last executing test programs: 42.821394233s ago: executing program 1 (id=4771): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @empty, 0x48a, 0x1}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1}, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = openat$cgroup_pressure(r2, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000300)={'full', 0x20, 0x23, 0x20, 0xf}, 0x2f) r9 = openat$cgroup_int(r1, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @broadcast}, 0x3, 0x4, 0x1, 0x3}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0xa75ce0dd7ae00176) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="108403871ec8db61028b79f86ace1bf40f1f07879015cd0543efb2cff33abd2c9c802e3ac15c109cde9462939d024d69"], 0x6) r11 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x4, 0x100}, 0x2000, 0x400000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = syz_clone(0xfa103900, &(0x7f00000003c0)="fc4079bfced32224788df9347d470123f93d5425c9ec94d8f76ce32f2450d008d6e1eb834337b1683d7e1634db2b5656efc46d27c31be35e05e4a2f39ea4b57d88b6bae119ee606303e4c1dd670a61c63e529e89310afe9f1c42718ea6de4f342d2a9b9dcfadb01877f457150a8bcbd9eb244b13bf2401914d465552073ecf4fc413af39e20b32ba1bd6ccf6596009aec60bcc438f5e99dece92e2f347159e722ac9d355d5bd960478e277a6696ba51b5191b39f8e38277cb29e64f3c4b12ba6fb5b51e97a5e3893927c0e94205909", 0xfffffffffffffd39, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="6427b6fa6b7d8b7eab114481538c75cfffe41c817efe592b36a5b64e669b315b198eba79d87d08efa975c8aa2a0a3825c2145f897f7f7229a2392e91e183b82f48b149457b96f3fd6e4ddc58a1086db3bdd8fcf12b76c1bc1d9f179f368ce29427ce139af841b2dd06e5783a1dc524eb372443dc836a") perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x93, 0x81, 0x8f, 0x4, 0x0, 0x6, 0x2004, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x6}, 0x10008, 0x6, 0x8, 0x9, 0x3, 0xf67, 0x400, 0x0, 0x5}, r12, 0x0, r1, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x2400, 0x5) sendmsg$inet(r11, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) 41.863990686s ago: executing program 1 (id=4774): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x12, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000043542c92f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x40004000) 41.503399498s ago: executing program 1 (id=4775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 41.317570765s ago: executing program 1 (id=4777): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="ffa89cc8", 0x4}], 0x1}, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = openat$cgroup_pressure(r2, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000300)={'full', 0x20, 0x23, 0x20, 0xf}, 0x2f) r9 = openat$cgroup_int(r1, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @broadcast}, 0x3, 0x4, 0x1, 0x3}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0xa75ce0dd7ae00176) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="108403871ec8db61028b79f86ace1bf40f1f07879015cd0543efb2cff33abd2c9c802e3ac15c109cde9462939d024d69"], 0x6) r11 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x4, 0x100}, 0x2000, 0x400000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = syz_clone(0xfa103900, &(0x7f00000003c0)="fc4079bfced32224788df9347d470123f93d5425c9ec94d8f76ce32f2450d008d6e1eb834337b1683d7e1634db2b5656efc46d27c31be35e05e4a2f39ea4b57d88b6bae119ee606303e4c1dd670a61c63e529e89310afe9f1c42718ea6de4f342d2a9b9dcfadb01877f457150a8bcbd9eb244b13bf2401914d465552073ecf4fc413af39e20b32ba1bd6ccf6596009aec60bcc438f5e99dece92e2f347159e722ac9d355d5bd960478e277a6696ba51b5191b39f8e38277cb29e64f3c4b12ba6fb5b51e97a5e3893927c0e94205909", 0xfffffffffffffd39, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="6427b6fa6b7d8b7eab114481538c75cfffe41c817efe592b36a5b64e669b315b198eba79d87d08efa975c8aa2a0a3825c2145f897f7f7229a2392e91e183b82f48b149457b96f3fd6e4ddc58a1086db3bdd8fcf12b76c1bc1d9f179f368ce29427ce139af841b2dd06e5783a1dc524eb372443dc836a") perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x93, 0x81, 0x8f, 0x4, 0x0, 0x6, 0x2004, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x6}, 0x10008, 0x6, 0x8, 0x9, 0x3, 0xf67, 0x400, 0x0, 0x5}, r12, 0x0, r1, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x2400, 0x5) sendmsg$inet(r11, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) 40.392378716s ago: executing program 1 (id=4779): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14}, 0x8f) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0x104101, 0x4, 0x0, 0x3, 0x2000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xec, 0x5, 0xd, 0x9, 0x0, 0x7fffffff, 0x7a5d4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x11}, 0x100001, 0xe, 0x4007, 0x0, 0x7f, 0x5, 0x9, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 39.095783042s ago: executing program 1 (id=4783): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @empty, 0x48a, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)="ffa89cc8", 0x4}], 0x1}, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = openat$cgroup_pressure(r2, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000300)={'full', 0x20, 0x23, 0x20, 0xf}, 0x2f) openat$cgroup_int(r1, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @broadcast}, 0x3, 0x4, 0x1, 0x3}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0xa75ce0dd7ae00176) r10 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x4, 0x100}, 0x2000, 0x400000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = syz_clone(0xfa103900, &(0x7f00000003c0)="fc4079bfced32224788df9347d470123f93d5425c9ec94d8f76ce32f2450d008d6e1eb834337b1683d7e1634db2b5656efc46d27c31be35e05e4a2f39ea4b57d88b6bae119ee606303e4c1dd670a61c63e529e89310afe9f1c42718ea6de4f342d2a9b9dcfadb01877f457150a8bcbd9eb244b13bf2401914d465552073ecf4fc413af39e20b32ba1bd6ccf6596009aec60bcc438f5e99dece92e2f347159e722ac9d355d5bd960478e277a6696ba51b5191b39f8e38277cb29e64f3c4b12ba6fb5b51e97a5e3893927c0e94205909", 0xfffffffffffffd39, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="6427b6fa6b7d8b7eab114481538c75cfffe41c817efe592b36a5b64e669b315b198eba79d87d08efa975c8aa2a0a3825c2145f897f7f7229a2392e91e183b82f48b149457b96f3fd6e4ddc58a1086db3bdd8fcf12b76c1bc1d9f179f368ce29427ce139af841b2dd06e5783a1dc524eb372443dc836a") perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x93, 0x81, 0x8f, 0x4, 0x0, 0x6, 0x2004, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x6}, 0x10008, 0x6, 0x8, 0x9, 0x3, 0xf67, 0x400, 0x0, 0x5}, r11, 0x0, r1, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x2400, 0x5) sendmsg$inet(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) 34.812589251s ago: executing program 0 (id=4804): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='-\x00') (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) syz_open_procfs$namespace(0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r6, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x7, 0x8}, 0xc) (async) openat$cgroup_ro(r0, &(0x7f00000006c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 34.723095464s ago: executing program 2 (id=4805): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @empty, 0x48a, 0x1}, 0x80, &(0x7f0000000300)=[{}], 0x1}, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = openat$cgroup_pressure(r2, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000300)={'full', 0x20, 0x23, 0x20, 0xf}, 0x2f) r9 = openat$cgroup_int(r1, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @broadcast}, 0x3, 0x4, 0x1, 0x3}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0xa75ce0dd7ae00176) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="108403871ec8db61028b79f86ace1bf40f1f07879015cd0543efb2cff33abd2c9c802e3ac15c109cde9462939d024d69"], 0x6) r11 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x4, 0x100}, 0x2000, 0x400000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = syz_clone(0xfa103900, &(0x7f00000003c0)="fc4079bfced32224788df9347d470123f93d5425c9ec94d8f76ce32f2450d008d6e1eb834337b1683d7e1634db2b5656efc46d27c31be35e05e4a2f39ea4b57d88b6bae119ee606303e4c1dd670a61c63e529e89310afe9f1c42718ea6de4f342d2a9b9dcfadb01877f457150a8bcbd9eb244b13bf2401914d465552073ecf4fc413af39e20b32ba1bd6ccf6596009aec60bcc438f5e99dece92e2f347159e722ac9d355d5bd960478e277a6696ba51b5191b39f8e38277cb29e64f3c4b12ba6fb5b51e97a5e3893927c0e94205909", 0xfffffffffffffd39, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="6427b6fa6b7d8b7eab114481538c75cfffe41c817efe592b36a5b64e669b315b198eba79d87d08efa975c8aa2a0a3825c2145f897f7f7229a2392e91e183b82f48b149457b96f3fd6e4ddc58a1086db3bdd8fcf12b76c1bc1d9f179f368ce29427ce139af841b2dd06e5783a1dc524eb372443dc836a") perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x93, 0x81, 0x8f, 0x4, 0x0, 0x6, 0x2004, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x6}, 0x10008, 0x6, 0x8, 0x9, 0x3, 0xf67, 0x400, 0x0, 0x5}, r12, 0x0, r1, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x2400, 0x5) sendmsg$inet(r11, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) 34.585159708s ago: executing program 0 (id=4807): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESOCT=0x0], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89ef, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000004000000040000001500000000000000", @ANYRES32=r0], 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xc}, 0xf7e5) close(r8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 34.085975016s ago: executing program 3 (id=4810): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x12, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000043542c92f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x40004000) 33.818216515s ago: executing program 3 (id=4811): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @empty, 0x48a, 0x1}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1}, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = openat$cgroup_pressure(r2, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000300)={'full', 0x20, 0x23, 0x20, 0xf}, 0x2f) r9 = openat$cgroup_int(r1, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @broadcast}, 0x3, 0x4, 0x1, 0x3}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0xa75ce0dd7ae00176) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="108403871ec8db61028b79f86ace1bf40f1f07879015cd0543efb2cff33abd2c9c802e3ac15c109cde9462939d024d69"], 0x6) r11 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x4, 0x100}, 0x2000, 0x400000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = syz_clone(0xfa103900, &(0x7f00000003c0)="fc4079bfced32224788df9347d470123f93d5425c9ec94d8f76ce32f2450d008d6e1eb834337b1683d7e1634db2b5656efc46d27c31be35e05e4a2f39ea4b57d88b6bae119ee606303e4c1dd670a61c63e529e89310afe9f1c42718ea6de4f342d2a9b9dcfadb01877f457150a8bcbd9eb244b13bf2401914d465552073ecf4fc413af39e20b32ba1bd6ccf6596009aec60bcc438f5e99dece92e2f347159e722ac9d355d5bd960478e277a6696ba51b5191b39f8e38277cb29e64f3c4b12ba6fb5b51e97a5e3893927c0e94205909", 0xfffffffffffffd39, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="6427b6fa6b7d8b7eab114481538c75cfffe41c817efe592b36a5b64e669b315b198eba79d87d08efa975c8aa2a0a3825c2145f897f7f7229a2392e91e183b82f48b149457b96f3fd6e4ddc58a1086db3bdd8fcf12b76c1bc1d9f179f368ce29427ce139af841b2dd06e5783a1dc524eb372443dc836a") perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x93, 0x81, 0x8f, 0x4, 0x0, 0x6, 0x2004, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x6}, 0x10008, 0x6, 0x8, 0x9, 0x3, 0xf67, 0x400, 0x0, 0x5}, r12, 0x0, r1, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x2400, 0x5) sendmsg$inet(r11, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) 33.741083828s ago: executing program 2 (id=4812): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x5, 0x3, 0x4, 0x9e, 0x0, 0x6, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7d2, 0x1, @perf_bp={0x0, 0x7}, 0x400, 0xf7, 0x0, 0x8, 0x4, 0xe, 0x2, 0x0, 0x8, 0x0, 0x8}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="03000004040000000400100000000000000000004b59a79d1700984b5d98db3708d6503982386b5fdbb3387847df78acd6e9e5e3f4ead80cc1af3a1bcbc942c1989a264a12997b12d59df13198c245d8ec2ad2deedc6e377012172fccd6d140e631a601f", @ANYRES32, @ANYBLOB="ffffff7f000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x80010000, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x30, &(0x7f0000000100), 0x5000) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000600)=r1) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x30, &(0x7f0000000100), 0x120) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 33.256947015s ago: executing program 0 (id=4813): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @empty, 0x48a, 0x1}, 0x80, &(0x7f0000000300)=[{0x0}], 0x1}, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = openat$cgroup_pressure(r2, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000300)={'full', 0x20, 0x23, 0x20, 0xf}, 0x2f) r9 = openat$cgroup_int(r1, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @broadcast}, 0x3, 0x4, 0x1, 0x3}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0xa75ce0dd7ae00176) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="108403871ec8db61028b79f86ace1bf40f1f07879015cd0543efb2cff33abd2c9c802e3ac15c109cde9462939d024d69"], 0x6) r11 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x4, 0x100}, 0x2000, 0x400000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = syz_clone(0xfa103900, &(0x7f00000003c0)="fc4079bfced32224788df9347d470123f93d5425c9ec94d8f76ce32f2450d008d6e1eb834337b1683d7e1634db2b5656efc46d27c31be35e05e4a2f39ea4b57d88b6bae119ee606303e4c1dd670a61c63e529e89310afe9f1c42718ea6de4f342d2a9b9dcfadb01877f457150a8bcbd9eb244b13bf2401914d465552073ecf4fc413af39e20b32ba1bd6ccf6596009aec60bcc438f5e99dece92e2f347159e722ac9d355d5bd960478e277a6696ba51b5191b39f8e38277cb29e64f3c4b12ba6fb5b51e97a5e3893927c0e94205909", 0xfffffffffffffd39, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="6427b6fa6b7d8b7eab114481538c75cfffe41c817efe592b36a5b64e669b315b198eba79d87d08efa975c8aa2a0a3825c2145f897f7f7229a2392e91e183b82f48b149457b96f3fd6e4ddc58a1086db3bdd8fcf12b76c1bc1d9f179f368ce29427ce139af841b2dd06e5783a1dc524eb372443dc836a") perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x93, 0x81, 0x8f, 0x4, 0x0, 0x6, 0x2004, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x6}, 0x10008, 0x6, 0x8, 0x9, 0x3, 0xf67, 0x400, 0x0, 0x5}, r12, 0x0, r1, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x2400, 0x5) sendmsg$inet(r11, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) 33.256493005s ago: executing program 2 (id=4814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'team0\x00', 0x10}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x52008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a80)}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000a80)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x23, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1190015000600142603600e120800110000810401040016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040ead95667e006dcdf63951f225ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93f99601bdc28672787cb387", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (fail_nth: 8) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="39000000150081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 32.849230569s ago: executing program 2 (id=4815): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, 0x0) 32.8139528s ago: executing program 3 (id=4816): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="3b21b77ca6a5f81caa71c6a6746f45f317248789deed57b3a7bb41cf2339c76266d83633e1aac26691cefb63dbb97ec17b2b4e393a3127241220db617dec5fd67479ec303bdab37c737136f73ee7d81fb92c669b0ced7221ec6ee98cfa", 