last executing test programs: 2m49.885221726s ago: executing program 0 (id=2390): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000040)=[{&(0x7f0000000000)="2000000020008107090f9becdb4cb96b02000020fd0000010064000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000040)=r2) close(r3) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 2m47.149091001s ago: executing program 0 (id=2401): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000500)="5500000000000000e2000000000000", 0x0, 0xfd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) close(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) 2m46.714290035s ago: executing program 0 (id=2404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2m46.500075382s ago: executing program 0 (id=2406): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2, 0x0, 0x8, 0x0, 0x4000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703", 0x44}], 0x1}, 0x4) 2m46.311886388s ago: executing program 0 (id=2408): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x4, 0x1, 0x0, 0x5, 0x1, 0x5, [{0xb, 0x5, 0x5}]}]}, {0x0, [0x5f, 0x2e, 0x61, 0x2e, 0x61]}}, &(0x7f00000005c0)=""/223, 0x37, 0xdf, 0x1}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000070000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e060547e00000000566009e103e3", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 2m42.644956062s ago: executing program 0 (id=2413): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) (async) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m27.131246746s ago: executing program 32 (id=2413): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) (async) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.000936679s ago: executing program 4 (id=2923): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643c4e8d41cdb7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6659f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac1223331f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed80000010000000000e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xc, 0x0, &(0x7f0000000500)="5500000000000000e2000000", 0x0, 0xfd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) close(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) 8.937218071s ago: executing program 4 (id=2924): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x4}, 0x0, 0xac5e, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10c002, 0xac5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfe6d, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0000000000000000db46061d00"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) 8.719932738s ago: executing program 4 (id=2927): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1d, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x28002, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x6, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 7.259630423s ago: executing program 4 (id=2929): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r0, 0xe, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000240), 0x2, 0x0) (async) openat$cgroup_freezer_state(r2, &(0x7f0000000240), 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4018, r3}, 0x18) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r4, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x1, 0x5, 0x1}, 0x50) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x1, 0x5, 0x1}, 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0xffffff5a}, 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0xffffff5a}, 0x8) openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000500)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f0000000540)='GPL\x00', 0x9, 0x3a, &(0x7f0000000580)=""/58, 0x41100, 0x40, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0x10, 0x7, 0x44}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000600)=[r0, r1, r0, r0, r6, r6, r0, r6], &(0x7f0000000640)=[{0x2, 0x3, 0x4, 0x2}, {0x0, 0x5, 0x3, 0x7}, {0x5, 0x2, 0x10, 0x9}, {0x2, 0x3, 0x4}], 0x10, 0x3}, 0x94) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000740)=r8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000940)={r0, &(0x7f0000000780)="b1f5bb0bde4ceac028e59b0181538c9a116bcbdae2a33a49f0aefba1cd8272a4af1a8a5b18c59ae2afb14c9d6a84099c46a46a86a7e2c93e0e55dced7a9df4d4eddd6ca0bb5f7bbe2f8478e695fb3c0b6224a9a39cffdda064ceee0c0b21404bf1eab6fdc63aa3e22781d6c6e5ece3f0ed8afbb8b169083ddd2fbc60b808a584b680b848febbbc8d65e6addf31c1561ae7fa372684153806", &(0x7f0000000840)=""/225, 0x4}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000940)={r0, &(0x7f0000000780)="b1f5bb0bde4ceac028e59b0181538c9a116bcbdae2a33a49f0aefba1cd8272a4af1a8a5b18c59ae2afb14c9d6a84099c46a46a86a7e2c93e0e55dced7a9df4d4eddd6ca0bb5f7bbe2f8478e695fb3c0b6224a9a39cffdda064ceee0c0b21404bf1eab6fdc63aa3e22781d6c6e5ece3f0ed8afbb8b169083ddd2fbc60b808a584b680b848febbbc8d65e6addf31c1561ae7fa372684153806", &(0x7f0000000840)=""/225, 0x4}, 0x20) openat$cgroup_freezer_state(r5, &(0x7f0000000980), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000bc0)={r5, &(0x7f00000009c0)="1dbafdbe47368908704d378bb74e48712ca4ef089e25265617e476fff4d7e57e524e5bc479ef3562d3a390ddc42408f93d310918e8bbc266610fa8daa3f42a4cea976ea45f3898b4d15ce0dfcecd00fdaf647f3f354d1c69415978b1bfe1b9c7697ff0c6aa0a04ba4e5f7307c0e63ee3865c53b416e1d69b4d3aebdca82feaf3d6d72b64d5a6145ff12a477cfff0f0e13a14d2b2e7b3ce2cb2af373b8fe307da0d9db2ce3e34abbcd5ab4f8558a0df31ab0bc717de3f86b8f30651552ea974dbc441db4c17211d734166761d78ed27c0", &(0x7f0000000ac0)=""/225, 0x4}, 0x20) r9 = perf_event_open$cgroup(&(0x7f0000000c00)={0x1, 0x80, 0xb5, 0x0, 0xf8, 0x4, 0x0, 0x80, 0x1000c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xe6, 0x0, @perf_config_ext={0xfff, 0x6}, 0x100004, 0x200, 0xc, 0xc, 0x8, 0x10001, 0x3, 0x0, 0x8, 0x0, 0x7fff}, r5, 0xa, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d00)={{r1}, &(0x7f0000000c80), &(0x7f0000000cc0)='%pI4 \x00'}, 0x20) r10 = getpid() r11 = perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x5, 0xf9, 0x6, 0x2, 0x0, 0x4, 0x888, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4cb5, 0x7}, 0x100001, 0x2, 0x9, 0x9, 0x9, 0x5, 0xff01, 0x0, 0x2a5, 0x0, 0xc}, r10, 0x2, r9, 0x8) r12 = perf_event_open(&(0x7f0000000e80)={0x4, 0x80, 0x8d, 0x1, 0xf, 0x0, 0x0, 0x73c, 0x2000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x10001, 0x2}, 0x5444, 0xb5ca, 0x6, 0x0, 0x0, 0x1000, 0xb91f, 0x0, 0x9, 0x0, 0xa4}, r10, 0x10, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000e00)={0x4, 0x80, 0x8, 0x7, 0x9, 0xb9, 0x0, 0x0, 0x21, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000dc0)}, 0x8040, 0x2a5, 0x4, 0x3, 0x0, 0x6, 0xc, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x6, r12, 0x17) (async) perf_event_open(&(0x7f0000000e00)={0x4, 0x80, 0x8, 0x7, 0x9, 0xb9, 0x0, 0x0, 0x21, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000dc0)}, 0x8040, 0x2a5, 0x4, 0x3, 0x0, 0x6, 0xc, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x6, r12, 0x17) perf_event_open$cgroup(&(0x7f0000000f40)={0x3, 0x80, 0x8, 0x5, 0x8, 0x2, 0x0, 0x6, 0x4000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000f00), 0x4}, 0x4001, 0x3fa, 0x3, 0x5, 0x2, 0x7, 0x8000, 0x0, 0x2, 0x0, 0xd46}, r5, 0xa, r11, 0xa) mkdirat$cgroup(r5, &(0x7f0000000fc0)='syz0\x00', 0x1ff) (async) mkdirat$cgroup(r5, &(0x7f0000000fc0)='syz0\x00', 0x1ff) write$cgroup_int(r5, &(0x7f0000001000)=0x7, 0x12) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r13, &(0x7f0000001080)='devices.deny\x00', 0x2, 0x0) (async) openat$cgroup_devices(r13, &(0x7f0000001080)='devices.deny\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r10, r9, 0x0, 0x2, &(0x7f00000010c0)='/\x00'}, 0x30) sendmsg$inet(r5, &(0x7f0000001200)={&(0x7f0000001140)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001180)}], 0x1}, 0x20000040) (async) sendmsg$inet(r5, &(0x7f0000001200)={&(0x7f0000001140)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001180)}], 0x1}, 0x20000040) 7.009140581s ago: executing program 4 (id=2934): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="5500000000000000e20000000000", 0x0, 0xfd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) close(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) 6.972856722s ago: executing program 2 (id=2937): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x4}, 0x0, 0xac5e, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10c002, 0xac5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfe6d, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0000000000000000db46061d00"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) 6.885345335s ago: executing program 1 (id=2938): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x4c, &(0x7f00000000c0), 0x4) 6.755526419s ago: executing program 4 (id=2939): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb387, 0x2}, 0x4e00, 0x1, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x4}, 0xc800, 0x0, 0xfffffffc, 0x4, 0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20090, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.694613211s ago: executing program 1 (id=2941): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0xc356}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x1000, 0x0, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4001000}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x90, 0x2, 0x0, 0x0, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x772}, 0x108500, 0xe9a, 0x7baf376b, 0x8, 0x6, 0x0, 0x4}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) close(r1) socketpair(0xa, 0x1, 0x84, &(0x7f0000000280)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x8, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032b00fe08000e40000200875a65969ff57b00ff11"], 0xfdef) 6.364054421s ago: executing program 2 (id=2942): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x1) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0x9}, 0x4c80, 0x6, 0x0, 0x7, 0x201}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x400, 0x144}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, r2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd8}, 0x10020) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x3e, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 3.590564868s ago: executing program 2 (id=2944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000285000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0xcb1f, 0x0, 0x0, 0x100, 0x16, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.461066362s ago: executing program 5 (id=2945): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)}, 0x10) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='FREEZING\x00', 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002340)={0xffffffffffffffff, 0x20, &(0x7f0000002300)={&(0x7f0000002200), 0x0, 0x0, &(0x7f0000002240)=""/192, 0xc0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0xa, 0x1e, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x97d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0xf, 0x6, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0xca, &(0x7f0000000280)=""/202, 0x40f00, 0x3, '\x00', r3, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000021c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r1, 0x0, 0x0, &(0x7f0000002380), 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x16, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7829abbb904021d080304000000e8fea4a118001e", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) socket$kcm(0x29, 0x5, 0x0) 3.309976037s ago: executing program 1 (id=2948): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.177136091s ago: executing program 1 (id=2949): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x10, 0x40, 0x0, 0x5c32, 0x18050, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000195a7afe9600466a1409a7729d8d0f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x22, 0x0, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3e) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600), 0x4) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x2000000, @mcast1, 0x80}}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x4800) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000800), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xb, 0x1c, &(0x7f0000001400)=ANY=[], &(0x7f0000000d80)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000dc0)=""/165, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x11, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xfffffff4, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x3, 0xa, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000a80)=[{0x1, 0x1, 0x4, 0xc}, {0x3, 0x2, 0x9, 0x5}, {0x0, 0xffffffff, 0x1000d, 0x9}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x8}, 0x94) sendmsg$inet(r1, 0x0, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r2, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x59, 0x0, 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000c40), 0x8, 0x68, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0xb, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x6}, 0x10}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000f1fffffffd0000000600000000010000", @ANYRES32=r0, @ANYBLOB="0100000000000000000000200000000000000000", @ANYRES32, @ANYBLOB="030000000200000042000000070000000000000000"], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0x2f21, 0xd01}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xe, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{}], 0x1}, 0x0) 2.368216076s ago: executing program 3 (id=2953): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r1 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x20, 0xac5d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'devices'}, {0x2d, 'devices'}, {0x2d, 'hugetlb'}]}, 0x26) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0xe0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000840)="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"}], 0x1}, 0x0) 2.105253404s ago: executing program 3 (id=2954): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x1) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0x9}, 0x4c80, 0x6, 0x0, 0x7, 0x201}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x400, 0x144}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, r2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd8}, 0x10020) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x3e, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 1.305978719s ago: executing program 5 (id=2955): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xfffe}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="11000a0000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2"], 0x98}, 0x0) 1.262720241s ago: executing program 1 (id=2956): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, 0x1}, 0x13) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611008000000000062"], 0x0, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 1.242720741s ago: executing program 2 (id=2957): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb387, 0x2}, 0x4e00, 0x1, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x4}, 0xc800, 0x0, 0xfffffffc, 0x4, 0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20090, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.157303904s ago: executing program 5 (id=2958): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 1.075131376s ago: executing program 3 (id=2959): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x2, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x200000000000}, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) r4 = socket$kcm(0x10, 0xd, 0x0) (async) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x81, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000}, 0x10d222, 0x7fffffff, 0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0xfffffd94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, &(0x7f0000000980)=ANY=[@ANYRESDEC, @ANYBLOB="c6418ebc009a66c3da5b1a88cebc28df90e72b74e0f24fde316a3712043b05f158e6ebd4043041290b54303712ffe7464fc7689c1f0b390290e35f84afb9156dc39a7d449a735ad4228c8a33cc9f2eb4f4a0b32dde7b9676bf038fcefaf4b7dd8991ca7e0e9b4cefa0e9366c688278fbf1f914101d90dfb9e6427fdc052b0f81f2c5335ec9b57264fb99bf0f6dfac7858be75fdc41703ddd38b60e4f80111d598906cf99091911ba0c272d43e29bb036a2409bd9984a0f73bd937344e4650b", @ANYRES64=r5, @ANYRESDEC=r4, @ANYBLOB="5be59743c78bc5a57a039290bfc7a99e1e99f5c4af06"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000540)={0xc90742f72994fcb1, 0xcb, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x74, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async) r8 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x5411, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005d31, 0x2020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0xa}, 0x10020, 0x200000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000480)=""/164}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0, r9}, 0x18) 957.36972ms ago: executing program 5 (id=2960): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="5500000000000000e20000000000", 0x0, 0xfd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) close(r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10) 830.036814ms ago: executing program 2 (id=2961): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000001280)={&(0x7f00000010c0)=@l2tp6={0xa, 0x0, 0x3, @mcast1, 0x800}, 0x18, 0x0}, 0x2000c810) 579.879002ms ago: executing program 5 (id=2962): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x4}, 0x0, 0xac5e, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10c002, 0xac5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfe6d, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0000000000000000db46061d00"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) 579.700792ms ago: executing program 3 (id=2963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x21, 0x2100, 0x0, 0x0, 0x0}, 0x50) 445.112056ms ago: executing program 2 (id=2964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x107, 0x107, 0x9, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @func={0x5, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xbf4}}, @datasec={0x3, 0x8, 0x0, 0xf, 0x3, [{0xfffffff7, 0x751b, 0xe66}, {0x2, 0x4, 0xfffffffa}, {0x4, 0xfffffffe, 0x401}, {0x2, 