forcing a failure. [ 712.403632][T13262] name failslab, interval 1, probability 0, space 0, times 0 [ 712.494100][T13262] CPU: 1 PID: 13262 Comm: syz.0.2931 Not tainted syzkaller #0 [ 712.501661][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 712.512022][T13262] Call Trace: [ 712.515345][T13262] [ 712.518311][T13262] dump_stack_lvl+0x188/0x250 [ 712.523279][T13262] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 712.529616][T13262] ? show_regs_print_info+0x20/0x20 [ 712.534870][T13262] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 712.541092][T13262] should_fail+0x383/0x4b0 [ 712.545562][T13262] should_failslab+0x5/0x20 [ 712.550097][T13262] slab_pre_alloc_hook+0x51/0xc0 [ 712.555079][T13262] ? security_inode_alloc+0x30/0x110 [ 712.560438][T13262] kmem_cache_alloc+0x3d/0x280 [ 712.565250][T13262] security_inode_alloc+0x30/0x110 [ 712.570427][T13262] inode_init_always+0x8e5/0xc90 [ 712.575412][T13262] new_inode_pseudo+0x8e/0x210 [ 712.580216][T13262] __sock_create+0x128/0x910 [ 712.584850][T13262] __sys_socket+0xe2/0x170 [ 712.589302][T13262] __x64_sys_socket+0x76/0x80 [ 712.594111][T13262] do_syscall_64+0x4c/0xa0 [ 712.598576][T13262] ? clear_bhb_loop+0x30/0x80 [ 712.603301][T13262] ? clear_bhb_loop+0x30/0x80 [ 712.608077][T13262] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 712.614129][T13262] RIP: 0033:0x7f31dc912e99 [ 712.618600][T13262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.638478][T13262] RSP: 002b:00007f31dab6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 712.646942][T13262] RAX: ffffffffffffffda RBX: 00007f31dcb9afa0 RCX: 00007f31dc912e99 [ 712.654945][T13262] RDX: 0000000000000106 RSI: 0000922000000001 RDI: 0000000000000002 [ 712.663088][T13262] RBP: 00007f31dab6b090 R08: 0000000000000000 R09: 0000000000000000 [ 712.671106][T13262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.679111][T13262] R13: 00007f31dcb9b038 R14: 00007f31dcb9afa0 R15: 00007ffd06101928 [ 712.687282][T13262] [ 712.974430][T13267] netlink: 'syz.2.2932': attribute type 10 has an invalid length. [ 712.989529][T13262] socket: no more sockets [ 713.003840][T13267] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2932'. [ 713.068118][T13269] netlink: 'syz.5.2934': attribute type 10 has an invalid length. [ 713.100988][T13269] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2934'. [ 713.527261][T13279] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.2938'. [ 713.561681][T13279] netlink: 6328 bytes leftover after parsing attributes in process `syz.6.2938'. [ 714.204100][T13299] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2942'. [ 714.507191][T13308] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2946'. [ 715.843808][T13333] netlink: 'syz.6.2951': attribute type 10 has an invalid length. [ 715.895270][T13333] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2951'. [ 716.582472][T13348] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2958'. [ 716.886065][T13353] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2959'. [ 717.943154][T13366] chnl_net:caif_netlink_parms(): no params data found [ 718.120471][T13377] FAULT_INJECTION: forcing a failure. [ 718.120471][T13377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.318759][T13377] CPU: 0 PID: 13377 Comm: syz.6.2965 Not tainted syzkaller #0 [ 718.326424][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 718.336544][T13377] Call Trace: [ 718.339873][T13377] [ 718.342838][T13377] dump_stack_lvl+0x188/0x250 [ 718.347569][T13377] ? show_regs_print_info+0x20/0x20 [ 718.352819][T13377] ? load_image+0x410/0x410 [ 718.357797][T13377] ? __lock_acquire+0x7b50/0x7b50 [ 718.362912][T13377] ? lockdep_hardirqs_on+0x94/0x140 [ 718.368219][T13377] should_fail+0x383/0x4b0 [ 718.372896][T13377] _copy_to_user+0x2e/0x130 [ 718.377460][T13377] simple_read_from_buffer+0xe3/0x150 [ 718.383176][T13377] proc_fail_nth_read+0x1a6/0x220 [ 718.388267][T13377] ? proc_fault_inject_write+0x310/0x310 [ 718.393950][T13377] ? vfs_read+0x2e5/0xd50 [ 718.398326][T13377] ? proc_fault_inject_write+0x310/0x310 [ 718.404002][T13377] vfs_read+0x2ff/0xd50 [ 718.408207][T13377] ? __lock_acquire+0x7b50/0x7b50 [ 718.413393][T13377] ? kernel_read+0x1e0/0x1e0 [ 718.418054][T13377] ? mutex_lock_nested+0x17/0x20 [ 718.423039][T13377] ? __fdget_pos+0x2bf/0x370 [ 718.427820][T13377] ? ksys_read+0x70/0x260 [ 718.432221][T13377] ksys_read+0x153/0x260 [ 718.436515][T13377] ? vfs_write+0xd70/0xd70 [ 718.440998][T13377] do_syscall_64+0x4c/0xa0 [ 718.445474][T13377] ? clear_bhb_loop+0x30/0x80 [ 718.450198][T13377] ? clear_bhb_loop+0x30/0x80 [ 718.454917][T13377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 718.460878][T13377] RIP: 0033:0x7faccbdc76ce [ 718.465518][T13377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 718.485211][T13377] RSP: 002b:00007facca03dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 718.493838][T13377] RAX: ffffffffffffffda RBX: 00007facca03e6c0 RCX: 00007faccbdc76ce [ 718.501865][T13377] RDX: 000000000000000f RSI: 00007facca03e0a0 RDI: 0000000000000004 [ 718.509885][T13377] RBP: 00007facca03e090 R08: 0000000000000000 R09: 0000000000000000 [ 718.518195][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.526226][T13377] R13: 00007faccc08f128 R14: 00007faccc08f090 R15: 00007ffcf2440928 [ 718.534273][T13377] [ 719.298810][ T4463] Bluetooth: hci0: command 0x0409 tx timeout [ 719.408241][T13366] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.418591][T13366] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.427150][T13366] device bridge_slave_0 entered promiscuous mode [ 719.488400][T13391] netlink: 'syz.5.2970': attribute type 10 has an invalid length. [ 719.564958][T13391] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2970'. [ 719.632435][T13366] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.651619][T13366] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.683056][T13366] device bridge_slave_1 entered promiscuous mode [ 719.783305][T13399] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2973'. [ 719.898000][T13397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2972'. [ 720.033516][T13366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.091285][T13366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.271187][ T6612] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.512383][T13366] team0: Port device team_slave_0 added [ 720.552505][T13366] team0: Port device team_slave_1 added [ 720.656835][T13414] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2975'. [ 