last executing test programs: 4m1.575666557s ago: executing program 4 (id=4591): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80800, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3m58.821523277s ago: executing program 4 (id=4598): bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000", 0x17}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m55.628861293s ago: executing program 4 (id=4608): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}, 0x3}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x578}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000001000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 3m52.832760227s ago: executing program 4 (id=4614): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0x0, 0x2}, 0x28) syz_clone(0x20001000, &(0x7f00000000c0)="12b726c5098e2bf4d2403ca42c2fa20bc9957eb24c2687d8739b8005cc90be3990ebc51158b05cd5233b6b5a6792b6a5e897cccc29b9a541cdf22f5f53c6aea284fc6dfa", 0x44, &(0x7f0000000140), 0x0, &(0x7f0000000500)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000000000000000003000000000400000003000000000000"], 0x0, 0x50}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)=""/81}, 0x20) getpid() r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x60, 0x0, 0xa4d4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x2dd5145f, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90224fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000000}, 0x240040d4) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext, 0x101000, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)) gettid() 3m48.980800861s ago: executing program 4 (id=4620): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}, 0x3}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x578}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000001000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x4000) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x10, 0x2, 0x0) 3m47.43560344s ago: executing program 4 (id=4625): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0x0, 0x2}, 0x28) syz_clone(0x20001000, &(0x7f00000000c0)="12b726c5098e2bf4d2403ca42c2fa20bc9957eb24c2687d8739b8005cc90be3990ebc51158b05cd5233b6b5a6792b6a5e897cccc29b9a541cdf22f5f53c6aea284fc6dfa", 0x44, &(0x7f0000000140), 0x0, &(0x7f0000000500)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000000000000000003000000000400000003000000000000"], 0x0, 0x50}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000800), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)=""/81}, 0x20) getpid() r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x60, 0x0, 0xa4d4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x2dd5145f, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90224fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000000}, 0x240040d4) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext, 0x101000, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)) gettid() 3m31.902549275s ago: executing program 32 (id=4625): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0x0, 0x2}, 0x28) syz_clone(0x20001000, &(0x7f00000000c0)="12b726c5098e2bf4d2403ca42c2fa20bc9957eb24c2687d8739b8005cc90be3990ebc51158b05cd5233b6b5a6792b6a5e897cccc29b9a541cdf22f5f53c6aea284fc6dfa", 0x44, &(0x7f0000000140), 0x0, &(0x7f0000000500)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000000000000000003000000000400000003000000000000"], 0x0, 0x50}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000800), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)=""/81}, 0x20) getpid() r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x60, 0x0, 0xa4d4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x2dd5145f, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90224fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000000}, 0x240040d4) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext, 0x101000, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)) gettid() 5.729113827s ago: executing program 3 (id=5672): r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)}, 0x900000000000000) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 5.100032003s ago: executing program 3 (id=5674): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x5, 0x4, 0x1}, 0x50) close(r1) 4.784128092s ago: executing program 0 (id=5677): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x0, 0x80, 0x6, 0x5, 0x7, 0x7, 0x0, 0x2a, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffff801, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x23, 0x0, 0x5, 0x4, 0x3, 0x9, 0xe8, 0x0, 0x760, 0x0, 0x35}) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000680)="879b"}, 0x20) close(r2) 4.401296694s ago: executing program 3 (id=5682): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x4000}) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x100000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x33) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x5, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03fe6044238cb89e14f080350de0ffff00184000632f77fbac14140ee000000d62079f4b4d0f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) close(r1) 3.985675078s ago: executing program 5 (id=5685): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0x0, 0x2}, 0x28) syz_clone(0x20001000, &(0x7f00000000c0)="12b726c5098e2bf4d2403ca42c2fa20bc9957eb24c2687d8739b8005cc90be3990ebc51158b05cd5233b6b5a6792b6a5e897cccc29b9a541cdf22f5f53c6aea284fc6dfa", 0x44, &(0x7f0000000140), 0x0, &(0x7f0000000500)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000000000000000003000000000400000003000000000000"], 0x0, 0x50}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000800), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)=""/81}, 0x20) getpid() r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x60, 0x0, 0xa4d4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext, 0x101000, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)) 3.955819139s ago: executing program 0 (id=5687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.626612919s ago: executing program 3 (id=5690): r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)}, 0x900000000000000) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40e02, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 3.126875298s ago: executing program 3 (id=5694): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2f}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0xc00}], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYRESHEX=r0, @ANYRESDEC=r4, @ANYRESHEX=r5, @ANYBLOB="e3b8cda71aee998593b58dfebce4bb5e6e202f764f16e0de75d643cce6a41c76d20e5d5760993d9d12dbdd291023d0e47964d068e15a3bd07799815f5f792fc66b3ca1162c827d2a6793", @ANYRES64=r5], &(0x7f0000000200)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x1080}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x81) gettid() r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) recvmsg(r6, 0x0, 0x10022) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=""/249, 0x0, &(0x7f0000000100), 0xa7c, r8}, 0x38) syz_clone(0x60112000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.023188524s ago: executing program 5 (id=5695): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x5, 0x4, 0x1}, 0x50) close(r1) 2.947031768s ago: executing program 2 (id=5696): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, 0x0) 2.812975786s ago: executing program 2 (id=5698): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x0, 0x80, 0x6, 0x5, 0x7, 0x7, 0x0, 0x2a, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffff801, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x23, 0x0, 0x5, 0x4, 0x3, 0x9, 0xe8, 0x0, 0x760, 0x0, 0x35}) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000680)="879b"}, 0x20) close(r2) 2.812056166s ago: executing program 0 (id=5709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.455795947s ago: executing program 3 (id=5700): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x4000}) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x100000000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x33) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x5, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) close(r1) 2.072609539s ago: executing program 2 (id=5702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0215000000000c00000000000000359d32564dc364d16d9cb1ec2c098d71a57596eea8a60e225e3559dabe815a860f22906a0ee83f739a3b6bf4774ea43799a1be577b04c1e10c053990bb2a30c3e7102f58ba205c39594afe8b14720027c9e5712860ceea7f4769f71a6a7c92836a866b738b0ff0ce16fd2901a8655d48f3e8b393d458e518974b1e86b3"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x2000000}, 0xc) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="660a0000000000006111840000000000180000000000000000de0bb0723afee7464110d7d3dffa0000000000000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r5, 0x58, &(0x7f0000000540)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x8001, 0x0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x3, 0x0, r4, 0xdb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x11, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x68c50a03}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x26, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0x9, 0xbe, 0x8000}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r1], 0x0, 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_netprio_ifpriomap(r10, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_ro(r10, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r11, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$SIOCSIFHWADDR(r7, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) 2.071284489s ago: executing program 1 (id=5703): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x0, 0x80, 0x6, 0x5, 0x7, 0x7, 0x0, 0x2a, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffff801, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x23, 0x0, 0x5, 0x4, 0x3, 0x9, 0xe8, 0x0, 0x760, 0x0, 0x35}) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000680)="879b"}, 0x20) close(r2) 1.906133769s ago: executing program 1 (id=5704): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) 1.819526364s ago: executing program 1 (id=5705): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 1.626897186s ago: executing program 5 (id=5706): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x0, 0x80, 0x6, 0x5, 0x7, 0x7, 0x0, 0x2a, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffff801, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x23, 0x0, 0x5, 0x4, 0x3, 0x9, 0xe8, 0x0, 0x760, 0x0, 0x35}) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000680)="879b"}, 0x20) close(r2) 1.607336787s ago: executing program 2 (id=5707): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0x0, 0x2}, 0x28) syz_clone(0x20001000, &(0x7f00000000c0)="12b726c5098e2bf4d2403ca42c2fa20bc9957eb24c2687d8739b8005cc90be3990ebc51158b05cd5233b6b5a6792b6a5e897cccc29b9a541cdf22f5f53c6aea284fc6dfa", 0x44, &(0x7f0000000140), 0x0, &(0x7f0000000500)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000000000000000003000000000400000003000000000000"], 0x0, 0x50}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000800), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)=""/81}, 0x20) getpid() r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x60, 0x0, 0xa4d4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext, 0x101000, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)) 1.417115867s ago: executing program 0 (id=5710): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x104060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\x00'], 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) 1.416836257s ago: executing program 1 (id=5711): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 1.255428597s ago: executing program 1 (id=5712): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x2f}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0xc00}], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYRESHEX=r0, @ANYRESDEC=r4, @ANYRESHEX=r5, @ANYBLOB="e3b8cda71aee998593b58dfebce4bb5e6e202f764f16e0de75d643cce6a41c76d20e5d5760993d9d12dbdd291023d0e47964d068e15a3bd07799815f5f792fc66b3ca1162c827d2a6793", @ANYRES64=r5], &(0x7f0000000200)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x1080}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x81) gettid() r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) recvmsg(r6, 0x0, 0x10022) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=""/249, 0x0, &(0x7f0000000100), 0xa7c, r8}, 0x38) syz_clone(0x60112000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.21294324s ago: executing program 5 (id=5713): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x10}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 627.937474ms ago: executing program 5 (id=5714): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)}, 0x900000000000000) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 622.006944ms ago: executing program 2 (id=5715): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x0, 0x80, 0x6, 0x5, 0x7, 0x7, 0x0, 0x2a, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffff801, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x23, 0x0, 0x5, 0x4, 0x3, 0x9, 0xe8, 0x0, 0x760, 0x0, 0x35}) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000680)="879b"}, 0x20) close(r2) 302.744883ms ago: executing program 0 (id=5716): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) 249.757416ms ago: executing program 2 (id=5717): socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x20, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 209.793968ms ago: executing program 1 (id=5718): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3, 0x0, 0x0, 0xf, 0x4000000}]}, {0x0, [0x0, 0x0, 0x2e, 0x25]}}, &(0x7f0000002200)=""/4110, 0x2a, 0x100e, 0x1}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="050000000000000000005146bda0691811be8d6f33b6f4c52631546c9a24b2f8c2258b5d558ae27519cf998b00f1911e878d5317e7bea966267166ac4448edd8d07a39af068b1aef5aac6f6f619b2f0238b9f38d9b168be13832a3d65b9bc5e543963200593e1ed8d4ac6c65df7268df684f6312d1efa7401bb2d3aa1009ed91b532ebed5bdb97cf245f0c9b", @ANYRES32], 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100, 0x0, 0x0, 0x2}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r0], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000500000000020000000000000802000000000000000000000a0300000000005f0061"], 0x0, 0x52}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1901], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 189.012359ms ago: executing program 5 (id=5719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r2) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 0s ago: executing program 0 (id=5720): r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)}, 0x900000000000000) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40e02, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) kernel console output (not intermixed with test programs): avoid problems! [ 530.927135][T14308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.938178][T14308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.955022][T14308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.970879][T14308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.996966][T14308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.028406][T14308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.050074][T14308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.113359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 531.136526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 531.526265][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.562535][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.630275][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.633764][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 531.672850][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.961881][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 533.436097][T14507] bridge0: port 3(syz_tun) entered disabled state [ 535.061408][ T4227] Bluetooth: hci4: command 0x0409 tx timeout [ 536.241309][T14507] device syz_tun left promiscuous mode [ 536.246884][T14507] bridge0: port 3(syz_tun) entered disabled state [ 536.281459][T14674] bridge0: port 3(syz_tun) entered blocking state [ 536.287988][T14674] bridge0: port 3(syz_tun) entered disabled state [ 536.316208][T14674] device syz_tun entered promiscuous mode [ 536.356181][T14674] bridge0: port 3(syz_tun) entered blocking state [ 536.362782][T14674] bridge0: port 3(syz_tun) entered forwarding state [ 536.445607][ T157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.579582][ T157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.705070][ T157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.870365][ T157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.141326][ T1326] Bluetooth: hci4: command 0x041b tx timeout [ 537.174932][T14663] chnl_net:caif_netlink_parms(): no params data found [ 537.667306][T14663] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.734307][T14663] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.798982][T14663] device bridge_slave_0 entered promiscuous mode [ 538.011610][T14663] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.018787][T14663] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.073289][T14663] device bridge_slave_1 entered promiscuous mode [ 538.343978][T14663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.415029][T14663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.576223][T14663] team0: Port device team_slave_0 added [ 538.621391][T14663] team0: Port device team_slave_1 added [ 538.949853][T14663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.000591][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.179960][T14663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.221194][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 539.261869][T14663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.282559][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.341627][T14663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.717501][T14663] device hsr_slave_0 entered promiscuous mode [ 539.748036][T14663] device hsr_slave_1 entered promiscuous mode [ 539.766764][T14663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.794239][T14663] Cannot create hsr debugfs directory [ 540.393160][ T157] device veth0_to_bridge left promiscuous mode [ 540.399510][ T157] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 540.499206][ T157] device hsr_slave_0 left promiscuous mode [ 540.602889][ T157] device hsr_slave_1 left promiscuous mode [ 540.626498][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.651282][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.691960][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.707410][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.725831][ T157] device bridge_slave_1 left promiscuous mode [ 540.750848][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.779530][ T157] device bridge_slave_0 left promiscuous mode [ 540.801188][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.848666][ T157] device veth1_vlan left promiscuous mode [ 540.860242][ T157] device veth0_vlan left promiscuous mode [ 541.311296][T14523] Bluetooth: hci4: command 0x0419 tx timeout [ 541.428261][ T157] team0 (unregistering): Port device team_slave_1 removed [ 544.141223][ T157] team0 (unregistering): Port device team_slave_0 removed [ 544.167007][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.197865][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.326460][ T157] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 544.381858][ T157] bond0 (unregistering): Released all slaves [ 545.328855][T14663] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 545.525560][T14663] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 545.558380][T14663] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 545.629506][T14663] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 546.102608][T14663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.163753][T14663] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.172245][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 546.181541][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 546.203104][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 546.215181][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 546.224338][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.231487][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.245332][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 546.254402][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 546.266594][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.273728][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.291982][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 546.333616][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 546.380583][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 546.428983][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 546.502866][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 546.654368][T14663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 546.719171][T14663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.740072][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 546.757775][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 546.768054][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 546.783277][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 546.797463][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.816335][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 546.828692][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.843460][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 547.657557][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 547.668852][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 547.724166][T14663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.845763][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 547.868016][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.955615][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 548.000700][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 548.056930][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 548.105966][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 548.158359][T14663] device veth0_vlan entered promiscuous mode [ 548.233448][T14663] device veth1_vlan entered promiscuous mode [ 548.364828][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 548.389988][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 548.442697][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 548.495475][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 548.556253][T14663] device veth0_macvtap entered promiscuous mode [ 548.600621][T14663] device veth1_macvtap entered promiscuous mode [ 548.718257][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.811015][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.820910][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.901191][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.941166][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.002045][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.063475][T14663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.076780][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 549.115228][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 549.172297][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 549.239421][T13967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 549.285206][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.333405][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.392930][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.468010][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.529491][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.606557][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.667186][T14663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.717771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 549.747491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 549.802283][T14663] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.861191][T14663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.870049][T14663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.932214][T14663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.105896][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.136293][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.271059][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 551.291285][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.299420][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.500381][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 553.309750][ T4187] bridge0: port 3(syz_tun) entered disabled state [ 554.917886][T14523] Bluetooth: hci1: command 0x0409 tx timeout [ 556.125307][ T4187] device syz_tun left promiscuous mode [ 556.141724][ T4187] bridge0: port 3(syz_tun) entered disabled state [ 556.374469][T13967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.564254][T13967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.675200][T13967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.766031][T14983] chnl_net:caif_netlink_parms(): no params data found [ 556.923462][T13967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.991168][ T1326] Bluetooth: hci1: command 0x041b tx timeout [ 557.164425][T14983] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.193861][T14983] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.272707][T14983] device bridge_slave_0 entered promiscuous mode [ 557.423554][T14983] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.430790][T14983] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.472424][T14983] device bridge_slave_1 entered promiscuous mode [ 557.611946][T14983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.681892][T14983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.742962][T14983] team0: Port device team_slave_0 added [ 557.767756][T14983] team0: Port device team_slave_1 added [ 557.790832][T14983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.839433][T14983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.040340][T14983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.081480][T14983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.101428][T14983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.149706][T14983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.493428][T14983] device hsr_slave_0 entered promiscuous mode [ 558.510297][T14983] device hsr_slave_1 entered promiscuous mode [ 558.547458][T14983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.565672][T14983] Cannot create hsr debugfs directory [ 559.061258][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 560.393615][T13967] bond0: (slave wlan1): Releasing backup interface [ 560.643033][T14983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 560.728911][T14983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 560.814231][T14983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 560.854157][T13967] device veth0_to_bridge left promiscuous mode [ 560.870045][T13967] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 560.919303][T13967] device hsr_slave_0 left promiscuous mode [ 560.936796][T13967] device hsr_slave_1 left promiscuous mode [ 560.976916][T13967] device bridge_slave_1 left promiscuous mode [ 560.993876][T13967] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.041465][T13967] device bridge_slave_0 left promiscuous mode [ 561.067722][T13967] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.085922][T13967] device veth1_vlan left promiscuous mode [ 561.092739][T13967] device veth0_vlan left promiscuous mode [ 561.151178][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 561.523298][T13967] team0 (unregistering): Port device team_slave_1 removed [ 561.539566][T13967] team0 (unregistering): Port device team_slave_0 removed [ 561.560375][T13967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.579924][T13967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.635985][T13967] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 561.661417][T13967] bond0 (unregistering): Released all slaves [ 561.726346][T14983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 562.138197][T14983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.291279][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 562.299440][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 562.356016][T14983] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.554305][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 562.568326][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 562.584634][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.591806][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.670017][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 562.688408][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 562.706545][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 562.725200][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.732537][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.748285][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 562.759734][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 562.844161][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 562.873452][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 562.878399][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.887792][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.903898][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 562.913057][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 562.921965][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 562.930748][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 562.946800][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 562.959077][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 562.985543][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 563.076024][T14983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 563.763327][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 563.770881][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 563.801751][T14983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.848382][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 563.864847][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 563.912611][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 563.945256][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 563.969936][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 563.992112][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 564.013777][T14983] device veth0_vlan entered promiscuous mode [ 564.077942][T14983] device veth1_vlan entered promiscuous mode [ 564.216673][T14983] device veth0_macvtap entered promiscuous mode [ 564.268584][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 564.277718][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 564.286033][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 564.294876][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 564.860450][T14983] device veth1_macvtap entered promiscuous mode [ 564.877974][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 564.887566][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 564.967273][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.989694][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.020172][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.037167][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.047626][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.058582][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.069793][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.080822][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.095581][T14983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.117774][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 565.139030][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 565.193777][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.214075][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.227020][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.240432][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.251440][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.271544][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.293649][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.313045][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.336632][T14983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.356931][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 565.369113][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 565.418515][T14983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.476429][T14983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.491134][T14983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.510097][T14983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.859795][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.918071][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.947742][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 