0x5d}, {&(0x7f0000000100)="cdab587afc4b5bc0a0eb9b6c98714368de1ed90da205e70ee98eece214886177bdd88b07ade03c58a1c27b841b7d262acb0c1bc704b0b32f6e46b01dc10b5f01629bc0bd4314947cf50c8d420227879d2bf6d91c7424", 0x56}, {&(0x7f0000000180)="49eb5089f7e780e19107cc0f4ed15c7acb59f4babc67e668c0a30260766fccd109cdc0a1b8bf754119aee5c721fd52400128312604", 0x35}, {&(0x7f00000001c0)="4d3fd2d29fc1119812abdb6d986bb0c99fab21ddea30f3e05bd33faadfbc0253fbd0859ac6140779d91bd6626e3a08247a867774bc2210de72e21cfc2c6d657511cf16257cfd85f2aa644299556f417bf13775f6d52143218c3b320b2a3cda6ef2dd194d4fb83c0def93227b7d7495bee2622fcc136b0180eed5f9d2396734a788feed1e34352a94bf22788fde3241c781025e9da7e3461f4b8ef384f7b799a80f7f386aa62e41c2a19276867aa29cc3dfcff769fc3ddcb9f14f1c7015ae1f40d86c440d67060d4ae0e5c04835ada392ab4fbd46077bc76ec2237be40123ea019c0bd9efb3b24587e1e2f508ac", 0xed}], 0x4, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x48}, 0x8000) recvmsg(r0, &(0x7f0000000a00)={&(0x7f00000003c0)=@isdn, 0x80, &(0x7f0000000940)=[{&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000580)=""/16, 0x10}, {&(0x7f00000005c0)=""/73, 0x49}, {&(0x7f0000000640)=""/234, 0xea}, {&(0x7f0000000740)=""/58, 0x3a}, {&(0x7f0000000780)=""/250, 0xfa}, {&(0x7f0000000880)=""/178, 0xb2}], 0x8, &(0x7f00000009c0)=""/8, 0x8}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0], 0x0, 0x22, &(0x7f0000000e00)=[{}], 0x8, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={0x1, 0xffffffffffffffff}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0xd, 0x8001, 0x1, 0x0, 0x180, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)='%-5lx \x00'}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000b40)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000c00)='GPL\x00', 0xc34, 0x92, &(0x7f0000000c40)=""/146, 0x40f00, 0x20, '\x00', r2, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001080)={0x4, 0xe, 0xbfa}, 0x10, 0x1d817, 0xffffffffffffffff, 0x5, &(0x7f0000001440)=[0x1, 0x1, r3, r4, r5, r6, r7, r8, 0x1, r9], &(0x7f0000001480)=[{0x4, 0x2, 0x0, 0x1}, {0x1, 0x4, 0xd}, {0x1, 0x1, 0x1, 0x8}, {0x3, 0x3, 0x8, 0x8}, {0x5, 0x4, 0x6, 0x7}], 0x10, 0x1}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@bloom_filter={0x1e, 0x36a, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x0, 0x0, 0x4}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001800)={0x0, 0x4, 0x18}, 0xc) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x1b, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x8, 0x6, 0xffffffffffffffc0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xf}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x6, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x7f}, @ldst={0x1, 0x2, 0x6, 0x5, 0x6, 0xffffffffffffffff, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000001740)='GPL\x00', 0x10b, 0x0, 0x0, 0x1e00, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000017c0)={0x5, 0x9, 0x3, 0xb13}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001840)=[r11, r5, r5, r7, r8, r6, r4, r5], &(0x7f0000001880)=[{0x2, 0x3, 0x10, 0x9}, {0x2, 0x5, 0x10, 0x2}, {0x3, 0x2, 0xb, 0x2}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001a80)={@ifindex=r2, 0x7, 0x1, 0x8, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001ac0)={@cgroup=r1, r12, 0x7, 0x4, 0x0, @void, @value=r4, @void, @void, r13}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001cc0)={r4, 0x20, &(0x7f0000001c80)={&(0x7f0000001b00)=""/127, 0x7f, 0x0, &(0x7f0000001b80)=""/217, 0xd9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d00)=r14, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001d40)={'ip6gretap0\x00', 0x200}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002100)={&(0x7f0000001d80)="620e6be07bbee1a1106c6672f5089660bbe79d68bdc9e00d1d302001e39fa5cc8c378e565c126c347a4f2292c38b534082062f6b1dfd63a5e64e45ac8266e185ecf2569652620d20d3fe95cdc96b744c3412302b52fdd1aed3aea4fec0587e069d737f122d96c2a869f0cc531c5efaedb2cd3f7688e9ca379943c7d4e5de3736ae6855e8b6e2b3ae0a332dd4d0e2326ec824162ee98656834cb6a689c48bf21fc59c55e7a4fcf9c29080ed005ec3e07b1437b53ba64beecee9bf157ec256132452", &(0x7f0000001e80)=""/169, &(0x7f0000001f40)="d09108ecf47ee70daa2d1313b9d93a606562770d18ce67db66e49847a93d2041f3ed7853c7298fcfc196f50622d3eb949239abd5be993852e39b654a8e906996fe0b9111d08e9369da826ab2f3929723c643cb13a5dca5c8b3fee7ba0cbb41edf500f67e23e816e6dae36196a97ec73981d000c25cf31cd8379057b26ddeb479fc9a3ef0d96b12cb17c44ce3f5af6507a33c338209a0d4ead957e764f793bdc315380165c4f6e7ad1b0d89ca84c6a2e8045f0169cf8e63a6fd52e005a58e62a633c8a8280b4539ca205bfa9caed8a7cf449b9ecd7881c8fc3490622f5a", &(0x7f0000002040)="febc68a37773e17f6cacf6c94643762a2f5154974d3b816ff697630bd47dbcf80cb230df511bd9f412216649e4c64318aa41dbe83231fd8b3a7a60b1036ff9788361d0f874324c55b9abbdab29168c611b87ee29504333f98354b11b6d802c3908d0406113215eb6b808b9322f019ea22e5afe75f0572a28beac18e7848248dad658bb451892e5fef54507c9f1156f9c28", 0x4, r8, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@bloom_filter={0x1e, 0xfffffff2, 0x200, 0xffffffff, 0x2040, 0xffffffffffffffff, 0x100, '\x00', 0x0, r4, 0x1, 0x2, 0x3, 0x6}, 0x50) r15 = gettid() perf_event_open(&(0x7f0000002200)={0x0, 0x80, 0x8, 0x0, 0xb, 0x5, 0x0, 0xb3, 0xa4442, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f00000021c0), 0x4}, 0x104c0, 0xd, 0x1, 0x3, 0x3, 0xfffffff7, 0x1, 0x0, 0x80000001, 0x0, 0x2}, r15, 0x4, r12, 0x8) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000002280)={'pimreg1\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000022c0)={'veth0_to_hsr\x00', 0xe0d7b73a6cb552ad}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r12, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000023c0)=[{}], 0x8, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000002480)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002600)={@cgroup=r4, r12, 0x20, 0x30, 0x0, @void, @void, @void, @value, r13}, 0x20) 32.766385172s ago: executing program 2 (id=4817): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 32.616563967s ago: executing program 3 (id=4818): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0x104101, 0x4, 0x0, 0x3, 0x2000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xec, 0x5, 0xd, 0x9, 0x0, 0x7fffffff, 0x7a5d4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x11}, 0x100001, 0xe, 0x4007, 0x0, 0x7f, 0x5, 0x9, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 32.446349863s ago: executing program 3 (id=4819): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x12, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000043542c92f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x40004000) 32.210647821s ago: executing program 0 (id=4820): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @empty, 0x48a, 0x1}, 0x80, &(0x7f0000000300)=[{}], 0x1}, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = openat$cgroup_pressure(r2, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000300)={'full', 0x20, 0x23, 0x20, 0xf}, 0x2f) r9 = openat$cgroup_int(r1, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @broadcast}, 0x3, 0x4, 0x1, 0x3}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0xa75ce0dd7ae00176) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="108403871ec8db61028b79f86ace1bf40f1f07879015cd0543efb2cff33abd2c9c802e3ac15c109cde9462939d024d69"], 0x6) r11 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x4, 0x100}, 0x2000, 0x400000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = syz_clone(0xfa103900, &(0x7f00000003c0)="fc4079bfced32224788df9347d470123f93d5425c9ec94d8f76ce32f2450d008d6e1eb834337b1683d7e1634db2b5656efc46d27c31be35e05e4a2f39ea4b57d88b6bae119ee606303e4c1dd670a61c63e529e89310afe9f1c42718ea6de4f342d2a9b9dcfadb01877f457150a8bcbd9eb244b13bf2401914d465552073ecf4fc413af39e20b32ba1bd6ccf6596009aec60bcc438f5e99dece92e2f347159e722ac9d355d5bd960478e277a6696ba51b5191b39f8e38277cb29e64f3c4b12ba6fb5b51e97a5e3893927c0e94205909", 0xfffffffffffffd39, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="6427b6fa6b7d8b7eab114481538c75cfffe41c817efe592b36a5b64e669b315b198eba79d87d08efa975c8aa2a0a3825c2145f897f7f7229a2392e91e183b82f48b149457b96f3fd6e4ddc58a1086db3bdd8fcf12b76c1bc1d9f179f368ce29427ce139af841b2dd06e5783a1dc524eb372443dc836a") perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x93, 0x81, 0x8f, 0x4, 0x0, 0x6, 0x2004, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x6}, 0x10008, 0x6, 0x8, 0x9, 0x3, 0xf67, 0x400, 0x0, 0x5}, r12, 0x0, r1, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5411, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x2400, 0x5) sendmsg$inet(r11, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) 31.762032827s ago: executing program 3 (id=4821): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESOCT=0x0], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89ef, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000004000000040000001500000000000000", @ANYRES32=r0], 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xc}, 0xf7e5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 31.477522557s ago: executing program 2 (id=4822): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="8f6cba11d08170dc1fc2d2e182281c7fc07e376c6e694614af0700c7ba6f81aa97028283b04d7b5a5c7c1b70e0ecd1cb64e3af465143967f5dee069661a9d5317c6a39f24aec3ff693b551a6c162cccdbdc59295c03447b6e0149f3ef8826d", @ANYRES16=r0, @ANYBLOB="aecccf9a008805d1ca67740df1e0ee9b74963b12873c615691c5d623ec064618a14715e3b5f96bd4279c798fcb5b39"], &(0x7f00000001c0)='GPL\x00', 0x34b, 0x0, 0x0, 0x0, 0x78}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000050000000000000000000000000000000000000000000400"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d00000"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a) r8 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x53}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r8, 0x29, 0x15, &(0x7f0000000100), 0x3d) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 16.242752276s ago: executing program 32 (id=4822): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="8f6cba11d08170dc1fc2d2e182281c7fc07e376c6e694614af0700c7ba6f81aa97028283b04d7b5a5c7c1b70e0ecd1cb64e3af465143967f5dee069661a9d5317c6a39f24aec3ff693b551a6c162cccdbdc59295c03447b6e0149f3ef8826d", @ANYRES16=r0, @ANYBLOB="aecccf9a008805d1ca67740df1e0ee9b74963b12873c615691c5d623ec064618a14715e3b5f96bd4279c798fcb5b39"], &(0x7f00000001c0)='GPL\x00', 0x34b, 0x0, 0x0, 0x0, 0x78}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000050000000000000000000000000000000000000000000400"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d00000"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a) r8 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x53}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r8, 0x29, 0x15, &(0x7f0000000100), 0x3d) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 16.184105707s ago: executing program 33 (id=4821): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESOCT=0x0], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89ef, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000004000000040000001500000000000000", @ANYRES32=r0], 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xc}, 0xf7e5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15.172487393s ago: executing program 0 (id=4825): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x6, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b12d25a80648c2594f902", 0x11}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x500, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.033837207s ago: executing program 0 (id=4826): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0x104101, 0x4, 0x0, 0x3, 0x2000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xec, 0x5, 0xd, 0x9, 0x0, 0x7fffffff, 0x7a5d4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x11}, 0x100001, 0xe, 0x4007, 0x0, 0x7f, 0x5, 0x9, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 0s ago: executing program 34 (id=4826): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0x104101, 0x4, 0x0, 0x3, 0x2000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xec, 0x5, 0xd, 0x9, 0x0, 0x7fffffff, 0x7a5d4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x11}, 0x100001, 0xe, 0x4007, 0x0, 0x7f, 0x5, 0x9, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 40638][T18201] RSP: 002b:00007fb262ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.649180][T18201] RAX: ffffffffffffffda RBX: 00007fb261e15fa0 RCX: 00007fb261b9c819 [ 715.657424][T18201] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 715.665561][T18201] RBP: 00007fb262ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 715.673526][T18201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.681664][T18201] R13: 00007fb261e16038 R14: 00007fb261e15fa0 R15: 00007fff9d3028d8 [ 715.689729][T18201] [ 717.228853][T10851] wlan1: Creating new IBSS network, BSSID 3a:81:68:64:50:c4 [ 718.292399][T18212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 718.335817][T18222] FAULT_INJECTION: forcing a failure. [ 718.335817][T18222] name failslab, interval 1, probability 0, space 0, times 0 [ 718.363610][T18222] CPU: 0 PID: 18222 Comm: syz.3.4148 Not tainted syzkaller #0 [ 718.371328][T18222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 718.381595][T18222] Call Trace: [ 718.384920][T18222] [ 718.387886][T18222] dump_stack_lvl+0x18c/0x250 [ 718.392696][T18222] ? show_regs_print_info+0x20/0x20 [ 718.397936][T18222] ? load_image+0x400/0x400 [ 718.402468][T18222] ? __might_sleep+0xe0/0xe0 [ 718.407584][T18222] ? __lock_acquire+0x7d40/0x7d40 [ 718.412736][T18222] should_fail_ex+0x39d/0x4d0 [ 718.417582][T18222] should_failslab+0x9/0x20 [ 718.422664][T18222] slab_pre_alloc_hook+0x59/0x310 [ 718.427800][T18222] ? br_vlan_add+0x1e4/0x950 [ 718.432600][T18222] __kmem_cache_alloc_node+0x53/0x250 [ 718.437966][T18222] ? __vlan_flush+0x3c0/0x3c0 [ 718.442805][T18222] ? br_vlan_add+0x1e4/0x950 [ 718.447391][T18222] kmalloc_trace+0x2a/0xe0 [ 718.451980][T18222] br_vlan_add+0x1e4/0x950 [ 718.456665][T18222] __vlan_add+0x485/0x26b0 [ 718.461213][T18222] ? br_vlan_add+0x950/0x950 [ 718.466025][T18222] nbp_vlan_add+0x262/0x3c0 [ 718.470537][T18222] br_vlan_info+0x101/0x460 [ 718.475146][T18222] ? br_process_vlan_info+0x8a0/0x8a0 [ 718.480729][T18222] br_process_vlan_info+0x316/0x8a0 [ 718.485985][T18222] ? __lock_acquire+0x1347/0x7d40 [ 718.491094][T18222] ? br_getlink+0x180/0x180 [ 718.495799][T18222] br_afspec+0x399/0x5f0 [ 718.500085][T18222] ? br_setport+0x1680/0x1680 [ 718.504982][T18222] br_setlink+0x2dc/0x8b0 [ 718.509519][T18222] ? br_vlan_info+0x460/0x460 [ 718.514400][T18222] ? __mutex_lock+0x956/0xcc0 [ 718.519119][T18222] ? mutex_is_locked+0x12/0x40 [ 718.523896][T18222] rtnl_bridge_setlink+0x5b7/0x7d0 [ 718.529225][T18222] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 718.534504][T18222] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 718.539797][T18222] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 718.544942][T18222] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 718.550237][T18222] rtnetlink_rcv_msg+0x869/0xfa0 [ 718.555408][T18222] ? lockdep_hardirqs_on+0x98/0x150 [ 718.561328][T18222] ? rtnetlink_bind+0x80/0x80 [ 718.566219][T18222] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 718.572470][T18222] ? lock_chain_count+0x20/0x20 [ 718.577323][T18222] ? __local_bh_enable_ip+0x13a/0x1c0 [ 718.582691][T18222] ? lockdep_hardirqs_on+0x98/0x150 [ 718.588081][T18222] ? __local_bh_enable_ip+0x13a/0x1c0 [ 718.593680][T18222] ? _local_bh_enable+0xa0/0xa0 [ 718.598657][T18222] ? __dev_queue_xmit+0x265/0x3660 [ 718.603790][T18222] ? __dev_queue_xmit+0x265/0x3660 [ 718.609004][T18222] ? __dev_queue_xmit+0x1b2c/0x3660 [ 