720.820763][T13366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.827778][T13366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.948570][T13366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.101078][ T6612] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.200499][T13366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.207847][T13366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.358610][T13366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.391301][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 721.443076][ T6612] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.627721][T13419] netlink: 'syz.0.2978': attribute type 10 has an invalid length. [ 721.713931][T13419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2978'. [ 721.758604][T13419] device team0 entered promiscuous mode [ 721.838771][T13419] device team_slave_0 entered promiscuous mode [ 721.845256][T13419] device team_slave_1 entered promiscuous mode [ 721.962623][T13419] bridge0: port 4(team0) entered blocking state [ 722.050599][T13419] bridge0: port 4(team0) entered disabled state [ 722.117964][T13419] bridge0: port 4(team0) entered blocking state [ 722.124393][T13419] bridge0: port 4(team0) entered forwarding state [ 722.452869][ T6612] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.544232][T13366] device hsr_slave_0 entered promiscuous mode [ 722.589453][T13366] device hsr_slave_1 entered promiscuous mode [ 723.135618][T13436] netlink: 'syz.6.2984': attribute type 10 has an invalid length. [ 723.249019][T13436] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2984'. [ 723.258219][T13437] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2985'. [ 723.345813][T13448] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2987'. [ 723.458576][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 724.097013][ T6612] bridge0: port 3(ip6gretap0) entered disabled state [ 724.225048][ T6612] device ip6gretap0 left promiscuous mode [ 724.249231][ T6612] bridge0: port 3(ip6gretap0) entered disabled state [ 725.538818][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 726.269771][T13493] bridge0: port 4(bond0) entered disabled state [ 726.276419][T13493] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.283754][T13493] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.730984][T13366] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 727.897447][T13366] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 728.008908][T13366] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 728.020237][T13366] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 728.386087][T13366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.650796][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 728.709587][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 728.888093][T13366] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.029644][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 729.070288][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 729.129229][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.136389][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.206185][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 729.261430][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 729.359058][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.366256][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.385349][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 729.430605][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 730.885772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 730.895509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 730.911004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 731.010465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 731.035147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 731.055259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 731.067782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 731.118420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 731.204221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 731.221625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 731.250078][T13366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 731.868116][T13593] bridge0: port 3(gretap0) entered blocking state [ 731.908967][T13593] bridge0: port 3(gretap0) entered disabled state [ 731.943459][T13593] device gretap0 entered promiscuous mode [ 732.229643][T13564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 732.250738][T13564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 732.467076][ T6612] device hsr_slave_0 left promiscuous mode [ 732.483723][ T6612] device hsr_slave_1 left promiscuous mode [ 732.508374][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.534098][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.567001][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.584978][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.609456][ T6612] bridge0: port 5(bond0) entered disabled state [ 732.631623][ T6612] bridge0: port 4(team0) entered disabled state [ 732.675999][ T6612] device bridge_slave_1 left promiscuous mode [ 732.708193][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.759984][ T6612] device bridge_slave_0 left promiscuous mode [ 732.766285][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.836548][ T6612] device veth1_vlan left promiscuous mode [ 732.859692][ T6612] device veth0_vlan left promiscuous mode [ 733.471933][ T6612] device team_slave_1 left promiscuous mode [ 733.525758][ T6612] team0 (unregistering): Port device team_slave_1 removed [ 733.552606][ T6612] device team_slave_0 left promiscuous mode [ 733.566306][ T6612] team0 (unregistering): Port device team_slave_0 removed [ 733.594228][ T6612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.604420][ T6612] device bond_slave_1 left promiscuous mode [ 733.621786][ T6612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.638079][ T6612] device bond_slave_0 left promiscuous mode [ 733.826882][ T6612] bond0 (unregistering): Released all slaves [ 733.903553][T13366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.959651][T13615] device sit0 entered promiscuous mode [ 734.194474][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 734.229911][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 734.284662][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 734.324178][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 734.365491][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 734.385565][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 734.529232][T13366] device veth0_vlan entered promiscuous mode [ 734.543274][T13366] device veth1_vlan entered promiscuous