565.985882][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.090540][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.194976][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 567.966977][T15273] chnl_net:caif_netlink_parms(): no params data found [ 568.285418][T13967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.468422][T13967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.611180][T15273] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.630089][T15273] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.638897][T15273] device bridge_slave_0 entered promiscuous mode [ 568.853339][T13967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.987921][T15273] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.009120][T15273] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.040659][T15273] device bridge_slave_1 entered promiscuous mode [ 569.120744][T13967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.199108][T15317] bridge0: port 3(syz_tun) entered blocking state [ 569.233300][T15317] bridge0: port 3(syz_tun) entered disabled state [ 569.294808][T15317] device syz_tun entered promiscuous mode [ 569.309607][ T1326] Bluetooth: hci3: command 0x0409 tx timeout [ 569.349877][T15317] bridge0: port 3(syz_tun) entered blocking state [ 569.357216][T15317] bridge0: port 3(syz_tun) entered forwarding state [ 569.394072][T15273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.442992][T15273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.666584][T15273] team0: Port device team_slave_0 added [ 569.720561][T15273] team0: Port device team_slave_1 added [ 569.853753][T15273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.891109][T15273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.973782][T15273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.033795][T15273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.048180][T15273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.104830][T15273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.141352][T15333] netlink: 'syz.1.3178': attribute type 10 has an invalid length. [ 570.871967][T15273] device hsr_slave_0 entered promiscuous mode [ 570.892684][T15273] device hsr_slave_1 entered promiscuous mode [ 570.919274][T15273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.938266][T15273] Cannot create hsr debugfs directory [ 571.391237][ T1326] Bluetooth: hci3: command 0x041b tx timeout [ 571.982252][T15368] bridge0: port 3(syz_tun) entered blocking state [ 572.051557][T15368] bridge0: port 3(syz_tun) entered disabled state [ 572.232413][T15368] device syz_tun entered promiscuous mode [ 572.335865][T15368] bridge0: port 3(syz_tun) entered blocking state [ 572.348967][T15368] bridge0: port 3(syz_tun) entered forwarding state [ 573.461164][ T4566] Bluetooth: hci3: command 0x040f tx timeout [ 573.479194][T13967] GPL: port 1(erspan0) entered disabled state [ 573.666940][T13967] device erspan0 left promiscuous mode [ 573.691776][T13967] GPL: port 1(erspan0) entered disabled state [ 574.729275][T13967] bond0: (slave wlan1): Releasing backup interface [ 574.840147][T15273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 574.866429][T15273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 575.003996][T15273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 575.417987][T15273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 575.541119][ T1326] Bluetooth: hci3: command 0x0419 tx timeout [ 575.696307][T13967] device veth0_to_bridge left promiscuous mode [ 575.713057][T13967] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 575.834483][T13967] device hsr_slave_0 left promiscuous mode [ 575.857535][T13967] device hsr_slave_1 left promiscuous mode [ 575.922287][T13967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.929842][T13967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.011933][T13967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.031127][T13967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.114237][T13967] device veth1_vlan left promiscuous mode [ 576.990716][T13967] team0 (unregistering): Port device team_slave_1 removed [ 577.023139][T13967] team0 (unregistering): Port device team_slave_0 removed [ 577.061354][T13967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.111488][T13967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.348646][T13967] bond0 (unregistering): Released all slaves [ 577.411887][T15469] netlink: 'syz.3.3209': attribute type 10 has an invalid length. [ 577.894096][T15273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.005277][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 578.042656][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 578.053208][T15273] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.096845][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 578.136563][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.171454][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.178632][T14633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.229103][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 578.253706][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 578.322088][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 578.330712][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.337859][T14633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.414842][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 579.023079][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 579.042759][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 579.053527][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 579.064188][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 579.108748][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 579.171715][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 579.399093][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 579.428322][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 579.462639][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 579.503354][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 579.547685][T15273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 579.593083][T15506] netlink: 'syz.4.3219': attribute type 10 has an invalid length. [ 581.015698][T15443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 581.037555][T15443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 581.466599][T15273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.605368][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 581.628559][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 581.835832][T15273] device veth0_vlan entered promiscuous mode [ 581.869124][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 581.888750][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 581.929141][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 581.967130][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 582.409192][T15273] device veth1_vlan entered promiscuous mode [ 582.697901][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 582.707157][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 582.742744][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 582.779716][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 582.829490][T15273] device veth0_macvtap entered promiscuous mode [ 582.925050][T15560] netlink: 'syz.3.3235': attribute type 10 has an invalid length. [ 582.950383][T15273] device veth1_macvtap entered promiscuous mode [ 583.068674][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.121838][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.152917][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.189878][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.227536][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.248563][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.281306][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.331047][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.373464][T15273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.389439][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 583.406202][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 583.456332][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 583.542028][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.567349][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.577777][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.601004][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.619317][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.639714][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.662370][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.681075][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.703151][T15273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.751298][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 583.764273][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 583.829258][T15273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.861090][T15273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.869954][T15273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.902653][T15273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.477763][T14633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.508200][T14633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.566784][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 584.617756][T15443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.648698][T15443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.709370][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 584.846338][T15600] bridge0: port 3(syz_tun) entered blocking state [ 584.921033][T15600] bridge0: port 3(syz_tun) entered disabled state [ 585.018553][T15600] device syz_tun entered promiscuous mode [ 585.049492][T15600] bridge0: port 3(syz_tun) entered blocking state [ 585.058699][T15600] bridge0: port 3(syz_tun) entered forwarding state [ 585.213947][T15609] netlink: 'syz.4.3249': attribute type 10 has an invalid length. [ 594.153816][T15775] netlink: 'syz.4.3298': attribute type 10 has an invalid length. [ 594.877068][T15770] bridge0: port 3(syz_tun) entered blocking state [ 594.928087][T15770] bridge0: port 3(syz_tun) entered disabled state [ 595.032261][T15770] device syz_tun entered promiscuous mode [ 595.057187][T15770] bridge0: port 3(syz_tun) entered blocking state [ 595.063841][T15770] bridge0: port 3(syz_tun) entered forwarding state [ 616.061066][T16162] netlink: 'syz.0.3420': attribute type 10 has an invalid length. [ 618.790516][T16227] netlink: 'syz.0.3439': attribute type 10 has an invalid length. [ 620.347348][T16276] netlink: 'syz.2.3452': attribute type 10 has an invalid length. [ 624.151681][T16343] netlink: 'syz.2.3472': attribute type 10 has an invalid length. [ 624.265231][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.271655][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.345194][T14523] Bluetooth: hci5: command 0x0406 tx timeout [ 633.118095][T16552] netlink: 'syz.3.3538': attribute type 10 has an invalid length. [ 635.627234][T16609] netlink: 'syz.3.3551': attribute type 10 has an invalid length. [ 638.186016][T16659] netlink: 'syz.4.3568': attribute type 10 has an invalid length. [ 641.112930][T16714] netlink: 'syz.2.3582': attribute type 10 has an invalid length. [ 641.701102][ T4568] Bluetooth: hci2: command 0x0406 tx timeout [ 644.078081][T16768] netlink: 'syz.1.3598': attribute type 10 has an invalid length. [ 646.771876][T16820] netlink: 'syz.1.3613': attribute type 10 has an invalid length. [ 652.881095][T16917] netlink: 'syz.2.3644': attribute type 10 has an invalid length. [ 655.001954][T16975] netlink: 'syz.4.3661': attribute type 10 has an invalid length. [ 656.495829][T17020] netlink: 'syz.0.3675': attribute type 10 has an invalid length. [ 656.745142][T17033] netlink: 'syz.1.3689': attribute type 10 has an invalid length. [ 657.074872][ T1326] Bluetooth: hci4: command 0x0406 tx timeout [ 658.756786][T17088] netlink: 'syz.0.3693': attribute type 10 has an invalid length. [ 660.815107][T17141] netlink: 'syz.3.3710': attribute type 10 has an invalid length. [ 663.173334][T17189] netlink: 'syz.2.3723': attribute type 10 has an invalid length. [ 665.296545][T17235] netlink: 'syz.1.3738': attribute type 10 has an invalid length. [ 669.278742][T17290] netlink: 'syz.2.3757': attribute type 10 has an invalid length. [ 677.631684][ T4568] Bluetooth: hci1: command 0x0406 tx timeout [ 684.850457][T17593] netlink: 'syz.4.3848': attribute type 10 has an invalid length. [ 685.707002][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.714742][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.683987][T17638] netlink: 'syz.0.3862': attribute type 10 has an invalid length. [ 688.550130][T17653] netlink: 'syz.0.3877': attribute type 10 has an invalid length. [ 692.912060][ T4568] Bluetooth: hci3: command 0x0406 tx timeout [ 710.219040][T18068] netlink: 'syz.4.3993': attribute type 10 has an invalid length. [ 725.687693][T18233] ODEBUG: Out of memory. ODEBUG disabled [ 726.833208][T18274] netlink: 'syz.2.4055': attribute type 10 has an invalid length. [ 743.963624][T18513] netlink: 'syz.1.4131': attribute type 10 has an invalid length. [ 745.501732][T18561] netlink: 'syz.0.4144': attribute type 10 has an invalid length. [ 747.009145][T18604] netlink: 'syz.0.4160': attribute type 10 has an invalid length. [ 747.145539][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.152894][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.740489][T18806] netlink: 'syz.1.4252': attribute type 10 has an invalid length. [ 755.147872][T18852] netlink: 'syz.0.4258': attribute type 8 has an invalid length. [ 755.207582][T18852] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4258'. [ 755.296139][T18858] netlink: 'syz.1.4260': attribute type 10 has an invalid length. [ 756.016176][T18875] netlink: 'syz.0.4268': attribute type 8 has an invalid length. [ 756.123828][T18881] netlink: 'syz.3.4272': attribute type 8 has an invalid length. [ 756.156602][T18881] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4272'. [ 756.196468][T18875] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4268'. [ 756.708427][T18900] netlink: 'syz.3.4277': attribute type 10 has an invalid length. [ 756.736547][T18901] netlink: 'syz.1.4279': attribute type 8 has an invalid length. [ 756.791227][T18901] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4279'. [ 758.191895][T18933] netlink: 'syz.2.4289': attribute type 8 has an invalid length. [ 758.211972][T18933] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4289'. [ 758.385535][T18936] netlink: 'syz.4.4291': attribute type 8 has an invalid length. [ 758.471728][T18936] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4291'. [ 759.127010][T18959] netlink: 'syz.3.4297': attribute type 8 has an invalid length. [ 759.230568][T18959] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4297'. [ 760.114939][T18972] netlink: 'syz.0.4311': attribute type 8 has an invalid length. [ 760.215045][T18972] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4311'. [ 760.296642][T18982] netlink: 'syz.2.4304': attribute type 8 has an invalid length. [ 760.357406][T18982] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4304'. [ 760.440077][T18988] netlink: 'syz.4.4305': attribute type 8 has an invalid length. [ 760.537763][T18988] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4305'. [ 761.100690][T19000] netlink: 'syz.1.4309': attribute type 8 has an invalid length. [ 761.243630][T19000] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4309'. [ 761.575251][T19010] netlink: 'syz.2.4310': attribute type 8 has an invalid length. [ 761.690020][T19010] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4310'. [ 761.699884][T19014] netlink: 'syz.3.4313': attribute type 8 has an invalid length. [ 761.699979][T19014] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4313'. [ 761.776180][T19017] netlink: 'syz.0.4314': attribute type 8 has an invalid length. [ 762.000007][T19017] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4314'. [ 762.153842][T19028] netlink: 'syz.4.4316': attribute type 8 has an invalid length. [ 762.315807][T19028] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4316'. [ 762.744708][T19040] netlink: 'syz.1.4318': attribute type 8 has an invalid length. [ 762.809305][T19044] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4317'. [ 762.822973][T19040] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4318'. [ 