0x1, 0x4}, {0x3, 0x7, 0xfffffc01}, {0x5, 0x8, 0x6}, {0x3, 0x6, 0x1}, {0x5, 0x47, 0x2e25}], "80dcf5"}, @enum64={0xf, 0x5, 0x0, 0x13, 0x0, 0x5, [{0xc, 0x8, 0x3}, {0xb, 0xfcbb, 0x800}, {0xa, 0xb, 0x2}, {0x5, 0x800, 0x2}, {0x8, 0x4, 0x7}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0xd, 0x10000}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x2e, 0x5f, 0x61, 0x51]}}, &(0x7f0000000980), 0x129, 0x0, 0x1, 0x5}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1d, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80)={0x0, r0}, 0x8) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r1}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x1, 0x0, 0x0, 0x10860, r3, 0x6, '\x00', 0x0, r4, 0x2, 0x2, 0x4, 0x7, @void, @value, @value=r8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10, r3}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x9, 0x0, 0x4, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0x10c002, 0xac5d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r12 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r12, 0x29, 0x2b, 0x0, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x5, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x22) 208.550894ms ago: executing program 3 (id=2965): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x10, 0x40, 0x0, 0x5c32, 0x18050, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000195a7afe9600466a1409a7729d8d0f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x22, 0x0, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3e) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600), 0x4) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, {0xa, 0x4e24, 0x2000000, @mcast1, 0x80}}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x4800) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000800), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xb, 0x1c, &(0x7f0000001400)=ANY=[], &(0x7f0000000d80)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000dc0)=""/165, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x11, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xfffffff4, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x3, 0xa, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000a80)=[{0x1, 0x1, 0x4, 0xc}, {0x3, 0x2, 0x9, 0x5}, {0x0, 0xffffffff, 0x1000d, 0x9}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x8}, 0x94) sendmsg$inet(r1, 0x0, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r2, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x59, 0x0, 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000c40), 0x8, 0x68, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0xb, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x6}, 0x10}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000f1fffffffd0000000600000000010000", @ANYRES32=r0, @ANYBLOB="0100000000000000000000200000000000000000", @ANYRES32, @ANYBLOB="030000000200000042000000070000000000000000"], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0x2f21, 0xd01}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xe, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{}], 0x1}, 0x0) 165.345765ms ago: executing program 1 (id=2966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000285000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0xcb1f, 0x0, 0x0, 0x100, 0x16, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 98.929767ms ago: executing program 5 (id=2967): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x200, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000060000000e0300000000000000000000000000000d04000000000000000000000a0200000000000000610000000000000000"], 0x0, 0x46}, 0x28) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2b, &(0x7f0000002640), 0x42) sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000080)=@phonet={0x23, 0xd, 0x1, 0x4}, 0x80, 0x0}, 0xc4140) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) gettid() mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000080)={'full', 0x5f, 0x52, 0x20, 0x100000000}, 0x2f) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) 0s ago: executing program 3 (id=2968): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x1) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0x9}, 0x4c80, 0x6, 0x0, 0x7, 0x201}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x400, 0x144}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0xc7df}, 0x0, 0xffffffffffffffff, r2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd8}, 0x10020) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x3e, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): lid length. [ 360.319061][ T9699] device syzkaller0 entered promiscuous mode [ 362.301908][ T9708] device lo left promiscuous mode [ 362.311516][ T9713] device lo entered promiscuous mode [ 362.323966][ T9713] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 362.348748][ T9725] netlink: 'syz.0.1927': attribute type 2 has an invalid length. [ 362.371637][ T9725] netlink: 'syz.0.1927': attribute type 8 has an invalid length. [ 362.399764][ T9725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1927'. [ 362.730515][ T9748] netlink: 'syz.1.1924': attribute type 2 has an invalid length. [ 362.775055][ T9748] netlink: 'syz.1.1924': attribute type 8 has an invalid length. [ 362.784981][ T9748] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1924'. [ 362.817130][ T9748] netlink: 'syz.1.1924': attribute type 10 has an invalid length. [ 362.898743][ T9758] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1926'. [ 363.959171][ T9774] device syzkaller0 entered promiscuous mode [ 363.991915][ T9773] device syzkaller0 entered promiscuous mode [ 364.035232][ T9776] device syzkaller0 entered promiscuous mode [ 367.930792][ T9791] netlink: 'syz.0.1939': attribute type 10 has an invalid length. [ 367.938805][ T9791] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.1939'. [ 368.064316][ T9794] netlink: 'syz.3.1940': attribute type 2 has an invalid length. [ 368.104918][ T9794] netlink: 'syz.3.1940': attribute type 8 has an invalid length. [ 368.136178][ T9794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1940'. [ 368.196999][ T9797] netlink: 'syz.3.1940': attribute type 10 has an invalid length. [ 368.317745][ T9805] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 368.407453][ T9805] device macvlan0 entered promiscuous mode [ 368.433777][ T9805] team0: Port device macvlan0 added [ 369.022638][ T9812] device syzkaller0 entered promiscuous mode [ 370.653387][ T9838] device syzkaller0 entered promiscuous mode [ 372.094404][ T9859] netlink: 'syz.2.1957': attribute type 2 has an invalid length. [ 372.102938][ T9859] netlink: 'syz.2.1957': attribute type 8 has an invalid length. [ 372.110773][ T9859] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1957'. [ 372.121468][ T9860] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 372.390338][ T9868] netlink: 'syz.2.1960': attribute type 3 has an invalid length. [ 372.434316][ T9868] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1960'. [ 372.678133][ T9881] FAULT_INJECTION: forcing a failure. [ 372.678133][ T9881] name failslab, interval 1, probability 0, space 0, times 0 [ 372.752811][ T9881] CPU: 0 PID: 9881 Comm: syz.2.1967 Not tainted syzkaller #0 [ 372.760261][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.770353][ T9881] Call Trace: [ 372.773748][ T9881] [ 372.776777][ T9881] dump_stack_lvl+0x188/0x24e [ 372.781591][ T9881] ? show_regs_print_info+0x12/0x12 [ 372.786878][ T9881] ? load_image+0x400/0x400 [ 372.791443][ T9881] ? __might_sleep+0xd0/0xd0 [ 372.796119][ T9881] ? __lock_acquire+0x7d10/0x7d10 [ 372.801253][ T9881] should_fail_ex+0x399/0x4d0 [ 372.806028][ T9881] should_failslab+0x5/0x20 [ 372.810606][ T9881] slab_pre_alloc_hook+0x59/0x310 [ 372.815713][ T9881] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 372.821545][ T9881] __kmem_cache_alloc_node+0x4f/0x260 [ 372.826977][ T9881] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 372.832735][ T9881] __kmalloc+0xa0/0x240 [ 372.836986][ T9881] tomoyo_realpath_from_path+0xdf/0x5d0 [ 372.842612][ T9881] ? tomoyo_path_number_perm+0x205/0x650 [ 372.848294][ T9881] tomoyo_path_number_perm+0x22f/0x650 [ 372.853814][ T9881] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 372.859318][ T9881] ? ksys_write+0x1c0/0x250 [ 372.863949][ T9881] ? common_file_perm+0x171/0x1c0 [ 372.869151][ T9881] ? __fget_files+0x28/0x4b0 [ 372.873798][ T9881] ? __fget_files+0x28/0x4b0 [ 372.878469][ T9881] security_file_ioctl+0x6c/0xa0 [ 372.883506][ T9881] __se_sys_ioctl+0x48/0x170 [ 372.888158][ T9881] do_syscall_64+0x4c/0xa0 [ 372.892607][ T9881] ? clear_bhb_loop+0x60/0xb0 [ 372.897410][ T9881] ? clear_bhb_loop+0x60/0xb0 [ 372.902138][ T9881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.908071][ T9881] RIP: 0033:0x7f1f8b79ce59 [ 372.912576][ T9881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.932262][ T9881] RSP: 002b:00007f1f8c67f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.940772][ T9881] RAX: ffffffffffffffda RBX: 00007f1f8ba15fa0 RCX: 00007f1f8b79ce59 [ 372.948800][ T9881] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000005 [ 372.956807][ T9881] RBP: 00007f1f8c67f090 R08: 0000000000000000 R09: 0000000000000000 [ 372.964813][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.972817][ T9881] R13: 00007f1f8ba16038 R14: 00007f1f8ba15fa0 R15: 00007ffcfc240da8 [ 372.980846][ T9881] [ 373.072039][ T9881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 373.388759][ T9896] netlink: 'syz.1.1970': attribute type 2 has an invalid length. [ 373.399342][ T9896] netlink: 'syz.1.1970': attribute type 8 has an invalid length. [ 373.491450][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1970'. [ 373.513437][ T9904] netlink: 'syz.1.1970': attribute type 10 has an invalid length. [ 373.697436][ T9907] device syzkaller0 entered promiscuous mode [ 373.714957][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1972'. [ 375.411416][ T9924] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1975'. [ 375.420694][ T9924] device bridge_slave_1 entered promiscuous mode [ 376.325769][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'. [ 376.765330][ T9961] device syzkaller0 entered promiscuous mode [ 378.346845][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.353303][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.832487][ T9963] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1989'. [ 378.851695][ T9974] netlink: 'syz.1.1992': attribute type 10 has an invalid length. [ 379.254169][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 379.849298][T10018] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2005'. [ 379.932655][T10024] device syzkaller0 entered promiscuous mode [ 381.281583][T10028] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2008'. [ 381.407242][T10036] netlink: 'syz.4.2009': attribute type 10 has an invalid length. [ 381.442586][T10036] device macvlan0 entered promiscuous mode [ 381.453792][T10036] team0: Port device macvlan0 added [ 381.460843][T10034] netlink: 'syz.1.2011': attribute type 2 has an invalid length. [ 381.469398][T10034] netlink: 'syz.1.2011': attribute type 8 has an invalid length. [ 381.483326][T10034] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2011'. [ 381.493419][T10040] netlink: 'syz.1.2011': attribute type 10 has an invalid length. [ 381.702952][T10045] netlink: 'syz.3.2012': attribute type 10 has an invalid length. [ 382.307999][T10052] netlink: 'syz.2.2015': attribute type 10 has an invalid length. [ 382.559442][T10061] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2018'. [ 382.778746][T10071] device syzkaller0 entered promiscuous mode [ 384.251615][T10079] netlink: 'syz.4.2024': attribute type 2 has an invalid length. [ 384.259420][T10079] netlink: 'syz.4.2024': attribute type 8 has an invalid length. [ 384.267700][T10079] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2024'. [ 384.289492][T10082] netlink: 'syz.4.2024': attribute type 10 has an invalid length. [ 384.570712][T10099] netlink: 'syz.3.2030': attribute type 10 has an invalid length. [ 384.849701][T10108] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2031'. [ 384.983932][T10111] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2032'. [ 385.443920][T10124] netlink: 'syz.2.2038': attribute type 21 has an invalid length. [ 385.521640][T10125] netlink: 'syz.2.2038': attribute type 21 has an invalid length. [ 385.655775][T10132] netlink: 'syz.0.2040': attribute type 2 has an invalid length. [ 385.672644][T10132] netlink: 'syz.0.2040': attribute type 8 has an invalid length. [ 385.682417][T10132] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2040'. [ 385.730923][T10130] device syzkaller0 entered promiscuous mode [ 385.738194][T10132] netlink: 'syz.0.2040': attribute type 10 has an invalid length. [ 385.821936][T10136] FAULT_INJECTION: forcing a failure. [ 385.821936][T10136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.847095][T10134] device syzkaller0 entered promiscuous mode [ 385.861573][T10136] CPU: 1 PID: 10136 Comm: syz.2.2041 Not tainted syzkaller #0 [ 385.869070][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 385.879139][T10136] Call Trace: [ 385.882428][T10136] [ 385.885372][T10136] dump_stack_lvl+0x188/0x24e [ 385.890073][T10136] ? show_regs_print_info+0x12/0x12 [ 385.895287][T10136] ? load_image+0x400/0x400 [ 385.899816][T10136] ? __lock_acquire+0x7d10/0x7d10 [ 385.904867][T10136] should_fail_ex+0x399/0x4d0 [ 385.909566][T10136] _copy_from_iter+0x1c0/0x1130 [ 385.914465][T10136] ? __lock_acquire+0x7d10/0x7d10 [ 385.919522][T10136] ? mark_lock+0x94/0x320 [ 385.923875][T10136] ? copyout_mc+0x110/0x110 [ 385.928376][T10136] ? __virt_addr_valid+0x188/0x540 [ 385.933573][T10136] ? __virt_addr_valid+0x188/0x540 [ 385.938679][T10136] ? __virt_addr_valid+0x465/0x540 [ 385.943788][T10136] ? __check_object_size+0x500/0xa40 [ 385.949070][T10136] skb_copy_datagram_from_iter+0xef/0x690 [ 385.954842][T10136] ? napi_get_frags+0xb7/0x140 [ 385.959706][T10136] tun_get_user+0xb81/0x3c70 [ 385.964342][T10136] ? rcu_read_unlock+0xa0/0xa0 [ 385.969107][T10136] ? tun_get+0x1c/0x2e0 [ 385.973260][T10136] ? __lock_acquire+0x7d10/0x7d10 [ 385.978290][T10136] ? tun_get+0x1c/0x2e0 [ 385.982442][T10136] tun_chr_write_iter+0x112/0x1f0 [ 385.987459][T10136] vfs_write+0x4b1/0xa30 [ 385.991711][T10136] ? file_end_write+0x250/0x250 [ 385.996562][T10136] ? __fget_files+0x43d/0x4b0 [ 386.001242][T10136] ? __fdget_pos+0x1d4/0x360 [ 386.005826][T10136] ? ksys_write+0x71/0x250 [ 386.010241][T10136] ksys_write+0x14c/0x250 [ 386.014569][T10136] ? __ia32_sys_read+0x80/0x80 [ 386.019331][T10136] ? lockdep_hardirqs_on+0x94/0x140 [ 386.024526][T10136] do_syscall_64+0x4c/0xa0 [ 386.028935][T10136] ? clear_bhb_loop+0x60/0xb0 [ 386.033608][T10136] ? clear_bhb_loop+0x60/0xb0 [ 386.038281][T10136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.044171][T10136] RIP: 0033:0x7f1f8b79ce59 [ 386.048596][T10136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.068203][T10136] RSP: 002b:00007f1f8c65e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 386.076613][T10136] RAX: ffffffffffffffda RBX: 00007f1f8ba16090 RCX: 00007f1f8b79ce59 [ 386.084585][T10136] RDX: 0000000000000036 RSI: 0000200000000100 RDI: 0000000000000006 [ 386.092549][T10136] RBP: 00007f1f8c65e090 R08: 0000000000000000 R09: 0000000000000000 [ 386.100511][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.108476][T10136] R13: 00007f1f8ba16128 R14: 00007f1f8ba16090 R15: 00007ffcfc240da8 [ 386.116454][T10136] [ 387.949039][T10139] netlink: 'syz.0.2042': attribute type 6 has an invalid length. [ 389.678443][T10144] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2043'. [ 389.925630][T10175] validate_nla: 1 callbacks suppressed [ 389.925729][T10175] netlink: 'syz.0.2052': attribute type 2 has an invalid length. [ 389.944965][T10175] netlink: 'syz.0.2052': attribute type 8 has an invalid length. [ 389.953150][T10175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2052'. [ 389.972910][T10175] netlink: 'syz.0.2052': attribute type 10 has an invalid length. [ 390.128012][T10189] netlink: 'syz.0.2055': attribute type 3 has an invalid length. [ 390.141485][T10189] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2055'. [ 391.043859][T10189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2055'. [ 393.100926][T10206] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2060'. [ 393.254081][T10217] netlink: 'syz.0.2066': attribute type 2 has an invalid length. [ 393.314608][T10217] netlink: 'syz.0.2066': attribute type 8 has an invalid length. [ 393.332320][T10221] netlink: 'syz.1.2065': attribute type 1 has an invalid length. [ 393.340106][T10221] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2065'. [ 393.350886][T10217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2066'. [ 393.390644][T10224] netlink: 'syz.0.2066': attribute type 10 has an invalid length. [ 393.489140][T10221] sctp: [Deprecated]: syz.1.2065 (pid 10221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.489140][T10221] Use struct sctp_sack_info instead [ 394.547776][T10246] device syzkaller0 entered promiscuous mode [ 394.688790][T10254] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2077'. [ 394.860887][T10258] netlink: 'syz.2.2079': attribute type 2 has an invalid length. [ 394.886915][T10258] netlink: 'syz.2.2079': attribute type 8 has an invalid length. [ 394.894988][T10258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2079'. [ 397.271518][T10285] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2090'. [ 397.409228][T10292] validate_nla: 1 callbacks suppressed [ 397.409241][T10292] netlink: 'syz.2.2093': attribute type 2 has an invalid length. [ 397.433970][T10292] netlink: 'syz.2.2093': attribute type 8 has an invalid length. [ 397.447438][T10292] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2093'. [ 397.503565][T10292] netlink: 'syz.2.2093': attribute type 10 has an invalid length. [ 397.541294][T10298] FAULT_INJECTION: forcing a failure. [ 397.541294][T10298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.578325][T10298] CPU: 1 PID: 10298 Comm: syz.4.2095 Not tainted syzkaller #0 [ 397.585827][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 