718.614245][T18222] ? __dev_queue_xmit+0x265/0x3660 [ 718.619657][T18222] ? ref_tracker_free+0x690/0x840 [ 718.625049][T18222] netlink_rcv_skb+0x241/0x4d0 [ 718.630037][T18222] ? rtnetlink_bind+0x80/0x80 [ 718.635094][T18222] ? netlink_ack+0x1180/0x1180 [ 718.640067][T18222] ? __lock_acquire+0x7d40/0x7d40 [ 718.645222][T18222] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.650484][T18222] netlink_unicast+0x751/0x8d0 [ 718.655409][T18222] netlink_sendmsg+0x8d0/0xbf0 [ 718.660309][T18222] ? netlink_getsockopt+0x590/0x590 [ 718.665701][T18222] ? aa_sock_msg_perm+0x94/0x150 [ 718.670750][T18222] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 718.676209][T18222] ? security_socket_sendmsg+0x80/0xa0 [ 718.681862][T18222] ? netlink_getsockopt+0x590/0x590 [ 718.687334][T18222] ____sys_sendmsg+0x5ba/0x960 [ 718.692165][T18222] ? __asan_memset+0x22/0x40 [ 718.696890][T18222] ? __sys_sendmsg_sock+0x30/0x30 [ 718.702016][T18222] ? __import_iovec+0x5f2/0x850 [ 718.706876][T18222] ? import_iovec+0x73/0xa0 [ 718.712289][T18222] ___sys_sendmsg+0x2a6/0x360 [ 718.717176][T18222] ? get_pid_task+0x20/0x1e0 [ 718.722031][T18222] ? __sys_sendmsg+0x2a0/0x2a0 [ 718.727105][T18222] ? __lock_acquire+0x7d40/0x7d40 [ 718.732257][T18222] __se_sys_sendmsg+0x1c2/0x2b0 [ 718.737120][T18222] ? __x64_sys_sendmsg+0x80/0x80 [ 718.743006][T18222] ? lockdep_hardirqs_on+0x98/0x150 [ 718.748477][T18222] do_syscall_64+0x55/0xa0 [ 718.753095][T18222] ? clear_bhb_loop+0x40/0x90 [ 718.757774][T18222] ? clear_bhb_loop+0x40/0x90 [ 718.762532][T18222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.768891][T18222] RIP: 0033:0x7fbfaf99c819 [ 718.773315][T18222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.793715][T18222] RSP: 002b:00007fbfb0778028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.802439][T18222] RAX: ffffffffffffffda RBX: 00007fbfafc15fa0 RCX: 00007fbfaf99c819 [ 718.810601][T18222] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 718.818590][T18222] RBP: 00007fbfb0778090 R08: 0000000000000000 R09: 0000000000000000 [ 718.826960][T18222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.835202][T18222] R13: 00007fbfafc16038 R14: 00007fbfafc15fa0 R15: 00007ffd81914f18 [ 718.843195][T18222] [ 718.966229][T18227] team0: Port device C removed [ 718.971980][T18227] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 719.283319][T18235] FAULT_INJECTION: forcing a failure. [ 719.283319][T18235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.304445][T18235] CPU: 0 PID: 18235 Comm: syz.2.4152 Not tainted syzkaller #0 [ 719.312859][T18235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 719.322955][T18235] Call Trace: [ 719.326471][T18235] [ 719.329453][T18235] dump_stack_lvl+0x18c/0x250 [ 719.334598][T18235] ? show_regs_print_info+0x20/0x20 [ 719.340061][T18235] ? load_image+0x400/0x400 [ 719.344725][T18235] ? __lock_acquire+0x7d40/0x7d40 [ 719.349897][T18235] ? snprintf+0xe9/0x140 [ 719.354285][T18235] should_fail_ex+0x39d/0x4d0 [ 719.359028][T18235] _copy_to_user+0x2f/0xa0 [ 719.363581][T18235] simple_read_from_buffer+0xe7/0x150 [ 719.369049][T18235] proc_fail_nth_read+0x1e8/0x260 [ 719.374118][T18235] ? proc_fault_inject_write+0x360/0x360 [ 719.379801][T18235] ? fsnotify_perm+0x271/0x5e0 [ 719.384591][T18235] ? proc_fault_inject_write+0x360/0x360 [ 719.390235][T18235] vfs_read+0x28b/0x970 [ 719.394447][T18235] ? kernel_read+0x1e0/0x1e0 [ 719.399085][T18235] ? __fget_files+0x28/0x4b0 [ 719.403692][T18235] ? __fget_files+0x28/0x4b0 [ 719.408323][T18235] ? __fget_files+0x43d/0x4b0 [ 719.413031][T18235] ? __fdget_pos+0x2a3/0x330 [ 719.417801][T18235] ? ksys_read+0x75/0x260 [ 719.422245][T18235] ksys_read+0x150/0x260 [ 719.426512][T18235] ? vfs_write+0x990/0x990 [ 719.430937][T18235] ? lockdep_hardirqs_on+0x98/0x150 [ 719.436144][T18235] do_syscall_64+0x55/0xa0 [ 719.440657][T18235] ? clear_bhb_loop+0x40/0x90 [ 719.445510][T18235] ? clear_bhb_loop+0x40/0x90 [ 719.450192][T18235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.456098][T18235] RIP: 0033:0x7f1f8455d04e [ 719.460633][T18235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 719.480685][T18235] RSP: 002b:00007f1f854a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 719.489204][T18235] RAX: ffffffffffffffda RBX: 00007f1f854a96c0 RCX: 00007f1f8455d04e [ 719.497198][T18235] RDX: 000000000000000f RSI: 00007f1f854a90a0 RDI: 0000000000000006 [ 719.505345][T18235] RBP: 00007f1f854a9090 R08: 0000000000000000 R09: 0000000000000000 [ 719.513404][T18235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.521374][T18235] R13: 00007f1f84816038 R14: 00007f1f84815fa0 R15: 00007ffccd54a568 [ 719.529418][T18235] [ 719.648358][T18249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.116421][T18259] netlink: 'syz.3.4161': attribute type 7 has an invalid length. [ 720.210927][T18265] FAULT_INJECTION: forcing a failure. [ 720.210927][T18265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.246277][T18265] CPU: 1 PID: 18265 Comm: syz.2.4163 Not tainted syzkaller #0 [ 720.253921][T18265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 720.265916][T18265] Call Trace: [ 720.269400][T18265] [ 720.272653][T18265] dump_stack_lvl+0x18c/0x250 [ 720.277392][T18265] ? show_regs_print_info+0x20/0x20 [ 720.282664][T18265] ? load_image+0x400/0x400 [ 720.287204][T18265] ? __might_fault+0xaa/0x120 [ 720.291920][T18265] ? __lock_acquire+0x7d40/0x7d40 [ 720.296985][T18265] should_fail_ex+0x39d/0x4d0 [ 720.301788][T18265] _copy_from_iter+0x1d9/0x12e0 [ 720.306793][T18265] ? __virt_addr_valid+0x18c/0x540 [ 720.311948][T18265] ? __lock_acquire+0x7d40/0x7d40 [ 720.317002][T18265] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 720.322591][T18265] ? copyout_mc+0x70/0x70 [ 720.326961][T18265] ? __virt_addr_valid+0x18c/0x540 [ 720.332193][T18265] ? __virt_addr_valid+0x18c/0x540 [ 720.337494][T18265] ? __virt_addr_valid+0x469/0x540 [ 720.342645][T18265] ? __check_object_size+0x506/0xa20 [ 720.348129][T18265] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 720.353890][T18265] ? skb_put+0x11b/0x210 [ 720.358167][T18265] unix_stream_sendmsg+0x562/0xbf0 [ 720.363327][T18265] ? unix_show_fdinfo+0x270/0x270 [ 720.368469][T18265] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 720.374917][T18265] ? aa_sock_msg_perm+0x94/0x150 [ 720.379886][T18265] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 720.385321][T18265] ? security_socket_sendmsg+0x80/0xa0 [ 720.390899][T18265] ? unix_show_fdinfo+0x270/0x270 [ 720.395964][T18265] ____sys_sendmsg+0x5ba/0x960 [ 720.400940][T18265] ? __asan_memset+0x22/0x40 [ 720.405564][T18265] ? __sys_sendmsg_sock+0x30/0x30 [ 720.410625][T18265] ? __import_iovec+0x5f2/0x850 [ 720.415684][T18265] ? import_iovec+0x73/0xa0 [ 720.420217][T18265] ___sys_sendmsg+0x2a6/0x360 [ 720.424922][T18265] ? get_pid_task+0x20/0x1e0 [ 720.429811][T18265] ? __sys_sendmsg+0x2a0/0x2a0 [ 720.434627][T18265] ? __lock_acquire+0x7d40/0x7d40 [ 720.439751][T18265] __se_sys_sendmsg+0x1c2/0x2b0 [ 720.445083][T18265] ? __x64_sys_sendmsg+0x80/0x80 [ 720.450159][T18265] ? lockdep_hardirqs_on+0x98/0x150 [ 720.455483][T18265] do_syscall_64+0x55/0xa0 [ 720.460198][T18265] ? clear_bhb_loop+0x40/0x90 [ 720.465524][T18265] ? clear_bhb_loop+0x40/0x90 [ 720.470246][T18265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.476348][T18265] RIP: 0033:0x7f1f8459c819 [ 720.480807][T18265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.500787][T18265] RSP: 002b:00007f1f85488028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.509228][T18265] RAX: ffffffffffffffda RBX: 00007f1f84816090 RCX: 00007f1f8459c819 [ 720.517312][T18265] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 720.525316][T18265] RBP: 00007f1f85488090 R08: 0000000000000000 R09: 0000000000000000 [ 720.533495][T18265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.541487][T18265] R13: 00007f1f84816128 R14: 00007f1f84816090 R15: 00007ffccd54a568 [ 720.549601][T18265] [ 720.597539][T18271] netlink: 'syz.1.4165': attribute type 2 has an invalid length. [ 720.677882][T18273] FAULT_INJECTION: forcing a failure. [ 720.677882][T18273] name failslab, interval 1, probability 0, space 0, times 0 [ 720.691978][T18273] CPU: 0 PID: 18273 Comm: syz.1.4166 Not tainted syzkaller #0 [ 720.699578][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 720.709665][T18273] Call Trace: [ 720.713055][T18273] [ 720.716003][T18273] dump_stack_lvl+0x18c/0x250 [ 720.720805][T18273] ? show_regs_print_info+0x20/0x20 [ 720.726039][T18273] ? load_image+0x400/0x400 [ 720.730835][T18273] ? __might_sleep+0xe0/0xe0 [ 720.735896][T18273] ? __lock_acquire+0x7d40/0x7d40 [ 720.740963][T18273] should_fail_ex+0x39d/0x4d0 [ 720.745869][T18273] should_failslab+0x9/0x20 [ 720.750422][T18273] slab_pre_alloc_hook+0x59/0x310 [ 720.755666][T18273] ? __lock_acquire+0x7d40/0x7d40 [ 720.760731][T18273] kmem_cache_alloc_node+0x60/0x320 [ 720.766051][T18273] ? __alloc_skb+0x103/0x2c0 [ 720.770770][T18273] __alloc_skb+0x103/0x2c0 [ 720.775220][T18273] netlink_sendmsg+0x66a/0xbf0 [ 720.780032][T18273] ? netlink_getsockopt+0x590/0x590 [ 720.785275][T18273] ? aa_sock_msg_perm+0x94/0x150 [ 720.790426][T18273] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 720.795926][T18273] ? security_socket_sendmsg+0x80/0xa0 [ 720.801413][T18273] ? netlink_getsockopt+0x590/0x590 [ 720.806738][T18273] ____sys_sendmsg+0x5ba/0x960 [ 720.811553][T18273] ? __asan_memset+0x22/0x40 [ 720.816190][T18273] ? __sys_sendmsg_sock+0x30/0x30 [ 720.821311][T18273] ? __import_iovec+0x5f2/0x850 [ 720.826336][T18273] ? import_iovec+0x73/0xa0 [ 720.830875][T18273] ___sys_sendmsg+0x2a6/0x360 [ 720.835583][T18273] ? get_pid_task+0x20/0x1e0 [ 720.840206][T18273] ? __sys_sendmsg+0x2a0/0x2a0 [ 720.845258][T18273] ? __lock_acquire+0x7d40/0x7d40 [ 720.850333][T18273] __se_sys_sendmsg+0x1c2/0x2b0 [ 720.855219][T18273] ? __x64_sys_sendmsg+0x80/0x80 [ 720.860307][T18273] ? lockdep_hardirqs_on+0x98/0x150 [ 720.865554][T18273] do_syscall_64+0x55/0xa0 [ 720.870104][T18273] ? clear_bhb_loop+0x40/0x90 [ 720.874903][T18273] ? clear_bhb_loop+0x40/0x90 [ 720.879634][T18273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.885560][T18273] RIP: 0033:0x7f7521d9c819 [ 720.890007][T18273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.909643][T18273] RSP: 002b:00007f7522b76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.918177][T18273] RAX: ffffffffffffffda RBX: 00007f7522015fa0 RCX: 00007f7521d9c819 [ 720.926356][T18273] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 720.934358][T18273] RBP: 00007f7522b76090 R08: 0000000000000000 R09: 0000000000000000 [ 720.942526][T18273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.950529][T18273] R13: 00007f7522016038 R14: 00007f7522015fa0 R15: 00007ffd9e029d28 [ 720.958545][T18273] [ 721.519630][T18288] C: renamed from team_slave_0 (while UP) [ 721.564370][T18288] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4171'. [ 721.574942][T18290] netlink: 'syz.1.4172': attribute type 10 has an invalid length. [ 721.596519][T18290] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4172'. [ 721.743419][T18293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.037001][T18300] netlink: set zone limit has 8 unknown bytes [ 722.125928][T18302] netlink: 'syz.0.4177': attribute type 10 has an invalid length. [ 722.142726][T18302] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4177'. [ 722.642747][T18318] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4180'. [ 722.894487][T18325] FAULT_INJECTION: forcing a failure. [ 722.894487][T18325] name failslab, interval 1, probability 0, space 0, times 0 [ 722.907611][T18325] CPU: 1 PID: 18325 Comm: syz.1.4184 Not tainted syzkaller #0 [ 722.915106][T18325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 722.925194][T18325] Call Trace: [ 722.928618][T18325] [ 722.931539][T18325] dump_stack_lvl+0x18c/0x250 [ 722.936231][T18325] ? show_regs_print_info+0x20/0x20 [ 722.941434][T18325] ? load_image+0x400/0x400 [ 722.945947][T18325] ? __might_sleep+0xe0/0xe0 [ 722.950548][T18325] ? __lock_acquire+0x7d40/0x7d40 [ 722.955571][T18325] should_fail_ex+0x39d/0x4d0 [ 722.960341][T18325] should_failslab+0x9/0x20 [ 722.964851][T18325] slab_pre_alloc_hook+0x59/0x310 [ 722.969881][T18325] ? sk_prot_alloc+0xe7/0x210 [ 722.974561][T18325] ? sk_prot_alloc+0xe7/0x210 [ 722.979240][T18325] __kmem_cache_alloc_node+0x53/0x250 [ 722.984620][T18325] ? sk_prot_alloc+0xe7/0x210 [ 722.989386][T18325] __kmalloc+0xa4/0x230 [ 722.993604][T18325] sk_prot_alloc+0xe7/0x210 [ 722.998098][T18325] ? sk_alloc+0x24/0x360 [ 723.002373][T18325] sk_alloc+0x3a/0x360 [ 723.006480][T18325] ? bpf_ctx_init+0x163/0x1a0 [ 723.011170][T18325] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 723.016815][T18325] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 723.022251][T18325] ? __fget_files+0x28/0x4b0 [ 723.026935][T18325] ? __fget_files+0x28/0x4b0 [ 723.031524][T18325] ? __fget_files+0x43d/0x4b0 [ 723.036207][T18325] ? cpu_online+0x60/0x60 [ 723.040584][T18325] bpf_prog_test_run+0x321/0x390 [ 723.045784][T18325] __sys_bpf+0x49d/0x890 [ 723.050048][T18325] ? bpf_link_show_fdinfo+0x390/0x390 [ 723.055454][T18325] ? lock_chain_count+0x20/0x20 [ 723.060310][T18325] __x64_sys_bpf+0x7c/0x90 [ 723.064720][T18325] do_syscall_64+0x55/0xa0 [ 723.069132][T18325] ? clear_bhb_loop+0x40/0x90 [ 723.074017][T18325] ? clear_bhb_loop+0x40/0x90 [ 723.078702][T18325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.084680][T18325] RIP: 0033:0x7f7521d9c819 [ 723.089175][T18325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.108952][T18325] RSP: 002b:00007f7522b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 723.117379][T18325] RAX: ffffffffffffffda RBX: 00007f7522015fa0 RCX: 00007f7521d9c819 [ 723.125355][T18325] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 723.133339][T18325] RBP: 00007f7522b76090 R08: 0000000000000000 R09: 0000000000000000 [ 723.141316][T18325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.149283][T18325] R13: 00007f7522016038 R14: 00007f7522015fa0 R15: 00007ffd9e029d28 [ 723.157264][T18325] [ 724.973133][T18339] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4189'. [ 725.280714][T18343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 725.475421][T10842] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 725.527449][T18351] netlink: 'syz.2.4193': attribute type 10 has an invalid length. [ 725.583050][T18351] team0 (unregistering): Port device team_slave_1 removed [ 725.639775][T18354] netlink: 'syz.1.4195': attribute type 10 has an invalid length. [ 725.678980][T18354] team0: Port device veth0_to_bond added [ 726.131049][T18360] netlink: 'syz.0.4197': attribute type 2 has an invalid length. [ 726.140216][T18360] netlink: 'syz.0.4197': attribute type 8 has an invalid length. [ 726.149181][T18360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4197'. [ 726.164058][T18360] netlink: 'syz.0.4197': attribute type 2 has an invalid length. [ 726.171953][T18360] netlink: 'syz.0.4197': attribute type 8 has an invalid length. [ 726.182074][T18360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4197'. [ 726.364799][T18366] FAULT_INJECTION: forcing a failure. [ 726.364799][T18366] name failslab, interval 1, probability 0, space 0, times 0 [ 726.399118][T18366] CPU: 0 PID: 18366 Comm: syz.0.4201 Not tainted syzkaller #0 [ 726.406718][T18366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 726.416774][T18366] Call Trace: [ 726.420093][T18366] [ 726.423021][T18366] dump_stack_lvl+0x18c/0x250 [ 726.427711][T18366] ? show_regs_print_info+0x20/0x20 [ 726.432991][T18366] ? load_image+0x400/0x400 [ 