764.305388][T19073] validate_nla: 1 callbacks suppressed [ 764.305418][T19073] netlink: 'syz.0.4325': attribute type 8 has an invalid length. [ 764.473288][T19068] netlink: 'syz.2.4323': attribute type 10 has an invalid length. [ 765.124853][T19086] netlink: 'syz.4.4328': attribute type 8 has an invalid length. [ 765.271114][T19086] __nla_validate_parse: 1 callbacks suppressed [ 765.271155][T19086] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4328'. [ 765.570470][T19092] netlink: 'syz.1.4330': attribute type 8 has an invalid length. [ 765.697586][T19092] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4330'. [ 766.082169][T19100] netlink: 'syz.2.4331': attribute type 8 has an invalid length. [ 766.090160][T19100] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4331'. [ 766.639448][T19104] netlink: 'syz.0.4332': attribute type 8 has an invalid length. [ 766.821134][T19104] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4332'. [ 766.957578][T19116] netlink: 'syz.1.4333': attribute type 8 has an invalid length. [ 767.309638][T19116] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4333'. [ 768.029066][T19125] netlink: 'syz.3.4338': attribute type 8 has an invalid length. [ 768.241956][T19125] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4338'. [ 768.367733][T19139] netlink: 'syz.4.4341': attribute type 8 has an invalid length. [ 768.620977][T19139] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4341'. [ 769.234507][T19150] netlink: 'syz.2.4343': attribute type 8 has an invalid length. [ 769.396778][T19150] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4343'. [ 770.488038][T19164] netlink: 'syz.4.4347': attribute type 8 has an invalid length. [ 770.738481][T19164] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4347'. [ 771.668337][T19180] netlink: 'syz.3.4351': attribute type 8 has an invalid length. [ 771.747803][T19180] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4351'. [ 772.002671][T19186] netlink: 'syz.0.4349': attribute type 8 has an invalid length. [ 772.010615][T19186] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4349'. [ 773.090220][T19198] netlink: 'syz.4.4354': attribute type 8 has an invalid length. [ 773.283271][T19198] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4354'. [ 773.597648][T19207] netlink: 'syz.2.4356': attribute type 8 has an invalid length. [ 774.029852][T19207] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4356'. [ 774.992048][T19223] netlink: 'syz.4.4360': attribute type 8 has an invalid length. [ 774.999962][T19223] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4360'. [ 775.318588][T19235] netlink: 'syz.3.4362': attribute type 8 has an invalid length. [ 775.621746][T19235] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4362'. [ 775.786906][T19243] netlink: 'syz.1.4364': attribute type 8 has an invalid length. [ 775.983568][T19243] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4364'. [ 776.000518][T19245] netlink: 'syz.2.4365': attribute type 8 has an invalid length. [ 776.267646][T19245] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4365'. [ 777.608199][T19266] netlink: 'syz.3.4368': attribute type 8 has an invalid length. [ 777.821306][T19267] netlink: 'syz.4.4367': attribute type 8 has an invalid length. [ 777.829250][T19267] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4367'. [ 777.880655][T19266] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4368'. [ 778.418666][T19288] netlink: 'syz.0.4371': attribute type 8 has an invalid length. [ 779.089323][T19288] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4371'. [ 780.713092][T19310] netlink: 'syz.4.4377': attribute type 8 has an invalid length. [ 780.887852][T19310] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4377'. [ 781.165458][T19316] netlink: 'syz.3.4380': attribute type 8 has an invalid length. [ 781.250959][T19316] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4380'. [ 783.814585][T19342] netlink: 'syz.1.4385': attribute type 8 has an invalid length. [ 784.078746][T19342] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4385'. [ 784.396848][T19352] netlink: 'syz.2.4387': attribute type 8 has an invalid length. [ 784.781094][T19352] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4387'. [ 785.889655][T19364] netlink: 'syz.3.4388': attribute type 8 has an invalid length. [ 786.291151][T19364] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4388'. [ 789.378545][T19394] netlink: 'syz.1.4396': attribute type 8 has an invalid length. [ 789.628857][T19394] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4396'. [ 789.866487][T19399] netlink: 'syz.2.4397': attribute type 8 has an invalid length. [ 789.964490][T19399] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4397'. [ 791.175077][T19409] netlink: 'syz.4.4400': attribute type 8 has an invalid length. [ 791.434055][T19409] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4400'. [ 793.929195][T19432] netlink: 'syz.1.4408': attribute type 8 has an invalid length. [ 793.989475][T19432] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4408'. [ 794.211127][T18978] syz.0.4311 (18978) used greatest stack depth: 19056 bytes left [ 794.836579][T19444] netlink: 'syz.2.4409': attribute type 8 has an invalid length. [ 795.213538][T19444] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4409'. [ 799.565893][T19499] netlink: 'syz.2.4418': attribute type 8 has an invalid length. [ 799.801042][T19499] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4418'. [ 800.977285][T19514] netlink: 'syz.0.4420': attribute type 8 has an invalid length. [ 801.058541][T19514] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4420'. [ 801.996091][T19020] syz.0.4314 (19020) used greatest stack depth: 18928 bytes left [ 802.544490][T19530] netlink: 'syz.2.4426': attribute type 8 has an invalid length. [ 802.758740][T19530] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4426'. [ 804.707663][T19544] netlink: 'syz.3.4429': attribute type 8 has an invalid length. [ 804.901115][T19544] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4429'. [ 807.746022][T19582] netlink: 'syz.0.4438': attribute type 8 has an invalid length. [ 807.836638][T19582] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4438'. [ 808.310787][T19599] netlink: 'syz.2.4440': attribute type 8 has an invalid length. [ 808.587538][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.594011][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.800953][T19599] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4440'. [ 811.944187][T19629] netlink: 'syz.3.4455': attribute type 8 has an invalid length. [ 812.041762][T19629] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4455'. [ 816.472531][T19664] netlink: 'syz.1.4451': attribute type 8 has an invalid length. [ 816.898007][T19664] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4451'. [ 827.483524][T19783] netlink: 'syz.3.4479': attribute type 8 has an invalid length. [ 827.728149][T19783] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4479'. [ 835.019567][T19172] syz.0.4346 (19172) used greatest stack depth: 18352 bytes left [ 835.762838][T19878] netlink: 'syz.4.4498': attribute type 8 has an invalid length. [ 835.770635][T19878] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4498'. [ 842.047734][T19938] netlink: 'syz.4.4513': attribute type 8 has an invalid length. [ 842.198350][T19938] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4513'. [ 848.357141][T20031] netlink: 'syz.3.4533': attribute type 8 has an invalid length. [ 848.710979][T20031] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4533'. [ 851.740017][T20068] netlink: 'syz.1.4543': attribute type 8 has an invalid length. [ 851.823233][T20068] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4543'. [ 852.811870][T20083] netlink: 'syz.0.4547': attribute type 8 has an invalid length. [ 852.820336][T20083] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4547'. [ 860.899012][T20168] netlink: 'syz.4.4566': attribute type 8 has an invalid length. [ 861.128275][T20168] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4566'. [ 862.949523][T20192] netlink: 'syz.0.4571': attribute type 8 has an invalid length. [ 863.526615][T20192] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4571'. [ 869.526972][T20261] netlink: 'syz.3.4584': attribute type 8 has an invalid length. [ 869.937232][T20261] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4584'. [ 870.034383][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.040744][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.535511][T20278] netlink: 'syz.0.4588': attribute type 8 has an invalid length. [ 871.921134][T20278] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4588'. [ 877.360363][T20344] netlink: 'syz.1.4607': attribute type 8 has an invalid length. [ 877.420993][T20344] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4607'. [ 889.701040][T20424] syz.4.4625 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 890.178429][T20424] CPU: 0 PID: 20424 Comm: syz.4.4625 Not tainted syzkaller #0 [ 890.186048][T20424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 890.196145][T20424] Call Trace: [ 890.199456][T20424] [ 890.202414][T20424] dump_stack_lvl+0x188/0x250 [ 890.207151][T20424] ? show_regs_print_info+0x20/0x20 [ 890.212404][T20424] ? load_image+0x400/0x400 [ 890.216948][T20424] ? local_lock_release+0x170/0x170 [ 890.222183][T20424] ? __rwlock_init+0x140/0x140 [ 890.226982][T20424] dump_header+0xd4/0x770 [ 890.231351][T20424] oom_kill_process+0x20e/0x3d0 [ 890.236248][T20424] out_of_memory+0xdbe/0x1180 [ 890.240968][T20424] ? mutex_lock_io_nested+0x60/0x60 [ 890.246213][T20424] ? unregister_oom_notifier+0x20/0x20 [ 890.251722][T20424] mem_cgroup_out_of_memory+0x2bd/0x3b0 [ 890.257314][T20424] ? mem_cgroup_oom_trylock+0x210/0x210 [ 890.262902][T20424] ? do_raw_spin_unlock+0x11d/0x230 [ 890.268161][T20424] try_charge_memcg+0xfcf/0x14f0 [ 890.273153][T20424] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 890.279166][T20424] ? rcu_lock_acquire+0x30/0x30 [ 890.284067][T20424] charge_memcg+0x100/0x2f0 [ 890.288607][T20424] ? __mem_cgroup_charge+0x80/0x80 [ 890.293773][T20424] __mem_cgroup_charge+0x21/0x80 [ 890.298745][T20424] shmem_add_to_page_cache+0xa98/0x14d0 [ 890.304351][T20424] ? put_page+0x200/0x200 [ 890.308726][T20424] ? mark_lock+0x94/0x320 [ 890.313098][T20424] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 890.319145][T20424] shmem_getpage_gfp+0x1796/0x2d40 [ 890.324349][T20424] shmem_write_begin+0xcd/0x1a0 [ 890.329245][T20424] generic_perform_write+0x2b6/0x550 [ 890.334571][T20424] ? atime_needs_update+0x780/0x780 [ 890.339826][T20424] ? grab_cache_page_write_begin+0xa0/0xa0 [ 890.345669][T20424] ? file_remove_privs+0x5d0/0x5d0 [ 890.350854][T20424] ? rwsem_write_trylock+0x135/0x1c0 [ 890.356176][T20424] ? clear_nonspinnable+0x60/0x60 [ 890.361406][T20424] __generic_file_write_iter+0x25f/0x4e0 [ 890.367076][T20424] generic_file_write_iter+0xa6/0x1b0 [ 890.372485][T20424] __kernel_write+0x51c/0x970 [ 890.377211][T20424] ? vfs_read+0xd60/0xd60 [ 890.381575][T20424] ? __up_read+0x2b2/0x6b0 [ 890.386030][T20424] ? up_read+0x20/0x20 [ 890.390315][T20424] ? get_dump_page+0x4cf/0x680 [ 890.395137][T20424] __dump_emit+0x249/0x370 [ 890.399580][T20424] ? do_raw_spin_unlock+0x11d/0x230 [ 890.404817][T20424] ? wait_for_dump_helpers+0x3d0/0x3d0 [ 890.410319][T20424] ? dump_emit+0x153/0x3d0 [ 890.414780][T20424] dump_user_range+0x84/0x340 [ 890.419615][T20424] elf_core_dump+0x2fbd/0x3500 [ 890.424448][T20424] ? load_elf_library+0x920/0x920 [ 890.429521][T20424] ? verify_lock_unused+0x140/0x140 [ 890.434761][T20424] ? dump_vma_snapshot+0xb00/0xe40 [ 890.439954][T20424] ? rcu_read_lock_any_held+0xb0/0x130 [ 890.445448][T20424] ? getname_kernel+0x142/0x2e0 [ 890.450384][T20424] do_coredump+0x14c7/0x2ac0 [ 890.455036][T20424] ? nfs_stat_to_errno+0x190/0x190 [ 890.460194][T20424] ? rcu_nmi_exit+0x6f/0xf0 [ 890.464758][T20424] ? lock_chain_count+0x20/0x20 [ 890.469658][T20424] ? _raw_spin_unlock_irq+0x1f/0x40 [ 890.474894][T20424] ? lockdep_hardirqs_on+0x94/0x140 [ 890.480129][T20424] get_signal+0x40a/0x12c0 [ 890.484623][T20424] arch_do_signal_or_restart+0xe7/0x12c0 [ 890.490316][T20424] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 890.496086][T20424] ? get_sigframe_size+0x10/0x10 [ 890.501058][T20424] ? rcu_nmi_exit+0x6f/0xf0 [ 890.505611][T20424] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 890.511642][T20424] ? exit_to_user_mode_loop+0x3b/0x130 [ 890.517140][T20424] exit_to_user_mode_loop+0x9e/0x130 [ 890.522459][T20424] exit_to_user_mode_prepare+0xee/0x180 [ 890.528044][T20424] irqentry_exit_to_user_mode+0x5/0x30 [ 890.533569][T20424] exc_page_fault+0x88/0x100 [ 890.538192][T20424] asm_exc_page_fault+0x22/0x30 [ 890.543078][T20424] RIP: 0033:0xfa6dfc84 [ 890.547183][T20424] Code: Unable to access opcode bytes at RIP 0xfa6dfc5a. [ 890.554217][T20424] RSP: 002b:0000200000000108 EFLAGS: 00010217 [ 890.560337][T20424] RAX: 0000000000000000 RBX: 00007f9fccfe8fa0 RCX: 00007f9fccd6deb9 [ 890.568341][T20424] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000020001000 [ 890.576348][T20424] RBP: 00007f9fccddbc1f R08: 0000200000000500 R09: 0000200000000500 [ 890.584357][T20424] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 890.592392][T20424] R13: 00007f9fccfe9038 R14: 00007f9fccfe8fa0 R15: 00007ffd4ee443f8 [ 890.600481][T20424] [ 891.778414][T20441] netlink: 'syz.3.4631': attribute type 8 has an invalid length. [ 891.931615][T20441] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4631'. [ 892.830884][T20424] memory: usage 307128kB, limit 307200kB, failcnt 19104 [ 892.837940][T20424] memory+swap: usage 316184kB, limit 9007199254740988kB, failcnt 0 [ 893.150873][T20424] kmem: usage 4820kB, limit 9007199254740988kB, failcnt 0 [ 893.368448][T20424] Memory cgroup stats for /syz4: [ 893.369519][T20424] anon 778240 [ 893.369519][T20424] file 308740096 [ 893.369519][T20424] kernel_stack 360448 [ 893.369519][T20424] pagetables 1499136 [ 893.369519][T20424] percpu 14368 [ 893.369519][T20424] sock 0 [ 893.369519][T20424] shmem 308637696 [ 893.369519][T20424] file_mapped 0 [ 893.369519][T20424] file_dirty 0 [ 893.369519][T20424] file_writeback 4096 [ 893.369519][T20424] swapcached 210006016 [ 893.369519][T20424] anon_thp 0 [ 893.369519][T20424] file_thp 0 [ 893.369519][T20424] shmem_thp 0 [ 893.369519][T20424] inactive_anon 118702080 [ 893.369519][T20424] active_anon 190230528 [ 893.369519][T20424] inactive_file 102400 [ 893.369519][T20424] active_file 0 [ 893.369519][T20424] unevictable 0 [ 893.369519][T20424] slab_reclaimable 1656448 [ 893.369519][T20424] slab_unreclaimable 1203752 [ 893.369519][T20424] slab 2860200 [ 893.369519][T20424] workingset_refault_anon 568 [ 893.369519][T20424] workingset_refault_file 1964 [ 894.696036][T20468] netlink: 'syz.1.4638': attribute type 8 has an invalid length. [ 894.871265][T20468] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4638'. [ 895.700919][T20424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4552,pid=20139,uid=0 [ 896.145108][T20424] Memory cgroup out of memory: Killed process 20139 (syz.4.4552) total-vm:108532kB, anon-rss:1248kB, file-rss:44980kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 896.719029][T20481] netlink: 'syz.1.4641': attribute type 8 has an invalid length. [ 896.931084][T20481] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4641'. [ 897.192858][T19842] syz.2.4492 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 897.493265][T19842] CPU: 1 PID: 19842 Comm: syz.2.4492 Not tainted syzkaller #0 [ 897.500804][T19842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 897.510896][T19842] Call Trace: [ 897.511545][T20485] netlink: 'syz.3.4642': attribute type 8 has an invalid length. [ 897.514208][T19842] [ 897.524932][T19842] dump_stack_lvl+0x188/0x250 [ 897.529660][T19842] ? show_regs_print_info+0x20/0x20 [ 897.534899][T19842] ? load_image+0x400/0x400 [ 897.539455][T19842] ? local_lock_release+0x170/0x170 [ 897.544722][T19842] ? __rwlock_init+0x140/0x140 [ 897.549540][T19842] dump_header+0xd4/0x770 [ 897.553918][T19842] oom_kill_process+0x20e/0x3d0 [ 897.558802][T19842] out_of_memory+0xdbe/0x1180 [ 897.563516][T19842] ? mutex_lock_io_nested+0x60/0x60 [ 897.568776][T19842] ? unregister_oom_notifier+0x20/0x20 [ 897.574286][T19842] mem_cgroup_out_of_memory+0x2bd/0x3b0 [ 897.579864][T19842] ? mem_cgroup_oom_trylock+0x210/0x210 [ 897.585450][T19842] ? do_raw_spin_unlock+0x11d/0x230 [ 897.590682][T19842] try_charge_memcg+0xfcf/0x14f0 [ 