397.595891][T10298] Call Trace: [ 397.599176][T10298] [ 397.602112][T10298] dump_stack_lvl+0x188/0x24e [ 397.606811][T10298] ? show_regs_print_info+0x12/0x12 [ 397.612028][T10298] ? load_image+0x400/0x400 [ 397.616550][T10298] ? __lock_acquire+0x7d10/0x7d10 [ 397.621600][T10298] ? __virt_addr_valid+0x188/0x540 [ 397.626731][T10298] should_fail_ex+0x399/0x4d0 [ 397.631426][T10298] _copy_from_user+0x2c/0x170 [ 397.636210][T10298] vmemdup_user+0xa8/0x1d0 [ 397.640641][T10298] map_lookup_and_delete_elem+0x3c5/0x840 [ 397.646429][T10298] __sys_bpf+0x5cc/0x780 [ 397.650673][T10298] ? bpf_link_show_fdinfo+0x380/0x380 [ 397.656052][T10298] ? lock_chain_count+0x20/0x20 [ 397.660904][T10298] __x64_sys_bpf+0x78/0x90 [ 397.665312][T10298] do_syscall_64+0x4c/0xa0 [ 397.669716][T10298] ? clear_bhb_loop+0x60/0xb0 [ 397.674388][T10298] ? clear_bhb_loop+0x60/0xb0 [ 397.679057][T10298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.684947][T10298] RIP: 0033:0x7f94c679ce59 [ 397.689352][T10298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.708948][T10298] RSP: 002b:00007f94c7591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.717354][T10298] RAX: ffffffffffffffda RBX: 00007f94c6a15fa0 RCX: 00007f94c679ce59 [ 397.725319][T10298] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000015 [ 397.733280][T10298] RBP: 00007f94c7591090 R08: 0000000000000000 R09: 0000000000000000 [ 397.741242][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.749205][T10298] R13: 00007f94c6a16038 R14: 00007f94c6a15fa0 R15: 00007ffc52a4c6e8 [ 397.757179][T10298] [ 398.788569][T10313] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2103'. [ 398.837954][T10315] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2104'. [ 399.350125][T10328] device sit0 entered promiscuous mode [ 399.585675][T10336] netlink: 'syz.2.2112': attribute type 2 has an invalid length. [ 399.613154][T10332] netlink: 'syz.3.2110': attribute type 10 has an invalid length. [ 399.679179][T10336] device 0 entered promiscuous mode [ 399.689778][T10338] netlink: 54183 bytes leftover after parsing attributes in process `syz.0.2113'. [ 399.891100][T10342] netlink: 'syz.3.2114': attribute type 2 has an invalid length. [ 400.555559][T10354] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2118'. [ 400.620487][T10357] FAULT_INJECTION: forcing a failure. [ 400.620487][T10357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.731484][T10357] CPU: 0 PID: 10357 Comm: syz.0.2119 Not tainted syzkaller #0 [ 400.739001][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.749072][T10357] Call Trace: [ 400.752372][T10357] [ 400.755316][T10357] dump_stack_lvl+0x188/0x24e [ 400.760022][T10357] ? show_regs_print_info+0x12/0x12 [ 400.765237][T10357] ? load_image+0x400/0x400 [ 400.769768][T10357] ? __lock_acquire+0x7d10/0x7d10 [ 400.774823][T10357] should_fail_ex+0x399/0x4d0 [ 400.779521][T10357] _copy_from_user+0x2c/0x170 [ 400.784221][T10357] iovec_from_user+0x143/0x360 [ 400.789006][T10357] __import_iovec+0x6d/0x500 [ 400.793613][T10357] import_iovec+0x6f/0xa0 [ 400.797940][T10357] ___sys_sendmsg+0x252/0x360 [ 400.802613][T10357] ? __sys_sendmsg+0x290/0x290 [ 400.807382][T10357] ? __lock_acquire+0x7d10/0x7d10 [ 400.812419][T10357] __se_sys_sendmsg+0x1bb/0x2a0 [ 400.817261][T10357] ? __x64_sys_sendmsg+0x80/0x80 [ 400.822205][T10357] ? lockdep_hardirqs_on+0x94/0x140 [ 400.827398][T10357] do_syscall_64+0x4c/0xa0 [ 400.831804][T10357] ? clear_bhb_loop+0x60/0xb0 [ 400.836478][T10357] ? clear_bhb_loop+0x60/0xb0 [ 400.841151][T10357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.847043][T10357] RIP: 0033:0x7fa62f99ce59 [ 400.851449][T10357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.871049][T10357] RSP: 002b:00007fa6308cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.879455][T10357] RAX: ffffffffffffffda RBX: 00007fa62fc16090 RCX: 00007fa62f99ce59 [ 400.887418][T10357] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 400.895378][T10357] RBP: 00007fa6308cf090 R08: 0000000000000000 R09: 0000000000000000 [ 400.903340][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.911323][T10357] R13: 00007fa62fc16128 R14: 00007fa62fc16090 R15: 00007fffae3cfee8 [ 400.919312][T10357] [ 401.401191][T10370] netlink: 'syz.2.2124': attribute type 10 has an invalid length. [ 401.509176][T10373] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.2126'. [ 401.688161][T10375] netlink: 'syz.3.2127': attribute type 2 has an invalid length. [ 401.792716][T10375] device 0 entered promiscuous mode [ 401.832019][T10382] netlink: 'syz.2.2128': attribute type 39 has an invalid length. [ 401.852491][T10385] netlink: 'syz.4.2131': attribute type 1 has an invalid length. [ 401.860263][T10385] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2131'. [ 402.052199][T10389] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2132'. [ 402.436248][T10402] validate_nla: 2 callbacks suppressed [ 402.436265][T10402] netlink: 'syz.2.2139': attribute type 2 has an invalid length. [ 402.551332][T10407] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.2141'. [ 403.268310][T10418] netlink: 'syz.4.2145': attribute type 39 has an invalid length. [ 403.597620][T10421] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2147'. [ 403.701014][T10423] netlink: 'syz.0.2146': attribute type 2 has an invalid length. [ 403.849281][T10423] device 0 entered promiscuous mode [ 404.184400][T10436] netlink: 'syz.4.2153': attribute type 21 has an invalid length. [ 404.452005][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2157'. [ 404.741089][T10448] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2158'. [ 406.104224][T10462] netlink: 'syz.1.2164': attribute type 2 has an invalid length. [ 406.312749][T10473] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 406.570541][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2172'. [ 408.161971][T10493] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2187'. [ 410.486507][T10521] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.2186'. [ 410.588756][T10525] netlink: 'syz.4.2189': attribute type 10 has an invalid length. [ 410.755913][T10529] netlink: 'syz.0.2191': attribute type 21 has an invalid length. [ 410.777091][T10529] netlink: 'syz.0.2191': attribute type 1 has an invalid length. [ 411.197659][T10543] device syzkaller0 entered promiscuous mode [ 413.598735][T10564] netlink: 'syz.1.2201': attribute type 29 has an invalid length. [ 413.608041][T10564] netlink: 'syz.1.2201': attribute type 29 has an invalid length. [ 413.618342][T10564] FAULT_INJECTION: forcing a failure. [ 413.618342][T10564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.652160][T10564] CPU: 0 PID: 10564 Comm: syz.1.2201 Not tainted syzkaller #0 [ 413.659652][T10564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.669716][T10564] Call Trace: [ 413.673005][T10564] [ 413.675943][T10564] dump_stack_lvl+0x188/0x24e [ 413.680638][T10564] ? show_regs_print_info+0x12/0x12 [ 413.685849][T10564] ? load_image+0x400/0x400 [ 413.690366][T10564] ? __might_fault+0xa6/0x120 [ 413.695144][T10564] should_fail_ex+0x399/0x4d0 [ 413.699837][T10564] copyout+0x1b/0x120 [ 413.703898][T10564] _copy_to_iter+0x48b/0x1040 [ 413.708599][T10564] ? iov_iter_init+0x1f0/0x1f0 [ 413.713382][T10564] ? __virt_addr_valid+0x188/0x540 [ 413.718509][T10564] ? __virt_addr_valid+0x465/0x540 [ 413.723643][T10564] ? __phys_addr_symbol+0x2b/0x70 [ 413.728681][T10564] ? __check_object_size+0x500/0xa40 [ 413.733986][T10564] __skb_datagram_iter+0xde/0x740 [ 413.739030][T10564] ? skb_copy_datagram_iter+0x290/0x290 [ 413.744600][T10564] skb_copy_datagram_iter+0xd7/0x290 [ 413.749906][T10564] netlink_recvmsg+0x2d0/0xe00 [ 413.754769][T10564] ? netlink_sendmsg+0xbd0/0xbd0 [ 413.759725][T10564] ? aa_af_perm+0x340/0x340 [ 413.764296][T10564] ? __might_fault+0xa6/0x120 [ 413.768970][T10564] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 413.774294][T10564] ? security_socket_recvmsg+0x85/0xb0 [ 413.779743][T10564] ? netlink_sendmsg+0xbd0/0xbd0 [ 413.784676][T10564] ____sys_recvmsg+0x2cb/0x5e0 [ 413.789437][T10564] ? __sys_recvmsg_sock+0x40/0x40 [ 413.794457][T10564] ? import_iovec+0x6f/0xa0 [ 413.798951][T10564] ___sys_recvmsg+0x212/0x590 [ 413.803620][T10564] ? __sys_recvmsg+0x290/0x290 [ 413.808375][T10564] ? common_file_perm+0x171/0x1c0 [ 413.813397][T10564] ? __fget_files+0x43d/0x4b0 [ 413.818075][T10564] __x64_sys_recvmsg+0x205/0x2e0 [ 413.823005][T10564] ? ___sys_recvmsg+0x590/0x590 [ 413.827852][T10564] ? lockdep_hardirqs_on+0x94/0x140 [ 413.833046][T10564] do_syscall_64+0x4c/0xa0 [ 413.837449][T10564] ? clear_bhb_loop+0x60/0xb0 [ 413.842120][T10564] ? clear_bhb_loop+0x60/0xb0 [ 413.846802][T10564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.852688][T10564] RIP: 0033:0x7f4f8799ce59 [ 413.857095][T10564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.876698][T10564] RSP: 002b:00007f4f88801028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 413.885103][T10564] RAX: ffffffffffffffda RBX: 00007f4f87c15fa0 RCX: 00007f4f8799ce59 [ 413.893063][T10564] RDX: 0000000040002002 RSI: 0000200000000200 RDI: 0000000000000003 [ 413.901024][T10564] RBP: 00007f4f88801090 R08: 0000000000000000 R09: 0000000000000000 [ 413.908983][T10564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.916939][T10564] R13: 00007f4f87c16038 R14: 00007f4f87c15fa0 R15: 00007ffcbd53b548 [ 413.924911][T10564] [ 414.049630][T10572] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2202'. [ 414.072624][T10572] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 414.086956][T10572] dvmrp1: linktype set to 768 [ 414.116165][T10574] netlink: 'syz.2.2204': attribute type 10 has an invalid length. [ 414.380076][T10564] netlink: 'syz.1.2201': attribute type 29 has an invalid length. [ 414.776265][T10587] device syzkaller0 entered promiscuous mode [ 414.969729][T10589] device syzkaller0 entered promiscuous mode [ 416.657871][T10620] ref_ctr_offset mismatch. inode: 0x9b6 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 418.277079][T10622] netlink: 'syz.0.2217': attribute type 10 has an invalid length. [ 418.501871][T10629] netlink: 'syz.4.2219': attribute type 29 has an invalid length. [ 418.565250][T10629] netlink: 'syz.4.2219': attribute type 29 has an invalid length. [ 420.761823][T10653] bridge_slave_0: mtu less than device minimum [ 420.772959][T10655] FAULT_INJECTION: forcing a failure. [ 420.772959][T10655] name failslab, interval 1, probability 0, space 0, times 0 [ 420.835053][T10655] CPU: 1 PID: 10655 Comm: syz.4.2231 Not tainted syzkaller #0 [ 420.842556][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.852606][T10655] Call Trace: [ 420.855876][T10655] [ 420.858799][T10655] dump_stack_lvl+0x188/0x24e [ 420.863475][T10655] ? show_regs_print_info+0x12/0x12 [ 420.868665][T10655] ? load_image+0x400/0x400 [ 420.873170][T10655] ? __might_sleep+0xd0/0xd0 [ 420.877758][T10655] ? __lock_acquire+0x7d10/0x7d10 [ 420.882783][T10655] should_fail_ex+0x399/0x4d0 [ 420.887454][T10655] should_failslab+0x5/0x20 [ 420.891953][T10655] slab_pre_alloc_hook+0x59/0x310 [ 420.896973][T10655] ? tomoyo_encode+0x27e/0x540 [ 420.901737][T10655] __kmem_cache_alloc_node+0x4f/0x260 [ 420.907104][T10655] ? tomoyo_encode+0x27e/0x540 [ 420.911863][T10655] __kmalloc+0xa0/0x240 [ 420.916021][T10655] tomoyo_encode+0x27e/0x540 [ 420.920610][T10655] tomoyo_realpath_from_path+0x58e/0x5d0 [ 420.926244][T10655] ? tomoyo_path_number_perm+0x205/0x650 [ 420.931872][T10655] tomoyo_path_number_perm+0x22f/0x650 [ 420.937329][T10655] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 420.942783][T10655] ? ksys_write+0x1c0/0x250 [ 420.947282][T10655] ? common_file_perm+0x171/0x1c0 [ 420.952323][T10655] ? __fget_files+0x28/0x4b0 [ 420.956907][T10655] ? __fget_files+0x28/0x4b0 [ 420.961507][T10655] security_file_ioctl+0x6c/0xa0 [ 420.966441][T10655] __se_sys_ioctl+0x48/0x170 [ 420.971026][T10655] do_syscall_64+0x4c/0xa0 [ 420.975436][T10655] ? clear_bhb_loop+0x60/0xb0 [ 420.980108][T10655] ? clear_bhb_loop+0x60/0xb0 [ 420.984786][T10655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.990676][T10655] RIP: 0033:0x7f94c679ce59 [ 420.995084][T10655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.014681][T10655] RSP: 002b:00007f94c7591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.023088][T10655] RAX: ffffffffffffffda RBX: 00007f94c6a15fa0 RCX: 00007f94c679ce59 [ 421.031051][T10655] RDX: 0000200000000000 RSI: 0000000000008922 RDI: 0000000000000004 [ 421.039013][T10655] RBP: 00007f94c7591090 R08: 0000000000000000 R09: 0000000000000000 [ 421.046974][T10655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.054934][T10655] R13: 00007f94c6a16038 R14: 00007f94c6a15fa0 R15: 00007ffc52a4c6e8 [ 421.062919][T10655] [ 421.126521][T10650] device syzkaller0 entered promiscuous mode [ 421.163371][T10660] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2230'. [ 421.261627][T10655] ERROR: Out of memory at tomoyo_realpath_from_path. [ 421.377775][T10655] bridge_slave_0: mtu less than device minimum [ 428.330067][T10813] device syzkaller0 entered promiscuous mode [ 431.529396][T10828] netlink: 'syz.4.2260': attribute type 10 has an invalid length. [ 431.592687][T10828] device wg1 entered promiscuous mode [ 431.598244][T10828] team0: Device wg1 is of different type [ 434.040318][T10853] device syzkaller0 entered promiscuous mode [ 439.786150][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.792627][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.026059][T10893] FAULT_INJECTION: forcing a failure. [ 440.026059][T10893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.082464][T10893] CPU: 1 PID: 10893 Comm: syz.1.2280 Not tainted syzkaller #0 [ 440.089994][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 440.100075][T10893] Call Trace: [ 440.103377][T10893] [ 440.106335][T10893] dump_stack_lvl+0x188/0x24e [ 440.111054][T10893] ? show_regs_print_info+0x12/0x12 [ 440.116283][T10893] ? load_image+0x400/0x400 [ 440.120827][T10893] ? __lock_acquire+0x7d10/0x7d10 [ 440.125912][T10893] should_fail_ex+0x399/0x4d0 [ 440.130633][T10893] _copy_from_user+0x2c/0x170 [ 440.135351][T10893] ___sys_sendmsg+0x1c3/0x360 [ 440.140088][T10893] ? __sys_sendmsg+0x290/0x290 [ 440.144946][T10893] ? __lock_acquire+0x7d10/0x7d10 [ 440.150084][T10893] __se_sys_sendmsg+0x1bb/0x2a0 [ 440.154974][T10893] ? __x64_sys_sendmsg+0x80/0x80 [ 440.159992][T10893] ? lockdep_hardirqs_on+0x94/0x140 [ 440.165235][T10893] do_syscall_64+0x4c/0xa0 [ 440.169680][T10893] ? clear_bhb_loop+0x60/0xb0 [ 440.174397][T10893] ? clear_bhb_loop+0x60/0xb0 [ 440.179115][T10893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.185042][T10893] RIP: 0033:0x7f4f8799ce59 [ 440.189482][T10893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.209113][T10893] RSP: 002b:00007f4f88801028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.217565][T10893] RAX: ffffffffffffffda RBX: 00007f4f87c15fa0 RCX: 00007f4f8799ce59 [ 440.225561][T10893] RDX: 000000002000c810 RSI: 0000200000000040 RDI: 0000000000000003 [ 440.233541][T10893] RBP: 00007f4f88801090 R08: 0000000000000000 R09: 0000000000000000 [ 440.241519][T10893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.249491][T10893] R13: 00007f4f87c16038 R14: 00007f4f87c15fa0 R15: 00007ffcbd53b548 [ 440.257499][T10893] [ 440.541098][T10904] netlink: 'syz.2.2283': attribute type 10 has an invalid length. [ 441.015278][T10923] device syzkaller0 entered promiscuous mode [ 441.674206][T10936] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.2293'. [ 445.781877][T10951] netlink: 'syz.1.2297': attribute type 10 has an invalid length. [ 446.878901][T10984] device syzkaller0 entered promiscuous mode [ 452.431911][T11004] netlink: 'syz.1.2311': attribute type 10 has an invalid length. [ 453.277847][T11053] netlink: 'syz.4.2329': attribute type 10 has an invalid length. [ 455.360628][T11072] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2333'. [ 455.458172][T11072] netlink: 'syz.3.2333': attribute type 39 has an invalid length. [ 455.557096][T11081] netlink: 'syz.4.2337': attribute type 2 has an invalid length. [ 455.581483][T11081] netlink: 'syz.4.2337': attribute type 8 has an invalid length. [ 455.589368][T11081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2337'. [ 455.832658][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2341'. [ 455.942373][T11099] netlink: 'syz.3.2342': attribute type 10 has an invalid length. [ 455.997093][T11101] netlink: 'syz.0.2343': attribute type 41 has an invalid length. [ 456.203768][T11111] netlink: 'syz.2.2347': attribute type 2 has an invalid length. [ 456.239627][T11111] netlink: 'syz.2.2347': attribute type 8 has an invalid length. [ 456.265642][T11111] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2347'. [ 456.377637][T11114] device syzkaller0 entered promiscuous mode [ 456.693791][T11133] netlink: 'syz.2.2355': attribute type 2 has an invalid length. [ 458.040349][T11133] device 1 entered promiscuous mode [ 458.049199][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2357'. [ 458.366692][T11155] device syzkaller0 entered promiscuous mode [ 458.848836][T11172] netlink: 'syz.3.2365': attribute type 2 has an invalid length. [ 459.080152][T11183] FAULT_INJECTION: forcing a failure. [ 459.080152][T11183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.094567][T11183] CPU: 0 PID: 11183 Comm: syz.2.2369 Not tainted syzkaller #0 [ 459.102052][T11183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 459.112117][T11183] Call Trace: [ 459.115400][T11183] [ 459.118344][T11183] dump_stack_lvl+0x188/0x24e [ 459.123046][T11183] ? show_regs_print_info+0x12/0x12 [ 459.128260][T11183] ? load_image+0x400/0x400 [ 459.132784][T11183] ? __lock_acquire+0x7d10/0x7d10 [ 459.137823][T11183] ? __virt_addr_valid+0x188/0x540 [ 459.142956][T11183] should_fail_ex+0x399/0x4d0 [ 459.147663][T11183] _copy_from_user+0x2c/0x170 [ 459.152364][T11183] bpf_prog_test_run_skb+0x268/0x1890 [ 459.157764][T11183] ? __fget_files+0x28/0x4b0 [ 459.162363][T11183] ? __fget_files+0x28/0x4b0 [ 459.166945][T11183] ? __fget_files+0x43d/0x4b0 [ 459.171639][T11183] ? cpu_online+0xa0/0xa0 [ 459.175985][T11183] bpf_prog_test_run+0x31e/0x390 [ 459.180937][T11183] __sys_bpf+0x62b/0x780 [ 