726.437500][T18366] ? verify_lock_unused+0x140/0x140 [ 726.442814][T18366] should_fail_ex+0x39d/0x4d0 [ 726.447521][T18366] should_failslab+0x9/0x20 [ 726.452117][T18366] slab_pre_alloc_hook+0x59/0x310 [ 726.457171][T18366] kmem_cache_alloc+0x5a/0x2d0 [ 726.462218][T18366] ? skb_clone+0x1eb/0x370 [ 726.466676][T18366] skb_clone+0x1eb/0x370 [ 726.471042][T18366] __netlink_deliver_tap+0x41c/0x830 [ 726.476344][T18366] ? netlink_deliver_tap+0x2e/0x1b0 [ 726.481545][T18366] netlink_deliver_tap+0x19c/0x1b0 [ 726.486664][T18366] netlink_sendskb+0x68/0x130 [ 726.491362][T18366] netlink_ack+0xce1/0x1180 [ 726.496076][T18366] ? netlink_dump+0xe50/0xe50 [ 726.500880][T18366] ? sock_diag_lock_handler+0x19/0x280 [ 726.506401][T18366] ? sock_diag_lock_handler+0x227/0x280 [ 726.512060][T18366] ? sock_diag_rcv_msg+0x402/0x600 [ 726.517213][T18366] netlink_rcv_skb+0x2c5/0x4d0 [ 726.522074][T18366] ? sock_diag_bind+0xb0/0xb0 [ 726.526971][T18366] ? netlink_ack+0x1180/0x1180 [ 726.532024][T18366] ? __lock_acquire+0x7d40/0x7d40 [ 726.537073][T18366] ? netlink_deliver_tap+0x2e/0x1b0 [ 726.542577][T18366] sock_diag_rcv+0x2a/0x40 [ 726.547213][T18366] netlink_unicast+0x751/0x8d0 [ 726.552047][T18366] netlink_sendmsg+0x8d0/0xbf0 [ 726.556927][T18366] ? netlink_getsockopt+0x590/0x590 [ 726.562140][T18366] ? aa_sock_msg_perm+0x94/0x150 [ 726.567163][T18366] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 726.572443][T18366] ? security_socket_sendmsg+0x80/0xa0 [ 726.577987][T18366] ? netlink_getsockopt+0x590/0x590 [ 726.583186][T18366] ____sys_sendmsg+0x5ba/0x960 [ 726.587959][T18366] ? __asan_memset+0x22/0x40 [ 726.592566][T18366] ? __sys_sendmsg_sock+0x30/0x30 [ 726.597626][T18366] ? __import_iovec+0x5f2/0x850 [ 726.602598][T18366] ? import_iovec+0x73/0xa0 [ 726.607106][T18366] ___sys_sendmsg+0x2a6/0x360 [ 726.611786][T18366] ? get_pid_task+0x20/0x1e0 [ 726.616376][T18366] ? __sys_sendmsg+0x2a0/0x2a0 [ 726.621433][T18366] ? __lock_acquire+0x7d40/0x7d40 [ 726.626581][T18366] __se_sys_sendmsg+0x1c2/0x2b0 [ 726.631431][T18366] ? __x64_sys_sendmsg+0x80/0x80 [ 726.636462][T18366] ? lockdep_hardirqs_on+0x98/0x150 [ 726.641658][T18366] do_syscall_64+0x55/0xa0 [ 726.646072][T18366] ? clear_bhb_loop+0x40/0x90 [ 726.650760][T18366] ? clear_bhb_loop+0x40/0x90 [ 726.655456][T18366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 726.661373][T18366] RIP: 0033:0x7fb261b9c819 [ 726.665823][T18366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.685702][T18366] RSP: 002b:00007fb262ad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.694122][T18366] RAX: ffffffffffffffda RBX: 00007fb261e15fa0 RCX: 00007fb261b9c819 [ 726.702187][T18366] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 726.710267][T18366] RBP: 00007fb262ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 726.718317][T18366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.726298][T18366] R13: 00007fb261e16038 R14: 00007fb261e15fa0 R15: 00007fff9d3028d8 [ 726.734275][T18366] [ 726.865208][T18374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4204'. [ 731.429048][T18374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4204'. [ 731.538875][T18384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 731.707225][T18390] FAULT_INJECTION: forcing a failure. [ 731.707225][T18390] name failslab, interval 1, probability 0, space 0, times 0 [ 731.726356][T18390] CPU: 1 PID: 18390 Comm: syz.1.4209 Not tainted syzkaller #0 [ 731.733975][T18390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.744081][T18390] Call Trace: [ 731.747405][T18390] [ 731.750384][T18390] dump_stack_lvl+0x18c/0x250 [ 731.755316][T18390] ? show_regs_print_info+0x20/0x20 [ 731.760576][T18390] ? load_image+0x400/0x400 [ 731.765227][T18390] ? __might_sleep+0xe0/0xe0 [ 731.769875][T18390] ? __lock_acquire+0x7d40/0x7d40 [ 731.775048][T18390] should_fail_ex+0x39d/0x4d0 [ 731.779794][T18390] should_failslab+0x9/0x20 [ 731.784353][T18390] slab_pre_alloc_hook+0x59/0x310 [ 731.789441][T18390] ? __get_vm_area_node+0x125/0x370 [ 731.794704][T18390] __kmem_cache_alloc_node+0x53/0x250 [ 731.800129][T18390] ? __get_vm_area_node+0x125/0x370 [ 731.805355][T18390] kmalloc_node_trace+0x26/0xe0 [ 731.810398][T18390] __get_vm_area_node+0x125/0x370 [ 731.815454][T18390] __vmalloc_node_range+0x36e/0x1330 [ 731.820756][T18390] ? netlink_sendmsg+0x602/0xbf0 [ 731.825715][T18390] ? netlink_insert+0x109f/0x13a0 [ 731.830875][T18390] ? netlink_data_ready+0x10/0x10 [ 731.835937][T18390] ? free_vm_area+0x50/0x50 [ 731.840475][T18390] ? netlink_sendmsg+0x602/0xbf0 [ 731.845512][T18390] vmalloc+0x79/0x90 [ 731.849411][T18390] ? netlink_sendmsg+0x602/0xbf0 [ 731.854355][T18390] netlink_sendmsg+0x602/0xbf0 [ 731.859195][T18390] ? netlink_getsockopt+0x590/0x590 [ 731.864445][T18390] ? aa_sock_msg_perm+0x94/0x150 [ 731.869579][T18390] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 731.875061][T18390] ? security_socket_sendmsg+0x80/0xa0 [ 731.880533][T18390] sock_write_iter+0x2df/0x420 [ 731.885310][T18390] ? sock_read_iter+0x3e0/0x3e0 [ 731.890157][T18390] ? lockdep_hardirqs_on+0x98/0x150 [ 731.895404][T18390] vfs_write+0x46c/0x990 [ 731.899703][T18390] ? file_end_write+0x250/0x250 [ 731.904704][T18390] ? __fget_files+0x43d/0x4b0 [ 731.909411][T18390] ? __fdget_pos+0x1d8/0x330 [ 731.914004][T18390] ? ksys_write+0x75/0x260 [ 731.918556][T18390] ksys_write+0x150/0x260 [ 731.922909][T18390] ? __ia32_sys_read+0x90/0x90 [ 731.927735][T18390] ? lockdep_hardirqs_on+0x98/0x150 [ 731.933057][T18390] do_syscall_64+0x55/0xa0 [ 731.937525][T18390] ? clear_bhb_loop+0x40/0x90 [ 731.942244][T18390] ? clear_bhb_loop+0x40/0x90 [ 731.947136][T18390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.953336][T18390] RIP: 0033:0x7f7521d9c819 [ 731.958010][T18390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.978205][T18390] RSP: 002b:00007f7522b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 731.986724][T18390] RAX: ffffffffffffffda RBX: 00007f7522015fa0 RCX: 00007f7521d9c819 [ 731.994989][T18390] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 0000000000000010 [ 732.003059][T18390] RBP: 00007f7522b76090 R08: 0000000000000000 R09: 0000000000000000 [ 732.011312][T18390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.019300][T18390] R13: 00007f7522016038 R14: 00007f7522015fa0 R15: 00007ffd9e029d28 [ 732.027405][T18390] [ 732.043918][T18390] syz.1.4209: vmalloc error: size 65344, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 732.066956][T18390] CPU: 0 PID: 18390 Comm: syz.1.4209 Not tainted syzkaller #0 [ 732.074745][T18390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.084866][T18390] Call Trace: [ 732.088162][T18390] [ 732.091214][T18390] dump_stack_lvl+0x18c/0x250 [ 732.095999][T18390] ? show_regs_print_info+0x20/0x20 [ 732.101232][T18390] ? load_image+0x400/0x400 [ 732.105821][T18390] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 732.112252][T18390] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 732.118847][T18390] warn_alloc+0x246/0x340 [ 732.123181][T18390] ? __get_vm_area_node+0x125/0x370 [ 732.128395][T18390] ? zone_watermark_ok_safe+0x230/0x230 [ 732.133968][T18390] ? rcu_is_watching+0x15/0xb0 [ 732.138958][T18390] ? __get_vm_area_node+0x356/0x370 [ 732.144554][T18390] __vmalloc_node_range+0x393/0x1330 [ 732.149845][T18390] ? netlink_insert+0x109f/0x13a0 [ 732.154884][T18390] ? netlink_data_ready+0x10/0x10 [ 732.159907][T18390] ? free_vm_area+0x50/0x50 [ 732.164517][T18390] ? netlink_sendmsg+0x602/0xbf0 [ 732.169476][T18390] vmalloc+0x79/0x90 [ 732.174021][T18390] ? netlink_sendmsg+0x602/0xbf0 [ 732.179120][T18390] netlink_sendmsg+0x602/0xbf0 [ 732.183930][T18390] ? netlink_getsockopt+0x590/0x590 [ 732.189147][T18390] ? aa_sock_msg_perm+0x94/0x150 [ 732.194089][T18390] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 732.199401][T18390] ? security_socket_sendmsg+0x80/0xa0 [ 732.204899][T18390] sock_write_iter+0x2df/0x420 [ 732.209782][T18390] ? sock_read_iter+0x3e0/0x3e0 [ 732.214842][T18390] ? lockdep_hardirqs_on+0x98/0x150 [ 732.220501][T18390] vfs_write+0x46c/0x990 [ 732.224840][T18390] ? file_end_write+0x250/0x250 [ 732.229691][T18390] ? __fget_files+0x43d/0x4b0 [ 732.234397][T18390] ? __fdget_pos+0x1d8/0x330 [ 732.238982][T18390] ? ksys_write+0x75/0x260 [ 732.243398][T18390] ksys_write+0x150/0x260 [ 732.247823][T18390] ? __ia32_sys_read+0x90/0x90 [ 732.252604][T18390] ? lockdep_hardirqs_on+0x98/0x150 [ 732.258001][T18390] do_syscall_64+0x55/0xa0 [ 732.262529][T18390] ? clear_bhb_loop+0x40/0x90 [ 732.267325][T18390] ? clear_bhb_loop+0x40/0x90 [ 732.272008][T18390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.278339][T18390] RIP: 0033:0x7f7521d9c819 [ 732.282756][T18390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.302684][T18390] RSP: 002b:00007f7522b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 732.311445][T18390] RAX: ffffffffffffffda RBX: 00007f7522015fa0 RCX: 00007f7521d9c819 [ 732.319671][T18390] RDX: 000000000000fdef RSI: 0000200000000200 RDI: 0000000000000010 [ 732.327908][T18390] RBP: 00007f7522b76090 R08: 0000000000000000 R09: 0000000000000000 [ 732.335932][T18390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.344022][T18390] R13: 00007f7522016038 R14: 00007f7522015fa0 R15: 00007ffd9e029d28 [ 732.352061][T18390] [ 732.367559][T18390] Mem-Info: [ 732.375751][T18390] active_anon:11754 inactive_anon:0 isolated_anon:0 [ 732.375751][T18390] active_file:19700 inactive_file:40187 isolated_file:0 [ 732.375751][T18390] unevictable:768 dirty:318 writeback:0 [ 732.375751][T18390] slab_reclaimable:10788 slab_unreclaimable:94788 [ 732.375751][T18390] mapped:25204 shmem:1361 pagetables:542 [ 732.375751][T18390] sec_pagetables:0 bounce:0 [ 732.375751][T18390] kernel_misc_reclaimable:0 [ 732.375751][T18390] free:1343225 free_pcp:8039 free_cma:0 [ 732.453700][T18390] Node 0 active_anon:46816kB inactive_anon:0kB active_file:78800kB inactive_file:160544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100716kB dirty:1272kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9928kB pagetables:1968kB sec_pagetables:0kB all_unreclaimable? no [ 732.515339][T18390] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 732.552168][T18398] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4212'. [ 732.552229][T18398] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4212'. [ 732.572274][T18398] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4212'. [ 732.602185][T18395] netlink: 'syz.3.4210': attribute type 10 has an invalid length. [ 732.613436][T18395] team0: Device hsr_slave_0 failed to register rx_handler [ 732.622662][T18390] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.677669][T18390] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 732.732617][T18390] Node 0 DMA32 free:1453612kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:47080kB inactive_anon:0kB active_file:78800kB inactive_file:159720kB unevictable:1536kB writepending:1272kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:19128kB local_pcp:16728kB free_cma:0kB [ 732.829619][T18390] lowmem_reserve[]: 0 0 0 0 0 [ 732.834746][T18390] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 732.864885][T18390] lowmem_reserve[]: 0 0 0 0 0 [ 732.869664][T18390] Node 1 Normal free:3902904kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13760kB local_pcp:4160kB free_cma:0kB [ 732.909594][T18390] lowmem_reserve[]: 0 0 0 0 0 [ 732.914797][T18390] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 732.937627][T18390] Node 0 DMA32: 2395*4kB (UME) 590*8kB (UME) 256*16kB (UME) 1022*32kB (UME) 400*64kB (UME) 85*128kB (UME) 40*256kB (UME) 47*512kB (UM) 28*1024kB (UME) 18*2048kB (UME) 309*4096kB (UM) = 1453084kB [ 732.961137][T18390] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 732.974204][T18390] Node 1 Normal: 256*4kB (UME) 53*8kB (UME) 41*16kB (UME) 190*32kB (UME) 51*64kB (UE) 14*128kB (UME) 2*256kB (UE) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3902904kB [ 732.992624][T18390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 733.003007][T18390] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 733.013343][T18390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 733.023137][T18390] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 733.033006][T18390] 61248 total pagecache pages [ 733.037811][T18390] 0 pages in swap cache [ 733.042635][T18390] Free swap = 124996kB [ 733.048637][T18390] Total swap = 124996kB [ 733.056258][T18390] 2097051 pages RAM [ 733.062639][T18390] 0 pages HighMem/MovableOnly [ 733.067873][T18390] 416926 pages reserved [ 733.072433][T18390] 0 pages cma reserved [ 733.158604][T18419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4216'. [ 733.167901][T18419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4216'. [ 733.183542][T18419] FAULT_INJECTION: forcing a failure. [ 733.183542][T18419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 733.207424][T18419] CPU: 1 PID: 18419 Comm: syz.3.4216 Not tainted syzkaller #0 [ 733.215151][T18419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 733.225398][T18419] Call Trace: [ 733.228716][T18419] [ 733.231648][T18419] dump_stack_lvl+0x18c/0x250 [ 733.236330][T18419] ? show_regs_print_info+0x20/0x20 [ 733.241542][T18419] ? load_image+0x400/0x400 [ 733.246043][T18419] ? __lock_acquire+0x7d40/0x7d40 [ 733.251076][T18419] ? verify_lock_unused+0x140/0x140 [ 733.257247][T18419] should_fail_ex+0x39d/0x4d0 [ 733.262459][T18419] prepare_alloc_pages+0x1e2/0x5f0 [ 733.267837][T18419] __alloc_pages+0x134/0x460 [ 733.272539][T18419] ? zone_statistics+0x170/0x170 [ 733.277480][T18419] ? mt_find+0x169/0x650 [ 733.281748][T18419] ? handle_mm_fault+0xe7/0x4c00 [ 733.286713][T18419] __folio_alloc+0x10/0x20 [ 733.291147][T18419] vma_alloc_folio+0x47a/0x8f0 [ 733.295918][T18419] handle_mm_fault+0x1b3b/0x4c00 [ 733.300852][T18419] ? handle_mm_fault+0xe7/0x4c00 [ 733.305810][T18419] ? numa_migrate_prep+0x350/0x350 [ 733.311010][T18419] ? up_read+0x20/0x20 [ 733.315079][T18419] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 733.320360][T18419] do_user_addr_fault+0x730/0x12c0 [ 733.325484][T18419] exc_page_fault+0x64/0x100 [ 733.330164][T18419] asm_exc_page_fault+0x26/0x30 [ 733.335011][T18419] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 733.340819][T18419] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 733.360547][T18419] RSP: 0018:ffffc900055ff630 EFLAGS: 00050202 [ 733.366654][T18419] RAX: ffffffff8427bd01 RBX: 0000000000000a16 RCX: 0000000000000296 [ 733.374642][T18419] RDX: 0000000000000000 RSI: ffff88807cb3087e RDI: 0000200000002000 [ 733.382639][T18419] RBP: ffffc900055ff7c0 R08: ffff88807cb30b13 R09: 1ffff1100f966162 [ 733.390733][T18419] R10: dffffc0000000000 R11: ffffed100f966163 R12: 0000200000002296 [ 733.398732][T18419] R13: ffffc900055ffe40 R14: 0000200000001880 R15: ffff88807cb300fe [ 733.406747][T18419] ? _copy_to_iter+0x10a1/0x1120 [ 733.411805][T18419] copyout+0x70/0x90 [ 733.415761][T18419] _copy_to_iter+0x432/0x1120 [ 733.420462][T18419] ? iov_iter_init+0x1e0/0x1e0 [ 733.425229][T18419] ? __virt_addr_valid+0x18c/0x540 [ 733.430345][T18419] ? __virt_addr_valid+0x469/0x540 [ 733.435453][T18419] ? __phys_addr_symbol+0x2f/0x70 [ 733.440480][T18419] __skb_datagram_iter+0xdb/0x780 [ 733.445564][T18419] ? skb_copy_datagram_iter+0x200/0x200 [ 733.451117][T18419] skb_copy_datagram_iter+0xb1/0x200 [ 733.456442][T18419] netlink_recvmsg+0x2d4/0xe60 [ 733.461312][T18419] ? netlink_sendmsg+0xbf0/0xbf0 [ 733.466255][T18419] ? aa_af_perm+0x330/0x330 [ 733.470964][T18419] ? __lock_acquire+0x1273/0x7d40 [ 733.476449][T18419] ? verify_lock_unused+0x140/0x140 [ 