897.595683][T19842] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 897.601900][T19842] ? rcu_lock_acquire+0x30/0x30 [ 897.606791][T19842] charge_memcg+0x100/0x2f0 [ 897.611327][T19842] ? __mem_cgroup_charge+0x80/0x80 [ 897.616480][T19842] __mem_cgroup_charge+0x21/0x80 [ 897.621452][T19842] shmem_add_to_page_cache+0xa98/0x14d0 [ 897.627044][T19842] ? put_page+0x200/0x200 [ 897.631416][T19842] ? mark_lock+0x94/0x320 [ 897.635780][T19842] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 897.641797][T19842] shmem_getpage_gfp+0x1796/0x2d40 [ 897.647007][T19842] shmem_write_begin+0xcd/0x1a0 [ 897.651902][T19842] generic_perform_write+0x2b6/0x550 [ 897.657211][T19842] ? atime_needs_update+0x780/0x780 [ 897.662462][T19842] ? grab_cache_page_write_begin+0xa0/0xa0 [ 897.668318][T19842] ? file_remove_privs+0x5d0/0x5d0 [ 897.673472][T19842] ? rwsem_write_trylock+0x135/0x1c0 [ 897.678806][T19842] ? clear_nonspinnable+0x60/0x60 [ 897.683956][T19842] __generic_file_write_iter+0x25f/0x4e0 [ 897.689633][T19842] generic_file_write_iter+0xa6/0x1b0 [ 897.695040][T19842] __kernel_write+0x51c/0x970 [ 897.699864][T19842] ? vfs_read+0xd60/0xd60 [ 897.704224][T19842] ? __up_read+0x2b2/0x6b0 [ 897.708776][T19842] ? up_read+0x20/0x20 [ 897.712895][T19842] ? get_dump_page+0x4cf/0x680 [ 897.717723][T19842] __dump_emit+0x249/0x370 [ 897.722165][T19842] ? do_raw_spin_unlock+0x11d/0x230 [ 897.727396][T19842] ? wait_for_dump_helpers+0x3d0/0x3d0 [ 897.732895][T19842] ? dump_emit+0x153/0x3d0 [ 897.737351][T19842] dump_user_range+0x84/0x340 [ 897.742066][T19842] elf_core_dump+0x2fbd/0x3500 [ 897.746889][T19842] ? load_elf_library+0x920/0x920 [ 897.751957][T19842] ? verify_lock_unused+0x140/0x140 [ 897.757186][T19842] ? dump_vma_snapshot+0xb00/0xe40 [ 897.762412][T19842] ? rcu_read_lock_any_held+0xb0/0x130 [ 897.767919][T19842] ? getname_kernel+0x142/0x2e0 [ 897.772809][T19842] do_coredump+0x14c7/0x2ac0 [ 897.777454][T19842] ? nfs_stat_to_errno+0x190/0x190 [ 897.782606][T19842] ? rcu_nmi_exit+0x6f/0xf0 [ 897.787157][T19842] ? lock_chain_count+0x20/0x20 [ 897.792052][T19842] ? _raw_spin_unlock_irq+0x1f/0x40 [ 897.797688][T19842] ? lockdep_hardirqs_on+0x94/0x140 [ 897.800492][T20485] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4642'. [ 897.802925][T19842] get_signal+0x40a/0x12c0 [ 897.802974][T19842] arch_do_signal_or_restart+0xe7/0x12c0 [ 897.803011][T19842] ? force_sig_fault_to_task+0x130/0x130 [ 897.803041][T19842] ? get_sigframe_size+0x10/0x10 [ 897.803063][T19842] ? rcu_nmi_exit+0x6f/0xf0 [ 897.803091][T19842] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 897.803131][T19842] ? exit_to_user_mode_loop+0x3b/0x130 [ 897.803158][T19842] exit_to_user_mode_loop+0x9e/0x130 [ 897.803186][T19842] exit_to_user_mode_prepare+0xee/0x180 [ 897.803212][T19842] irqentry_exit_to_user_mode+0x5/0x30 [ 897.803234][T19842] exc_page_fault+0x88/0x100 [ 897.870026][T19842] asm_exc_page_fault+0x22/0x30 [ 897.874921][T19842] RIP: 0033:0xfa6dfc84 [ 897.879030][T19842] Code: Unable to access opcode bytes at RIP 0xfa6dfc5a. [ 897.886107][T19842] RSP: 002b:0000200000000108 EFLAGS: 00010217 [ 897.892300][T19842] RAX: 0000000000000000 RBX: 00007fc9fe9bdfa0 RCX: 00007fc9fe742eb9 [ 897.900311][T19842] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000020001000 [ 897.908309][T19842] RBP: 00007fc9fe7b0c1f R08: 0000200000000500 R09: 0000200000000500 [ 897.916305][T19842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 897.924306][T19842] R13: 00007fc9fe9be038 R14: 00007fc9fe9bdfa0 R15: 00007ffe9f8672f8 [ 897.932340][T19842] [ 898.745785][ T28] oom_reaper: reaped process 20139 (syz.4.4552), now anon-rss:0kB, file-rss:42536kB, shmem-rss:0kB [ 899.311018][T19842] memory: usage 307200kB, limit 307200kB, failcnt 22111 [ 899.487527][T19842] memory+swap: usage 390952kB, limit 9007199254740988kB, failcnt 0 [ 899.721595][T19842] kmem: usage 4832kB, limit 9007199254740988kB, failcnt 0 [ 899.729854][T19842] Memory cgroup stats for /syz2: [ 899.730008][T19842] anon 671744 [ 899.730008][T19842] file 308883456 [ 899.730008][T19842] kernel_stack 393216 [ 899.730008][T19842] pagetables 1810432 [ 899.730008][T19842] percpu 14368 [ 899.730008][T19842] sock 0 [ 899.730008][T19842] shmem 308809728 [ 899.730008][T19842] file_mapped 45056 [ 899.730008][T19842] file_dirty 0 [ 899.730008][T19842] file_writeback 0 [ 899.730008][T19842] swapcached 235659264 [ 899.730008][T19842] anon_thp 0 [ 899.730008][T19842] file_thp 0 [ 899.730008][T19842] shmem_thp 0 [ 899.730008][T19842] inactive_anon 148881408 [ 899.730008][T19842] active_anon 160206848 [ 899.730008][T19842] inactive_file 73728 [ 899.730008][T19842] active_file 0 [ 899.730008][T19842] unevictable 0 [ 899.730008][T19842] slab_reclaimable 1510064 [ 899.730008][T19842] slab_unreclaimable 973576 [ 899.730008][T19842] slab 2483640 [ 899.730008][T19842] workingset_refault_anon 355 [ 899.730008][T19842] workingset_refault_file 1659 [ 899.730008][T19842] workingset_activate_anon 61 [ 901.447103][T20511] netlink: 'syz.0.4649': attribute type 39 has an invalid length. [ 902.110100][T19842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4478,pid=19791,uid=0 [ 902.478729][T19842] Memory cgroup out of memory: Killed process 19791 (syz.2.4478) total-vm:102248kB, anon-rss:1212kB, file-rss:41540kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 903.174634][T20515] chnl_net:caif_netlink_parms(): no params data found [ 903.238766][T20317] syz.2.4593 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 903.391036][T20515] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.398412][T20515] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.407256][T20515] device bridge_slave_0 entered promiscuous mode [ 903.417874][T20515] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.425476][T20515] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.434188][T20515] device bridge_slave_1 entered promiscuous mode [ 903.465563][T20515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.478524][T20515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.509730][T20515] team0: Port device team_slave_0 added [ 903.521573][T20515] team0: Port device team_slave_1 added [ 903.544485][T20515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.601804][T20515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.650066][T20317] CPU: 0 PID: 20317 Comm: syz.2.4593 Not tainted syzkaller #0 [ 903.657611][T20317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 903.667720][T20317] Call Trace: [ 903.671119][T20317] [ 903.674201][T20317] dump_stack_lvl+0x188/0x250 [ 903.678921][T20317] ? show_regs_print_info+0x20/0x20 [ 903.684239][T20317] ? load_image+0x400/0x400 [ 903.688786][T20317] ? local_lock_release+0x170/0x170 [ 903.694017][T20317] ? __rwlock_init+0x140/0x140 [ 903.698805][T20317] dump_header+0xd4/0x770 [ 903.703168][T20317] oom_kill_process+0x20e/0x3d0 [ 903.708055][T20317] out_of_memory+0xdbe/0x1180 [ 903.712755][T20317] ? mutex_lock_io_nested+0x60/0x60 [ 903.717982][T20317] ? unregister_oom_notifier+0x20/0x20 [ 903.723490][T20317] mem_cgroup_out_of_memory+0x2bd/0x3b0 [ 903.729065][T20317] ? mem_cgroup_oom_trylock+0x210/0x210 [ 903.734643][T20317] ? do_raw_spin_unlock+0x11d/0x230 [ 903.739868][T20317] try_charge_memcg+0xfcf/0x14f0 [ 903.744841][T20317] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 903.750831][T20317] ? rcu_lock_acquire+0x30/0x30 [ 903.755813][T20317] charge_memcg+0x100/0x2f0 [ 903.760344][T20317] ? __mem_cgroup_charge+0x80/0x80 [ 903.765526][T20317] __mem_cgroup_charge+0x21/0x80 [ 903.770602][T20317] shmem_add_to_page_cache+0xa98/0x14d0 [ 903.776216][T20317] ? put_page+0x200/0x200 [ 903.780575][T20317] ? mark_lock+0x94/0x320 [ 903.784930][T20317] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 903.790937][T20317] shmem_getpage_gfp+0x1796/0x2d40 [ 903.796093][T20317] shmem_write_begin+0xcd/0x1a0 [ 903.800965][T20317] generic_perform_write+0x2b6/0x550 [ 903.806287][T20317] ? grab_cache_page_write_begin+0xa0/0xa0 [ 903.812119][T20317] ? file_remove_privs+0x5d0/0x5d0 [ 903.817272][T20317] ? rwsem_write_trylock+0x135/0x1c0 [ 903.822634][T20317] ? clear_nonspinnable+0x60/0x60 [ 903.827699][T20317] __generic_file_write_iter+0x25f/0x4e0 [ 903.833359][T20317] generic_file_write_iter+0xa6/0x1b0 [ 903.838775][T20317] __kernel_write+0x51c/0x970 [ 903.843476][T20317] ? vfs_read+0xd60/0xd60 [ 903.847819][T20317] ? __up_read+0x2b2/0x6b0 [ 903.852257][T20317] ? up_read+0x20/0x20 [ 903.856362][T20317] ? get_dump_page+0x4cf/0x680 [ 903.861144][T20317] __dump_emit+0x249/0x370 [ 903.865584][T20317] ? wait_for_dump_helpers+0x3d0/0x3d0 [ 903.871061][T20317] ? dump_emit+0x153/0x3d0 [ 903.875497][T20317] dump_user_range+0x84/0x340 [ 903.880196][T20317] elf_core_dump+0x2fbd/0x3500 [ 903.884998][T20317] ? load_elf_library+0x920/0x920 [ 903.890042][T20317] ? verify_lock_unused+0x140/0x140 [ 903.895253][T20317] ? dump_vma_snapshot+0xb00/0xe40 [ 903.900419][T20317] ? rcu_read_lock_any_held+0xb0/0x130 [ 903.905903][T20317] ? getname_kernel+0x142/0x2e0 [ 903.910781][T20317] do_coredump+0x14c7/0x2ac0 [ 903.915407][T20317] ? nfs_stat_to_errno+0x190/0x190 [ 903.920537][T20317] ? rcu_nmi_exit+0x6f/0xf0 [ 903.925061][T20317] ? lock_chain_count+0x20/0x20 [ 903.929944][T20317] ? _raw_spin_unlock_irq+0x1f/0x40 [ 903.935154][T20317] ? lockdep_hardirqs_on+0x94/0x140 [ 903.940364][T20317] get_signal+0x40a/0x12c0 [ 903.944816][T20317] arch_do_signal_or_restart+0xe7/0x12c0 [ 903.950474][T20317] ? force_sig_fault_to_task+0x130/0x130 [ 903.956127][T20317] ? get_sigframe_size+0x10/0x10 [ 903.961083][T20317] ? rcu_nmi_exit+0x6f/0xf0 [ 903.965687][T20317] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 903.971715][T20317] ? exit_to_user_mode_loop+0x3b/0x130 [ 903.977197][T20317] exit_to_user_mode_loop+0x9e/0x130 [ 903.982500][T20317] exit_to_user_mode_prepare+0xee/0x180 [ 903.988063][T20317] irqentry_exit_to_user_mode+0x5/0x30 [ 903.993558][T20317] exc_page_fault+0x88/0x100 [ 903.998171][T20317] asm_exc_page_fault+0x22/0x30 [ 904.003038][T20317] RIP: 0033:0x600000005 [ 904.007219][T20317] Code: Unable to access opcode bytes at RIP 0x5ffffffdb. [ 904.014337][T20317] RSP: 002b:0000200000000108 EFLAGS: 00010217 [ 904.020443][T20317] RAX: 0000000000000000 RBX: 00007fc9fe9bdfa0 RCX: 00007fc9fe742eb9 [ 904.028432][T20317] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000020001000 [ 904.036440][T20317] RBP: 00007fc9fe7b0c1f R08: 0000200000000500 R09: 0000200000000500 [ 904.044451][T20317] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 904.052440][T20317] R13: 00007fc9fe9be038 R14: 00007fc9fe9bdfa0 R15: 00007ffe9f8672f8 [ 904.060445][T20317] [ 904.101023][ T4568] Bluetooth: hci0: command 0x0409 tx timeout [ 904.107613][T20515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.191088][T14523] Bluetooth: hci0: command 0x041b tx timeout [ 906.706950][T20515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.720842][T20515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.793642][T20515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.183636][T20515] device hsr_slave_0 entered promiscuous mode [ 907.405267][T20515] device hsr_slave_1 entered promiscuous mode [ 907.570219][T20515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 907.588374][T20515] Cannot create hsr debugfs directory [ 907.704550][T20545] netlink: 'syz.1.4659': attribute type 8 has an invalid length. [ 907.902452][T20548] netlink: 'syz.3.4660': attribute type 8 has an invalid length. [ 908.051079][T20545] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4659'. [ 908.075065][T20515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 908.270901][ T1326] Bluetooth: hci0: command 0x040f tx timeout [ 908.336989][T20515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 908.371008][T20548] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4660'. [ 908.401012][T20317] memory: usage 307048kB, limit 307200kB, failcnt 23459 [ 908.408039][T20317] memory+swap: usage 387364kB, limit 9007199254740988kB, failcnt 0 [ 908.587942][T20515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 908.720922][T20317] kmem: usage 4584kB, limit 9007199254740988kB, failcnt 0 [ 908.728121][T20317] Memory cgroup stats for /syz2: [ 908.728876][T20317] anon 663552 [ 908.728876][T20317] file 309092352 [ 908.728876][T20317] kernel_stack 393216 [ 908.728876][T20317] pagetables 1720320 [ 908.728876][T20317] percpu 14368 [ 908.728876][T20317] sock 0 [ 908.728876][T20317] shmem 309039104 [ 908.728876][T20317] file_mapped 20480 [ 908.728876][T20317] file_dirty 0 [ 908.728876][T20317] file_writeback 0 [ 908.728876][T20317] swapcached 243322880 [ 908.728876][T20317] anon_thp 0 [ 908.728876][T20317] file_thp 0 [ 908.728876][T20317] shmem_thp 0 [ 908.728876][T20317] inactive_anon 173363200 [ 908.728876][T20317] active_anon 136060928 [ 908.728876][T20317] inactive_file 32768 [ 908.728876][T20317] active_file 20480 [ 908.728876][T20317] unevictable 0 [ 908.728876][T20317] slab_reclaimable 1409064 [ 908.728876][T20317] slab_unreclaimable 918632 [ 908.728876][T20317] slab 2327696 [ 908.728876][T20317] workingset_refault_anon 355 [ 908.728876][T20317] workingset_refault_file 1958 [ 909.723762][T19997] bridge0: port 3(syz_tun) entered disabled state [ 909.906009][T19997] device syz_tun left promiscuous mode [ 909.920920][T19997] bridge0: port 3(syz_tun) entered disabled state [ 909.958991][T20515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 910.274566][T20565] netlink: 'syz.3.4662': attribute type 8 has an invalid length. [ 910.351069][ T4568] Bluetooth: hci0: command 0x0419 tx timeout [ 910.374723][T20565] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4662'. [ 910.599034][T14633] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.014402][T20515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.319273][T20317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4505,pid=19905,uid=0 [ 911.813697][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 911.831601][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 911.871226][T20317] Memory cgroup out of memory: Killed process 19905 (syz.2.4505) total-vm:104164kB, anon-rss:1220kB, file-rss:34292kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 912.326751][T14633] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.582980][T20515] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.625002][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 912.640914][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.694972][T14295] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.702221][T14295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.753215][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 912.801013][T20591] netlink: 'syz.1.4666': attribute type 39 has an invalid length. [ 913.106880][T20593] netlink: 'syz.3.4667': attribute type 8 has an invalid length. [ 913.321953][T20593] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4667'. [ 913.369297][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 913.414161][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 913.436569][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.443764][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.605848][T14633] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.869487][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 913.902059][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 913.932047][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 913.962264][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 913.992847][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 914.076783][T14633] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.222995][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 914.242169][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 914.306349][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 914.341938][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 914.358748][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 914.401470][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 914.434783][T20515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 914.887035][T15443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 914.921233][T15443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 914.943141][T20515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.720393][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 915.768572][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 915.844465][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 915.880959][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 915.908191][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 