459.185176][T11183] ? bpf_link_show_fdinfo+0x380/0x380 [ 459.190544][T11183] ? lock_chain_count+0x20/0x20 [ 459.195392][T11183] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 459.201395][T11183] __x64_sys_bpf+0x78/0x90 [ 459.205805][T11183] do_syscall_64+0x4c/0xa0 [ 459.210210][T11183] ? clear_bhb_loop+0x60/0xb0 [ 459.214883][T11183] ? clear_bhb_loop+0x60/0xb0 [ 459.219564][T11183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.225455][T11183] RIP: 0033:0x7f1f8b79ce59 [ 459.229870][T11183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.249465][T11183] RSP: 002b:00007f1f8c67f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.257863][T11183] RAX: ffffffffffffffda RBX: 00007f1f8ba15fa0 RCX: 00007f1f8b79ce59 [ 459.265822][T11183] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 459.273787][T11183] RBP: 00007f1f8c67f090 R08: 0000000000000000 R09: 0000000000000000 [ 459.281757][T11183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.289720][T11183] R13: 00007f1f8ba16038 R14: 00007f1f8ba15fa0 R15: 00007ffcfc240da8 [ 459.297696][T11183] [ 460.597279][T11164] netlink: 'syz.4.2361': attribute type 41 has an invalid length. [ 460.609455][T11172] device 0 entered promiscuous mode [ 460.783645][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2372'. [ 461.144769][T11218] netlink: 'syz.3.2380': attribute type 2 has an invalid length. [ 461.176648][T11218] netlink: 'syz.3.2380': attribute type 8 has an invalid length. [ 461.185571][T11218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2380'. [ 461.458130][T11227] netlink: 'syz.2.2383': attribute type 41 has an invalid length. [ 461.520886][ T4277] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 461.605711][T11232] netlink: 'syz.4.2385': attribute type 10 has an invalid length. [ 461.675157][T11232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2385'. [ 461.826959][T11232] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 462.536298][T11242] device syzkaller0 entered promiscuous mode [ 462.729806][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'. [ 464.666894][T11278] netlink: 'syz.2.2398': attribute type 29 has an invalid length. [ 464.718036][T11279] netlink: 'syz.2.2398': attribute type 3 has an invalid length. [ 464.725885][T11279] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2398'. [ 465.044329][T11278] netlink: 'syz.2.2398': attribute type 29 has an invalid length. [ 465.052962][T11280] netlink: 'syz.2.2398': attribute type 29 has an invalid length. [ 465.328369][T11287] netlink: 'syz.1.2400': attribute type 29 has an invalid length. [ 465.411559][T11287] netlink: 'syz.1.2400': attribute type 29 has an invalid length. [ 465.458931][T11287] netlink: 'syz.1.2400': attribute type 29 has an invalid length. [ 465.934524][T11284] device syzkaller0 entered promiscuous mode [ 469.807057][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'. [ 470.104987][T11339] netlink: 'syz.4.2415': attribute type 3 has an invalid length. [ 470.130243][T11339] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2415'. [ 471.890597][T11376] device syzkaller0 entered promiscuous mode [ 471.935325][T11360] device syzkaller0 entered promiscuous mode [ 473.318306][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2429'. [ 475.868349][T11399] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2433'. [ 477.490531][T11411] netlink: 'syz.4.2437': attribute type 10 has an invalid length. [ 477.501293][T11415] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2438'. [ 477.520957][T11416] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2438'. [ 477.563069][T11418] netlink: 'syz.3.2436': attribute type 21 has an invalid length. [ 477.577897][T11418] netlink: 'syz.3.2436': attribute type 6 has an invalid length. [ 477.587422][T11418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2436'. [ 477.613541][T11422] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2439'. [ 477.669032][T11422] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2439'. [ 477.996683][T11425] device syzkaller0 entered promiscuous mode [ 479.576313][T11448] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2448'. [ 479.721143][T11455] netlink: 'syz.3.2450': attribute type 10 has an invalid length. [ 482.674072][T11499] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2461'. [ 483.001650][T11511] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 483.048175][T11511] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 483.060033][T11511] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 483.081962][T11511] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 483.098159][T11511] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 483.110161][T11511] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 483.175543][T11511] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 483.191582][T11503] device syzkaller0 entered promiscuous mode [ 483.214257][T11519] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 485.505415][T11541] FAULT_INJECTION: forcing a failure. [ 485.505415][T11541] name failslab, interval 1, probability 0, space 0, times 0 [ 485.542210][T11541] CPU: 0 PID: 11541 Comm: syz.1.2475 Not tainted syzkaller #0 [ 485.549716][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 485.559781][T11541] Call Trace: [ 485.563066][T11541] [ 485.566001][T11541] dump_stack_lvl+0x188/0x24e [ 485.570696][T11541] ? show_regs_print_info+0x12/0x12 [ 485.575905][T11541] ? load_image+0x400/0x400 [ 485.580427][T11541] ? __might_sleep+0xd0/0xd0 [ 485.585025][T11541] ? __lock_acquire+0x7d10/0x7d10 [ 485.590055][T11541] should_fail_ex+0x399/0x4d0 [ 485.594727][T11541] should_failslab+0x5/0x20 [ 485.599221][T11541] slab_pre_alloc_hook+0x59/0x310 [ 485.604239][T11541] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 485.609527][T11541] __kmem_cache_alloc_node+0x4f/0x260 [ 485.614887][T11541] ? memset+0x1e/0x40 [ 485.618861][T11541] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 485.624139][T11541] kmalloc_trace+0x26/0xe0 [ 485.628558][T11541] __xdp_reg_mem_model+0x1e0/0x5c0 [ 485.633670][T11541] ? kvmalloc_node+0x6c/0x180 [ 485.638342][T11541] ? kvmalloc_node+0x6c/0x180 [ 485.643012][T11541] ? xdp_reg_mem_model+0x30/0x30 [ 485.647948][T11541] xdp_reg_mem_model+0x1e/0x30 [ 485.652703][T11541] bpf_test_run_xdp_live+0x299/0x1a90 [ 485.658153][T11541] ? 0xffffffffa0004440 [ 485.662300][T11541] ? text_poke_copy+0x79/0x90 [ 485.667027][T11541] ? 0xffffffffa0004440 [ 485.671168][T11541] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 485.677134][T11541] ? 0xffffffffa0004440 [ 485.681299][T11541] ? xdp_convert_md_to_buff+0x330/0x330 [ 485.686875][T11541] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 485.693143][T11541] ? bpf_test_init+0x119/0x140 [ 485.697908][T11541] ? xdp_convert_md_to_buff+0x5b/0x330 [ 485.703364][T11541] bpf_prog_test_run_xdp+0x736/0xf10 [ 485.708654][T11541] ? dev_put+0x80/0x80 [ 485.712726][T11541] ? dev_put+0x80/0x80 [ 485.716793][T11541] bpf_prog_test_run+0x31e/0x390 [ 485.721730][T11541] __sys_bpf+0x62b/0x780 [ 485.725966][T11541] ? bpf_link_show_fdinfo+0x380/0x380 [ 485.731344][T11541] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.737678][T11541] __x64_sys_bpf+0x78/0x90 [ 485.742087][T11541] do_syscall_64+0x4c/0xa0 [ 485.746492][T11541] ? clear_bhb_loop+0x60/0xb0 [ 485.751165][T11541] ? clear_bhb_loop+0x60/0xb0 [ 485.755839][T11541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.761726][T11541] RIP: 0033:0x7f4f8799ce59 [ 485.766132][T11541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.785726][T11541] RSP: 002b:00007f4f88801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.794132][T11541] RAX: ffffffffffffffda RBX: 00007f4f87c15fa0 RCX: 00007f4f8799ce59 [ 485.802122][T11541] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 485.810080][T11541] RBP: 00007f4f88801090 R08: 0000000000000000 R09: 0000000000000000 [ 485.818037][T11541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.825996][T11541] R13: 00007f4f87c16038 R14: 00007f4f87c15fa0 R15: 00007ffcbd53b548 [ 485.833969][T11541] [ 486.145828][ T4273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 486.155348][ T4273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 486.165611][ T4273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 486.175763][ T4273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 486.184339][ T4273] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 486.191678][ T4273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 486.402321][T11554] chnl_net:caif_netlink_parms(): no params data found [ 486.529417][T11563] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 486.546813][ T9902] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.558157][T11563] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 486.572060][T11563] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 486.716319][ T9902] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.444964][ T9902] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.468908][T11554] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.476287][T11554] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.484464][T11554] device bridge_slave_0 entered promiscuous mode [ 487.530100][T11580] device syzkaller0 entered promiscuous mode [ 487.604893][ T9902] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.686579][T11554] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.701162][T11554] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.724216][T11554] device bridge_slave_1 entered promiscuous mode [ 487.789851][ T4273] Bluetooth: hci2: Malformed LE Event: 0x0d [ 488.273300][ T4273] Bluetooth: hci5: command 0x0409 tx timeout [ 489.579710][T11599] netlink: 'syz.3.2489': attribute type 21 has an invalid length. [ 489.587824][T11599] FAULT_INJECTION: forcing a failure. [ 489.587824][T11599] name failslab, interval 1, probability 0, space 0, times 0 [ 489.600834][T11599] CPU: 1 PID: 11599 Comm: syz.3.2489 Not tainted syzkaller #0 [ 489.608322][T11599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.618391][T11599] Call Trace: [ 489.621680][T11599] [ 489.624618][T11599] dump_stack_lvl+0x188/0x24e [ 489.629314][T11599] ? show_regs_print_info+0x12/0x12 [ 489.634535][T11599] ? load_image+0x400/0x400 [ 489.639056][T11599] ? __lock_acquire+0x7d10/0x7d10 [ 489.644088][T11599] ? load_image+0x400/0x400 [ 489.648594][T11599] should_fail_ex+0x399/0x4d0 [ 489.653280][T11599] should_failslab+0x5/0x20 [ 489.657772][T11599] slab_pre_alloc_hook+0x59/0x310 [ 489.662786][T11599] ? __nla_validate_parse+0x2072/0x2ac0 [ 489.668323][T11599] ? fib_create_info+0xa53/0x2490 [ 489.673383][T11599] __kmem_cache_alloc_node+0x4f/0x260 [ 489.678751][T11599] ? fib_create_info+0xa53/0x2490 [ 489.683767][T11599] __kmalloc+0xa0/0x240 [ 489.687922][T11599] fib_create_info+0xa53/0x2490 [ 489.692772][T11599] ? __lock_acquire+0x7d10/0x7d10 [ 489.697798][T11599] fib_table_insert+0xc2/0x1b20 [ 489.702650][T11599] ? lwtunnel_valid_encap_type+0x27a/0x5e0 [ 489.708519][T11599] ? lwtunnel_valid_encap_type+0x8c/0x5e0 [ 489.714236][T11599] ? rtm_to_fib_config+0xff4/0x1380 [ 489.719437][T11599] ? fib_new_table+0x106/0x2d0 [ 489.724197][T11599] inet_rtm_newroute+0x147/0x230 [ 489.729134][T11599] ? __mutex_lock+0x3b2/0xaf0 [ 489.734152][T11599] ? rcu_read_unlock+0xa0/0xa0 [ 489.738924][T11599] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 489.744088][T11599] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 489.749187][T11599] ? rcu_read_unlock+0xa0/0xa0 [ 489.753948][T11599] rtnetlink_rcv_msg+0x87c/0xfc0 [ 489.758883][T11599] ? rtnetlink_bind+0x80/0x80 [ 489.763547][T11599] ? mark_lock+0x94/0x320 [ 489.767874][T11599] ? __lock_acquire+0x12f4/0x7d10 [ 489.772903][T11599] ? verify_lock_unused+0x140/0x140 [ 489.778095][T11599] ? netlink_sendmsg+0x654/0xbd0 [ 489.783022][T11599] ? verify_lock_unused+0x140/0x140 [ 489.788237][T11599] netlink_rcv_skb+0x1fb/0x450 [ 489.792989][T11599] ? rtnetlink_bind+0x80/0x80 [ 489.797658][T11599] ? netlink_ack+0x1170/0x1170 [ 489.802416][T11599] ? netlink_deliver_tap+0x2e/0x1b0 [ 489.807606][T11599] netlink_unicast+0x74d/0x8d0 [ 489.812364][T11599] netlink_sendmsg+0x8ad/0xbd0 [ 489.817124][T11599] ? netlink_getsockopt+0x550/0x550 [ 489.822314][T11599] ? aa_sock_msg_perm+0x94/0x150 [ 489.827245][T11599] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 489.832697][T11599] ? security_socket_sendmsg+0x7c/0xa0 [ 489.838147][T11599] ? netlink_getsockopt+0x550/0x550 [ 489.843332][T11599] ____sys_sendmsg+0x5be/0x970 [ 489.848094][T11599] ? __sys_sendmsg_sock+0x30/0x30 [ 489.853111][T11599] ? __import_iovec+0x315/0x500 [ 489.857958][T11599] ? import_iovec+0x6f/0xa0 [ 489.862455][T11599] ___sys_sendmsg+0x2a2/0x360 [ 489.867128][T11599] ? __sys_sendmsg+0x290/0x290 [ 489.871894][T11599] ? __lock_acquire+0x7d10/0x7d10 [ 489.876930][T11599] __se_sys_sendmsg+0x1bb/0x2a0 [ 489.881778][T11599] ? __x64_sys_sendmsg+0x80/0x80 [ 489.886719][T11599] ? lockdep_hardirqs_on+0x94/0x140 [ 489.891915][T11599] do_syscall_64+0x4c/0xa0 [ 489.896318][T11599] ? clear_bhb_loop+0x60/0xb0 [ 489.900988][T11599] ? clear_bhb_loop+0x60/0xb0 [ 489.905663][T11599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.911628][T11599] RIP: 0033:0x7f0369d9ce59 [ 489.916052][T11599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.935664][T11599] RSP: 002b:00007f036acc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.944075][T11599] RAX: ffffffffffffffda RBX: 00007f036a016090 RCX: 00007f0369d9ce59 [ 489.952040][T11599] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 489.960001][T11599] RBP: 00007f036acc8090 R08: 0000000000000000 R09: 0000000000000000 [ 489.967962][T11599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.975924][T11599] R13: 00007f036a016128 R14: 00007f036a016090 R15: 00007ffd1aa776d8 [ 489.983902][T11599] [ 490.074923][T11554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.133073][T11604] netlink: 'syz.4.2490': attribute type 3 has an invalid length. [ 490.163384][T11604] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2490'. [ 490.177124][T11554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.299823][ T9902] device 0 left promiscuous mode [ 490.341480][ T4273] Bluetooth: hci5: command 0x041b tx timeout [ 490.375722][T11554] team0: Port device team_slave_0 added [ 490.393645][T11554] team0: Port device team_slave_1 added [ 490.409037][ T9902] device 0 left promiscuous mode [ 490.430962][T11554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.438331][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.465492][T11554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.478305][T11554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.486940][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.565994][T11554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.764249][T11618] netlink: 'syz.2.2494': attribute type 10 has an invalid length. [ 490.980698][T11618] team0 (unregistering): Port device team_slave_0 removed [ 491.024980][T11618] team0 (unregistering): Port device team_slave_1 removed [ 491.119967][T11635] FAULT_INJECTION: forcing a failure. [ 491.119967][T11635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.248129][T11554] device hsr_slave_0 entered promiscuous mode [ 491.258299][T11635] CPU: 0 PID: 11635 Comm: syz.1.2506 Not tainted syzkaller #0 [ 491.265785][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 491.275867][T11635] Call Trace: [ 491.279160][T11635] [ 491.282100][T11635] dump_stack_lvl+0x188/0x24e [ 491.286794][T11635] ? show_regs_print_info+0x12/0x12 [ 491.292002][T11635] ? load_image+0x400/0x400 [ 491.296525][T11635] ? __lock_acquire+0x7d10/0x7d10 [ 491.301570][T11635] should_fail_ex+0x399/0x4d0 [ 491.306262][T11635] _copy_to_user+0x2c/0x130 [ 491.310778][T11635] bpf_verifier_vlog+0x172/0x390 [ 491.315774][T11635] __btf_verifier_log+0xdf/0x130 [ 491.320729][T11635] ? btf_check_sec_info+0x350/0x350 [ 491.325951][T11635] ? __virt_addr_valid+0x188/0x540 [ 491.331082][T11635] ? btf_parse_hdr+0x1e0/0x7e0 [ 491.335861][T11635] btf_parse_hdr+0x49a/0x7e0 [ 491.340467][T11635] btf_new_fd+0x3c6/0x780 [ 491.344819][T11635] __sys_bpf+0x612/0x780 [ 491.349081][T11635] ? bpf_link_show_fdinfo+0x380/0x380 [ 491.354486][T11635] ? lock_chain_count+0x20/0x20 [ 491.359361][T11635] __x64_sys_bpf+0x78/0x90 [ 491.363796][T11635] do_syscall_64+0x4c/0xa0 [ 491.368224][T11635] ? clear_bhb_loop+0x60/0xb0 [ 491.372918][T11635] ? clear_bhb_loop+0x60/0xb0 [ 491.377612][T11635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.383515][T11635] RIP: 0033:0x7f4f8799ce59 [ 491.387939][T11635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.407551][T11635] RSP: 002b:00007f4f88801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.415981][T11635] RAX: ffffffffffffffda RBX: 00007f4f87c15fa0 RCX: 00007f4f8799ce59 [ 491.423960][T11635] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 491.431942][T11635] RBP: 00007f4f88801090 R08: 0000000000000000 R09: 0000000000000000 [ 491.439921][T11635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.447897][T11635] R13: 00007f4f87c16038 R14: 00007f4f87c15fa0 R15: 00007ffcbd53b548 [ 491.455891][T11635] [ 491.503387][T11554] device hsr_slave_1 entered promiscuous mode [ 492.421449][ T4273] Bluetooth: hci5: command 0x040f tx timeout [ 492.557446][T11659] netlink: 'syz.3.2501': attribute type 7 has an invalid length. [ 493.521582][T11670] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2505'. [ 493.632570][T11554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 493.710461][T11554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 493.816191][T11554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 493.960685][T11554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 494.514363][ T4273] Bluetooth: hci5: command 0x0419 tx timeout [ 495.346376][ T9902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.391744][ T9902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.420479][ T9902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.437699][ T9902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.544652][ T9902] device veth1_macvtap left promiscuous mode [ 495.571732][ T9902] device veth0_macvtap left promiscuous mode [ 495.578030][ T9902] device veth1_vlan