mode [ 734.676102][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 734.691037][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 734.719253][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 734.759594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 734.816356][T13366] device veth0_macvtap entered promiscuous mode [ 734.874564][T13366] device veth1_macvtap entered promiscuous mode [ 734.954247][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.006414][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.040131][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.068151][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.110679][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.130411][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.158768][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.186155][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.198984][T13366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.221532][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 735.232710][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 735.273239][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 735.332522][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 735.398088][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.456579][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.512182][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.551850][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.598649][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.628703][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.647247][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.675910][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.714527][T13366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.740080][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 735.756154][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 735.804935][T13366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.828675][T13366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.857899][T13366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.888416][T13366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.125700][ T3071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.158735][ T3071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.269045][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 736.325038][ T3071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.368276][ T3071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.414509][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 738.086105][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.254373][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 738.323910][T13636] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.331257][T13636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.926694][T13724] chnl_net:caif_netlink_parms(): no params data found [ 739.437911][T13724] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.454853][T13724] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.472704][T13724] device bridge_slave_0 entered promiscuous mode [ 739.566834][T13724] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.615028][T13724] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.668516][T13724] device bridge_slave_1 entered promiscuous mode [ 739.788609][ T4255] Bluetooth: hci1: command 0x0409 tx timeout [ 739.848722][T13724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.911898][T13724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.031059][T13724] team0: Port device team_slave_0 added [ 740.043565][T13724] team0: Port device team_slave_1 added [ 740.109137][T13724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.126829][T13724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.171929][T13724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.201501][T13724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.208798][T13724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.235700][T13724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.328637][T13724] device hsr_slave_0 entered promiscuous mode [ 740.339443][T13724] device hsr_slave_1 entered promiscuous mode [ 740.356635][T13724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 740.376890][T13724] Cannot create hsr debugfs directory [ 740.598045][T13724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.777226][T13724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.934548][T13724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.997697][ T3071] bridge0: port 3(ip6gretap0) entered disabled state [ 741.027240][ T3071] device ip6gretap0 left promiscuous mode [ 741.049077][ T3071] bridge0: port 3(ip6gretap0) entered disabled state [ 741.114324][T13724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.590331][T13724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 741.611604][T13724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 741.642620][T13724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 741.720046][T13724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 741.862281][ T4463] Bluetooth: hci1: command 0x041b tx timeout [ 741.976830][T13724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.073378][T13724] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.102388][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 742.115742][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 742.153644][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 742.193530][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 742.230545][ T1462] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.237748][ T1462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.289079][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 742.433744][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 742.443890][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 742.452679][ T1462] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.459823][ T1462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.480642][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 742.497075][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 742.540727][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 742.564259][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 742.583356][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 742.603891][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 742.616704][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 742.629430][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 742.638192][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 