915.949746][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 916.011944][T20515] device veth0_vlan entered promiscuous mode [ 916.058651][T20515] device veth1_vlan entered promiscuous mode [ 916.187993][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 916.251918][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 916.304715][T20515] device veth0_macvtap entered promiscuous mode [ 916.337125][T20515] device veth1_macvtap entered promiscuous mode [ 916.418351][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.480961][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.523245][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.542644][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.580859][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.611742][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.654389][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.691849][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.721078][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.760969][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.784774][T20515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.892364][T20646] netlink: 'syz.0.4673': attribute type 39 has an invalid length. [ 916.900636][T20642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 916.931897][T20642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 916.950452][T20642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 917.001887][T20642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 917.028392][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.070849][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.080732][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.151935][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.188198][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.231361][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.258932][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.287564][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.330949][T20515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.380550][T20515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.414309][T20515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.794553][T20650] netlink: 'syz.3.4671': attribute type 8 has an invalid length. [ 917.851002][T20650] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4671'. [ 918.278451][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 918.319996][T14295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 918.354570][T20515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.381298][T20515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.390105][T20515] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.452004][T20515] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.328440][T20670] netlink: 'syz.2.4675': attribute type 8 has an invalid length. [ 919.701434][T20670] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4675'. [ 921.507752][T20688] netlink: 'syz.0.4679': attribute type 39 has an invalid length. [ 922.098908][T20688] bridge0: port 3(syz_tun) entered disabled state [ 922.434638][T20693] netlink: 'syz.2.4681': attribute type 8 has an invalid length. [ 922.818117][T20693] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4681'. [ 923.093754][T20688] device syz_tun left promiscuous mode [ 923.099430][T20688] bridge0: port 3(syz_tun) entered disabled state [ 924.447045][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.467779][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.032412][T20701] netlink: 'syz.3.4682': attribute type 39 has an invalid length. [ 925.225366][T20701] bridge0: port 3(syz_tun) entered disabled state [ 925.584904][T20701] device syz_tun left promiscuous mode [ 925.590510][T20701] bridge0: port 3(syz_tun) entered disabled state [ 926.054753][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 926.304606][T20642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.323290][T20642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.411948][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 926.540720][T20729] netlink: 'syz.1.4687': attribute type 39 has an invalid length. [ 927.003601][T19755] syz.2.4472 (19755) used greatest stack depth: 18208 bytes left [ 927.485614][T20746] netlink: 'syz.3.4689': attribute type 39 has an invalid length. [ 927.564992][T20753] netlink: 'syz.1.4690': attribute type 39 has an invalid length. [ 927.594895][T20759] netlink: 'syz.5.4650': attribute type 39 has an invalid length. [ 928.491304][T20776] netlink: 'syz.0.4694': attribute type 39 has an invalid length. [ 928.978917][T20787] netlink: 'syz.1.4706': attribute type 39 has an invalid length. [ 929.170186][T20799] netlink: 'syz.1.4700': attribute type 39 has an invalid length. [ 929.312835][T20799] bridge0: port 3(syz_tun) entered disabled state [ 929.430110][T20799] device syz_tun left promiscuous mode [ 929.461515][T20799] bridge0: port 3(syz_tun) entered disabled state [ 929.570648][T20800] netlink: 'syz.5.4699': attribute type 39 has an invalid length. [ 930.114381][T14633] device hsr_slave_0 left promiscuous mode [ 930.127630][T14633] device hsr_slave_1 left promiscuous mode [ 930.269046][T14633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.285620][T14633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.339917][T14633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.367958][T14633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.682014][T14633] device bridge_slave_1 left promiscuous mode [ 930.688412][T14633] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.315595][T14633] device bridge_slave_0 left promiscuous mode [ 931.331141][T14633] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.464151][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.470614][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.159226][T14633] device veth1_vlan left promiscuous mode [ 932.172994][T14633] device veth0_vlan left promiscuous mode [ 933.524653][T14633] team0 (unregistering): Port device team_slave_1 removed [ 933.707752][T14633] team0 (unregistering): Port device team_slave_0 removed [ 933.930244][T14633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.000621][T14633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.404496][T14633] bond0 (unregistering): Released all slaves [ 934.690592][T20848] netlink: 'syz.2.4707': attribute type 39 has an invalid length. [ 934.855303][T20848] bridge0: port 3(syz_tun) entered disabled state [ 935.172993][T20848] device syz_tun left promiscuous mode [ 935.199511][T20848] bridge0: port 3(syz_tun) entered disabled state [ 935.471258][T20873] netlink: 'syz.5.4715': attribute type 39 has an invalid length. [ 935.762575][T20878] netlink: 'syz.5.4718': attribute type 39 has an invalid length. [ 936.129892][T20883] netlink: 'syz.5.4721': attribute type 8 has an invalid length. [ 936.248032][T20883] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4721'. [ 936.664343][T20900] netlink: 'syz.1.4722': attribute type 39 has an invalid length. [ 936.756921][T20876] netlink: 'syz.2.4716': attribute type 39 has an invalid length. [ 936.822991][T20898] netlink: 'syz.0.4731': attribute type 39 has an invalid length. [ 938.382043][T20936] netlink: 'syz.5.4733': attribute type 10 has an invalid length. [ 940.384068][T20946] netlink: 'syz.1.4734': attribute type 39 has an invalid length. [ 940.920953][T20964] netlink: 'syz.1.4737': attribute type 39 has an invalid length. [ 941.834149][T20980] netlink: 'syz.1.4742': attribute type 39 has an invalid length. [ 942.164698][T20985] netlink: 'syz.0.4740': attribute type 39 has an invalid length. [ 942.489540][T20972] netlink: 'syz.2.4738': attribute type 39 has an invalid length. [ 944.613895][T21025] netlink: 'syz.1.4759': attribute type 8 has an invalid length. [ 944.652086][T21025] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4759'. [ 945.262377][T21034] netlink: 'syz.1.4750': attribute type 10 has an invalid length. [ 946.374261][T21051] netlink: 'syz.5.4756': attribute type 39 has an invalid length. [ 946.581204][T21052] netlink: 'syz.3.4755': attribute type 39 has an invalid length. [ 947.114670][T21064] netlink: 'syz.1.4761': attribute type 39 has an invalid length. [ 947.162157][T21067] netlink: 'syz.0.4758': attribute type 39 has an invalid length. [ 947.181987][T21068] netlink: 'syz.5.4760': attribute type 39 has an invalid length. [ 947.995126][T21092] netlink: 'syz.5.4763': attribute type 39 has an invalid length. [ 949.465023][T20289] syz.2.4589 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 949.703526][T21142] netlink: 'syz.1.4773': attribute type 39 has an invalid length. [ 949.873467][T20289] CPU: 1 PID: 20289 Comm: syz.2.4589 Not tainted syzkaller #0 [ 949.881033][T20289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 949.891125][T20289] Call Trace: [ 949.894454][T20289] [ 949.897413][T20289] dump_stack_lvl+0x188/0x250 [ 949.902147][T20289] ? show_regs_print_info+0x20/0x20 [ 949.907389][T20289] ? load_image+0x400/0x400 [ 949.911937][T20289] ? local_lock_release+0x170/0x170 [ 949.917177][T20289] ? __rwlock_init+0x140/0x140 [ 949.921983][T20289] dump_header+0xd4/0x770 [ 949.926365][T20289] oom_kill_process+0x20e/0x3d0 [ 949.931256][T20289] out_of_memory+0xdbe/0x1180 [ 949.935976][T20289] ? mutex_lock_io_nested+0x60/0x60 [ 949.941216][T20289] ? unregister_oom_notifier+0x20/0x20 [ 949.946723][T20289] mem_cgroup_out_of_memory+0x2bd/0x3b0 [ 949.952314][T20289] ? mem_cgroup_oom_trylock+0x210/0x210 [ 949.957997][T20289] ? do_raw_spin_unlock+0x11d/0x230 [ 949.963231][T20289] try_charge_memcg+0xfcf/0x14f0 [ 949.968222][T20289] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 949.974083][T20289] ? rcu_lock_acquire+0x30/0x30 [ 949.978982][T20289] charge_memcg+0x100/0x2f0 [ 949.983538][T20289] ? __mem_cgroup_charge+0x80/0x80 [ 949.988704][T20289] __mem_cgroup_charge+0x21/0x80 [ 949.993680][T20289] shmem_add_to_page_cache+0xa98/0x14d0 [ 949.999288][T20289] ? put_page+0x200/0x200 [ 950.003656][T20289] ? mark_lock+0x94/0x320 [ 950.008036][T20289] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 950.014063][T20289] shmem_getpage_gfp+0x1796/0x2d40 [ 950.019256][T20289] shmem_write_begin+0xcd/0x1a0 [ 950.024160][T20289] generic_perform_write+0x2b6/0x550 [ 950.029498][T20289] ? atime_needs_update+0x780/0x780 [ 950.034748][T20289] ? grab_cache_page_write_begin+0xa0/0xa0 [ 950.040597][T20289] ? file_remove_privs+0x5d0/0x5d0 [ 950.045782][T20289] ? rwsem_write_trylock+0x135/0x1c0 [ 950.051106][T20289] ? clear_nonspinnable+0x60/0x60 [ 950.056169][T20289] __generic_file_write_iter+0x25f/0x4e0 [ 950.061841][T20289] generic_file_write_iter+0xa6/0x1b0 [ 950.067255][T20289] __kernel_write+0x51c/0x970 [ 950.071977][T20289] ? vfs_read+0xd60/0xd60 [ 950.076339][T20289] ? __up_read+0x2b2/0x6b0 [ 950.080806][T20289] ? up_read+0x20/0x20 [ 950.084910][T20289] ? get_dump_page+0x4cf/0x680 [ 950.089797][T20289] __dump_emit+0x249/0x370 [ 950.094248][T20289] ? do_raw_spin_unlock+0x11d/0x230 [ 950.099618][T20289] ? wait_for_dump_helpers+0x3d0/0x3d0 [ 950.105137][T20289] ? dump_emit+0x153/0x3d0 [ 950.109592][T20289] dump_user_range+0x84/0x340 [ 950.114330][T20289] elf_core_dump+0x2fbd/0x3500 [ 950.119243][T20289] ? load_elf_library+0x920/0x920 [ 950.124315][T20289] ? verify_lock_unused+0x140/0x140 [ 950.129635][T20289] ? dump_vma_snapshot+0xb00/0xe40 [ 950.134840][T20289] ? rcu_read_lock_any_held+0xb0/0x130 [ 950.140356][T20289] ? getname_kernel+0x142/0x2e0 [ 950.145281][T20289] do_coredump+0x14c7/0x2ac0 [ 950.149924][T20289] ? nfs_stat_to_errno+0x190/0x190 [ 950.155079][T20289] ? rcu_nmi_exit+0x6f/0xf0 [ 950.159622][T20289] ? lock_chain_count+0x20/0x20 [ 950.164533][T20289] ? _raw_spin_unlock_irq+0x1f/0x40 [ 950.169806][T20289] ? lockdep_hardirqs_on+0x94/0x140 [ 950.175060][T20289] get_signal+0x40a/0x12c0 [ 950.179540][T20289] arch_do_signal_or_restart+0xe7/0x12c0 [ 950.185228][T20289] ? force_sig_fault_to_task+0x130/0x130 [ 950.190901][T20289] ? get_sigframe_size+0x10/0x10 [ 950.195919][T20289] ? rcu_nmi_exit+0x6f/0xf0 [ 950.200464][T20289] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 950.206494][T20289] ? exit_to_user_mode_loop+0x3b/0x130 [ 950.211998][T20289] exit_to_user_mode_loop+0x9e/0x130 [ 950.217342][T20289] exit_to_user_mode_prepare+0xee/0x180 [ 950.222938][T20289] irqentry_exit_to_user_mode+0x5/0x30 [ 950.228447][T20289] exc_page_fault+0x88/0x100 [ 950.233078][T20289] asm_exc_page_fault+0x22/0x30 [ 950.237976][T20289] RIP: 0033:0xfa6dfc84 [ 950.242099][T20289] Code: Unable to access opcode bytes at RIP 0xfa6dfc5a. [ 950.249142][T20289] RSP: 002b:0000200000000108 EFLAGS: 00010217 [ 950.255235][T20289] RAX: 0000000000000000 RBX: 00007fc9fe9bdfa0 RCX: 00007fc9fe742eb9 [ 950.263251][T20289] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000020001000 [ 950.271291][T20289] RBP: 00007fc9fe7b0c1f R08: 0000200000000500 R09: 0000200000000500 [ 950.279294][T20289] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 950.287298][T20289] R13: 00007fc9fe9be038 R14: 00007fc9fe9bdfa0 R15: 00007ffe9f8672f8 [ 950.295325][T20289] [ 950.433616][T20289] memory: usage 307200kB, limit 307200kB, failcnt 36133 [ 950.469726][T21147] netlink: 'syz.5.4775': attribute type 10 has an invalid length. [ 951.031673][T20289] memory+swap: usage 431972kB, limit 9007199254740988kB, failcnt 0 [ 951.183276][T20289] kmem: usage 4524kB, limit 9007199254740988kB, failcnt 0 [ 951.190586][T20289] Memory cgroup stats for /syz2: [ 951.282647][T20289] anon 745472 [ 951.282647][T20289] file 308965376 [ 951.282647][T20289] kernel_stack 393216 [ 951.282647][T20289] pagetables 1572864 [ 951.282647][T20289] percpu 14368 [ 951.282647][T20289] sock 0 [ 951.282647][T20289] shmem 308965376 [ 951.282647][T20289] file_mapped 0 [ 951.282647][T20289] file_dirty 0 [ 951.282647][T20289] file_writeback 0 [ 951.282647][T20289] swapcached 366182400 [ 951.282647][T20289] anon_thp 0 [ 951.282647][T20289] file_thp 0 [ 951.282647][T20289] shmem_thp 0 [ 951.282647][T20289] inactive_anon 277749760 [ 951.282647][T20289] active_anon 32161792 [ 951.282647][T20289] inactive_file 0 [ 951.282647][T20289] active_file 0 [ 951.282647][T20289] unevictable 0 [ 951.282647][T20289] slab_reclaimable 1473048 [ 951.282647][T20289] slab_unreclaimable 985272 [ 951.282647][T20289] slab 2458320 [ 951.282647][T20289] workingset_refault_anon 558 [ 951.282647][T20289] workingset_refault_file 4792 [ 951.282647][T20289] workingset_activate_anon 126 [ 951.415791][T21164] netlink: 'syz.3.4781': attribute type 39 has an invalid length. [ 951.482630][T21167] netlink: 'syz.1.4782': attribute type 39 has an invalid length. [ 952.507750][T20289] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4593,pid=20317,uid=0 [ 952.568117][T20289] Memory cgroup out of memory: Killed process 20317 (syz.2.4593) total-vm:104428kB, anon-rss:1300kB, file-rss:47380kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 952.669996][T21188] netlink: 'syz.3.4792': attribute type 10 has an invalid length. [ 952.707142][T21186] netlink: 'syz.1.4791': attribute type 8 has an invalid length. [ 952.778142][T21193] netlink: 'syz.0.4789': attribute type 39 has an invalid length. [ 952.947714][T21186] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4791'. [ 953.417938][T21017] syz.2.4745 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 953.740717][T21017] CPU: 1 PID: 21017 Comm: syz.2.4745 Not tainted syzkaller #0 [ 953.748261][T21017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 953.758356][T21017] Call Trace: [ 953.761678][T21017] [ 953.764637][T21017] dump_stack_lvl+0x188/0x250 [ 953.769359][T21017] ? show_regs_print_info+0x20/0x20 [ 953.774606][T21017] ? load_image+0x400/0x400 [ 953.779153][T21017] ? local_lock_release+0x170/0x170 [ 953.784387][T21017] ? __rwlock_init+0x140/0x140 [ 953.789180][T21017] dump_header+0xd4/0x770 [ 953.793590][T21017] oom_kill_process+0x20e/0x3d0 [ 953.798667][T21017] out_of_memory+0xdbe/0x1180 [ 953.803374][T21017] ? mutex_lock_io_nested+0x60/0x60 [ 953.808637][T21017] ? unregister_oom_notifier+0x20/0x20 [ 953.814148][T21017] mem_cgroup_out_of_memory+0x2bd/0x3b0 [ 953.819717][T21017] ? mem_cgroup_oom_trylock+0x210/0x210 [ 953.825320][T21017] ? do_raw_spin_unlock+0x11d/0x230 [ 953.830542][T21017] try_charge_memcg+0xfcf/0x14f0 [ 953.835514][T21017] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 953.841351][T21017] ? rcu_lock_acquire+0x30/0x30 [ 953.846235][T21017] charge_memcg+0x100/0x2f0 [ 953.850848][T21017] ? __mem_cgroup_charge+0x80/0x80 [ 953.855983][T21017] __mem_cgroup_charge+0x21/0x80 [ 953.860944][T21017] shmem_add_to_page_cache+0xa98/0x14d0 [ 953.866528][T21017] ? put_page+0x200/0x200 [ 953.870890][T21017] ? mark_lock+0x94/0x320 [ 953.875258][T21017] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 953.881265][T21017] shmem_getpage_gfp+0x1796/0x2d40 [ 953.886427][T21017] shmem_write_begin+0xcd/0x1a0 [ 953.891307][T21017] generic_perform_write+0x2b6/0x550 [ 953.896643][T21017] ? grab_cache_page_write_begin+0xa0/0xa0 [ 953.902463][T21017] ? file_remove_privs+0x5d0/0x5d0 [ 953.907595][T21017] ? rwsem_write_trylock+0x135/0x1c0 [ 953.912894][T21017] ? clear_nonspinnable+0x60/0x60 [ 953.917938][T21017] __generic_file_write_iter+0x25f/0x4e0 [ 953.923606][T21017] generic_file_write_iter+0xa6/0x1b0 [ 953.928996][T21017] __kernel_write+0x51c/0x970 [ 953.933698][T21017] ? vfs_read+0xd60/0xd60 [ 953.938042][T21017] ? __up_read+0x2b2/0x6b0 [ 953.942481][T21017] ? up_read+0x20/0x20 [ 953.946667][T21017] ? get_dump_page+0x4cf/0x680 [ 953.951471][T21017] __dump_emit+0x249/0x370 [ 953.955913][T21017] ? wait_for_dump_helpers+0x3d0/0x3d0 [ 953.961399][T21017] ? dump_emit+0x153/0x3d0 [ 953.965838][T21017] dump_user_range+0x84/0x340 [ 953.970542][T21017] elf_core_dump+0x2fbd/0x3500 [ 953.975340][T21017] ? load_elf_library+0x920/0x920 [ 953.980408][T21017] ? verify_lock_unused+0x140/0x140 [ 953.985625][T21017] ? dump_vma_snapshot+0xb00/0xe40 [ 953.990800][T21017] ? rcu_read_lock_any_held+0xb0/0x130 [ 953.996281][T21017] ? getname_kernel+0x142/0x2e0 [ 954.001157][T21017] do_coredump+0x14c7/0x2ac0 [ 954.005782][T21017] ? nfs_stat_to_errno+0x190/0x190 [ 954.010917][T21017] ? rcu_nmi_exit+0x6f/0xf0 [ 954.015448][T21017] ? lock_chain_count+0x20/0x20 [ 954.020323][T21017] ? _raw_spin_unlock_irq+0x1f/0x40 [ 954.025549][T21017] ? lockdep_hardirqs_on+0x94/0x140 [ 954.030769][T21017] get_signal+0x40a/0x12c0 [ 954.035248][T21017] arch_do_signal_or_restart+0xe7/0x12c0 [ 954.040907][T21017] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 954.046694][T21017] ? get_sigframe_size+0x10/0x10 [ 954.051660][T21017] ? rcu_nmi_exit+0x6f/0xf0 [ 954.056192][T21017] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 954.062204][T21017] ? exit_to_user_mode_loop+0x3b/0x130 [ 954.067684][T21017] exit_to_user_mode_loop+0x9e/0x130 [ 954.072985][T21017] exit_to_user_mode_prepare+0xee/0x180 [ 954.078552][T21017] irqentry_exit_to_user_mode+0x5/0x30 [ 954.084026][T21017] exc_page_fault+0x88/0x100 [ 954.088629][T21017] asm_exc_page_fault+0x22/0x30 [ 954.093500][T21017] RIP: 0033:0xfa6dfc84 [ 954.097605][T21017] Code: Unable to access opcode bytes at RIP 0xfa6dfc5a. [ 954.104667][T21017] RSP: 002b:0000200000000108 EFLAGS: 00010217 [ 954.110750][T21017] RAX: 0000000000000000 RBX: 00007fc9fe9bdfa0 RCX: 00007fc9fe742eb9 [ 954.118741][T21017] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000020001000 [ 954.126723][T21017] RBP: 00007fc9fe7b0c1f R08: 0000200000000500 R09: 0000200000000500 [ 954.134719][T21017] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 954.142708][T21017] R13: 00007fc9fe9be038 R14: 00007fc9fe9bdfa0 R15: 00007ffe9f8672f8 [ 954.150714][T21017] [ 954.197884][T21224] netlink: 'syz.3.4805': attribute type 39 has an invalid length. [ 954.383766][T21017] memory: usage 306488kB, limit 307200kB, failcnt 36440 [ 954.464849][T21017] memory+swap: usage 430616kB, limit 9007199254740988kB, failcnt 0 [ 954.598841][T21017] kmem: usage 4136kB, limit 9007199254740988kB, failcnt 0 [ 954.742490][T21239] netlink: 'syz.5.4799': attribute type 39 has an invalid length. [ 954.785357][T21017] Memory cgroup stats for /syz2: [ 954.785559][T21017] anon 679936 [ 954.785559][T21017] file 309239808 [ 954.785559][T21017] kernel_stack 360448 [ 954.785559][T21017] pagetables 1384448 [ 954.785559][T21017] percpu 14368 [ 954.785559][T21017] sock 0 [ 954.785559][T21017] shmem 309239808 [ 954.785559][T21017] file_mapped 0 [ 954.785559][T21017] file_dirty 0 [ 954.785559][T21017] file_writeback 0 [ 954.785559][T21017] swapcached 366546944 [ 954.785559][T21017] anon_thp 0 [ 954.785559][T21017] file_thp 0 [ 954.785559][T21017] shmem_thp 0 [ 954.785559][T21017] inactive_anon 278417408 [ 954.785559][T21017] active_anon 31715328 [ 954.785559][T21017] inactive_file 0 [ 954.785559][T21017] active_file 0 [ 954.785559][T21017] unevictable 0 [ 954.785559][T21017] slab_reclaimable 1494472 [ 954.785559][T21017] slab_unreclaimable 973048 [ 954.785559][T21017] slab 2467520 [ 954.785559][T21017] workingset_refault_anon 558 [ 954.785559][T21017] workingset_refault_file 4792 [ 954.785559][T21017] workingset_activate_anon 126 [ 954.976335][T21247] netlink: 'syz.0.4802': attribute type 39 has an invalid length. [ 955.491424][T21017] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4573,pid=20212,uid=0 [ 955.561063][T21017] Memory cgroup out of memory: Killed process 20212 (syz.2.4573) total-vm:102248kB, anon-rss:1240kB, file-rss:44320kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 955.643077][T21261] netlink: 'syz.5.4806': attribute type 8 has an invalid length. [ 955.663943][T21267] netlink: 'syz.0.4808': attribute type 39 has an invalid length. [ 955.768872][T21261] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4806'. [ 956.597509][T21301] validate_nla: 1 callbacks suppressed [ 956.597546][T21301] netlink: 'syz.0.4814': attribute type 39 has an invalid length. [ 956.946083][T21299] netlink: 'syz.1.4815': attribute type 8 has an invalid length. [ 957.025665][T21299] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4815'. [ 957.183530][T21317] netlink: 'syz.3.4818': attribute type 39 has an invalid length. [ 957.473969][T21333] netlink: 'syz.0.4821': attribute type 39 has an invalid length. [ 958.160974][T21349] netlink: 'syz.1.4823': attribute type 39 has an invalid length. [ 958.404387][T21355] netlink: 'syz.3.4825': attribute type 39 has an invalid length. [ 958.639878][T21361] netlink: 'syz.0.4827': attribute type 8 has an invalid length. [ 958.714699][T21361] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4827'. [ 958.843059][T21372] netlink: 'syz.1.4829': attribute type 39 has an invalid length. [ 959.402859][T21389] netlink: 'syz.3.4831': attribute type 10 has an invalid length. [ 960.038660][T21398] netlink: 'syz.5.4833': attribute type 39 has an invalid length. [ 961.093284][T21423] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4842'. [ 962.462740][T21465] validate_nla: 3 callbacks suppressed [ 962.462760][T21465] netlink: 'syz.3.4845': attribute type 10 has an invalid length. [ 963.784323][T21489] netlink: 'syz.2.4851': attribute type 39 has an invalid length. [ 964.258934][T21497] netlink: 'syz.1.4855': attribute type 8 has an invalid length. [ 964.358710][T21497] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4855'. [ 964.673701][T21508] netlink: 'syz.5.4857': attribute type 8 has an invalid length. [ 964.871193][T21508] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4857'. [ 965.134917][T21518] netlink: 'syz.3.4861': attribute type 39 has an invalid length. [ 965.264257][T21521] netlink: 'syz.0.4860': attribute type 39 has an invalid length. [ 965.539258][T21531] netlink: 'syz.5.4864': attribute type 39 has an invalid length. [ 965.841759][T21527] netlink: 'syz.1.4863': attribute type 8 has an invalid length. [ 965.901848][T21527] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4863'. [ 966.205677][T21547] netlink: 'syz.0.4876': attribute type 39 has an invalid length. [ 966.665986][T21549] netlink: 'syz.5.4868': attribute type 39 has an invalid length. [ 966.778751][T21551] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4867'. [ 967.513338][T21566] validate_nla: 2 callbacks suppressed [ 967.513373][T21566] netlink: 'syz.0.4872': attribute type 39 has an invalid length. [ 967.649350][T21565] netlink: 'syz.5.4871': attribute type 8 has an invalid length. [ 967.679773][T21565] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4871'. [ 968.379812][T21585] netlink: 'syz.0.4878': attribute type 39 has an invalid length. [ 968.448580][T21576] netlink: 'syz.2.4874': attribute type 8 has an invalid length. [ 968.831180][T21576] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4874'. [ 968.992162][T21595] netlink: 'syz.5.4881': attribute type 39 has an invalid length. [ 969.294525][T21606] netlink: 'syz.0.4883': attribute type 39 has an invalid length. [ 969.400125][T21605] netlink: 'syz.3.4884': attribute type 39 has an invalid length. [ 970.296066][T21624] netlink: 'syz.1.4889': attribute type 39 has an invalid length. [ 970.478021][T21623] netlink: 'syz.2.4887': attribute type 39 has an invalid length. [ 970.582602][T21634] netlink: 'syz.3.4891': attribute type 39 has an invalid length. [ 970.852215][T21637] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4892'. [ 970.896150][T21640] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4893'. [ 972.638829][T21669] validate_nla: 5 callbacks suppressed [ 972.638870][T21669] netlink: 'syz.5.4900': attribute type 39 has an invalid length. [ 972.675856][T21670] netlink: 'syz.1.4912': attribute type 8 has an invalid length. [ 972.771317][T21670] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4912'. [ 972.831907][T21675] netlink: 'syz.2.4902': attribute type 8 has an invalid length. [ 972.838781][T21679] netlink: 'syz.3.4903': attribute type 39 has an invalid length. [ 972.839797][T21675] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4902'. [ 972.912794][T21681] netlink: 'syz.0.4904': attribute type 39 has an invalid length. [ 973.485227][T21701] netlink: 'syz.3.4907': attribute type 39 has an invalid length. [ 973.925484][T21706] netlink: 'syz.2.4908': attribute type 39 has an invalid length. [ 974.035644][T21708] netlink: 'syz.3.4910': attribute type 8 has an invalid length. [ 974.101081][T21708] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4910'. [ 974.559591][T21716] netlink: 'syz.0.4911': attribute type 8 has an invalid length. [ 974.597011][T21719] netlink: 'syz.1.4913': attribute type 39 has an invalid length. [ 974.636635][T21716] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4911'. [ 975.737540][T21745] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4920'. [ 975.867825][T21747] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4921'. [ 978.113708][T21793] validate_nla: 8 callbacks suppressed [ 978.113725][T21793] netlink: 'syz.2.4930': attribute type 10 has an invalid length. [ 978.421148][T21796] netlink: 'syz.3.4932': attribute type 39 has an invalid length. [ 979.852863][T21819] netlink: 'syz.5.4936': attribute type 39 has an invalid length. [ 979.976524][T21818] netlink: 'syz.3.4938': attribute type 39 has an invalid length. [ 980.164658][T21822] netlink: 'syz.2.4948': attribute type 8 has an invalid length. [ 980.361818][T21822] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4948'. [ 980.732899][T21830] netlink: 'syz.1.4943': attribute type 8 has an invalid length. [ 980.795362][T21840] netlink: 'syz.3.4955': attribute type 39 has an invalid length. [ 981.014508][T21838] netlink: 'syz.5.4944': attribute type 8 has an invalid length. [ 981.119121][T21830] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4943'. [ 981.128999][T21838] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4944'. [ 982.329405][T21859] netlink: 'syz.2.4947': attribute type 39 has an invalid length. [ 983.098629][T21872] netlink: 'syz.1.4952': attribute type 39 has an invalid length. [ 983.311544][T21878] netlink: 'syz.5.4956': attribute type 39 has an invalid length. [ 983.810670][T21882] netlink: 'syz.0.4957': attribute type 8 has an invalid length. [ 983.911054][T21882] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4957'. [ 984.657107][T21891] netlink: 'syz.1.4959': attribute type 8 has an invalid length. [ 984.811013][T21891] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4959'. [ 985.389985][T21911] netlink: 'syz.0.4963': attribute type 10 has an invalid length. [ 986.028101][T21919] netlink: 'syz.2.4965': attribute type 8 has an invalid length. [ 986.290560][T21919] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4965'. [ 986.339144][T21936] netlink: 'syz.5.4969': attribute type 39 has an invalid length. [ 986.829236][T21943] netlink: 'syz.0.4970': attribute type 39 has an invalid length. [ 988.062465][T21965] netlink: 'syz.3.4978': attribute type 10 has an invalid length. [ 989.539079][T21996] netlink: 'syz.3.4987': attribute type 39 has an invalid length. [ 990.290628][T22010] netlink: 'syz.3.4990': attribute type 10 has an invalid length. [ 990.748062][T22007] netlink: 'syz.1.4989': attribute type 8 has an invalid length. [ 991.286784][T22007] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4989'. [ 992.452597][T22037] netlink: 'syz.2.4999': attribute type 8 has an invalid length. [ 992.460541][T22037] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4999'. [ 992.905305][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.912238][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.050527][T22051] netlink: 'syz.5.5001': attribute type 39 has an invalid length. [ 993.583018][T22057] netlink: 'syz.3.5004': attribute type 10 has an invalid length. [ 994.322879][T22058] netlink: 'syz.1.5003': attribute type 8 has an invalid length. [ 994.546781][T22058] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5003'. [ 994.612850][T22063] netlink: 'syz.5.5005': attribute type 8 has an invalid length. [ 994.744341][T22063] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5005'. [ 995.847071][T22092] netlink: 'syz.0.5010': attribute type 8 has an invalid length. [ 996.201147][T22092] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5010'. [ 996.458522][T22103] netlink: 'syz.2.5013': attribute type 8 has an invalid length. [ 996.751143][T22103] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5013'. [ 996.920256][T22111] netlink: 'syz.5.5016': attribute type 39 has an invalid length. [ 997.465174][T22114] netlink: 'syz.0.5017': attribute type 8 has an invalid length. [ 997.650961][T22114] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5017'. [ 998.052342][T22118] netlink: 'syz.1.5014': attribute type 8 has an invalid length. [ 998.060262][T22118] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5014'. [ 998.730251][T22134] netlink: 'syz.2.5021': attribute type 8 has an invalid length. [ 998.879002][T22134] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5021'. [ 1000.746626][T22166] netlink: 'syz.5.5026': attribute type 8 has an invalid length. [ 1000.926515][T22174] netlink: 'syz.3.5028': attribute type 39 has an invalid length. [ 1001.115366][T22166] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5026'. [ 1001.515415][T22189] netlink: 'syz.3.5034': attribute type 39 has an invalid length. [ 1003.872498][T22225] netlink: 'syz.3.5043': attribute type 39 has an invalid length. [ 1005.205067][T22244] netlink: 'syz.3.5048': attribute type 8 has an invalid length. [ 1005.267230][T22244] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5048'. [ 1006.085369][T22253] netlink: 'syz.1.5051': attribute type 8 has an invalid length. [ 1006.262689][T22263] netlink: 'syz.3.5055': attribute type 39 has an invalid length. [ 1006.387421][T22253] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5051'. [ 1008.523147][T22297] netlink: 'syz.3.5072': attribute type 39 has an invalid length. [ 1009.059478][T22303] netlink: 'syz.2.5063': attribute type 39 has an invalid length. [ 1009.684884][T22316] netlink: 'syz.3.5067': attribute type 39 has an invalid length. [ 1010.481774][T22326] netlink: 'syz.5.5068': attribute type 8 has an invalid length. [ 1010.771335][T22326] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5068'. [ 1010.854004][T22338] netlink: 'syz.2.5075': attribute type 39 has an invalid length. [ 1012.392734][T22363] netlink: 'syz.0.5079': attribute type 39 has an invalid length. [ 1013.531305][T22379] netlink: 'syz.0.5083': attribute type 39 has an invalid length. [ 1013.975854][T22394] netlink: 'syz.5.5086': attribute type 39 has an invalid length. [ 1016.033433][T22420] netlink: 'syz.1.5092': attribute type 39 has an invalid length. [ 1017.217144][T22442] netlink: 'syz.5.5096': attribute type 39 has an invalid length. [ 1019.216826][T22461] netlink: 'syz.0.5101': attribute type 39 has an invalid length. [ 1019.248149][T22462] netlink: 'syz.5.5100': attribute type 8 has an invalid length. [ 1019.471346][T22462] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5100'. [ 1020.821098][T22482] netlink: 'syz.0.5103': attribute type 39 has an invalid length. [ 1021.915323][T22500] netlink: 'syz.3.5111': attribute type 39 has an invalid length. [ 1022.912086][T22517] netlink: 'syz.2.5116': attribute type 39 has