left promiscuous mode [ 495.604791][ T9902] device veth0_vlan left promiscuous mode [ 496.105118][ T9902] device macvlan0 left promiscuous mode [ 496.114768][ T9902] team0 (unregistering): Port device macvlan0 removed [ 496.319091][ T9902] device team_slave_1 left promiscuous mode [ 496.326382][ T9902] team0 (unregistering): Port device team_slave_1 removed [ 496.358057][ T9902] device team_slave_0 left promiscuous mode [ 496.365547][ T9902] team0 (unregistering): Port device team_slave_0 removed [ 496.398379][ T9902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.458285][ T9902] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 496.650204][ T9902] bond0 (unregistering): Released all slaves [ 496.679266][T11554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.687060][T11701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2513'. [ 496.704193][T11715] netlink: 'syz.3.2516': attribute type 10 has an invalid length. [ 496.714081][T11715] device team0 left promiscuous mode [ 496.719390][T11715] device team_slave_0 left promiscuous mode [ 496.725965][T11715] device team_slave_1 left promiscuous mode [ 496.749541][T11715] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.757618][T11715] bond0: (slave team0): Enslaving as an active interface with an up link [ 496.787902][T11719] netlink: 'syz.3.2516': attribute type 10 has an invalid length. [ 496.810210][T11719] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2516'. [ 496.841570][T11719] device team0 entered promiscuous mode [ 496.850427][T11719] device team_slave_0 entered promiscuous mode [ 496.866480][T11719] device team_slave_1 entered promiscuous mode [ 496.882566][T11719] bond0: (slave team0): Releasing backup interface [ 496.928070][T11719] net_ratelimit: 4 callbacks suppressed [ 496.928174][T11719] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 497.009000][T11709] device syzkaller0 entered promiscuous mode [ 499.217096][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 499.238022][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 499.261834][T11554] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.319188][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.341147][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.408874][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.416101][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.500022][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 499.533185][T11757] netlink: 'syz.4.2524': attribute type 10 has an invalid length. [ 499.719949][T10784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 499.742620][T10784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.784843][T10784] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.792076][T10784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.864464][T10802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 499.943692][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 499.971991][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.067611][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.081127][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.099234][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.115116][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.129954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.138841][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.167155][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.188301][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.220993][T11554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.407420][T11775] netlink: 'syz.1.2529': attribute type 29 has an invalid length. [ 500.443716][T11775] netlink: 'syz.1.2529': attribute type 3 has an invalid length. [ 500.475577][T11775] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2529'. [ 500.742782][T11785] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.2530'. [ 501.007270][T11794] FAULT_INJECTION: forcing a failure. [ 501.007270][T11794] name failslab, interval 1, probability 0, space 0, times 0 [ 501.040341][T11794] CPU: 0 PID: 11794 Comm: syz.1.2531 Not tainted syzkaller #0 [ 501.047872][T11794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 501.057942][T11794] Call Trace: [ 501.061230][T11794] [ 501.064172][T11794] dump_stack_lvl+0x188/0x24e [ 501.068879][T11794] ? show_regs_print_info+0x12/0x12 [ 501.074093][T11794] ? load_image+0x400/0x400 [ 501.078615][T11794] ? __might_sleep+0xd0/0xd0 [ 501.083210][T11794] ? __lock_acquire+0x7d10/0x7d10 [ 501.088255][T11794] should_fail_ex+0x399/0x4d0 [ 501.092954][T11794] should_failslab+0x5/0x20 [ 501.097468][T11794] slab_pre_alloc_hook+0x59/0x310 [ 501.102511][T11794] kmem_cache_alloc_node+0x5a/0x320 [ 501.107718][T11794] ? __alloc_skb+0xfc/0x7e0 [ 501.112235][T11794] __alloc_skb+0xfc/0x7e0 [ 501.116573][T11794] ? netlink_autobind+0xda/0x300 [ 501.121529][T11794] netlink_sendmsg+0x654/0xbd0 [ 501.126315][T11794] ? netlink_getsockopt+0x550/0x550 [ 501.131526][T11794] ? aa_sock_msg_perm+0x94/0x150 [ 501.136475][T11794] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 501.141771][T11794] ? security_socket_sendmsg+0x7c/0xa0 [ 501.147236][T11794] ? netlink_getsockopt+0x550/0x550 [ 501.152443][T11794] ____sys_sendmsg+0x5be/0x970 [ 501.157223][T11794] ? __sys_sendmsg_sock+0x30/0x30 [ 501.162256][T11794] ? __import_iovec+0x315/0x500 [ 501.167124][T11794] ? import_iovec+0x6f/0xa0 [ 501.171637][T11794] ___sys_sendmsg+0x2a2/0x360 [ 501.176328][T11794] ? __sys_sendmsg+0x290/0x290 [ 501.181117][T11794] ? __lock_acquire+0x7d10/0x7d10 [ 501.186180][T11794] __se_sys_sendmsg+0x1bb/0x2a0 [ 501.191041][T11794] ? __x64_sys_sendmsg+0x80/0x80 [ 501.196004][T11794] ? lockdep_hardirqs_on+0x94/0x140 [ 501.201221][T11794] do_syscall_64+0x4c/0xa0 [ 501.205646][T11794] ? clear_bhb_loop+0x60/0xb0 [ 501.210335][T11794] ? clear_bhb_loop+0x60/0xb0 [ 501.215026][T11794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.220936][T11794] RIP: 0033:0x7f4f8799ce59 [ 501.225361][T11794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.241724][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.244961][T11794] RSP: 002b:00007f4f88801028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.251220][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.259600][T11794] RAX: ffffffffffffffda RBX: 00007f4f87c15fa0 RCX: 00007f4f8799ce59 [ 501.259613][T11794] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 501.259623][T11794] RBP: 00007f4f88801090 R08: 0000000000000000 R09: 0000000000000000 [ 501.259632][T11794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.259641][T11794] R13: 00007f4f87c16038 R14: 00007f4f87c15fa0 R15: 00007ffcbd53b548 [ 501.259664][T11794] [ 501.301753][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.336920][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.400189][T11554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.567375][T11803] device syzkaller0 entered promiscuous mode [ 502.682294][T11831] netlink: 'syz.4.2539': attribute type 27 has an invalid length. [ 502.710544][T11831] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2539'. [ 502.796712][T11836] netlink: 'syz.1.2540': attribute type 27 has an invalid length. [ 502.826063][T11836] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2540'. [ 502.928185][T11831] netlink: 'syz.4.2539': attribute type 29 has an invalid length. [ 502.937733][T11831] netlink: 'syz.4.2539': attribute type 3 has an invalid length. [ 502.953252][T11831] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2539'. [ 504.572743][T11828] netlink: 'syz.3.2538': attribute type 10 has an invalid length. [ 504.595915][T11828] device team_slave_0 left promiscuous mode [ 504.620573][T11828] team0 (unregistering): Port device team_slave_0 removed [ 504.632737][T11828] device team_slave_1 left promiscuous mode [ 504.657351][T11828] team0 (unregistering): Port device team_slave_1 removed [ 504.694428][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 504.703848][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 504.726017][ T9902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 504.802744][ T9902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 504.841052][ T9902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 504.860160][ T9902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 504.905420][T11554] device veth0_vlan entered promiscuous mode [ 504.952456][T11554] device veth1_vlan entered promiscuous mode [ 505.087023][T11554] device veth0_macvtap entered promiscuous mode [ 505.104015][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 505.118815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 505.130328][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 505.150138][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 505.166850][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 505.182364][T11554] device veth1_macvtap entered promiscuous mode [ 505.582365][T10780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 505.604431][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.651477][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.692894][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.711009][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.726353][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.737584][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.747689][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.758340][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.814042][T11554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.873485][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 505.904188][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 505.954716][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.031482][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.074173][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.108109][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.139356][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.174001][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.205224][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.228419][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.245918][T11554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.288557][ T9902] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 506.319161][ T9902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 506.346951][T11554] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.375718][T11554] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.402483][T11554] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.427858][T11554] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.550741][T11901] netlink: 'syz.4.2552': attribute type 27 has an invalid length. [ 506.575289][T11901] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2552'. [ 506.705318][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.723273][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.747858][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 506.801576][T10780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.809840][T10780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.820026][ T9902] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 506.983459][T11912] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2556'. [ 507.074221][T11916] netlink: 'syz.1.2555': attribute type 10 has an invalid length. [ 507.327372][T11916] device team_slave_0 left promiscuous mode [ 507.503684][T11916] team0 (unregistering): Port device team_slave_0 removed [ 507.532593][T11916] device team_slave_1 left promiscuous mode [ 507.754289][T11916] team0 (unregistering): Port device team_slave_1 removed [ 507.948753][T11921] netlink: 'syz.4.2558': attribute type 21 has an invalid length. [ 507.971515][T11921] netlink: 'syz.4.2558': attribute type 1 has an invalid length. [ 507.981802][T11921] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2558'. [ 507.997685][T11928] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2473'. [ 508.008365][T11928] device hsr_slave_0 left promiscuous mode [ 508.016037][T11928] device hsr_slave_1 left promiscuous mode [ 508.161642][T11929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2558'. [ 508.469133][T11949] FAULT_INJECTION: forcing a failure. [ 508.469133][T11949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.569145][T11949] CPU: 0 PID: 11949 Comm: syz.2.2566 Not tainted syzkaller #0 [ 508.576667][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 508.586745][T11949] Call Trace: [ 508.590036][T11949] [ 508.592980][T11949] dump_stack_lvl+0x188/0x24e [ 508.597677][T11949] ? show_regs_print_info+0x12/0x12 [ 508.602898][T11949] ? load_image+0x400/0x400 [ 508.607424][T11949] ? __lock_acquire+0x7d10/0x7d10 [ 508.612474][T11949] should_fail_ex+0x399/0x4d0 [ 508.617169][T11949] _copy_from_user+0x2c/0x170 [ 508.621866][T11949] ___sys_sendmsg+0x1c3/0x360 [ 508.626565][T11949] ? __sys_sendmsg+0x290/0x290 [ 508.631361][T11949] ? __lock_acquire+0x7d10/0x7d10 [ 508.636432][T11949] __se_sys_sendmsg+0x1bb/0x2a0 [ 508.641303][T11949] ? __x64_sys_sendmsg+0x80/0x80 [ 508.646268][T11949] ? lockdep_hardirqs_on+0x94/0x140 [ 508.651488][T11949] do_syscall_64+0x4c/0xa0 [ 508.655913][T11949] ? clear_bhb_loop+0x60/0xb0 [ 508.660600][T11949] ? clear_bhb_loop+0x60/0xb0 [ 508.665294][T11949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.671206][T11949] RIP: 0033:0x7f1f8b79ce59 [ 508.675631][T11949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.695257][T11949] RSP: 002b:00007f1f8c67f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.703695][T11949] RAX: ffffffffffffffda RBX: 00007f1f8ba15fa0 RCX: 00007f1f8b79ce59 [ 508.711684][T11949] RDX: 00000000200440c0 RSI: 0000200000000000 RDI: 0000000000000003 [ 508.719679][T11949] RBP: 00007f1f8c67f090 R08: 0000000000000000 R09: 0000000000000000 [ 508.727671][T11949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.735659][T11949] R13: 00007f1f8ba16038 R14: 00007f1f8ba15fa0 R15: 00007ffcfc240da8 [ 508.743665][T11949] [ 508.789499][T11954] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.2568'. [ 508.856234][T11954] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 509.664910][T11965] device syzkaller0 entered promiscuous mode [ 509.743775][T11982] netlink: 'syz.2.2572': attribute type 27 has an invalid length. [ 509.774208][T11982] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2572'. [ 518.522354][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2586'. [ 518.575813][T12031] netlink: 'syz.5.2585': attribute type 27 has an invalid length. [ 518.623161][T12031] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2585'. [ 518.628570][ T4273] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 526.290110][T12113] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2603'. [ 535.362254][T12203] device syzkaller0 entered promiscuous mode [ 535.528094][T12212] netlink: 'syz.5.2628': attribute type 10 has an invalid length. [ 537.291246][T12212] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.298609][T12212] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.386316][T12212] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.393536][T12212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.400949][T12212] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.408126][T12212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.418192][T12212] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 542.495078][T12269] device syzkaller0 entered promiscuous mode [ 546.769298][T12281] netlink: 'syz.1.2642': attribute type 10 has an invalid length. [ 547.788617][T12344] netlink: 'syz.4.2659': attribute type 10 has an invalid length. [ 548.000554][T12348] device syzkaller0 entered promiscuous mode [ 549.109034][T12357] device syzkaller0 entered promiscuous mode [ 551.908558][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.916305][T12369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.926824][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.934295][T12369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.244656][T12388] netlink: 'syz.1.2670': attribute type 3 has an invalid length. [ 552.289828][T12388] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2670'. [ 552.361044][T12395] netlink: 'syz.2.2673': attribute type 2 has an invalid length. [ 552.377932][T12395] netlink: 'syz.2.2673': attribute type 8 has an invalid length. [ 552.390785][T12395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2673'. [ 552.421175][T12395] netlink: 'syz.2.2673': attribute type 10 has an invalid length. [ 552.669512][T12408] FAULT_INJECTION: forcing a failure. [ 552.669512][T12408] name failslab, interval 1, probability 0, space 0, times 0 [ 552.715620][T12408] CPU: 1 PID: 12408 Comm: syz.1.2685 Not tainted syzkaller #0 [ 552.723130][T12408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 552.733194][T12408] Call Trace: [ 552.736481][T12408] [ 552.739417][T12408] dump_stack_lvl+0x188/0x24e [ 552.744117][T12408] ? show_regs_print_info+0x12/0x12 [ 552.749330][T12408] ? load_image+0x400/0x400 [ 552.753854][T12408] ? __might_sleep+0xd0/0xd0 [ 552.758454][T12408] ? __lock_acquire+0x7d10/0x7d10 [ 552.763500][T12408] should_fail_ex+0x399/0x4d0 [ 552.768195][T12408] should_failslab+0x5/0x20 [ 552.772713][T12408] slab_pre_alloc_hook+0x59/0x310 [ 552.777751][T12408] ? tomoyo_encode+0x27e/0x540 [ 552.782537][T12408] __kmem_cache_alloc_node+0x4f/0x260 [ 552.787925][T12408] ? tomoyo_encode+0x27e/0x540 [ 552.792703][T12408] __kmalloc+0xa0/0x240 [ 552.796878][T12408] tomoyo_encode+0x27e/0x540 [ 552.801490][T12408] tomoyo_realpath_from_path+0x58e/0x5d0 [ 552.807148][T12408] ? tomoyo_path_number_perm+0x205/0x650 [ 552.812796][T12408] tomoyo_path_number_perm+0x22f/0x650 [ 552.818273][T12408] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 552.823750][T12408] ? ksys_write+0x1c0/0x250 [ 552.828270][T12408] ? common_file_perm+0x171/0x1c0 [ 552.833338][T12408] ? __fget_files+0x28/0x4b0 [ 552.837944][T12408] ? __fget_files+0x28/0x4b0 [ 552.842563][T12408] security_file_ioctl+0x6c/0xa0 [ 552.847518][T12408] __se_sys_ioctl+0x48/0x170 [ 552.852128][T12408] do_syscall_64+0x4c/0xa0 [ 552.856556][T12408] ? clear_bhb_loop+0x60/0xb0 [ 552.861246][T12408] ? clear_bhb_loop+0x60/0xb0 [ 552.865941][T12408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.871850][T12408] RIP: 0033:0x7f4f8799ce59 [ 552.876272][T12408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.895893][T12408] RSP: 002b:00007f4f88801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.904339][T12408] RAX: ffffffffffffffda RBX: 00007f4f87c15fa0 RCX: 00007f4f8799ce59 [ 552.912327][T12408] RDX: 00002000000002c0 RSI: 00000000000089b1 RDI: 0000000000000003 [ 552.920310][T12408] RBP: 00007f4f88801090 R08: 0000000000000000 R09: 0000000000000000 [ 552.928293][T12408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.936278][T12408] R13: 00007f4f87c16038 R14: 00007f4f87c15fa0 R15: 00007ffcbd53b548 [ 552.944281][T12408] [ 553.326601][T12408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 553.920502][T12431] device syzkaller0 entered promiscuous mode [ 556.356965][T12457] netlink: 'syz.4.2686': attribute type 2 has an invalid length. [ 556.380860][T12457] netlink: 'syz.4.2686': attribute type 8 has an invalid length. [ 556.390052][T12457] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2686'. [ 556.400800][T12458] netlink: 'syz.4.2686': attribute type 10 has an invalid length. [ 556.412794][T12460] netlink: 'syz.5.2687': attribute type 2 has an invalid length. [ 556.420718][T12460] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2687'. [ 556.701700][T12469] FAULT_INJECTION: forcing a failure. [ 556.701700][T12469] name failslab, interval 1, probability 0, space 0, times 0 [ 556.747144][T12469] CPU: 1 PID: 12469 Comm: syz.5.2689 Not tainted syzkaller #0 [ 556.754666][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 556.764736][T12469] Call Trace: [ 556.768032][T12469] [ 556.770971][T12469] dump_stack_lvl+0x188/0x24e [ 556.775653][T12469] ? show_regs_print_info+0x12/0x12 [ 556.780850][T12469] ? load_image+0x400/0x400 [ 556.785357][T12469] ? __might_sleep+0xd0/0xd0 [ 556.789944][T12469] ? __lock_acquire+0x7d10/0x7d10 [ 556.794967][T12469] should_fail_ex+0x399/0x4d0 [ 556.799646][T12469] should_failslab+0x5/0x20 [ 556.804138][T12469] slab_pre_alloc_hook+0x59/0x310 [ 556.809153][T12469] ? __lock_acquire+0x7d10/0x7d10 [ 556.814170][T12469] ? kvmalloc_node+0x6c/0x180 [ 556.818838][T12469] __kmem_cache_alloc_node+0x4f/0x260 [ 556.824198][T12469] ? schedule_delayed_monitor_work+0x160/0x160 [ 556.830455][T12469] ? kvmalloc_node+0x6c/0x180 [ 556.835123][T12469] __kmalloc_node+0xa0/0x240 [ 556.839708][T12469] kvmalloc_node+0x6c/0x180 [ 556.844205][T12469] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 556.849570][T12469] ? 