742.688764][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 742.704578][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 742.751913][T13724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 743.066535][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 743.081353][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 743.125217][T13724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.138066][ T3071] device hsr_slave_0 left promiscuous mode [ 743.149373][ T3071] device hsr_slave_1 left promiscuous mode [ 743.164691][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.175997][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.187830][ T3071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.196628][ T3071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.205394][ T3071] bridge0: port 5(bond0) entered disabled state [ 743.213895][ T3071] bridge0: port 4(team0) entered disabled state [ 743.222951][ T3071] device bridge_slave_1 left promiscuous mode [ 743.230597][ T3071] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.240323][ T3071] device bridge_slave_0 left promiscuous mode [ 743.246673][ T3071] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.259984][ T3071] device veth1_vlan left promiscuous mode [ 743.265869][ T3071] device veth0_vlan left promiscuous mode [ 743.439918][ T3071] device team_slave_1 left promiscuous mode [ 743.450043][ T3071] team0 (unregistering): Port device team_slave_1 removed [ 743.465699][ T3071] device team_slave_0 left promiscuous mode [ 743.474461][ T3071] team0 (unregistering): Port device team_slave_0 removed [ 743.493055][ T3071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.504157][ T3071] device bond_slave_1 left promiscuous mode [ 743.517656][ T3071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.527787][ T3071] device bond_slave_0 left promiscuous mode [ 743.603702][ T3071] bond0 (unregistering): Released all slaves [ 743.706387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 743.716331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 743.748848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 743.765563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 743.777060][T13724] device veth0_vlan entered promiscuous mode [ 743.816682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 743.825423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 743.860600][T13724] device veth1_vlan entered promiscuous mode [ 743.939111][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 743.999217][T13724] device veth0_macvtap entered promiscuous mode [ 744.006963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 744.024654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 744.091195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 744.101973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 744.129580][T13724] device veth1_macvtap entered promiscuous mode [ 744.155632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 744.170268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 744.266414][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.294098][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.315251][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.327335][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.344683][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.355879][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.409586][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.494411][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.597215][T13724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.672847][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 744.698407][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 744.770960][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.824120][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.877902][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.941856][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.996033][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.051441][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.108734][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.188755][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.201048][T13724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.215406][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 745.238329][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 745.298427][T13724] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.307504][T13724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.323874][T13724] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.333728][T13724] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.595581][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.614787][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.697864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 745.748709][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.770646][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.797612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 746.021151][ T5603] Bluetooth: hci1: command 0x0419 tx timeout [ 747.246854][T13813] chnl_net:caif_netlink_parms(): no params data found [ 747.527905][T13813] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.594599][T13813] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.603300][T13813] device bridge_slave_0 entered promiscuous mode [ 747.660405][T13835] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 747.694312][T13813] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.703069][T13813] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.728966][T13813] device bridge_slave_1 entered promiscuous mode [ 747.816259][T13813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.869234][T13813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.971672][T13813] team0: Port device team_slave_0 added [ 748.001563][T13813] team0: Port device team_slave_1 added [ 748.087322][T13813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.108311][T13813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.195504][T13813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.236031][T13813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.243231][T13813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.337305][T13813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.586635][T13813] device hsr_slave_0 entered promiscuous mode [ 748.657591][T13813] device hsr_slave_1 entered promiscuous mode [ 748.692589][T13813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.716224][T13813] Cannot