an invalid length. [ 1024.772225][T22537] netlink: 'syz.0.5120': attribute type 8 has an invalid length. [ 1024.780260][T22537] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5120'. [ 1024.966434][T22544] netlink: 'syz.5.5122': attribute type 8 has an invalid length. [ 1025.011770][T22544] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5122'. [ 1025.711025][ T1326] Bluetooth: hci0: command 0x0406 tx timeout [ 1026.206283][T22565] netlink: 'syz.0.5127': attribute type 21 has an invalid length. [ 1026.364651][T22565] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5127'. [ 1027.353532][T22580] netlink: 'syz.0.5132': attribute type 10 has an invalid length. [ 1027.591263][T22581] netlink: 'syz.3.5133': attribute type 39 has an invalid length. [ 1028.673491][T22590] netlink: 'syz.5.5134': attribute type 39 has an invalid length. [ 1029.041387][T22592] netlink: 'syz.1.5144': attribute type 21 has an invalid length. [ 1029.114053][T22592] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5144'. [ 1031.161933][T22614] netlink: 'syz.2.5143': attribute type 8 has an invalid length. [ 1031.347575][T22614] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1032.149054][T22627] netlink: 'syz.3.5148': attribute type 21 has an invalid length. [ 1032.230581][T22627] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1032.386638][T22634] netlink: 'syz.2.5150': attribute type 39 has an invalid length. [ 1033.006429][T22642] netlink: 'syz.0.5152': attribute type 39 has an invalid length. [ 1035.752601][T22655] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1036.120938][T22665] netlink: 'syz.2.5172': attribute type 21 has an invalid length. [ 1036.144577][T22665] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5172'. [ 1036.368953][T22667] netlink: 'syz.3.5161': attribute type 8 has an invalid length. [ 1036.516590][T22667] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5161'. [ 1036.554557][T22672] IPv6: Can't replace route, no match found [ 1036.674909][T22676] netlink: 'syz.1.5163': attribute type 21 has an invalid length. [ 1036.771563][T22676] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5163'. [ 1037.125747][T22689] netlink: 'syz.5.5168': attribute type 39 has an invalid length. [ 1038.750815][T15443] wlan1: Trigger new scan to find an IBSS to join [ 1040.161781][T22712] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1040.514534][T22721] netlink: 'syz.2.5181': attribute type 39 has an invalid length. [ 1040.839472][T22731] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1041.260868][T22734] netlink: 'syz.3.5183': attribute type 21 has an invalid length. [ 1041.377583][T22734] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5183'. [ 1041.637463][T22748] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1041.942541][T22755] netlink: 'syz.5.5189': attribute type 39 has an invalid length. [ 1042.144593][T22762] IPv6: Can't replace route, no match found [ 1042.191472][T22767] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1042.831915][ T4279] wlan1: Trigger new scan to find an IBSS to join [ 1042.838580][ T1265] wlan1: Trigger new scan to find an IBSS to join [ 1042.923792][T22791] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1043.562515][T22807] netlink: 'syz.5.5206': attribute type 39 has an invalid length. [ 1045.902192][T15443] wlan1: Trigger new scan to find an IBSS to join [ 1046.234119][T15443] wlan1: Creating new IBSS network, BSSID 72:29:be:af:6d:b2 [ 1046.821013][T15443] wlan1: Trigger new scan to find an IBSS to join [ 1047.789130][ T1265] wlan1: Trigger new scan to find an IBSS to join [ 1049.058876][ T1265] wlan1: Creating new IBSS network, BSSID 4a:37:50:a6:ca:98 [ 1049.789033][ T4279] wlan1: Trigger new scan to find an IBSS to join [ 1049.949685][T20642] wlan1: Creating new IBSS network, BSSID 5a:c2:40:78:b9:33 [ 1053.998921][T23032] netlink: 'syz.5.5272': attribute type 39 has an invalid length. [ 1054.552870][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.559258][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.647820][T23284] device syzkaller0 entered promiscuous mode [ 1066.554797][T23313] device syzkaller0 entered promiscuous mode [ 1069.040452][T23393] syz.3.5382[23393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1069.040544][T23393] syz.3.5382[23393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1071.395074][T23441] syz.5.5397[23441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1071.478293][T23441] syz.5.5397[23441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1073.960101][T23499] syz.1.5413[23499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1074.000624][T23499] syz.1.5413[23499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1075.966137][T23568] netlink: 'syz.0.5436': attribute type 39 has an invalid length. [ 1079.134662][ T4279] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1079.233266][T23580] device syzkaller0 entered promiscuous mode [ 1080.185065][T23601] device syzkaller0 entered promiscuous mode [ 1080.357168][T23621] netlink: 'syz.2.5450': attribute type 39 has an invalid length. [ 1080.863108][T23631] netlink: 'syz.0.5463': attribute type 39 has an invalid length. [ 1081.648794][T23646] device syzkaller0 entered promiscuous mode [ 1083.262505][T23684] netlink: 'syz.1.5467': attribute type 39 has an invalid length. [ 1083.597322][T23681] device syzkaller0 entered promiscuous mode [ 1085.305617][T23732] netlink: 'syz.3.5481': attribute type 39 has an invalid length. [ 1086.994997][T23779] netlink: 'syz.0.5499': attribute type 39 has an invalid length. [ 1087.341974][T23785] netlink: 'syz.0.5510': attribute type 39 has an invalid length. [ 1089.224768][T23828] device syzkaller0 entered promiscuous mode [ 1089.240247][T23836] syz.3.5515[23836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1089.240341][T23836] syz.3.5515[23836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1089.256403][T23833] netlink: 'syz.5.5513': attribute type 39 has an invalid length. [ 1089.421514][T23839] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1089.750309][T23855] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1090.879436][T23880] netlink: 'syz.1.5527': attribute type 39 has an invalid length. [ 1091.585084][T23886] device syzkaller0 entered promiscuous mode [ 1091.781415][T13967] wlan1: Trigger new scan to find an IBSS to join [ 1091.785236][ T4279] wlan1: Trigger new scan to find an IBSS to join [ 1091.901208][T23908] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1092.613525][T23932] syz.2.5542[23932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1092.613625][T23932] syz.2.5542[23932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1093.023914][T23934] netlink: 'syz.1.5541': attribute type 39 has an invalid length. [ 1094.454379][T23961] device syzkaller0 entered promiscuous mode [ 1094.538446][T23975] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1095.019800][T23987] netlink: 'syz.2.5555': attribute type 39 has an invalid length. [ 1095.211533][T23991] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1095.797332][T14295] wlan1: Trigger new scan to find an IBSS to join [ 1095.846973][T24012] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1096.426542][T24027] device syzkaller0 entered promiscuous mode [ 1097.013711][T24045] netlink: 'syz.2.5573': attribute type 39 has an invalid length. [ 1097.390125][T24053] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1097.517324][T24055] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1097.810040][T24071] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1098.190059][T24086] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1099.532309][T24111] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1099.745721][T24118] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1099.905635][T24125] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1100.316733][T24141] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1100.658940][T24153] IPv6: Can't replace route, no match found [ 1100.735767][T24152] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1101.584384][T24182] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1101.894410][T24194] IPv6: Can't replace route, no match found [ 1101.983331][T24199] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1102.840803][ T4279] wlan1: Trigger new scan to find an IBSS to join [ 1103.057252][T24228] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1103.558154][T24245] IPv6: Can't replace route, no match found [ 1103.840914][T24253] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1104.894367][T24284] device syzkaller0 entered promiscuous mode [ 1105.781214][T13967] wlan1: Trigger new scan to find an IBSS to join [ 1105.781724][ T1265] wlan1: Trigger new scan to find an IBSS to join [ 1105.915793][T24312] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1107.502282][T24349] device syzkaller0 entered promiscuous mode [ 1107.893802][T24358] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1108.113628][T24365] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1108.219855][T24362] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1108.720413][T24383] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1109.370287][T24401] device syzkaller0 entered promiscuous mode [ 1109.780969][T13967] wlan1: Trigger new scan to find an IBSS to join [ 1109.787672][T13967] wlan1: Trigger new scan to find an IBSS to join [ 1109.928299][ T1265] wlan1: Creating new IBSS network, BSSID 1a:17:8b:b5:2e:5b [ 1109.962289][T24406] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1110.319954][T24428] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1110.850971][ T1265] wlan1: Trigger new scan to find an IBSS to join [ 1110.850978][T14295] wlan1: Trigger new scan to find an IBSS to join [ 1111.109981][T24437] device syzkaller0 entered promiscuous mode [ 1111.510387][T24457] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1111.775712][T24464] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1112.728581][T24486] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1112.813681][ T1265] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.919863][ T1265] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.278144][ T1265] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.781994][ T4279] wlan1: Trigger new scan to find an IBSS to join [ 1113.786391][T14295] wlan1: Trigger new scan to find an IBSS to join [ 1113.788934][T14633] wlan1: Trigger new scan to find an IBSS to join [ 1113.801456][T14295] wlan1: Trigger new scan to find an IBSS to join [ 1114.101015][ T4566] Bluetooth: hci2: command 0x0409 tx timeout [ 1114.820950][T24508] wlan1: Trigger new scan to find an IBSS to join [ 1115.791088][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.797452][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.948935][T14295] wlan1: Creating new IBSS network, BSSID ee:ab:14:51:b5:0a [ 1115.949744][T20642] wlan1: Creating new IBSS network, BSSID ae:36:6a:07:a1:d8 [ 1115.992589][T15443] ------------[ cut here ]------------ [ 1115.998927][T24506] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1116.019127][T15443] WARNING: CPU: 0 PID: 15443 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1116.045418][T15443] Modules linked in: [ 1116.057750][T15443] CPU: 0 PID: 15443 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 1116.117283][T15443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1116.180873][T14523] Bluetooth: hci2: command 0x041b tx timeout [ 1116.205060][T15443] Workqueue: cfg80211 cfg80211_event_work [ 1116.213903][T15443] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1116.220130][T15443] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c1 2b 44 f8 0f 0b eb bb e8 b8 2b 44 f8 <0f> 0b eb b2 e8 af 2b 44 f8 0f 0b e9 77 fd ff ff e8 a3 2b 44 f8 0f [ 1116.245473][T15443] RSP: 0018:ffffc900033cfaa0 EFLAGS: 00010293 [ 1116.251771][T15443] RAX: ffffffff8934f3e8 RBX: dffffc0000000000 RCX: ffff8880298fbb80 [ 1116.259854][T15443] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780 [ 1116.273515][T15443] RBP: ffffc900033cfb70 R08: ffffffff901d112f R09: 1ffffffff203a225 [ 1116.283584][T15443] R10: dffffc0000000000 R11: fffffbfff203a226 R12: ffff888059683590 [ 1116.296641][T15443] R13: 1ffff92000679f5c R14: 000000000000001f R15: ffff88807cddcc90 [ 1116.307127][T15443] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1116.319757][T15443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1116.328911][T15443] CR2: 00007fc9ff4efe20 CR3: 000000002b36d000 CR4: 00000000003506e0 [ 1116.340486][T15443] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1116.356405][T15443] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1116.364737][T15443] Call Trace: [ 1116.368040][T15443] [ 1116.376147][T15443] ? trace_rdev_return_void+0x1c0/0x1c0 [ 1116.381957][T15443] ? cfg80211_event_work+0x23/0x40 [ 1116.387116][T15443] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 1116.398374][T15443] cfg80211_process_rdev_events+0x9d/0x110 [ 1116.416004][T15443] cfg80211_event_work+0x2b/0x40 [ 1116.423353][T15443] process_one_work+0x85f/0x1010 [ 1116.428361][T15443] ? worker_detach_from_pool+0x240/0x240 [ 1116.455907][T15443] ? lockdep_hardirqs_off+0x70/0x100 [ 1116.461572][T15443] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1116.466644][T15443] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1116.477554][T15443] ? wq_worker_running+0x97/0x170 [ 1116.490858][T15443] worker_thread+0xaa6/0x1290 [ 1116.495625][T15443] kthread+0x436/0x520 [ 1116.499716][T15443] ? rcu_lock_release+0x20/0x20 [ 1116.505078][T15443] ? kthread_blkcg+0xd0/0xd0 [ 1116.510098][T15443] ret_from_fork+0x1f/0x30 [ 1116.520830][T15443] [ 1116.524025][T15443] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1116.531321][T15443] CPU: 1 PID: 15443 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 1116.538968][T15443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1116.549059][T15443] Workqueue: cfg80211 cfg80211_event_work [ 1116.554826][T15443] Call Trace: [ 1116.558133][T15443] [ 1116.561080][T15443] dump_stack_lvl+0x188/0x250 [ 1116.565778][T15443] ? show_regs_print_info+0x20/0x20 [ 1116.571085][T15443] ? load_image+0x400/0x400 [ 1116.575622][T15443] panic+0x2e5/0x810 [ 1116.579539][T15443] ? bpf_jit_dump+0xd0/0xd0 [ 1116.584071][T15443] ? ret_from_fork+0x1f/0x30 [ 1116.588707][T15443] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1116.594293][T15443] __warn+0x248/0x2b0 [ 1116.598294][T15443] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1116.603855][T15443] report_bug+0x1b7/0x2e0 [ 1116.608217][T15443] handle_bug+0x3a/0x70 [ 1116.612393][T15443] exc_invalid_op+0x16/0x40 [ 1116.616968][T15443] asm_exc_invalid_op+0x16/0x20 [ 1116.621864][T15443] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1116.628040][T15443] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c1 2b 44 f8 0f 0b eb bb e8 b8 2b 44 f8 <0f> 0b eb b2 e8 af 2b 44 f8 0f 0b e9 77 fd ff ff e8 a3 2b 44 f8 0f [ 1116.647665][T15443] RSP: 0018:ffffc900033cfaa0 EFLAGS: 00010293 [ 1116.653758][T15443] RAX: ffffffff8934f3e8 RBX: dffffc0000000000 RCX: ffff8880298fbb80 [ 1116.661745][T15443] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780 [ 1116.669740][T15443] RBP: ffffc900033cfb70 R08: ffffffff901d112f R09: 1ffffffff203a225 [ 1116.677723][T15443] R10: dffffc0000000000 R11: fffffbfff203a226 R12: ffff888059683590 [ 1116.685708][T15443] R13: 1ffff92000679f5c R14: 000000000000001f R15: ffff88807cddcc90 [ 1116.693730][T15443] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1116.699311][T15443] ? trace_rdev_return_void+0x1c0/0x1c0 [ 1116.704890][T15443] ? cfg80211_event_work+0x23/0x40 [ 1116.710050][T15443] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 1116.715989][T15443] cfg80211_process_rdev_events+0x9d/0x110 [ 1116.721939][T15443] cfg80211_event_work+0x2b/0x40 [ 1116.726916][T15443] process_one_work+0x85f/0x1010 [ 1116.731894][T15443] ? worker_detach_from_pool+0x240/0x240 [ 1116.737548][T15443] ? lockdep_hardirqs_off+0x70/0x100 [ 1116.742863][T15443] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1116.747917][T15443] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1116.753506][T15443] ? wq_worker_running+0x97/0x170 [ 1116.758761][T15443] worker_thread+0xaa6/0x1290 [ 1116.763493][T15443] kthread+0x436/0x520 [ 1116.767592][T15443] ? rcu_lock_release+0x20/0x20 [ 1116.772510][T15443] ? kthread_blkcg+0xd0/0xd0 [ 1116.777136][T15443] ret_from_fork+0x1f/0x30 [ 1116.781592][T15443] [ 1116.784967][T15443] Kernel Offset: disabled [ 1116.789597][T15443] Rebooting in 86400 seconds..