0xffffffffa0004440 [ 556.853715][T12469] ? text_poke_copy+0x79/0x90 [ 556.858385][T12469] ? 0xffffffffa0004440 [ 556.862524][T12469] ? 0xffffffffa0004440 [ 556.866663][T12469] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 556.872553][T12469] ? 0xffffffffa0004440 [ 556.876696][T12469] ? xdp_convert_md_to_buff+0x330/0x330 [ 556.882252][T12469] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 556.888485][T12469] ? bpf_prog_change_xdp+0xe/0x30 [ 556.893501][T12469] bpf_prog_test_run_xdp+0x736/0xf10 [ 556.898786][T12469] ? dev_put+0x80/0x80 [ 556.902851][T12469] ? dev_put+0x80/0x80 [ 556.906910][T12469] bpf_prog_test_run+0x31e/0x390 [ 556.911842][T12469] __sys_bpf+0x62b/0x780 [ 556.916079][T12469] ? bpf_link_show_fdinfo+0x380/0x380 [ 556.921481][T12469] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 556.927635][T12469] __x64_sys_bpf+0x78/0x90 [ 556.932043][T12469] do_syscall_64+0x4c/0xa0 [ 556.936445][T12469] ? clear_bhb_loop+0x60/0xb0 [ 556.941113][T12469] ? clear_bhb_loop+0x60/0xb0 [ 556.945785][T12469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.951670][T12469] RIP: 0033:0x7f959a79ce59 [ 556.956072][T12469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.975664][T12469] RSP: 002b:00007f95989f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 556.984065][T12469] RAX: ffffffffffffffda RBX: 00007f959aa15fa0 RCX: 00007f959a79ce59 [ 556.992024][T12469] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 556.999980][T12469] RBP: 00007f95989f6090 R08: 0000000000000000 R09: 0000000000000000 [ 557.007940][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.015897][T12469] R13: 00007f959aa16038 R14: 00007f959aa15fa0 R15: 00007fffd1744068 [ 557.023868][T12469] [ 557.676015][T12491] FAULT_INJECTION: forcing a failure. [ 557.676015][T12491] name failslab, interval 1, probability 0, space 0, times 0 [ 557.719493][T12491] CPU: 0 PID: 12491 Comm: syz.2.2694 Not tainted syzkaller #0 [ 557.727002][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 557.737067][T12491] Call Trace: [ 557.740355][T12491] [ 557.743296][T12491] dump_stack_lvl+0x188/0x24e [ 557.747993][T12491] ? show_regs_print_info+0x12/0x12 [ 557.753216][T12491] ? load_image+0x400/0x400 [ 557.757747][T12491] ? __might_sleep+0xd0/0xd0 [ 557.762352][T12491] ? __lock_acquire+0x7d10/0x7d10 [ 557.767394][T12491] ? verify_lock_unused+0x140/0x140 [ 557.772613][T12491] should_fail_ex+0x399/0x4d0 [ 557.777309][T12491] should_failslab+0x5/0x20 [ 557.781821][T12491] slab_pre_alloc_hook+0x59/0x310 [ 557.786863][T12491] ? __get_vm_area_node+0x122/0x330 [ 557.792169][T12491] __kmem_cache_alloc_node+0x4f/0x260 [ 557.797560][T12491] ? __get_vm_area_node+0x122/0x330 [ 557.802775][T12491] kmalloc_node_trace+0x22/0xe0 [ 557.807647][T12491] __get_vm_area_node+0x122/0x330 [ 557.812684][T12491] ? __local_bh_enable_ip+0x136/0x1c0 [ 557.818141][T12491] __vmalloc_node_range+0x357/0x13b0 [ 557.823438][T12491] ? netlink_sendmsg+0x5ec/0xbd0 [ 557.828375][T12491] ? netlink_insert+0x1034/0x13c0 [ 557.833404][T12491] ? free_vm_area+0x50/0x50 [ 557.837903][T12491] ? netlink_sendmsg+0x5ec/0xbd0 [ 557.842831][T12491] vmalloc+0x75/0x80 [ 557.846716][T12491] ? netlink_sendmsg+0x5ec/0xbd0 [ 557.851642][T12491] netlink_sendmsg+0x5ec/0xbd0 [ 557.856399][T12491] ? netlink_getsockopt+0x550/0x550 [ 557.861590][T12491] ? aa_sock_msg_perm+0x94/0x150 [ 557.866521][T12491] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 557.871798][T12491] ? security_socket_sendmsg+0x7c/0xa0 [ 557.877250][T12491] ? netlink_getsockopt+0x550/0x550 [ 557.882436][T12491] ____sys_sendmsg+0x5be/0x970 [ 557.887195][T12491] ? __sys_sendmsg_sock+0x30/0x30 [ 557.892217][T12491] ? __import_iovec+0x315/0x500 [ 557.897068][T12491] ? import_iovec+0x6f/0xa0 [ 557.901565][T12491] ___sys_sendmsg+0x2a2/0x360 [ 557.906241][T12491] ? __sys_sendmsg+0x290/0x290 [ 557.911009][T12491] ? __lock_acquire+0x7d10/0x7d10 [ 557.916049][T12491] __se_sys_sendmsg+0x1bb/0x2a0 [ 557.920914][T12491] ? __x64_sys_sendmsg+0x80/0x80 [ 557.925865][T12491] ? lockdep_hardirqs_on+0x94/0x140 [ 557.931067][T12491] do_syscall_64+0x4c/0xa0 [ 557.935480][T12491] ? clear_bhb_loop+0x60/0xb0 [ 557.940155][T12491] ? clear_bhb_loop+0x60/0xb0 [ 557.944829][T12491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.950718][T12491] RIP: 0033:0x7f1f8b79ce59 [ 557.955130][T12491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.974724][T12491] RSP: 002b:00007f1f8c67f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.983133][T12491] RAX: ffffffffffffffda RBX: 00007f1f8ba15fa0 RCX: 00007f1f8b79ce59 [ 557.991094][T12491] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 557.999057][T12491] RBP: 00007f1f8c67f090 R08: 0000000000000000 R09: 0000000000000000 [ 558.007017][T12491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.014977][T12491] R13: 00007f1f8ba16038 R14: 00007f1f8ba15fa0 R15: 00007ffcfc240da8 [ 558.022952][T12491] [ 558.081705][T12491] syz.2.2694: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 558.111449][T12491] CPU: 0 PID: 12491 Comm: syz.2.2694 Not tainted syzkaller #0 [ 558.118943][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 558.129009][T12491] Call Trace: [ 558.132298][T12491] [ 558.135242][T12491] dump_stack_lvl+0x188/0x24e [ 558.139939][T12491] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 558.146443][T12491] ? show_regs_print_info+0x12/0x12 [ 558.151660][T12491] ? load_image+0x400/0x400 [ 558.156177][T12491] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 558.162609][T12491] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 558.169129][T12491] warn_alloc+0x242/0x330 [ 558.173485][T12491] ? __get_vm_area_node+0x122/0x330 [ 558.178707][T12491] ? zone_watermark_ok_safe+0x270/0x270 [ 558.184270][T12491] ? rcu_is_watching+0x11/0xa0 [ 558.189054][T12491] ? __get_vm_area_node+0x318/0x330 [ 558.194269][T12491] ? __local_bh_enable_ip+0x136/0x1c0 [ 558.199661][T12491] __vmalloc_node_range+0x37c/0x13b0 [ 558.204963][T12491] ? netlink_insert+0x1034/0x13c0 [ 558.210018][T12491] ? free_vm_area+0x50/0x50 [ 558.214546][T12491] ? netlink_sendmsg+0x5ec/0xbd0 [ 558.219500][T12491] vmalloc+0x75/0x80 [ 558.223413][T12491] ? netlink_sendmsg+0x5ec/0xbd0 [ 558.228366][T12491] netlink_sendmsg+0x5ec/0xbd0 [ 558.233150][T12491] ? netlink_getsockopt+0x550/0x550 [ 558.238371][T12491] ? aa_sock_msg_perm+0x94/0x150 [ 558.243327][T12491] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 558.248625][T12491] ? security_socket_sendmsg+0x7c/0xa0 [ 558.254097][T12491] ? netlink_getsockopt+0x550/0x550 [ 558.259306][T12491] ____sys_sendmsg+0x5be/0x970 [ 558.264090][T12491] ? __sys_sendmsg_sock+0x30/0x30 [ 558.269127][T12491] ? __import_iovec+0x315/0x500 [ 558.274001][T12491] ? import_iovec+0x6f/0xa0 [ 558.278519][T12491] ___sys_sendmsg+0x2a2/0x360 [ 558.283221][T12491] ? __sys_sendmsg+0x290/0x290 [ 558.288019][T12491] ? __lock_acquire+0x7d10/0x7d10 [ 558.293083][T12491] __se_sys_sendmsg+0x1bb/0x2a0 [ 558.297945][T12491] ? __x64_sys_sendmsg+0x80/0x80 [ 558.302908][T12491] ? lockdep_hardirqs_on+0x94/0x140 [ 558.308133][T12491] do_syscall_64+0x4c/0xa0 [ 558.312560][T12491] ? clear_bhb_loop+0x60/0xb0 [ 558.317258][T12491] ? clear_bhb_loop+0x60/0xb0 [ 558.321958][T12491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.327872][T12491] RIP: 0033:0x7f1f8b79ce59 [ 558.332302][T12491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.351920][T12491] RSP: 002b:00007f1f8c67f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.360351][T12491] RAX: ffffffffffffffda RBX: 00007f1f8ba15fa0 RCX: 00007f1f8b79ce59 [ 558.368335][T12491] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 558.376319][T12491] RBP: 00007f1f8c67f090 R08: 0000000000000000 R09: 0000000000000000 [ 558.384300][T12491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.392279][T12491] R13: 00007f1f8ba16038 R14: 00007f1f8ba15fa0 R15: 00007ffcfc240da8 [ 558.400278][T12491] [ 558.431696][T12491] Mem-Info: [ 558.435034][T12491] active_anon:11418 inactive_anon:0 isolated_anon:0 [ 558.435034][T12491] active_file:21968 inactive_file:40137 isolated_file:0 [ 558.435034][T12491] unevictable:768 dirty:159 writeback:0 [ 558.435034][T12491] slab_reclaimable:20994 slab_unreclaimable:94748 [ 558.435034][T12491] mapped:34619 shmem:6194 pagetables:765 [ 558.435034][T12491] sec_pagetables:0 bounce:0 [ 558.435034][T12491] kernel_misc_reclaimable:0 [ 558.435034][T12491] free:1317450 free_pcp:10001 free_cma:0 [ 558.481597][T12491] Node 0 active_anon:46572kB inactive_anon:0kB active_file:87872kB inactive_file:160348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139376kB dirty:636kB writeback:0kB shmem:24140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11460kB pagetables:3060kB sec_pagetables:0kB all_unreclaimable? no [ 558.515502][T12491] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 558.547087][T12491] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 558.580446][T12491] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 558.586545][T12491] Node 0 DMA32 free:1357344kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:49344kB inactive_anon:0kB active_file:87872kB inactive_file:160348kB unevictable:1536kB writepending:636kB present:3129332kB managed:2592944kB mlocked:0kB bounce:0kB free_pcp:19204kB local_pcp:8944kB free_cma:0kB [ 558.627472][T12491] lowmem_reserve[]: 0 0 1 1 1 [ 558.637618][T12491] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 558.683636][T12491] lowmem_reserve[]: 0 0 0 0 0 [ 558.693564][T12491] Node 1 Normal free:3892812kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21548kB local_pcp:11848kB free_cma:0kB [ 558.762768][T12491] lowmem_reserve[]: 0 0 0 0 0 [ 558.767536][T12491] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 558.801378][T12491] Node 0 DMA32: 86*4kB (UME) 370*8kB (UE) 749*16kB (UME) 569*32kB (UME) 590*64kB (UME) 579*128kB (UM) 153*256kB (UM) 48*512kB (UME) 18*1024kB (UM) 8*2048kB (UM) 269*4096kB (UM) = 1345752kB [ 558.840778][T12491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 558.871379][T12491] Node 1 Normal: 217*4kB (UE) 53*8kB (UE) 24*16kB (UME) 32*32kB (UME) 19*64kB (UME) 4*128kB (UM) 5*256kB (UME) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3892812kB [ 558.909612][T12491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.944681][T12491] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.962832][T12491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.981378][T12491] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.990680][T12491] 73126 total pagecache pages [ 559.011452][T12491] 0 pages in swap cache [ 559.015623][T12491] Free swap = 124996kB [ 559.019778][T12491] Total swap = 124996kB [ 559.041380][T12491] 2097051 pages RAM [ 559.045201][T12491] 0 pages HighMem/MovableOnly [ 559.050036][T12491] 415214 pages reserved [ 559.061372][T12491] 0 pages cma reserved [ 559.789521][T12521] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.2698'. [ 562.065245][T12527] netlink: 'syz.3.2701': attribute type 2 has an invalid length. [ 562.073173][T12527] netlink: 'syz.3.2701': attribute type 8 has an invalid length. [ 562.080975][T12527] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2701'. [ 562.090834][T12531] netlink: 'syz.3.2701': attribute type 10 has an invalid length. [ 562.162817][T12529] device syzkaller0 entered promiscuous mode [ 562.668653][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.681175][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.446061][T12579] netlink: 'syz.3.2714': attribute type 2 has an invalid length. [ 564.492907][T12587] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2715'. [ 564.521826][T12579] netlink: 'syz.3.2714': attribute type 8 has an invalid length. [ 564.542602][T12579] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2714'. [ 564.614691][T12589] netlink: 'syz.3.2714': attribute type 10 has an invalid length. [ 564.936767][T12598] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2718'. [ 565.758601][T12622] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.2722'. [ 565.798675][T12622] openvswitch: netlink: Key type 386 is out of range max 32 [ 567.822955][T12640] device syzkaller0 entered promiscuous mode [ 567.927820][T12644] netlink: 'syz.1.2728': attribute type 2 has an invalid length. [ 567.957420][T12644] netlink: 'syz.1.2728': attribute type 8 has an invalid length. [ 567.991483][T12644] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2728'. [ 568.051277][T12652] netlink: 'syz.1.2728': attribute type 10 has an invalid length. [ 569.608057][T12655] device syzkaller0 entered promiscuous mode [ 571.740268][T12681] netlink: 'syz.5.2733': attribute type 21 has an invalid length. [ 571.748445][T12681] netlink: 'syz.5.2733': attribute type 12 has an invalid length. [ 571.756887][T12681] netlink: 'syz.5.2733': attribute type 13 has an invalid length. [ 571.765069][T12681] netlink: 'syz.5.2733': attribute type 14 has an invalid length. [ 571.782090][T12681] netlink: 'syz.5.2733': attribute type 15 has an invalid length. [ 571.807875][T12681] netlink: 'syz.5.2733': attribute type 16 has an invalid length. [ 571.851851][T12681] netlink: 'syz.5.2733': attribute type 19 has an invalid length. [ 571.874113][T12681] netlink: 9618 bytes leftover after parsing attributes in process `syz.5.2733'. [ 571.922159][T12688] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2745'. [ 571.990833][T12693] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2734'. [ 575.342521][T12728] delete_channel: no stack [ 576.702129][T12723] validate_nla: 1 callbacks suppressed [ 576.702145][T12723] netlink: 'syz.5.2740': attribute type 10 has an invalid length. [ 576.716452][T12723] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2740'. [ 576.725971][T12723] device team0 entered promiscuous mode [ 576.732637][T12723] device team_slave_0 entered promiscuous mode [ 576.739029][T12723] device team_slave_1 entered promiscuous mode [ 576.747133][T12723] bridge0: port 3(team0) entered blocking state [ 576.753931][T12723] bridge0: port 3(team0) entered disabled state [ 576.762248][T12723] bridge0: port 3(team0) entered blocking state [ 576.768582][T12723] bridge0: port 3(team0) entered forwarding state [ 577.613808][T12744] device syzkaller0 entered promiscuous mode [ 577.696467][T12746] device syzkaller0 entered promiscuous mode [ 577.743692][T12768] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2750'. [ 577.816636][T12761] device syzkaller0 entered promiscuous mode [ 577.900764][T12780] netlink: 'syz.4.2752': attribute type 8 has an invalid length. [ 577.934588][T12780] netlink: 399 bytes leftover after parsing attributes in process `syz.4.2752'. [ 577.983649][T12785] FAULT_INJECTION: forcing a failure. [ 577.983649][T12785] name failslab, interval 1, probability 0, space 0, times 0 [ 578.002191][T12785] CPU: 0 PID: 12785 Comm: syz.2.2753 Not tainted syzkaller #0 [ 578.009684][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.019749][T12785] Call Trace: [ 578.023042][T12785] [ 578.025984][T12785] dump_stack_lvl+0x188/0x24e [ 578.030680][T12785] ? show_regs_print_info+0x12/0x12 [ 578.035894][T12785] ? load_image+0x400/0x400 [ 578.040420][T12785] ? __might_sleep+0xd0/0xd0 [ 578.045024][T12785] ? __lock_acquire+0x7d10/0x7d10 [ 578.050065][T12785] ? mark_lock+0x94/0x320 [ 578.054418][T12785] should_fail_ex+0x399/0x4d0 [ 578.059119][T12785] should_failslab+0x5/0x20 [ 578.063641][T12785] slab_pre_alloc_hook+0x59/0x310 [ 578.068682][T12785] ? rfkill_alloc+0x9a/0x250 [ 578.073367][T12785] __kmem_cache_alloc_node+0x4f/0x260 [ 578.078757][T12785] ? rfkill_alloc+0x9a/0x250 [ 578.083355][T12785] __kmalloc+0xa0/0x240 [ 578.087532][T12785] rfkill_alloc+0x9a/0x250 [ 578.091958][T12785] wiphy_new_nm+0x11f1/0x19e0 [ 578.096687][T12785] ieee80211_alloc_hw_nm+0x38d/0x1eb0 [ 578.102100][T12785] mac80211_hwsim_new_radio+0x143/0x4c40 [ 578.107815][T12785] hwsim_new_radio_nl+0xafa/0xce0 [ 578.112868][T12785] genl_family_rcv_msg_doit+0x22a/0x330 [ 578.118431][T12785] ? end_current_label_crit_section+0x170/0x170 [ 578.124691][T12785] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 578.130608][T12785] ? bpf_lsm_capable+0x5/0x10 [ 578.135299][T12785] ? security_capable+0x85/0xb0 [ 578.140175][T12785] genl_rcv_msg+0x604/0x790 [ 578.144694][T12785] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 578.150875][T12785] ? genl_bind+0x360/0x360 [ 578.155302][T12785] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 578.161649][T12785] ? lock_acquire+0x225/0x4a0 [ 578.166338][T12785] netlink_rcv_skb+0x1fb/0x450 [ 578.171105][T12785] ? genl_bind+0x360/0x360 [ 578.175521][T12785] ? netlink_ack+0x1170/0x1170 [ 578.180288][T12785] ? down_read+0x1a8/0x2d0 [ 578.184716][T12785] genl_rcv+0x24/0x40 [ 578.188703][T12785] netlink_unicast+0x74d/0x8d0 [ 578.193471][T12785] netlink_sendmsg+0x8ad/0xbd0 [ 578.198255][T12785] ? lockdep_hardirqs_on+0x94/0x140 [ 578.203475][T12785] ? netlink_getsockopt+0x550/0x550 [ 578.208697][T12785] ? netlink_getsockopt+0x550/0x550 [ 578.213909][T12785] ____sys_sendmsg+0x5be/0x970 [ 578.218697][T12785] ? __sys_sendmsg_sock+0x30/0x30 [ 578.223735][T12785] ? __import_iovec+0x315/0x500 [ 578.228618][T12785] ? import_iovec+0x6f/0xa0 [ 578.233140][T12785] ___sys_sendmsg+0x2a2/0x360 [ 578.237835][T12785] ? __fget_files+0x28/0x4b0 [ 578.242451][T12785] ? __sys_sendmsg+0x290/0x290 [ 578.247254][T12785] ? __lock_acquire+0x7d10/0x7d10 [ 578.252328][T12785] __se_sys_sendmsg+0x1bb/0x2a0 [ 578.257199][T12785] ? __x64_sys_sendmsg+0x80/0x80 [ 578.262175][T12785] ? lockdep_hardirqs_on+0x94/0x140 [ 578.267401][T12785] do_syscall_64+0x4c/0xa0 [ 578.271830][T12785] ? clear_bhb_loop+0x60/0xb0 [ 578.276515][T12785] ? clear_bhb_loop+0x60/0xb0 [ 578.281202][T12785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.287124][T12785] RIP: 0033:0x7f1f8b79ce59 [ 578.291553][T12785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.311197][T12785] RSP: 002b:00007f1f8c67f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.319603][T12785] RAX: ffffffffffffffda RBX: 00007f1f8ba15fa0 RCX: 00007f1f8b79ce59 [ 578.327563][T12785] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 578.335521][T12785] RBP: 00007f1f8c67f090 R08: 0000000000000000 R09: 0000000000000000 [ 578.343502][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.351466][T12785] R13: 00007f1f8ba16038 R14: 00007f1f8ba15fa0 R15: 00007ffcfc240da8 [ 578.359436][T12785] [ 579.971783][T12783] netlink: 'syz.4.2752': attribute type 10 has an invalid length. [ 579.986087][T12783] device wlan1 left promiscuous mode [ 579.999273][T12783] team0: Port device wlan1 removed [ 583.195951][T12831] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2762'. [ 584.138352][T12836] device syzkaller0 entered promiscuous mode [ 584.250846][T12844] device syzkaller0 entered promiscuous mode [ 586.702751][T12861] device syzkaller0 entered promiscuous mode [ 586.825480][T12882] FAULT_INJECTION: forcing a failure. [ 586.825480][T12882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.839684][T12882] CPU: 1 PID: 12882 Comm: syz.5.2775 Not tainted syzkaller #0 [ 586.847172][T12882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.857235][T12882] Call Trace: [ 586.860515][T12882] [ 586.863447][T12882] dump_stack_lvl+0x188/0x24e [ 586.868138][T12882] ? show_regs_print_info+0x12/0x12 [ 586.873340][T12882] ? load_image+0x400/0x400 [ 586.877850][T12882] ? __lock_acquire+0x7d10/0x7d10 [ 586.882878][T12882] ? __virt_addr_valid+0x188/0x540 [ 586.887998][T12882] should_fail_ex+0x399/0x4d0 [ 586.892682][T12882] _copy_from_user+0x2c/0x170 [ 586.897368][T12882] bpf_test_init+0xde/0x140 [ 586.901883][T12882] bpf_prog_test_run_xdp+0x484/0xf10 [ 586.907188][T12882] ? dev_put+0x80/0x80 [ 586.911271][T12882] ? dev_put+0x80/0x80 [ 586.915345][T12882] bpf_prog_test_run+0x31e/0x390 [ 586.920294][T12882] __sys_bpf+0x62b/0x780 [ 586.924542][T12882] ? bpf_link_show_fdinfo+0x380/0x380 [ 586.929930][T12882] ? lock_chain_count+0x20/0x20 [ 586.934791][T12882] __x64_sys_bpf+0x78/0x90 [ 586.939209][T12882] do_syscall_64+0x4c/0xa0 [ 586.943631][T12882] ? clear_bhb_loop+0x60/0xb0 [ 586.948323][T12882] ? clear_bhb_loop+0x60/0xb0 [ 586.953007][T12882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.958905][T12882] RIP: 0033:0x7f959a79ce59 [ 586.963318][T12882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.982923][T12882] RSP: 002b:00007f95989f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.991424][T12882] RAX: ffffffffffffffda RBX: 00007f959aa15fa0 RCX: 00007f959a79ce59 [ 586.999405][T12882] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 587.007378][T12882] RBP: 00007f95989f6090 R08: 0000000000000000 R09: 0000000000000000 [ 587.015345][T12882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.023313][T12882] R13: 00007f959aa16038 R14: 00007f959aa15fa0 R15: 00007fffd1744068 [ 587.031298][T12882] [ 590.859162][T12904] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2783'. [ 591.581580][T12904] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.2783'. [ 591.863319][T12914] FAULT_INJECTION: forcing a failure. [ 591.863319][T12914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.914304][T12914] CPU: 1 PID: 12914 Comm: syz.1.2787 Not tainted syzkaller #0 [ 591.921813][T12914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.931875][T12914] Call Trace: [ 591.935162][T12914] [ 591.938102][T12914] dump_stack_lvl+0x188/0x24e [ 591.942799][T12914] ? show_regs_print_info+0x12/0x12 [ 591.948011][T12914] ? lockdep_hardirqs_on+0x94/0x140 [ 591.953228][T12914] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 591.959398][T12914] should_fail_ex+0x399/0x4d0 [ 591.964062][T12914] _copy_from_user+0x2c/0x170 [ 591.968727][T12914] iovec_from_user+0x143/0x360 [ 591.973487][T12914] __import_iovec+0x6d/0x500 [ 591.978076][T12914] import_iovec+0x6f/0xa0 [ 591.982397][T12914] ___sys_sendmsg+0x252/0x360 [ 591.987067][T12914] ? __sys_sendmsg+0x290/0x290 [ 591.991836][T12914] ? __lock_acquire+0x7d10/0x7d10 [ 591.996869][T12914] __se_sys_sendmsg+0x1bb/0x2a0 [ 592.001708][T12914] ? __x64_sys_sendmsg+0x80/0x80 [ 592.006643][T12914] ? syscall_enter_from_user_mode+0x2a/0x80 [ 592.012527][T12914] do_syscall_64+0x4c/0xa0 [ 592.016932][T12914] ? clear_bhb_loop+0x60/0xb0 [ 592.021602][T12914] ? clear_bhb_loop+0x60/0xb0 [ 592.026277][T12914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.032159][T12914] RIP: 0033:0x7f4f8799ce59 [ 592.036564][T12914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.056158][T12914] RSP: 002b:00007f4f88801028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.064559][T12914] RAX: ffffffffffffffda RBX: 00007f4f87c15fa0 RCX: 00007f4f8799ce59 [ 592.072521][T12914] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 592.080481][T12914] RBP: 00007f4f88801090 R08: 0000000000000000 R09: 0000000000000000 [ 592.088437][T12914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.096398][T12914] R13: 00007f4f87c16038 R14: 00007f4f87c15fa0 R15: 00007ffcbd53b548 [ 592.104369][T12914] [ 592.196221][T12918] device syzkaller0 entered promiscuous mode [ 594.496570][T12933] netlink: 'syz.4.2796': attribute type 10 has an invalid length. [ 594.927326][T12953] FAULT_INJECTION: forcing a failure. [ 594.927326][T12953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.943005][T12953] CPU: 0 PID: 12953 Comm: syz.4.2805 Not tainted syzkaller #0 [ 594.950533][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 594.960609][T12953] Call Trace: [ 594.963902][T12953] [ 594.966847][T12953] dump_stack_lvl+0x188/0x24e [ 594.971553][T12953] ? show_regs_print_info+0x12/0x12 [ 594.976775][T12953] ? load_image+0x400/0x400 [ 594.981316][T12953] ? __lock_acquire+0x7d10/0x7d10 [ 594.986368][T12953] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 594.992146][T12953] should_fail_ex+0x399/0x4d0 [ 594.996838][T12953] _copy_from_user+0x2c/0x170 [ 595.001526][T12953] ___sys_sendmsg+0x1c3/0x360 [ 595.006211][T12953] ? __sys_sendmsg+0x290/0x290 [ 595.010998][T12953] ? __lock_acquire+0x7d10/0x7d10 [ 595.016057][T12953] __se_sys_sendmsg+0x1bb/0x2a0 [ 595.020908][T12953] ? __x64_sys_sendmsg+0x80/0x80 [ 595.025864][T12953] ? lockdep_hardirqs_on+0x94/0x140 [ 595.031066][T12953] do_syscall_64+0x4c/0xa0 [ 595.035476][T12953] ? clear_bhb_loop+0x60/0xb0 [ 595.040158][T12953] ? clear_bhb_loop+0x60/0xb0 [ 595.044842][T12953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.050733][T12953] RIP: 0033:0x7f94c679ce59 [ 595.055147][T12953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.074748][T12953] RSP: 002b:00007f94c7591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.083160][T12953] RAX: ffffffffffffffda RBX: 00007f94c6a15fa0 RCX: 00007f94c679ce59 [ 595.091128][T12953] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 595.099095][T12953] RBP: 00007f94c7591090 R08: 0000000000000000 R09: 0000000000000000 [ 595.107063][T12953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.115032][T12953] R13: 00007f94c6a16038 R14: 00007f94c6a15fa0 R15: 00007ffc52a4c6e8 [ 595.123030][T12953] [ 595.663351][T12969] device syzkaller0 entered promiscuous mode [ 595.692463][T12968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2810'. [ 596.137793][T10802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.301206][T10802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.327316][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 596.336343][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 596.347791][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 596.364103][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 596.371891][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 596.379188][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.426571][T12979] device syzkaller0 entered promiscuous mode [ 598.431539][ T4273] Bluetooth: hci0: command 0x0409 tx timeout [ 598.495755][T10802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.912900][T10802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.501582][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 600.567179][T13020] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2826'. [ 600.743737][T12980] chnl_net:caif_netlink_parms(): no params data found [ 600.974992][T13025] device syzkaller0 entered promiscuous mode [ 602.581553][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 602.918989][T12980] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.992174][T12980] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.006670][T12980] device bridge_slave_0 entered promiscuous mode [ 603.174033][T12980] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.181157][T12980] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.197140][T12980] device bridge_slave_1 entered promiscuous mode [ 603.358296][T12980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.497685][T12980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.537720][T13076] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2840'. [ 603.685237][T12980] team0: Port device team_slave_0 added [ 603.695022][T12980] team0: Port device team_slave_1 added [ 603.843348][T12980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.850343][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.967685][T12980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.021550][T12980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.059412][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.136510][T12980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.313741][T12980] device hsr_slave_0 entered promiscuous mode [ 604.356319][T12980] device hsr_slave_1 entered promiscuous mode [ 604.661461][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 604.700175][T13113] FAULT_INJECTION: forcing a failure. [ 604.700175][T13113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.750494][T13113] CPU: 1 PID: 13113 Comm: syz.5.2847 Not tainted syzkaller #0 [ 604.758003][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 604.768070][T13113] Call Trace: [ 604.771356][T13113] [ 604.774297][T13113] dump_stack_lvl+0x188/0x24e [ 604.778996][T13113] ? show_regs_print_info+0x12/0x12 [ 604.784215][T13113] ? load_image+0x400/0x400 [ 604.788741][T13113] ? __lock_acquire+0x7d10/0x7d10 [ 604.793790][T13113] ? __virt_addr_valid+0x188/0x540 [ 604.798921][T13113] should_fail_ex+0x399/0x4d0 [ 604.803618][T13113] _copy_from_user+0x2c/0x170 [ 604.808316][T13113] vmemdup_user+0xa8/0x1d0 [ 604.812749][T13113] map_lookup_and_delete_elem+0x3c5/0x840 [ 604.818499][T13113] __sys_bpf+0x5cc/0x780 [ 604.822764][T13113] ? bpf_link_show_fdinfo+0x380/0x380 [ 604.828168][T13113] ? lock_chain_count+0x20/0x20 [ 604.833049][T13113] __x64_sys_bpf+0x78/0x90 [ 604.837491][T13113] do_syscall_64+0x4c/0xa0 [ 604.841915][T13113] ? clear_bhb_loop+0x60/0xb0 [ 604.846611][T13113] ? clear_bhb_loop+0x60/0xb0 [ 604.851306][T13113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.857210][T13113] RIP: 0033:0x7f959a79ce59 [ 604.861615][T13113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.881207][T13113] RSP: 002b:00007f95989d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 604.889609][T13113] RAX: ffffffffffffffda RBX: 00007f959aa16090 RCX: 00007f959a79ce59 [ 604.897573][T13113] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000015 [ 604.905533][T13113] RBP: 00007f95989d5090 R08: 0000000000000000 R09: 0000000000000000 [ 604.913494][T13113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.921450][T13113] R13: 00007f959aa16128 R14: 00007f959aa16090 R15: 00007fffd1744068 [ 604.929426][T13113] [ 605.061951][T13107] device syzkaller0 entered promiscuous mode [ 607.419323][T13134] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2855'. [ 607.476353][T10802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.501511][T10802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.547883][T10802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.556226][T10802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.362984][T10802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.686621][T10802] bond0 (unregistering): Released all slaves [ 608.742614][T13149] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2859'. [ 609.185969][T13159] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2862'. [ 609.210746][T13163] netlink: 'syz.2.2862': attribute type 12 has an invalid length. [ 609.232808][T13163] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2862'. [ 609.490356][T13176] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2866'. [ 609.682232][T13179] device syzkaller0 entered promiscuous mode [ 609.745351][T13185] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2878'. [ 609.768121][T13182] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 609.835255][T13188] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2869'. [ 610.825052][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 611.825809][T12980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 611.849587][T12980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 611.901120][T12980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 611.955747][T12980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 612.216845][T12980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.279962][T10784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 612.299658][T10784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 612.346571][T12980] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.374829][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 612.400349][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 612.416342][ T9124] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.423893][ T9124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.496736][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 612.507208][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 612.534875][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 612.558263][ T9124] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.565439][ T9124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.573376][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 612.582245][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 612.598750][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 612.610923][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 612.620237][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 612.632751][T13238] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2880'. [ 612.667046][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 612.681928][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 612.713775][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 612.737908][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 612.749395][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 612.761701][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 612.784470][T13236] netlink: 'syz.2.2881': attribute type 21 has an invalid length. [ 612.795377][T13236] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2881'. [ 612.806243][T13236] netlink: 'syz.2.2881': attribute type 5 has an invalid length. [ 612.817863][T13236] netlink: 'syz.2.2881': attribute type 6 has an invalid length. [ 612.827562][T13236] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2881'. [ 612.872781][T12980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 613.372672][T13259] device syzkaller0 entered promiscuous mode [ 615.226946][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 615.240265][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 615.274471][T13274] netlink: 'syz.2.2888': attribute type 10 has an invalid length. [ 615.300133][T12980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.341589][T10784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 615.350929][T10784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 615.408046][T10784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 615.433409][T10784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 