733.481768][T18419] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 733.487055][T18419] ? security_socket_recvmsg+0x89/0xb0 [ 733.492628][T18419] ? netlink_sendmsg+0xbf0/0xbf0 [ 733.497581][T18419] ____sys_recvmsg+0x2ce/0x5e0 [ 733.502387][T18419] ? __sys_recvmsg_sock+0x50/0x50 [ 733.507612][T18419] ? import_iovec+0x73/0xa0 [ 733.512201][T18419] ___sys_recvmsg+0x216/0x590 [ 733.517050][T18419] ? __sys_recvmsg+0x2a0/0x2a0 [ 733.521991][T18419] ? ksys_write+0x1c4/0x260 [ 733.526504][T18419] ? __fget_files+0x43d/0x4b0 [ 733.531194][T18419] __x64_sys_recvmsg+0x20c/0x2e0 [ 733.536124][T18419] ? ___sys_recvmsg+0x590/0x590 [ 733.541085][T18419] ? lockdep_hardirqs_on+0x98/0x150 [ 733.546387][T18419] do_syscall_64+0x55/0xa0 [ 733.550917][T18419] ? clear_bhb_loop+0x40/0x90 [ 733.555617][T18419] ? clear_bhb_loop+0x40/0x90 [ 733.560298][T18419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.566288][T18419] RIP: 0033:0x7fbfaf99c819 [ 733.570743][T18419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.590539][T18419] RSP: 002b:00007fbfb0778028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 733.598983][T18419] RAX: ffffffffffffffda RBX: 00007fbfafc15fa0 RCX: 00007fbfaf99c819 [ 733.607062][T18419] RDX: 0000000000000100 RSI: 0000200000000040 RDI: 0000000000000003 [ 733.615122][T18419] RBP: 00007fbfb0778090 R08: 0000000000000000 R09: 0000000000000000 [ 733.623096][T18419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.631068][T18419] R13: 00007fbfafc16038 R14: 00007fbfafc15fa0 R15: 00007ffd81914f18 [ 733.639244][T18419] [ 733.655683][T18419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4216'. [ 733.736201][T18423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.155658][T18432] FAULT_INJECTION: forcing a failure. [ 734.155658][T18432] name failslab, interval 1, probability 0, space 0, times 0 [ 734.169945][T18432] CPU: 1 PID: 18432 Comm: syz.1.4223 Not tainted syzkaller #0 [ 734.177463][T18432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.187904][T18432] Call Trace: [ 734.191223][T18432] [ 734.194189][T18432] dump_stack_lvl+0x18c/0x250 [ 734.198942][T18432] ? show_regs_print_info+0x20/0x20 [ 734.204297][T18432] ? load_image+0x400/0x400 [ 734.208855][T18432] ? __might_sleep+0xe0/0xe0 [ 734.213575][T18432] ? __lock_acquire+0x7d40/0x7d40 [ 734.218661][T18432] should_fail_ex+0x39d/0x4d0 [ 734.223502][T18432] should_failslab+0x9/0x20 [ 734.228232][T18432] slab_pre_alloc_hook+0x59/0x310 [ 734.233496][T18432] ? lockdep_softirqs_off+0x430/0x430 [ 734.239747][T18432] kmem_cache_alloc+0x5a/0x2d0 [ 734.244815][T18432] ? security_inode_alloc+0x34/0x110 [ 734.250334][T18432] security_inode_alloc+0x34/0x110 [ 734.255588][T18432] inode_init_always+0x8fc/0xc90 [ 734.260909][T18432] ? __asan_memset+0x22/0x40 [ 734.265561][T18432] new_inode_pseudo+0x95/0x1d0 [ 734.270556][T18432] new_inode+0x22/0x1b0 [ 734.275043][T18432] proc_pid_make_inode+0x24/0x190 [ 734.280751][T18432] proc_pident_instantiate+0x6d/0x2b0 [ 734.286359][T18432] proc_pident_lookup+0x1b3/0x290 [ 734.291977][T18432] __lookup_slow+0x2a1/0x400 [ 734.296634][T18432] ? lookup_one_len+0x2e0/0x2e0 [ 734.301541][T18432] ? try_to_unlazy+0x34c/0x5a0 [ 734.306340][T18432] ? down_read+0x1ac/0x2e0 [ 734.310992][T18432] lookup_slow+0x53/0x70 [ 734.315370][T18432] link_path_walk+0x990/0xe30 [ 734.320121][T18432] ? handle_lookup_down+0x130/0x130 [ 734.325531][T18432] path_openat+0x293/0x3230 [ 734.330190][T18432] ? do_filp_open+0x430/0x430 [ 734.334885][T18432] ? perf_trace_lock+0x304/0x3b0 [ 734.339870][T18432] ? trace_event_raw_event_lock+0x250/0x250 [ 734.345897][T18432] do_filp_open+0x1f5/0x430 [ 734.350413][T18432] ? alloc_fd+0x58f/0x630 [ 734.354777][T18432] ? vfs_tmpfile+0x490/0x490 [ 734.359402][T18432] ? noop_direct_IO+0x20/0x20 [ 734.364122][T18432] ? _raw_spin_unlock+0x28/0x40 [ 734.368994][T18432] ? alloc_fd+0x58f/0x630 [ 734.373368][T18432] do_sys_openat2+0x134/0x1d0 [ 734.378077][T18432] ? atomic_notifier_call_chain+0x16e/0x180 [ 734.384434][T18432] ? do_sys_open+0xe0/0xe0 [ 734.388887][T18432] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 734.394912][T18432] ? lock_chain_count+0x20/0x20 [ 734.400008][T18432] __x64_sys_openat+0x139/0x160 [ 734.404991][T18432] do_syscall_64+0x55/0xa0 [ 734.409434][T18432] ? clear_bhb_loop+0x40/0x90 [ 734.414142][T18432] ? clear_bhb_loop+0x40/0x90 [ 734.418867][T18432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.424791][T18432] RIP: 0033:0x7f7521d5d04e [ 734.429223][T18432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 734.448962][T18432] RSP: 002b:00007f7522b75ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 734.457864][T18432] RAX: ffffffffffffffda RBX: 00007f7522b766c0 RCX: 00007f7521d5d04e [ 734.466142][T18432] RDX: 0000000000000002 RSI: 00007f7522b75f90 RDI: ffffffffffffff9c [ 734.474308][T18432] RBP: 00007f7522b76090 R08: 0000000000000000 R09: 0000000000000000 [ 734.482385][T18432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.490383][T18432] R13: 00007f7522016038 R14: 00007f7522015fa0 R15: 00007ffd9e029d28 [ 734.498491][T18432] [ 734.628047][T18439] netlink: 'syz.0.4226': attribute type 10 has an invalid length. [ 734.918808][T18446] netlink: 'syz.1.4229': attribute type 10 has an invalid length. [ 735.245866][T18458] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4232'. [ 736.248948][T18467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.427546][T18471] netlink: 'syz.2.4237': attribute type 10 has an invalid length. [ 736.664882][T18482] netlink: 'syz.3.4240': attribute type 2 has an invalid length. [ 736.687087][T18482] netlink: 'syz.3.4240': attribute type 8 has an invalid length. [ 736.705510][T18482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4240'. [ 736.871093][T18488] netlink: 'syz.1.4243': attribute type 10 has an invalid length. [ 736.910387][T18488] team0: Device hsr_slave_0 failed to register rx_handler [ 737.032405][T18492] netlink: 'syz.2.4244': attribute type 2 has an invalid length. [ 737.043249][T18492] netlink: 'syz.2.4244': attribute type 8 has an invalid length. [ 737.063874][T18492] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4244'. [ 737.078360][T18492] FAULT_INJECTION: forcing a failure. [ 737.078360][T18492] name failslab, interval 1, probability 0, space 0, times 0 [ 737.125761][T18492] CPU: 1 PID: 18492 Comm: syz.2.4244 Not tainted syzkaller #0 [ 737.133489][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 737.143685][T18492] Call Trace: [ 737.147081][T18492] [ 737.150053][T18492] dump_stack_lvl+0x18c/0x250 [ 737.154869][T18492] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 737.160591][T18492] ? show_regs_print_info+0x20/0x20 [ 737.165854][T18492] ? load_image+0x400/0x400 [ 737.170406][T18492] should_fail_ex+0x39d/0x4d0 [ 737.175114][T18492] should_failslab+0x9/0x20 [ 737.179628][T18492] slab_pre_alloc_hook+0x59/0x310 [ 737.184772][T18492] kmem_cache_alloc_node+0x60/0x320 [ 737.189987][T18492] ? __alloc_skb+0x103/0x2c0 [ 737.194620][T18492] __alloc_skb+0x103/0x2c0 [ 737.199054][T18492] rtmsg_ifa+0xf9/0x1f0 [ 737.203364][T18492] __inet_insert_ifa+0x9a8/0xbd0 [ 737.208521][T18492] ? inet_rcu_free_ifa+0xc0/0xc0 [ 737.213550][T18492] inet_rtm_newaddr+0xc1d/0x1ae0 [ 737.218620][T18492] ? inet_netconf_fill_devconf+0x8f0/0x8f0 [ 737.224651][T18492] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 737.229778][T18492] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 737.234894][T18492] ? inet_netconf_fill_devconf+0x8f0/0x8f0 [ 737.240809][T18492] rtnetlink_rcv_msg+0x869/0xfa0 [ 737.245780][T18492] ? rtnetlink_bind+0x80/0x80 [ 737.250483][T18492] ? trace_call_bpf+0xc3/0x6c0 [ 737.255411][T18492] ? trace_call_bpf+0xc3/0x6c0 [ 737.260222][T18492] ? __lock_acquire+0x7d40/0x7d40 [ 737.265266][T18492] ? __local_bh_enable_ip+0x13a/0x1c0 [ 737.270793][T18492] ? trace_call_bpf+0xc3/0x6c0 [ 737.275677][T18492] ? trace_call_bpf+0xc3/0x6c0 [ 737.280569][T18492] ? trace_call_bpf+0x5e9/0x6c0 [ 737.285441][T18492] ? __dev_queue_xmit+0x265/0x3660 [ 737.290561][T18492] ? trace_call_bpf+0xc3/0x6c0 [ 737.295352][T18492] ? __dev_queue_xmit+0x1b2c/0x3660 [ 737.300589][T18492] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 737.306893][T18492] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 737.312727][T18492] ? perf_trace_lock+0x304/0x3b0 [ 737.317777][T18492] netlink_rcv_skb+0x241/0x4d0 [ 737.322746][T18492] ? rtnetlink_bind+0x80/0x80 [ 737.327471][T18492] ? netlink_ack+0x1180/0x1180 [ 737.332301][T18492] ? __lock_acquire+0x7d40/0x7d40 [ 737.337370][T18492] ? netlink_deliver_tap+0x2e/0x1b0 [ 737.342604][T18492] netlink_unicast+0x751/0x8d0 [ 737.347528][T18492] netlink_sendmsg+0x8d0/0xbf0 [ 737.352395][T18492] ? perf_trace_lock+0x304/0x3b0 [ 737.357452][T18492] ? netlink_getsockopt+0x590/0x590 [ 737.362960][T18492] ? aa_sock_msg_perm+0x94/0x150 [ 737.368109][T18492] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 737.373408][T18492] ? security_socket_sendmsg+0x80/0xa0 [ 737.378882][T18492] ? netlink_getsockopt+0x590/0x590 [ 737.384103][T18492] ____sys_sendmsg+0x5ba/0x960 [ 737.388896][T18492] ? __asan_memset+0x22/0x40 [ 737.393521][T18492] ? __sys_sendmsg_sock+0x30/0x30 [ 737.398587][T18492] ? __import_iovec+0x5f2/0x850 [ 737.403512][T18492] ? import_iovec+0x73/0xa0 [ 737.408036][T18492] ___sys_sendmsg+0x2a6/0x360 [ 737.412825][T18492] ? __sys_sendmsg+0x2a0/0x2a0 [ 737.417639][T18492] ? __lock_acquire+0x7d40/0x7d40 [ 737.422752][T18492] __se_sys_sendmsg+0x1c2/0x2b0 [ 737.427629][T18492] ? __x64_sys_sendmsg+0x80/0x80 [ 737.432623][T18492] ? lockdep_hardirqs_on+0x98/0x150 [ 737.437843][T18492] do_syscall_64+0x55/0xa0 [ 737.442271][T18492] ? clear_bhb_loop+0x40/0x90 [ 737.446957][T18492] ? clear_bhb_loop+0x40/0x90 [ 737.451656][T18492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.457652][T18492] RIP: 0033:0x7f1f8459c819 [ 737.462091][T18492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.481810][T18492] RSP: 002b:00007f1f854a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.490288][T18492] RAX: ffffffffffffffda RBX: 00007f1f84815fa0 RCX: 00007f1f8459c819 [ 737.498453][T18492] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 737.506546][T18492] RBP: 00007f1f854a9090 R08: 0000000000000000 R09: 0000000000000000 [ 737.514525][T18492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.522604][T18492] R13: 00007f1f84816038 R14: 00007f1f84815fa0 R15: 00007ffccd54a568 [ 737.530629][T18492] [ 737.730561][T18498] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4246'. [ 738.820881][T18521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.910782][T18533] netlink: 'syz.3.4257': attribute type 10 has an invalid length. [ 741.920049][T18533] team0: Device hsr_slave_0 failed to register rx_handler [ 742.068951][T18538] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4259'. [ 742.305758][T18546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.459008][T18554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.239175][T18571] netlink: 'syz.3.4272': attribute type 29 has an invalid length. [ 743.249274][T18571] netlink: 'syz.3.4272': attribute type 29 has an invalid length. [ 743.263753][T18571] netlink: 'syz.3.4272': attribute type 29 has an invalid length. [ 743.272275][T18572] netlink: 'syz.3.4272': attribute type 29 has an invalid length. [ 743.321630][T18571] netlink: 'syz.3.4272': attribute type 4 has an invalid length. [ 743.329497][T18571] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4272'. [ 743.959534][T18576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.987546][T18580] netlink: 'syz.2.4273': attribute type 10 has an invalid length. [ 744.303074][T18587] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4276'. [ 744.312293][T18587] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4276'. [ 744.326615][T18587] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4276'. [ 744.337929][T18587] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4276'. [ 744.440403][T18589] FAULT_INJECTION: forcing a failure. [ 744.440403][T18589] name failslab, interval 1, probability 0, space 0, times 0 [ 744.453221][T18589] CPU: 1 PID: 18589 Comm: syz.1.4277 Not tainted syzkaller #0 [ 744.460714][T18589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.470796][T18589] Call Trace: [ 744.474090][T18589] [ 744.477054][T18589] dump_stack_lvl+0x18c/0x250 [ 744.481815][T18589] ? show_regs_print_info+0x20/0x20 [ 744.487064][T18589] ? load_image+0x400/0x400 [ 744.491602][T18589] ? netdev_core_pick_tx+0x340/0x340 [ 744.496937][T18589] should_fail_ex+0x39d/0x4d0 [ 744.501659][T18589] should_failslab+0x9/0x20 [ 744.506195][T18589] slab_pre_alloc_hook+0x59/0x310 [ 744.511288][T18589] kmem_cache_alloc+0x5a/0x2d0 [ 744.516066][T18589] ? skb_clone+0x1eb/0x370 [ 744.520502][T18589] skb_clone+0x1eb/0x370 [ 744.524807][T18589] bpf_clone_redirect+0x167/0x4a0 [ 744.529889][T18589] bpf_prog_c9d58f5b8698340d+0x5e/0x63 [ 744.535380][T18589] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 744.541419][T18589] ? perf_trace_preemptirq_template+0xac/0x330 [ 744.547813][T18589] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 744.553816][T18589] ? lockdep_softirqs_on+0x580/0x580 [ 744.559220][T18589] ? lock_chain_count+0x20/0x20 [ 744.564100][T18589] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 744.570620][T18589] ? __local_bh_disable_ip+0x108/0x1a0 [ 744.576113][T18589] ? __cant_sleep+0x220/0x220 [ 744.580824][T18589] ? __local_bh_enable_ip+0x13a/0x1c0 [ 744.586231][T18589] ? _local_bh_enable+0xa0/0xa0 [ 744.591142][T18589] ? bpf_test_timer_continue+0x135/0x380 [ 744.596915][T18589] ? bpf_test_run+0x174/0x870 [ 744.601650][T18589] bpf_test_run+0x2df/0x870 [ 744.606324][T18589] ? bpf_test_run+0x174/0x870 [ 744.611083][T18589] ? convert___skb_to_skb+0x590/0x590 [ 744.616601][T18589] ? eth_get_headlen+0x210/0x210 [ 744.621603][T18589] ? slab_build_skb+0x25f/0x3f0 [ 744.626478][T18589] ? convert___skb_to_skb+0x3d/0x590 [ 744.631801][T18589] bpf_prog_test_run_skb+0xad2/0x12b0 [ 744.637252][T18589] ? cpu_online+0x60/0x60 [ 744.641605][T18589] bpf_prog_test_run+0x321/0x390 [ 744.646667][T18589] __sys_bpf+0x49d/0x890 [ 744.651019][T18589] ? bpf_link_show_fdinfo+0x390/0x390 [ 744.656671][T18589] ? lock_chain_count+0x20/0x20 [ 744.661907][T18589] __x64_sys_bpf+0x7c/0x90 [ 744.666500][T18589] do_syscall_64+0x55/0xa0 [ 744.670947][T18589] ? clear_bhb_loop+0x40/0x90 [ 744.675749][T18589] ? clear_bhb_loop+0x40/0x90 [ 744.680464][T18589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 744.686461][T18589] RIP: 0033:0x7f7521d9c819 [ 744.690890][T18589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.710740][T18589] RSP: 002b:00007f7522b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 744.719404][T18589] RAX: ffffffffffffffda RBX: 00007f7522015fa0 RCX: 00007f7521d9c819 [ 744.727433][T18589] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 744.735420][T18589] RBP: 00007f7522b76090 R08: 0000000000000000 R09: 0000000000000000 [ 744.743435][T18589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 744.751538][T18589] R13: 00007f7522016038 R14: 00007f7522015fa0 R15: 00007ffd9e029d28 [ 744.759626][T18589] [ 745.245485][T18604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.462316][T10842] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 745.883390][T18608] FAULT_INJECTION: forcing a failure. [ 745.883390][T18608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.897827][T18608] CPU: 0 PID: 18608 Comm: syz.2.4283 Not tainted syzkaller #0 [ 745.905334][T18608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.915416][T18608] Call Trace: [ 745.918755][T18608] [ 745.921726][T18608] dump_stack_lvl+0x18c/0x250 [ 745.926538][T18608] ? show_regs_print_info+0x20/0x20 [ 745.931795][T18608] ? load_image+0x400/0x400 [ 745.936422][T18608] ? __might_fault+0xaa/0x120 [ 745.941210][T18608] ? __lock_acquire+0x7d40/0x7d40 [ 745.946278][T18608] should_fail_ex+0x39d/0x4d0 [ 745.951001][T18608] _copy_to_user+0x2f/0xa0 [ 745.955454][T18608] bpf_test_finish+0x19f/0x650 [ 745.960508][T18608] ? convert___skb_to_skb+0x590/0x590 [ 745.965883][T18608] ? convert_skb_to___skb+0x420/0x420 [ 745.971337][T18608] ? slab_build_skb+0x25f/0x3f0 [ 745.976228][T18608] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 745.981606][T18608] ? cpu_online+0x60/0x60 [ 745.985936][T18608] bpf_prog_test_run+0x321/0x390 [ 745.990869][T18608] __sys_bpf+0x49d/0x890 [ 745.995107][T18608] ? bpf_link_show_fdinfo+0x390/0x390 [ 746.000473][T18608] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.006716][T18608] __x64_sys_bpf+0x7c/0x90 [ 746.011123][T18608] do_syscall_64+0x55/0xa0 [ 746.015534][T18608] ? clear_bhb_loop+0x40/0x90 [ 746.020245][T18608] ? clear_bhb_loop+0x40/0x90 [ 746.024929][T18608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.030906][T18608] RIP: 0033:0x7f1f8459c819 [ 746.035314][T18608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.055016][T18608] RSP: 002b:00007f1f854a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 746.063440][T18608] RAX: ffffffffffffffda RBX: 00007f1f84815fa0 RCX: 00007f1f8459c819 [ 746.071422][T18608] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 000000000000000a [ 746.079481][T18608] RBP: 00007f1f854a9090 R08: 0000000000000000 R09: 0000000000000000 [ 746.087470][T18608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.095789][T18608] R13: 00007f1f84816038 R14: 00007f1f84815fa0 R15: 00007ffccd54a568 [ 746.104201][T18608] [ 746.246172][T18619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 746.281922][T18623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4289'. [ 746.295559][T18623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4289'. [ 746.314766][T18623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4289'. [ 746.334381][T18623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4289'. [ 746.371963][T18625] netlink: 'syz.1.4290': attribute type 10 has an invalid length. [ 746.406377][T18625] team0: Device hsr_slave_0 failed to register rx_handler [ 747.288620][T18637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.545598][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.552056][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.148764][T18647] syz.1.4298[18647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 748.148880][T18647] syz.1.4298[18647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 748.160663][T18645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.189356][T18647] syz.1.4298[18647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 748.189470][T18647] syz.1.4298[18647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 748.205361][T18650] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4300'. [ 748.496422][T18659] __nla_validate_parse: 3 callbacks suppressed [ 748.496461][T18659] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.4304'. [ 748.623498][T18665] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4307'. [ 748.632862][T18667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.653229][T18665] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4307'. [ 748.819907][T18665] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4307'. [ 748.873247][T18670] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4307'. [ 749.078204][T18672] syz.3.4309[18672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 749.078363][T18672] syz.3.4309[18672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 749.114817][T18669] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.281193][T18679] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.4312'. [ 749.517007][T18693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4318'. [ 749.520569][T18692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.548129][T18693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4318'. [ 749.569362][T18693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4318'. [ 749.588779][T18693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4318'. [ 749.931576][T18699] bridge_slave_0: left allmulticast mode [ 749.994189][T18703] syz.2.4321[18703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 749.996512][T18703] syz.2.4321[18703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 750.467239][T18722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.513086][T18724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.027664][T18734] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.049911][T18735] syz.0.4334[18735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 751.050068][T18735] syz.0.4334[18735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 751.271267][T18741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.471646][T18745] netlink: 'syz.3.4339': attribute type 9 has an invalid length. [ 751.531513][T18750] netlink: 'syz.3.4339': attribute type 9 has an invalid length. [ 751.887736][T18767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.908507][T18769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.279661][T18792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.373685][T18791] netlink: 'syz.2.4355': attribute type 9 has an invalid length. [ 753.551367][T18794] netlink: 'syz.2.4355': attribute type 9 has an invalid length. [ 753.565831][T18794] __nla_validate_parse: 11 callbacks suppressed [ 753.565846][T18794] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4355'. [ 754.005411][T18799] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4357'. [ 754.516772][T18806] netpci0: tun_chr_ioctl cmd 2147767517 [ 754.566191][T18808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.605461][T18806] netpci0: tun_chr_ioctl cmd 1074025677 [ 754.611238][T18806] netpci0: linktype set to 769 [ 755.073185][T18813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 755.603355][T18824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.174912][T18830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.520642][T18833] netlink: 'syz.0.4369': attribute type 9 has an invalid length. [ 756.528844][T18833] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4369'. [ 756.720761][T18834] netlink: 'syz.0.4369': attribute type 9 has an invalid length. [ 756.754725][T18834] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4369'. [ 756.771879][T18839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.803485][T18838] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4371'. [ 756.818961][T10847] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 757.593279][T18847] netpci0: tun_chr_ioctl cmd 2147767517 [ 757.642966][T18847] netpci0: tun_chr_ioctl cmd 1074025677 [ 757.658213][T18847] netpci0: linktype set to 769 [ 758.134070][T18858] netlink: 'syz.2.4379': attribute type 10 has an invalid length. [ 758.173515][T18858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4379'. [ 758.193783][T18858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.217840][T18860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 758.488631][T18867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 758.512114][T18863] netlink: 'syz.3.4390': attribute type 10 has an invalid length. [ 758.523943][T18863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4390'. [ 758.549910][T18863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.586958][T18869] netpci0: tun_chr_ioctl cmd 2147767517 [ 758.615069][T18866] netpci0: tun_chr_ioctl cmd 1074025677 [ 758.623100][T18866] netpci0: linktype set to 769 [ 758.956896][T18872] netlink: 'syz.3.4383': attribute type 9 has an invalid length. [ 758.965254][T18872] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4383'. [ 759.002184][T18873] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4382'. [ 759.025189][T18872] netlink: 'syz.3.4383': attribute type 9 has an invalid length. [ 759.033476][T18872] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4383'. [ 759.423106][T18883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 759.825979][T18892] netpci0: tun_chr_ioctl cmd 1074025677 [ 759.832674][T18892] netpci0: linktype set to 769 [ 759.937973][T18894] netlink: 'syz.2.4394': attribute type 11 has an invalid length. [ 759.949835][T18894] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4394'. [ 759.995231][T18896] netlink: 'syz.1.4393': attribute type 10 has an invalid length. [ 760.003517][T18896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4393'. [ 760.018775][T18896] net_ratelimit: 1 callbacks suppressed [ 760.018794][T18896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 760.339530][T18904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.379282][T18901] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4398'. [ 760.537209][T18906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.034950][T18916] netlink: 'syz.3.4401': attribute type 21 has an invalid length. [ 761.057184][T18916] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4401'. [ 761.351852][T18921] netlink: 'syz.0.4404': attribute type 11 has an invalid length. [ 761.359891][T18921] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4404'. [ 761.518836][T18926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.552135][T18930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.588405][T18929] netlink: 'syz.3.4417': attribute type 11 has an invalid length. [ 761.617003][T18929] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4417'. [ 762.462274][T18939] netlink: 'syz.0.4408': attribute type 10 has an invalid length. [ 762.474170][T18939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4408'. [ 762.485020][T18939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 762.520036][T18941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.161292][T18957] netlink: 'syz.0.4418': attribute type 10 has an invalid length. [ 763.314915][T18959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.671452][T18968] netlink: 'syz.2.4424': attribute type 11 has an invalid length. [ 764.071446][T18978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 764.324875][T18984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 765.057332][ T5085] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 765.058359][ T5085] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 765.109484][T18998] netlink: 'syz.0.4436': attribute type 11 has an invalid length. [ 765.117942][T18998] __nla_validate_parse: 2 callbacks suppressed [ 765.117955][T18998] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4436'. [ 765.233126][T19002] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4438'. [ 765.285211][T19004] netlink: 'syz.1.4439': attribute type 9 has an invalid length. [ 765.297147][T19004] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4439'. [ 765.297621][T19002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.325992][T19002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.351036][T19002] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 765.382832][T19002] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 765.396913][T19002] bond0 (unregistering): Released all slaves [ 765.440452][T19011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 765.571790][T19008] netlink: 'syz.1.4439': attribute type 9 has an invalid length. [ 765.624256][T19008] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4439'. [ 766.704024][T19026] netlink: 'syz.3.4444': attribute type 9 has an invalid length. [ 766.712147][T19026] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4444'. [ 766.885365][T19028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.914706][T19030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.341560][ T5085] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 767.342678][ T5085] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 767.452850][T19042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.698076][T19051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.768400][T19053] netlink: 'syz.0.4452': attribute type 11 has an invalid length. [ 767.776790][T19053] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4452'. [ 767.903478][T19056] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4453'. [ 767.958326][T19056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.980557][T19056] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 767.998761][T19056] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 768.011497][T19056] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 768.021398][T19056] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 768.041814][T19056] bridge0: port 3(hsr0) entered disabled state [ 768.048526][T19056] bridge0: port 2(¹) entered disabled state [ 768.064780][T19056] bond0 (unregistering): Released all slaves [ 768.087419][T19058] netlink: 'syz.0.4456': attribute type 9 has an invalid length. [ 768.095720][T19058] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4456'. [ 768.499690][ T5085] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 768.501203][ T5085] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 768.525218][T19064] netlink: 'syz.3.4458': attribute type 4 has an invalid length. [ 768.556675][T19064] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4458'. [ 768.772894][T19080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.062836][ T5085] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 769.072807][ T5085] Bluetooth: hci4: Injecting HCI hardware error event [ 769.081518][T13180] Bluetooth: hci4: hardware error 0x00 [ 769.705571][T19091] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4468'. [ 769.782288][T19091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.806830][T19091] bond_slave_0: left promiscuous mode [ 769.824792][T19091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.836345][T19091] bond_slave_1: left promiscuous mode [ 769.850474][T19091] bond0 (unregistering): Released all slaves [ 769.869532][T19093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.914916][T19095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.295966][T19103] netlink: 'syz.1.4469': attribute type 9 has an invalid length. [ 770.310318][T19103] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4469'. [ 770.688160][T19115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.145206][T13180] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 771.383589][T13180] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 771.393765][T13180] Bluetooth: hci3: Injecting HCI hardware error event [ 771.402629][T13180] Bluetooth: hci3: hardware error 0x00 [ 771.687717][T19129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.503019][ T5085] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 772.511811][ T5085] Bluetooth: hci1: Injecting HCI hardware error event [ 772.520803][ T5085] Bluetooth: hci1: hardware error 0x00 [ 772.566679][T19136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.634712][T19142] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4483'. [ 772.778014][T19142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.799777][T19142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.818083][T19142] bond0 (unregistering): Released all slaves [ 772.844116][T19140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 773.451412][T19155] netlink: 'syz.0.4496': attribute type 29 has an invalid length. [ 773.460286][T19155] netlink: 'syz.0.4496': attribute type 29 has an invalid length. [ 