create hsr debugfs directory [ 748.899821][ T4463] Bluetooth: hci2: command 0x0409 tx timeout [ 750.259428][ T154] wlan1: Trigger new scan to find an IBSS to join [ 750.309394][T13813] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.433274][T13813] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.562955][T13813] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.785850][T13813] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.988819][ T1110] Bluetooth: hci2: command 0x041b tx timeout [ 751.223189][T13813] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 751.274690][T13813] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 751.345878][T13813] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 751.400800][T13813] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 751.783674][T13813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.857501][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 751.872917][ T1462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 752.024234][T13813] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.148997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 752.158344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 752.174998][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.182197][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.212905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 752.229418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 752.245859][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.253136][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.270057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 752.285515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 752.303693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 752.330256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 752.341986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 752.351445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 752.381669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 752.399535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 752.425269][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 752.439496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 752.466345][T13813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 752.492149][T13813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 752.510165][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 752.532048][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 752.741866][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.749460][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.881377][T13813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.901845][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 752.929301][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 753.068962][ T1110] Bluetooth: hci2: command 0x040f tx timeout [ 753.316962][ T155] wlan1: Trigger new scan to find an IBSS to join [ 753.391552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 753.401442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 753.447330][T13813] device veth0_vlan entered promiscuous mode [ 753.459684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 753.470084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 753.482814][T13813] device veth1_vlan entered promiscuous mode [ 753.500197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 753.519489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 753.540635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 753.586037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 753.601204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 753.620175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 753.641517][T13813] device veth0_macvtap entered promiscuous mode [ 753.665524][T13813] device veth1_macvtap entered promiscuous mode [ 753.704655][T13813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.715682][T13813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.728984][T13813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.759236][T13813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.778767][T13813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.798561][T13813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.818655][T13813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.848512][T13813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.865932][T13813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.886961][T13813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.930015][T13813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.943331][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 753.959463][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 753.989218][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 754.017205][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 754.062677][T13813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.106014][T13813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.180946][T13813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.222296][T13813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.276894][T13813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.310988][T13813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.332387][T13813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.355869][T13813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.377771][T13813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.414395][T13813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.455796][T13813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.544300][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 754.565862][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 754.640273][T13813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.677668][T13813] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.714042][T13813] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.757127][T13813] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.148588][ T4255] Bluetooth: hci2: command 0x0419 tx timeout [ 755.246076][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.269038][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.287445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 755.568735][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.594116][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.627188][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 756.268700][ T6612] wlan1: Creating new IBSS network, BSSID b2:af:4f:53:e8:c2 [ 770.244184][T14296] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 