615.464466][T12980] device veth0_vlan entered promiscuous mode [ 615.473731][T10784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 615.504942][T10784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 615.553590][T12980] device veth1_vlan entered promiscuous mode [ 615.750538][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 615.784385][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 615.820006][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 615.862709][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 615.907151][T12980] device veth0_macvtap entered promiscuous mode [ 615.935752][T12980] device veth1_macvtap entered promiscuous mode [ 616.016839][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.061771][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.111418][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.161719][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.201663][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.241486][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.304920][T12980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.342124][T13285] netlink: 'syz.3.2892': attribute type 7 has an invalid length. [ 616.425264][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 616.437752][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 616.463658][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 616.504582][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 616.555833][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.621467][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.691746][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.722158][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.766111][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.818870][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.845601][T12980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.870366][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 616.884442][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 616.916422][T12980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.941927][T12980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.971665][T12980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.001689][T12980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.590096][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.626492][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.714301][T10784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 618.736467][T13320] netlink: 'syz.4.2896': attribute type 10 has an invalid length. [ 618.767045][T13320] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2896'. [ 619.172938][T13320] device macvlan0 left promiscuous mode [ 619.216089][T13320] team0: Port device macvlan0 removed [ 619.582475][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2896'. [ 619.715019][T13336] device syzkaller0 entered promiscuous mode [ 619.737024][T10784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.756147][T10784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.883187][ T9902] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 621.781866][T13368] device syzkaller0 entered promiscuous mode [ 621.963738][T13391] FAULT_INJECTION: forcing a failure. [ 621.963738][T13391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.998106][T13391] CPU: 0 PID: 13391 Comm: syz.3.2908 Not tainted syzkaller #0 [ 622.005611][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 622.015678][T13391] Call Trace: [ 622.018964][T13391] [ 622.021902][T13391] dump_stack_lvl+0x188/0x24e [ 622.026594][T13391] ? show_regs_print_info+0x12/0x12 [ 622.031804][T13391] ? load_image+0x400/0x400 [ 622.036325][T13391] ? __lock_acquire+0x7d10/0x7d10 [ 622.041365][T13391] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 622.047539][T13391] should_fail_ex+0x399/0x4d0 [ 622.052232][T13391] _copy_from_user+0x2c/0x170 [ 622.056924][T13391] ___sys_recvmsg+0x172/0x590 [ 622.061614][T13391] ? __sys_recvmsg+0x290/0x290 [ 622.066388][T13391] ? common_file_perm+0x171/0x1c0 [ 622.071436][T13391] ? __fget_files+0x43d/0x4b0 [ 622.076129][T13391] __x64_sys_recvmsg+0x205/0x2e0 [ 622.081068][T13391] ? ___sys_recvmsg+0x590/0x590 [ 622.085930][T13391] ? lockdep_hardirqs_on+0x94/0x140 [ 622.091126][T13391] do_syscall_64+0x4c/0xa0 [ 622.095528][T13391] ? clear_bhb_loop+0x60/0xb0 [ 622.100197][T13391] ? clear_bhb_loop+0x60/0xb0 [ 622.104869][T13391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.110753][T13391] RIP: 0033:0x7f0369d9ce59 [ 622.115156][T13391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.134751][T13391] RSP: 002b:00007f036ace9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 622.143152][T13391] RAX: ffffffffffffffda RBX: 00007f036a015fa0 RCX: 00007f0369d9ce59 [ 622.151114][T13391] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000005 [ 622.159071][T13391] RBP: 00007f036ace9090 R08: 0000000000000000 R09: 0000000000000000 [ 622.167034][T13391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.174993][T13391] R13: 00007f036a016038 R14: 00007f036a015fa0 R15: 00007ffd1aa776d8 [ 622.182966][T13391] [ 622.404364][T13405] netlink: 'syz.3.2912': attribute type 21 has an invalid length. [ 622.705444][T13411] netlink: 'syz.2.2913': attribute type 10 has an invalid length. [ 622.742274][T13411] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2913'. [ 622.799856][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2913'. [ 623.116954][T13426] device syzkaller0 entered promiscuous mode [ 623.321576][T13432] syz.3.2921[13432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 623.321711][T13432] syz.3.2921[13432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 624.104960][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.133166][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.585613][T13476] netlink: 'syz.3.2936': attribute type 10 has an invalid length. [ 625.606429][T13476] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2936'. [ 625.658971][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2936'. [ 628.701770][T13482] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 628.739461][T13488] device lo entered promiscuous mode [ 628.879943][T13499] device syzkaller0 entered promiscuous mode [ 629.579955][T13516] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2951'. [ 629.602457][T13516] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 629.688377][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 629.700419][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 629.716670][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 629.746877][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 629.760892][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 629.769049][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 631.036488][T13501] netlink: 'syz.5.2945': attribute type 30 has an invalid length. [ 631.044795][T13510] netlink: 'syz.1.2949': attribute type 2 has an invalid length. [ 631.053422][T13510] netlink: 'syz.1.2949': attribute type 8 has an invalid length. [ 631.061267][T13510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2949'. [ 631.185300][T10780] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.314025][T10780] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.526330][T10780] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.781844][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 631.808401][T10780] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.016655][T13517] chnl_net:caif_netlink_parms(): no params data found [ 632.294099][T13562] netlink: 'syz.3.2965': attribute type 2 has an invalid length. [ 632.315749][T13562] netlink: 'syz.3.2965': attribute type 8 has an invalid length. [ 632.324651][T13562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2965'. [ 632.356223][T13560] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2964'. [ 632.378815][T13517] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.387395][T13517] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.398520][T13517] device bridge_slave_0 entered promiscuous mode [ 632.421686][ T27] INFO: task syz.0.2413:11333 blocked for more than 143 seconds. [ 632.429434][ T27] Not tainted syzkaller #0 [ 632.440600][T13565] device syzkaller0 entered promiscuous mode [ 632.456047][T13517] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.463135][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 632.463159][ T27] task:syz.0.2413 state:D stack:25712 pid:11333 ppid:4272 flags:0x00004002 [ 632.463193][ T27] Call Trace: [ 632.507610][ T27] [ 632.510592][ T27] __schedule+0x11d1/0x40e0 [ 632.516596][T13517] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.523907][ T27] ? __mutex_lock+0x1ab/0xaf0 [ 632.529682][T13517] device bridge_slave_1 entered promiscuous mode [ 632.536113][ T27] ? __sched_text_start+0x8/0x8 [ 632.594691][T10802] wlan1: Trigger new scan to find an IBSS to join [ 632.594759][ T27] ? task_work_cancel+0xa1/0x220 [ 632.671420][ T27] ? task_work_cancel_func+0x210/0x210 [ 632.677243][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 632.727983][ T27] ? _free_event+0xfd/0x10a0 [ 632.739340][ T27] schedule+0xb9/0x180 [ 632.743515][ T27] _free_event+0x171/0x10a0 [ 632.748221][ T27] ? perf_mmap+0x13d0/0x13d0 [ 632.752902][ T27] ? perf_mmap+0x13d0/0x13d0 [ 632.757509][ T27] perf_event_release_kernel+0x83e/0x8d0 [ 632.763206][ T27] ? __might_sleep+0xd0/0xd0 [ 632.767811][ T27] ? calc_timer_values+0x410/0x410 [ 632.787237][ T27] ? perf_mmap+0x13d0/0x13d0 [ 632.791910][ T27] perf_release+0x37/0x40 [ 632.796240][ T27] __fput+0x22c/0x920 [ 632.800216][ T27] task_work_run+0x1d0/0x260 [ 632.804860][ T27] ? task_work_cancel+0x220/0x220 [ 632.809887][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 632.815149][ T27] do_exit+0x982/0x2480 [ 632.819334][ T27] ? put_task_struct+0x80/0x80 [ 632.830890][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 632.836949][ T27] ? lock_chain_count+0x20/0x20 [ 632.841844][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 632.846872][ T27] do_group_exit+0x217/0x2d0 [ 632.851518][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 632.856733][ T27] get_signal+0x1272/0x1350 [ 632.861335][ T27] arch_do_signal_or_restart+0xc4/0x1350 [ 632.867040][ T27] ? try_to_wake_up+0x67c/0x1080 [ 632.872064][ T27] ? wake_up_q+0x8c/0xc0 [ 632.876310][ T27] ? __mutex_unlock_slowpath+0x658/0x6c0 [ 632.882309][ T27] ? get_sigframe_size+0x10/0x10 [ 632.887264][ T27] ? mutex_unlock+0x10/0x10 [ 632.891811][ T27] ? __fget_files+0x43d/0x4b0 [ 632.896501][ T27] ? ksys_write+0x1f7/0x250 [ 632.900990][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 632.906536][ T27] exit_to_user_mode_loop+0x70/0x110 [ 632.911892][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 632.917457][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 632.922969][ T27] do_syscall_64+0x58/0xa0 [ 632.927392][ T27] ? clear_bhb_loop+0x60/0xb0 [ 632.932113][ T27] ? clear_bhb_loop+0x60/0xb0 [ 632.936800][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.942736][ T27] RIP: 0033:0x7fa62f99ce59 [ 632.947162][ T27] RSP: 002b:00007fa6308cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 632.955628][ T27] RAX: ffffffffffffffa1 RBX: 00007fa62fc16090 RCX: 00007fa62f99ce59 [ 632.963660][ T27] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 000000000000000c [ 632.971682][ T27] RBP: 00007fa62fa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 632.979654][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.987860][ T27] R13: 00007fa62fc16128 R14: 00007fa62fc16090 R15: 00007fffae3cfee8 [ 632.995981][ T27] [ 632.999048][ T27] [ 632.999048][ T27] Showing all locks held in the system: [ 633.007418][ T27] 1 lock held by rcu_tasks_kthre/12: [ 633.012770][ T27] #0: ffffffff8cb2e7f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 633.025119][ T27] 1 lock held by rcu_tasks_trace/13: [ 633.030424][ T27] #0: ffffffff8cb2f010 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 633.041551][ T27] 2 locks held by kworker/0:1/14: [ 633.046584][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 633.056990][ T27] #1: ffffc90000137d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 633.068454][ T27] 1 lock held by khungtaskd/27: [ 633.073545][ T27] #0: ffffffff8cb2de60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 633.083869][ T27] 1 lock held by dhcpcd/3934: [ 633.088549][ T27] #0: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0xf2/0xd00 [ 633.097746][ T27] 2 locks held by getty/4029: [ 633.102719][ T27] #0: ffff88802fb03098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 633.112772][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 633.123005][ T27] 3 locks held by kworker/0:3/4312: [ 633.128195][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 633.138568][ T27] #1: ffffc90004027d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 633.150695][ T27] #2: ffff88804ef1e240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x270/0x3450 [ 633.160872][ T27] 3 locks held by kworker/u4:8/9124: [ 633.166228][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 633.177312][ T27] #1: ffffc90003347d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 633.188559][ T27] #2: ffffffff8cb33b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 633.199536][ T27] 5 locks held by kworker/u4:14/10780: [ 633.205086][ T27] #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 633.215509][ T27] #1: ffffc9000d807d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 633.225597][ T27] #2: ffffffff8dd3dd50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 633.235077][ T27] #3: ffff8880776192f8 (&devlink->lock_key#5){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x104/0x280 [ 633.246059][ T27] #4: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: devlink_nl_port_fill+0x2a4/0x960 [ 633.255778][ T27] 3 locks held by kworker/u4:25/10802: [ 633.261239][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 633.272378][ T27] #1: ffffc9000d947d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 633.282809][ T27] #2: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 633.292059][ T27] 1 lock held by syz-executor/13517: [ 633.297343][ T27] #0: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 633.306764][ T27] 1 lock held by syz.2.2964/13555: [ 633.311936][ T27] #0: ffffffff8cb82fe8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 633.321632][ T27] 2 locks held by syz.1.2966/13564: [ 633.326827][ T27] #0: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 633.335817][ T27] #1: ffffffff8cb33b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 633.346740][ T27] 2 locks held by syz.5.2967/13570: [ 633.351966][ T27] #0: ffffffff96c57168 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xbe2/0x21b0 [ 633.361408][ T27] #1: ffffffff8cb82fe8 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0 [ 633.370659][ T27] 2 locks held by syz.3.2968/13571: [ 633.375922][ T27] #0: ffffffff96c57168 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xbe2/0x21b0 [ 633.385773][ T27] #1: ffffffff8cb82fe8 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0 [ 633.395293][ T27] 2 locks held by syz.3.2968/13574: [ 633.400505][ T27] #0: ffffffff96c57168 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xbe2/0x21b0 [ 633.409935][ T27] #1: ffffffff8cb82fe8 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0 [ 633.419226][ T27] 1 lock held by syz.3.2968/13576: [ 633.424356][ T27] #0: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x1de/0x12f0 [ 633.433517][ T27] [ 633.435944][ T27] ============================================= [ 633.435944][ T27] [ 633.444514][ T27] NMI backtrace for cpu 1 [ 633.448856][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 633.456059][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 633.466111][ T27] Call Trace: [ 633.469381][ T27] [ 633.472301][ T27] dump_stack_lvl+0x188/0x24e [ 633.476967][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 633.482412][ T27] ? show_regs_print_info+0x12/0x12 [ 633.487595][ T27] ? load_image+0x400/0x400 [ 633.492089][ T27] ? vprintk_emit+0x59f/0x6a0 [ 633.496770][ T27] ? printk_sprint+0x460/0x460 [ 633.501540][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 633.506492][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 633.512633][ T27] ? _printk+0xda/0x130 [ 633.516778][ T27] ? load_image+0x400/0x400 [ 633.521278][ T27] ? load_image+0x400/0x400 [ 633.525771][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 633.531826][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 633.537939][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 633.543923][ T27] watchdog+0xeee/0xf30 [ 633.548135][ T27] ? watchdog+0x1ed/0xf30 [ 633.552457][ T27] kthread+0x29d/0x330 [ 633.556516][ T27] ? hungtask_pm_notify+0x40/0x40 [ 633.561535][ T27] ? kthread_blkcg+0xd0/0xd0 [ 633.566116][ T27] ret_from_fork+0x1f/0x30 [ 633.570533][ T27] [ 633.573908][ T27] Sending NMI from CPU 1 to CPUs 0: [ 633.579131][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 633.598766][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 633.605631][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 633.612833][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 633.622888][ T27] Call Trace: [ 633.626153][ T27] [ 633.629071][ T27] dump_stack_lvl+0x188/0x24e [ 633.633739][ T27] ? memcpy+0x3c/0x60 [ 633.637710][ T27] ? show_regs_print_info+0x12/0x12 [ 633.642892][ T27] ? load_image+0x400/0x400 [ 633.647394][ T27] panic+0x2e5/0x730 [ 633.651275][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 633.656895][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 633.661387][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 633.667022][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 633.673179][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 633.679332][ T27] watchdog+0xf2d/0xf30 [ 633.683485][ T27] ? watchdog+0x1ed/0xf30 [ 633.687812][ T27] kthread+0x29d/0x330 [ 633.691867][ T27] ? hungtask_pm_notify+0x40/0x40 [ 633.696880][ T27] ? kthread_blkcg+0xd0/0xd0 [ 633.701464][ T27] ret_from_fork+0x1f/0x30 [ 633.705887][ T27] [ 633.709152][ T27] Kernel Offset: disabled [ 633.713471][ T27] Rebooting in 86400 seconds..