773.486443][T19156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 773.503667][T19155] netlink: 'syz.0.4496': attribute type 29 has an invalid length. [ 773.577364][T19155] netlink: 'syz.0.4496': attribute type 29 has an invalid length. [ 773.622627][T13180] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 773.682909][T19161] netlink: 'syz.0.4496': attribute type 29 has an invalid length. [ 773.793021][T19155] netlink: 'syz.0.4496': attribute type 29 has an invalid length. [ 773.864707][T19153] netlink: 'syz.2.4487': attribute type 9 has an invalid length. [ 773.874226][T19153] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4487'. [ 774.297494][T19170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 774.582875][ T5085] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 774.937481][T19180] pimreg0: tun_chr_ioctl cmd 1074025681 [ 774.956441][T19182] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4498'. [ 775.314682][T19189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 775.324848][T19188] netlink: 'syz.2.4501': attribute type 29 has an invalid length. [ 775.341352][T19190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 775.363257][T19188] netlink: 'syz.2.4501': attribute type 29 has an invalid length. [ 775.383177][T19191] netlink: 'syz.2.4501': attribute type 29 has an invalid length. [ 775.641787][T19195] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4502'. [ 775.760842][T19197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 775.849493][T19199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 776.678169][T10851] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 776.995155][T19214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.081537][T19219] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4512'. [ 777.119240][T19221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.290192][T19226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.534575][T19229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.695775][T19231] pimreg0: tun_chr_ioctl cmd 1074025681 [ 778.153202][T19244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 778.193824][T19242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 778.594727][T19252] validate_nla: 11 callbacks suppressed [ 778.594755][T19252] netlink: 'syz.3.4522': attribute type 11 has an invalid length. [ 778.613718][T19252] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4522'. [ 778.648246][T19254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 778.714352][T19256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.504550][T19269] pimreg0: tun_chr_ioctl cmd 1074025681 [ 779.838394][T19278] netlink: 'syz.0.4532': attribute type 11 has an invalid length. [ 779.846524][T19278] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4532'. [ 780.991944][T19298] net_ratelimit: 5 callbacks suppressed [ 780.991961][T19298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.049792][T19294] pimreg0: tun_chr_ioctl cmd 1074025681 [ 781.118766][T19299] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4540'. [ 781.861817][T19302] netlink: 'syz.1.4542': attribute type 11 has an invalid length. [ 781.883666][T19302] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4542'. [ 781.949905][T19305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.818795][T19313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.858729][T19317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.886018][T19319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.917779][T19318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 783.691847][T19325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 783.843701][T19331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 783.921656][T19332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 783.994993][T19329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 784.552406][T19337] netlink: 'syz.3.4554': attribute type 11 has an invalid length. [ 784.562016][T19337] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4554'. [ 785.673442][T19356] FAULT_INJECTION: forcing a failure. [ 785.673442][T19356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.718006][T19356] CPU: 0 PID: 19356 Comm: syz.0.4563 Not tainted syzkaller #0 [ 785.725524][T19356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 785.735602][T19356] Call Trace: [ 785.738927][T19356] [ 785.741865][T19356] dump_stack_lvl+0x18c/0x250 [ 785.746582][T19356] ? show_regs_print_info+0x20/0x20 [ 785.751901][T19356] ? load_image+0x400/0x400 [ 785.756502][T19356] ? __might_fault+0xaa/0x120 [ 785.761178][T19356] ? __lock_acquire+0x7d40/0x7d40 [ 785.766203][T19356] should_fail_ex+0x39d/0x4d0 [ 785.770893][T19356] _copy_to_user+0x2f/0xa0 [ 785.775327][T19356] bpf_test_finish+0x25a/0x650 [ 785.780157][T19356] ? convert___skb_to_skb+0x590/0x590 [ 785.785536][T19356] ? convert_skb_to___skb+0x420/0x420 [ 785.791013][T19356] ? slab_build_skb+0x25f/0x3f0 [ 785.795976][T19356] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 785.801383][T19356] ? cpu_online+0x60/0x60 [ 785.805733][T19356] bpf_prog_test_run+0x321/0x390 [ 785.810713][T19356] __sys_bpf+0x49d/0x890 [ 785.814990][T19356] ? bpf_link_show_fdinfo+0x390/0x390 [ 785.820415][T19356] ? lock_chain_count+0x20/0x20 [ 785.825297][T19356] __x64_sys_bpf+0x7c/0x90 [ 785.829715][T19356] do_syscall_64+0x55/0xa0 [ 785.834146][T19356] ? clear_bhb_loop+0x40/0x90 [ 785.838816][T19356] ? clear_bhb_loop+0x40/0x90 [ 785.843492][T19356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.849378][T19356] RIP: 0033:0x7fb261b9c819 [ 785.853781][T19356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.873745][T19356] RSP: 002b:00007fb262ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 785.882241][T19356] RAX: ffffffffffffffda RBX: 00007fb261e15fa0 RCX: 00007fb261b9c819 [ 785.890205][T19356] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 000000000000000a [ 785.898212][T19356] RBP: 00007fb262ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 785.906191][T19356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.914167][T19356] R13: 00007fb261e16038 R14: 00007fb261e15fa0 R15: 00007fff9d3028d8 [ 785.922144][T19356] [ 786.001184][T19361] netlink: 'syz.3.4565': attribute type 11 has an invalid length. [ 786.009324][T19361] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4565'. [ 786.028558][T19362] net_ratelimit: 3 callbacks suppressed [ 786.028574][T19362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 786.059270][T19364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 786.191380][T19367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.071519][T19377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.095705][T19381] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4571'. [ 787.106312][T19381] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.4571'. [ 787.152293][T19382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.837227][T10839] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 788.066307][T19395] netlink: 'syz.2.4575': attribute type 11 has an invalid length. [ 788.093546][T19395] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4575'. [ 788.129720][T19399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 788.149729][T19400] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4574'. [ 788.275308][T19404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 789.246928][T19411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 790.175993][T19417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 790.205794][T19422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 791.104713][T19434] netlink: 'syz.0.4586': attribute type 11 has an invalid length. [ 791.114182][T19434] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4586'. [ 791.160958][T19436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 791.168886][T19436] IPv6: NLM_F_CREATE should be set when creating new route [ 791.177177][T19436] IPv6: NLM_F_CREATE should be set when creating new route [ 791.185019][T19436] IPv6: NLM_F_CREATE should be set when creating new route [ 791.265370][T19439] net_ratelimit: 2 callbacks suppressed [ 791.265387][T19439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 791.827045][T19450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.125493][T19455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.209505][T19459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.705547][T19463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.034513][T19468] netlink: 'syz.1.4599': attribute type 11 has an invalid length. [ 793.053711][T19468] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4599'. [ 793.180924][T19474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.367065][T19477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.491197][T19479] netlink: 'syz.0.4612': attribute type 10 has an invalid length. [ 793.593012][T10851] tipc: Subscription rejected, illegal request [ 793.664961][T19484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.095970][T19493] netlink: 'syz.2.4610': attribute type 10 has an invalid length. [ 794.190498][T19497] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4613'. [ 794.204384][T19497] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 794.252154][T19500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4614'. [ 794.262241][T19500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4614'. [ 794.275096][T19500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4614'. [ 794.287040][T19500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4614'. [ 794.320697][T19502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.508722][T19506] netlink: 'syz.2.4616': attribute type 10 has an invalid length. [ 794.997075][T19522] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4624'. [ 795.013316][T19522] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 795.089081][T19520] netlink: 'syz.1.4623': attribute type 10 has an invalid length. [ 795.355270][T19529] netlink: 'syz.1.4626': attribute type 10 has an invalid length. [ 795.497617][T19534] netlink: 'syz.2.4629': attribute type 11 has an invalid length. [ 795.511722][T19534] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4629'. [ 795.600713][T19531] netlink: 'syz.3.4636': attribute type 10 has an invalid length. [ 795.632389][T19540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.578881][T19546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.795738][T19548] netlink: 'syz.2.4633': attribute type 58 has an invalid length. [ 796.812686][T19548] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4633'. [ 796.839282][T19557] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4635'. [ 796.858547][T19557] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 797.440973][T19561] netlink: 'syz.1.4640': attribute type 11 has an invalid length. [ 797.577274][T19570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 797.746976][T19575] netlink: 'syz.0.4643': attribute type 39 has an invalid length. [ 797.998999][T19583] netlink: 'syz.3.4650': attribute type 39 has an invalid length. [ 798.087633][T19587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 798.550433][T19596] netlink: 'syz.0.4655': attribute type 4 has an invalid length. [ 798.558835][T19596] __nla_validate_parse: 1 callbacks suppressed [ 798.558849][T19596] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4655'. [ 799.124040][T19600] netlink: 'syz.3.4657': attribute type 58 has an invalid length. [ 799.134489][T19600] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4657'. [ 799.384557][T19607] netlink: 'syz.3.4659': attribute type 11 has an invalid length. [ 799.403306][T19607] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4659'. [ 799.447105][T19609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.484046][T19611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 800.420919][T19621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 800.461881][T19617] netlink: 'syz.2.4662': attribute type 39 has an invalid length. [ 800.648107][T19625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.246797][T19632] netlink: 'syz.0.4668': attribute type 58 has an invalid length. [ 801.258084][T19632] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4668'. [ 801.477792][T19640] netlink: 'syz.0.4671': attribute type 11 has an invalid length. [ 801.495243][T19640] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4671'. [ 801.536704][T19638] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4670'. [ 801.598862][T19642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 802.118938][T19645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 802.875407][T19658] validate_nla: 1 callbacks suppressed [ 802.875446][T19658] netlink: 'syz.1.4678': attribute type 39 has an invalid length. [ 803.048570][T19666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 803.085048][T19664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 803.115872][T19667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 803.516997][T19673] netlink: 'syz.1.4684': attribute type 11 has an invalid length. [ 803.525606][T19673] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4684'. [ 803.690022][T19676] netlink: 'syz.1.4686': attribute type 4 has an invalid length. [ 803.712552][T19676] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4686'. [ 804.073431][T19681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 804.753014][T19695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 804.910651][T19697] netlink: 'syz.2.4694': attribute type 39 has an invalid length. [ 805.022367][T19701] netlink: 'syz.0.4695': attribute type 11 has an invalid length. [ 805.031660][T19701] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4695'. [ 805.147299][T19703] netlink: 'syz.0.4704': attribute type 11 has an invalid length. [ 805.155354][T19703] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4704'. [ 805.171484][T19705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.431324][T19712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.522167][T19710] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4698'. [ 805.693344][T19719] netlink: 'syz.3.4702': attribute type 4 has an invalid length. [ 805.702031][T19719] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4702'. [ 806.045701][T19725] netlink: 'syz.3.4713': attribute type 4 has an invalid length. [ 806.054153][T19725] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4713'. [ 806.217794][T19729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 806.237057][T19733] netlink: 'syz.2.4706': attribute type 11 has an invalid length. [ 806.246009][T19733] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4706'. [ 806.723490][T19745] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4714'. [ 806.905659][T19750] netlink: 'syz.0.4716': attribute type 4 has an invalid length. [ 806.914462][T19750] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4716'. [ 806.995629][T19754] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4718'. [ 807.143958][T19760] net_ratelimit: 1 callbacks suppressed [ 807.143974][T19760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 807.471123][T19759] tap0: tun_chr_ioctl cmd 1074025677 [ 807.477815][T19759] tap0: linktype set to 0 [ 807.580682][T19766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 807.703088][T10840] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 807.942683][T19779] validate_nla: 2 callbacks suppressed [ 807.942700][T19779] netlink: 'syz.2.4727': attribute type 11 has an invalid length. [ 808.068956][T19781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 