771.964989][T14371] netlink: 'syz.2.3338': attribute type 21 has an invalid length. [ 772.013016][T14371] netlink: 'syz.2.3338': attribute type 7 has an invalid length. [ 772.286388][T14386] netlink: 'syz.5.3345': attribute type 2 has an invalid length. [ 772.334724][T14386] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3345'. [ 772.608056][T14398] netlink: 'syz.5.3347': attribute type 10 has an invalid length. [ 772.639464][T14398] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3347'. [ 772.673456][T14398] device hsr0 entered promiscuous mode [ 772.698812][T14398] bridge0: port 3(hsr0) entered blocking state [ 772.725793][T14398] bridge0: port 3(hsr0) entered disabled state [ 772.745059][T14398] bridge0: port 3(hsr0) entered blocking state [ 772.751407][T14398] bridge0: port 3(hsr0) entered forwarding state [ 773.102530][T14420] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 773.587807][T14443] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3370'. [ 773.928306][T14452] device syzkaller0 entered promiscuous mode [ 773.976296][T14459] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 774.258690][ T1462] wlan1: Trigger new scan to find an IBSS to join [ 775.081096][T14502] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 775.218892][ T6612] wlan1: Trigger new scan to find an IBSS to join [ 775.712126][T14527] netlink: 'syz.5.3402': attribute type 10 has an invalid length. [ 775.872326][T14527] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.955258][T14527] device bridge_slave_1 left promiscuous mode [ 775.989442][T14527] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.064010][T14527] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 776.130407][ C1] Illegal XDP return value 16128, expect packet loss! [ 776.269886][ T3071] wlan1: Trigger new scan to find an IBSS to join [ 777.219032][ T3071] wlan1: Trigger new scan to find an IBSS to join [ 777.320382][T14572] netlink: 'syz.6.3424': attribute type 2 has an invalid length. [ 777.364981][T14572] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3424'. [ 777.768404][T14582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.791793][T14582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.877519][T14582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.929068][T14582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.149551][T14600] netlink: 'syz.2.3434': attribute type 2 has an invalid length. [ 778.259133][T11126] wlan1: Trigger new scan to find an IBSS to join [ 778.523028][T14610] netlink: 'syz.2.3438': attribute type 2 has an invalid length. [ 778.554341][T14610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3438'. [ 779.202206][T14636] netlink: 'syz.6.3451': attribute type 29 has an invalid length. [ 779.219366][ T1462] wlan1: Trigger new scan to find an IBSS to join [ 779.237829][ T1462] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 779.257013][ T1462] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 779.294195][T14636] netlink: 'syz.6.3451': attribute type 29 has an invalid length. [ 779.338654][T14639] netlink: 'syz.1.3449': attribute type 2 has an invalid length. [ 779.347424][T14638] netlink: 'syz.6.3451': attribute type 29 has an invalid length. [ 779.392848][T14636] netlink: 'syz.6.3451': attribute type 29 has an invalid length. [ 779.635195][T14640] netlink: 'syz.6.3451': attribute type 29 has an invalid length. [ 780.259956][ T155] wlan1: Trigger new scan to find an IBSS to join [ 780.803473][T14679] netlink: 'syz.5.3469': attribute type 10 has an invalid length. [ 780.839994][T14679] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3469'. [ 781.330178][T11126] wlan1: Trigger new scan to find an IBSS to join [ 782.264964][ T3071] wlan1: Trigger new scan to find an IBSS to join [ 784.392998][ T1462] wlan1: Creating new IBSS network, BSSID 8e:4a:06:97:43:58 [ 784.405681][T14714] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.478989][T14714] device bridge_slave_1 left promiscuous mode [ 784.485404][T14714] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.568913][T14714] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 784.883925][T14724] validate_nla: 2 callbacks suppressed [ 784.883944][T14724] netlink: 'syz.1.3486': attribute type 27 has an invalid length. [ 784.965386][T14724] netlink: 'syz.1.3486': attribute type 25 has an invalid length. [ 785.114660][T14728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.147136][T14728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.175274][T14728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.195672][T14728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.218715][T11126] wlan1: Trigger new scan to find an IBSS to join [ 785.830754][T14744] netlink: 'syz.0.3494': attribute type 10 has an invalid length. [ 785.901289][T14744] device veth1_macvtap left promiscuous mode [ 785.935086][T14744] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 786.289332][T14758] netlink: 'syz.6.3500': attribute type 2 has an invalid length. [ 786.643384][T14769] netlink: 'syz.1.3504': attribute type 10 has an invalid length. [ 786.661087][T14769] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3504'. [ 786.682897][T14769] device hsr0 entered promiscuous mode [ 786.691006][T14769] bridge0: port 3(hsr0) entered blocking state [ 786.708561][T14769] bridge0: port 3(hsr0) entered disabled state [ 786.765540][T14769] bridge0: port 3(hsr0) entered blocking state [ 786.772693][T14769] bridge0: port 3(hsr0) entered forwarding state [ 786.965308][T14784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.975105][T14784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.012453][T14784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.059082][T14784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.220696][ T154] wlan1: Trigger new scan to find an IBSS to join [ 787.355421][T14801] netlink: 'syz.5.3518': attribute type 10 has an invalid length. [ 787.414739][T14801] team0: Device vxcan1 is of different type [ 788.290525][T11126] wlan1: Trigger new scan to find an IBSS to join [ 788.290547][ T155] wlan1: Trigger new scan to find an IBSS to join [ 788.435973][T14816] netlink: 'syz.2.3524': attribute type 21 has an invalid length. [ 788.452288][T14816] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3524'. [ 788.465609][T14816] netlink: 'syz.2.3524': attribute type 4 has an invalid length. [ 788.875707][T14851] netlink: 'syz.1.3541': attribute type 29 has an invalid length. [ 788.941706][T14851] netlink: 'syz.1.3541': attribute type 29 has an invalid length. [ 789.027146][T14849] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3540'. [ 789.051666][T14849] device hsr0 entered promiscuous mode [ 789.091951][T14849] bridge0: port 5(hsr0) entered blocking state [ 789.111880][T14849] bridge0: port 5(hsr0) entered disabled state [ 789.227253][ T3071] wlan1: Creating new IBSS network, BSSID 4e:be:e6:79:46:17 [ 789.236768][ T155] wlan1: Creating new IBSS network, BSSID 3e:8b:cf:44:1d:04 [ 789.373271][T14871] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3548'. [ 789.467221][T14872] device syzkaller0 entered promiscuous mode [ 790.197211][T14895] validate_nla: 6 callbacks suppressed [ 790.197297][T14895] netlink: 'syz.1.3560': attribute type 10 has an invalid length. [ 790.250790][T14895] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3560'. [ 790.535512][T14917] device wlan1 entered promiscuous mode [ 791.299440][ T1462] wlan1: Trigger new scan to find an IBSS to join [ 792.224282][T14971] netlink: 'syz.1.3593': attribute type 27 has an invalid length. [ 792.306164][T14971] netlink: 'syz.1.3593': attribute type 25 has an invalid length. [ 792.611249][T14980] bridge0: port 3(hsr0) entered disabled state [ 792.617625][T14980] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.896066][T14987] bridge0: port 3(hsr0) entered disabled state [ 793.012830][T14987] device bridge_slave_0 left promiscuous mode [ 793.033421][T14987] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.252259][T14991] netlink: 'syz.0.3599': attribute type 25 has an invalid length. [ 793.265147][T14991] netlink: 'syz.0.3599': attribute type 10 has an invalid length. [ 793.308747][ T1462] wlan1: Creating new IBSS network, BSSID 3e:c1:02:98:fd:c5 [ 794.824155][ T1462] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.038015][ T1462] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.210211][ T1462] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.458603][ T1462] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.586241][T15046] chnl_net:caif_netlink_parms(): no params data found [ 796.179892][T15046] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.222532][T15046] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.281963][T15046] device bridge_slave_0 entered promiscuous mode [ 796.415550][T15046] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.434351][T15046] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.485446][T15046] device bridge_slave_1 entered promiscuous mode [ 796.508612][ T4232] Bluetooth: hci4: command 0x0409 tx timeout [ 796.960863][T15046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.005421][T15046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.196196][T15046] team0: Port device team_slave_0 added [ 797.245420][T15046] team0: Port device team_slave_1 added [ 797.432023][T15046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.441587][T15046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.469002][T15046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.508832][T15046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.518282][T15046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.574404][T15046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.627137][ T1462] device gretap0 left promiscuous mode [ 797.682432][ T1462] bridge0: port 3(gretap0) entered disabled state [ 797.879266][T15046] device hsr_slave_0 entered promiscuous mode [ 797.973316][T15046] device hsr_slave_1 entered promiscuous mode [ 798.078195][T15184] netlink: 'syz.5.3651': attribute type 9 has an invalid length. [ 798.086675][T15184] netlink: 181676 bytes leftover after parsing attributes in process `syz.5.3651'. [ 798.233150][T15046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.285473][T15046] Cannot create hsr debugfs directory [ 798.332261][T15152] netlink: 'syz.5.3651': attribute type 10 has an invalid length. [ 798.410146][T15152] device veth1_macvtap left promiscuous mode [ 798.516137][T15176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 798.523662][T15176] IPv6: NLM_F_CREATE should be set when creating new route [ 798.531047][T15176] IPv6: NLM_F_CREATE should be set when creating new route [ 798.538309][T15176] IPv6: NLM_F_CREATE should be set when creating new route [ 798.588653][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 799.092998][ T1462] device hsr_slave_0 left promiscuous mode [ 799.124095][ T1462] device hsr_slave_1 left promiscuous mode [ 799.193783][ T1462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.211302][ T1462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.251899][ T1462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.279048][ T1462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.295281][ T1462] bridge0: port 5(hsr0) entered disabled state [ 799.354048][ T1462] bridge0: port 4(bond0) entered disabled state [ 799.487042][ T1462] device bridge_slave_1 left promiscuous mode [ 799.507930][ T1462] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.266192][ T1462] device bridge_slave_0 left promiscuous mode [ 800.277298][ T1462] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.319657][ T1462] device veth1_vlan left promiscuous mode [ 800.325762][ T1462] device veth0_vlan left promiscuous mode [ 800.545728][ T1462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.555415][ T1462] device bond_slave_1 left promiscuous mode [ 800.571393][ T1462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.580992][ T1462] device bond_slave_0 left promiscuous mode [ 800.653378][ T1462] bond0 (unregistering): Released all slaves [ 800.668948][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 801.221866][T15187] wlan1: Trigger new scan to find an IBSS to join [ 801.357655][T15288] netlink: 'syz.0.3685': attribute type 10 has an invalid length. [ 801.481681][T15297] netlink: 'syz.0.3685': attribute type 9 has an invalid length. [ 801.494592][T15297] netlink: 181676 bytes leftover after parsing attributes in process `syz.0.3685'. [ 801.508933][T15294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.516202][T15294] IPv6: NLM_F_CREATE should be set when creating new route [ 801.523579][T15294] IPv6: NLM_F_CREATE should be set when creating new route [ 801.531045][T15294] IPv6: NLM_F_CREATE should be set when creating new route [ 801.821954][T15046] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 801.873554][T15046] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 801.951958][T15046] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 802.062568][T15046] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 802.078724][ T6612] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 802.090304][ T6612] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 802.155431][T15187] ------------[ cut here ]------------ [ 802.178570][T15187] WARNING: CPU: 0 PID: 15187 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 802.239934][T15187] Modules linked in: [ 802.243925][T15187] CPU: 0 PID: 15187 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 802.305456][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.355693][T15187] Workqueue: cfg80211 cfg80211_event_work [ 802.399947][T15187] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 802.406411][T15187] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 20 bd 3f f8 0f 0b eb bf e8 17 bd 3f f8 <0f> 0b eb b6 e8 0e bd 3f f8 0f 0b e9 82 fd ff ff e8 02 bd 3f f8 0f [ 802.495295][T15046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.515523][T15187] RSP: 0018:ffffc9000328fac0 EFLAGS: 00010293 [ 802.531895][T15187] RAX: ffffffff89394469 RBX: 1ffff92000651f5c RCX: ffff888055253b80 [ 802.541463][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 802.559311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 802.567023][T15187] RDX: 0000000000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200 [ 802.598391][T15187] RBP: ffffc9000328fb70 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 802.607962][T15046] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.617921][T15187] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: ffff888049a1b5f0 [ 802.634432][T15187] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88805f0e4c90 [ 802.653114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 802.663509][T15187] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 802.679370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 802.688702][T15187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 802.695358][T15187] CR2: 0000560b545ca950 CR3: 000000007e272000 CR4: 00000000003506f0 [ 802.713358][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.720525][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.739731][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 802.749559][T15187] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 802.757836][T15187] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 802.781251][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 802.801738][T15187] Call Trace: [ 802.807456][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 802.820053][T15187] [ 802.824777][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 802.834125][T15187] ? trace_rdev_return_void+0x1c0/0x1c0 [ 802.847998][T15187] cfg80211_process_wdev_events+0x373/0x490 [ 802.853104][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.861227][ T6612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.871081][T15187] cfg80211_process_rdev_events+0x9d/0x110 [ 802.876982][T15187] cfg80211_event_work+0x2b/0x40 [ 802.892912][T15187] process_one_work+0x867/0xff0 [ 802.901752][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 802.910491][T15187] ? worker_detach_from_pool+0x240/0x240 [ 802.916407][T15187] ? lockdep_hardirqs_off+0x70/0x100 [ 802.928277][T15187] ? _raw_spin_lock_irq+0xb7/0xf0 [ 802.936396][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 802.947354][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 802.954946][T15187] ? _raw_spin_lock_irqsave+0x100/0x100 [ 802.970658][T15187] ? wq_worker_running+0x97/0x170 [ 802.975799][T15187] worker_thread+0xad7/0x12a0 [ 802.981108][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 802.999494][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 803.007499][T15187] kthread+0x42e/0x520 [ 803.018483][T15187] ? rcu_lock_release+0x20/0x20 [ 803.023515][T15187] ? kthread_blkcg+0xd0/0xd0 [ 803.028156][T15187] ret_from_fork+0x1f/0x30 [ 803.043809][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 803.054224][T15187] [ 803.057429][T15187] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 803.064740][T15187] CPU: 1 PID: 15187 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 803.072497][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 803.081635][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 803.082593][T15187] Workqueue: cfg80211 cfg80211_event_work [ 803.096170][T15187] Call Trace: [ 803.099486][T15187] [ 803.102574][T15187] dump_stack_lvl+0x188/0x250 [ 803.107308][T15187] ? show_regs_print_info+0x20/0x20 [ 803.113013][T15187] ? load_image+0x410/0x410 [ 803.117570][T15187] panic+0x2f8/0x850 [ 803.121523][T15187] ? bpf_jit_dump+0xd0/0xd0 [ 803.126177][T15187] ? ret_from_fork+0x1f/0x30 [ 803.130815][T15187] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 803.136409][T15187] __warn+0x248/0x2b0 [ 803.140464][T15187] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 803.146067][T15187] report_bug+0x1b9/0x2e0 [ 803.150468][T15187] handle_bug+0x3a/0x70 [ 803.154782][T15187] exc_invalid_op+0x16/0x40 [ 803.159353][T15187] asm_exc_invalid_op+0x16/0x20 [ 803.164364][T15187] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 803.170628][T15187] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 20 bd 3f f8 0f 0b eb bf e8 17 bd 3f f8 <0f> 0b eb b6 e8 0e bd 3f f8 0f 0b e9 82 fd ff ff e8 02 bd 3f f8 0f [ 803.190290][T15187] RSP: 0018:ffffc9000328fac0 EFLAGS: 00010293 [ 803.196402][T15187] RAX: ffffffff89394469 RBX: 1ffff92000651f5c RCX: ffff888055253b80 [ 803.204413][T15187] RDX: 0000000000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200 [ 803.212434][T15187] RBP: ffffc9000328fb70 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 803.220453][T15187] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: ffff888049a1b5f0 [ 803.228462][T15187] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88805f0e4c90 [ 803.236483][T15187] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 803.242081][T15187] ? trace_rdev_return_void+0x1c0/0x1c0 [ 803.247682][T15187] cfg80211_process_wdev_events+0x373/0x490 [ 803.253644][T15187] cfg80211_process_rdev_events+0x9d/0x110 [ 803.259516][T15187] cfg80211_event_work+0x2b/0x40 [ 803.264529][T15187] process_one_work+0x867/0xff0 [ 803.269451][T15187] ? worker_detach_from_pool+0x240/0x240 [ 803.275143][T15187] ? lockdep_hardirqs_off+0x70/0x100 [ 803.280469][T15187] ? _raw_spin_lock_irq+0xb7/0xf0 [ 803.285588][T15187] ? _raw_spin_lock_irqsave+0x100/0x100 [ 803.291313][T15187] ? wq_worker_running+0x97/0x170 [ 803.296389][T15187] worker_thread+0xad7/0x12a0 [ 803.301129][T15187] kthread+0x42e/0x520 [ 803.305248][T15187] ? rcu_lock_release+0x20/0x20 [ 803.310142][T15187] ? kthread_blkcg+0xd0/0xd0 [ 803.314779][T15187] ret_from_fork+0x1f/0x30 [ 803.319248][T15187] [ 803.322612][T15187] Kernel Offset: disabled [ 803.327142][T15187] Rebooting in 86400 seconds..