808.991576][T19795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.010855][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.010909][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.040603][T19797] __nla_validate_parse: 3 callbacks suppressed [ 809.040618][T19797] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4734'. [ 809.056800][T19800] netlink: 'syz.3.4732': attribute type 10 has an invalid length. [ 809.065939][T19800] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4732'. [ 809.090063][T19800] hsr0: entered promiscuous mode [ 809.109369][T19800] bridge0: port 3(hsr0) entered blocking state [ 809.148088][T19800] bridge0: port 3(hsr0) entered disabled state [ 809.175664][T19800] hsr0: entered allmulticast mode [ 809.192372][T19800] hsr_slave_0: entered allmulticast mode [ 809.217168][T19800] hsr_slave_1: entered allmulticast mode [ 809.251866][T19800] bridge0: port 3(hsr0) entered blocking state [ 809.258369][T19800] bridge0: port 3(hsr0) entered forwarding state [ 809.323490][T19808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.346188][T19809] tap0: tun_chr_ioctl cmd 1074025677 [ 809.351736][T19809] tap0: linktype set to 0 [ 809.519592][T19813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.564168][T19815] netlink: 'syz.3.4738': attribute type 11 has an invalid length. [ 809.592809][T19815] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4738'. [ 810.404886][T19835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 810.433331][T19837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 811.289022][T19844] netlink: 'syz.3.4749': attribute type 11 has an invalid length. [ 811.297930][T19844] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4749'. [ 811.340964][T19847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 811.533615][T19848] netlink: 'syz.2.4748': attribute type 10 has an invalid length. [ 811.581950][T19848] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4748'. [ 811.649289][T19848] hsr0: entered promiscuous mode [ 811.681667][T19845] tap0: tun_chr_ioctl cmd 1074025677 [ 811.688877][T19845] tap0: linktype set to 0 [ 812.276099][T19861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.652914][T13180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 812.662329][T13180] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 812.674223][T13180] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 812.684778][T13180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 812.694461][T13180] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 812.701932][T13180] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 812.831108][T10840] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.960118][T10840] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.134909][T10840] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.211455][T19871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.231473][T19873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.305792][T10840] batman_adv: batadv0: Removing interface: netdevsim0 [ 813.381864][T10840] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.657281][T19866] chnl_net:caif_netlink_parms(): no params data found [ 813.681045][T19880] netlink: 'syz.0.4761': attribute type 11 has an invalid length. [ 813.694511][T19880] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4761'. [ 813.852328][T19866] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.860073][T19866] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.867590][T19866] bridge_slave_0: entered allmulticast mode [ 813.875038][T19866] bridge_slave_0: entered promiscuous mode [ 813.961462][T19866] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.969731][T19866] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.981381][T19866] bridge_slave_1: entered allmulticast mode [ 813.989290][T19866] bridge_slave_1: entered promiscuous mode [ 814.212607][T19898] netlink: 'syz.0.4770': attribute type 11 has an invalid length. [ 814.220482][T19898] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4770'. [ 814.270783][T19866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.290033][T19866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.621026][T19866] team0: Port device team_slave_0 added [ 814.706389][T19866] team0: Port device team_slave_1 added [ 814.744330][ T5085] Bluetooth: hci0: command tx timeout [ 814.849482][T19916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 814.914739][T19866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.921741][T19866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.168516][T19866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.211597][T19866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.226394][T19928] netlink: 'syz.0.4769': attribute type 4 has an invalid length. [ 815.230722][T19866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.252493][T19928] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4769'. [ 815.298214][T19866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.440705][T19934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 815.677600][T19866] hsr_slave_0: entered promiscuous mode [ 815.696434][T19866] hsr_slave_1: entered promiscuous mode [ 815.751499][T19943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.030410][T19947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.281527][T19951] netlink: 'syz.1.4774': attribute type 11 has an invalid length. [ 816.302617][T19951] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4774'. [ 816.748725][T19968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.826786][ T5085] Bluetooth: hci0: command tx timeout [ 817.037630][T10840] hsr_slave_0: left promiscuous mode [ 817.051416][T10840] hsr_slave_1: left promiscuous mode [ 817.058686][T10840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.066244][T10840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.074199][T10840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.081631][T10840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.096115][T10840] veth1_macvtap: left promiscuous mode [ 817.101679][T10840] veth0_macvtap: left promiscuous mode [ 817.767958][T19983] netlink: 'syz.3.4780': attribute type 4 has an invalid length. [ 817.792604][T19983] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4780'. [ 818.776168][T19987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 818.914690][ T5085] Bluetooth: hci0: command tx timeout [ 818.942293][T19996] netlink: 'syz.3.4784': attribute type 11 has an invalid length. [ 818.951321][T19996] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4784'. [ 818.994692][T19997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 819.139288][T19866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 819.273830][T10844] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 819.288904][T20002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 819.323552][T19866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 819.373603][T19866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 819.396368][T19866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 819.655921][T19866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.681571][T19866] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.699469][T10844] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.706794][T10844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.710968][T20015] netlink: 'syz.0.4791': attribute type 4 has an invalid length. [ 819.736631][T10844] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.742618][T20015] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4791'. [ 819.743829][T10844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.088142][T19866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.151053][T19866] veth0_vlan: entered promiscuous mode [ 820.171313][T19866] veth1_vlan: entered promiscuous mode [ 820.239768][T19866] veth0_macvtap: entered promiscuous mode [ 820.265388][T19866] veth1_macvtap: entered promiscuous mode [ 820.306314][T19866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.324980][T19866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.340152][T19866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.351930][T19866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.362583][T19866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.386151][T19866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.539283][T10851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.555232][T10851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.585343][T10847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.602493][T10847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.785284][T20043] netlink: 'syz.0.4799': attribute type 4 has an invalid length. [ 820.807053][T20046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.845718][T20043] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4799'. [ 820.995195][ T5085] Bluetooth: hci0: command tx timeout [ 821.183380][T20054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 821.865303][T13180] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 821.881669][T10840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.894594][T13180] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 821.904933][T13180] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 821.916378][T13180] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 821.924831][T13180] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 821.934511][T13180] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 822.101127][T10840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.146046][T20076] netlink: 'syz.2.4798': attribute type 11 has an invalid length. [ 822.154432][T20076] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4798'. [ 822.191476][T20078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 822.282356][T10840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.635965][T10840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.757670][T20083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 823.229616][T20068] chnl_net:caif_netlink_parms(): no params data found [ 823.338175][T20106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 823.706608][T20118] netlink: 'syz.0.4807': attribute type 4 has an invalid length. [ 823.735393][T20118] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4807'. [ 823.954865][T20068] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.968889][T20068] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.986099][T20068] bridge_slave_0: entered allmulticast mode [ 824.003035][T20068] bridge_slave_0: entered promiscuous mode [ 824.019245][T20128] netlink: 'syz.3.4810': attribute type 11 has an invalid length. [ 824.032699][ T5085] Bluetooth: hci2: command tx timeout [ 824.038029][T20128] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4810'. [ 824.191315][T20068] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.220030][T20068] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.238810][T20068] bridge_slave_1: entered allmulticast mode [ 824.262000][T20068] bridge_slave_1: entered promiscuous mode [ 824.281784][T20133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 824.637891][T20068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.704815][T20068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.790282][T20153] netlink: 'syz.2.4814': attribute type 17 has an invalid length. [ 824.812655][T20153] netlink: 'syz.2.4814': attribute type 16 has an invalid length. [ 824.820777][T20153] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4814'. [ 824.846123][T20154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 824.889739][T20068] team0: Port device team_slave_0 added [ 824.975183][T20068] team0: Port device team_slave_1 added [ 825.135356][T20068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.142352][T20068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.177721][T20068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.193934][T20068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.201127][T20068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.242598][T20068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.697261][T20068] hsr_slave_0: entered promiscuous mode [ 825.738905][T20068] hsr_slave_1: entered promiscuous mode [ 825.752380][T20068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 825.778287][T20068] Cannot create hsr debugfs directory [ 825.856653][T20170] netlink: 'syz.3.4819': attribute type 11 has an invalid length. [ 825.869268][T20170] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4819'. [ 825.895537][T20173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.102621][ T5085] Bluetooth: hci2: command tx timeout [ 826.418203][T10840] hsr_slave_0: left promiscuous mode [ 826.484495][T10840] hsr_slave_1: left promiscuous mode [ 826.494761][T10840] hsr0: left allmulticast mode [ 826.499766][T10840] bridge0: port 3(hsr0) entered disabled state [ 826.546447][T20184] netlink: 'syz.3.4821': attribute type 4 has an invalid length. [ 826.567605][T10840] ¹: left allmulticast mode [ 826.573379][T10840] ¹: left promiscuous mode [ 826.583264][T10840] bridge0: port 2(¹) entered disabled state [ 826.586959][T20184] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4821'. [ 826.610910][T10840] bridge_slave_0: left allmulticast mode [ 826.634046][T10840] bridge_slave_0: left promiscuous mode [ 826.639807][T10840] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.699824][T10840] veth0_macvtap: left promiscuous mode [ 828.192678][ T5085] Bluetooth: hci2: command tx timeout [ 830.262623][ T5085] Bluetooth: hci2: command tx timeout [ 838.730496][T10844] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 842.070733][T13180] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 842.085763][ T5772] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.094894][ T5772] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 842.104591][ T5772] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.123000][ T5772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.132116][ T5772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.141231][ T5772] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 842.150099][ T5772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.150211][T20203] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 842.167800][ T5772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 842.177119][T20203] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 842.193100][T20203] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 844.262787][ T5085] Bluetooth: hci4: command tx timeout [ 844.264658][ T5772] Bluetooth: hci5: command tx timeout [ 846.342593][ T5772] Bluetooth: hci4: command tx timeout [ 846.352552][ T5772] Bluetooth: hci5: command tx timeout [ 848.422617][ T5772] Bluetooth: hci5: command tx timeout [ 848.422628][ T5085] Bluetooth: hci4: command tx timeout [ 850.301239][T10842] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 850.502786][ T5085] Bluetooth: hci4: command tx timeout [ 850.502816][ T5772] Bluetooth: hci5: command tx timeout [ 858.137415][ T5085] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 858.148468][ T5085] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 858.157686][ T5085] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 858.167271][ T5085] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 858.176673][ T5085] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 858.184196][ T5085] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 860.262731][ T5772] Bluetooth: hci6: command tx timeout [ 862.342573][ T5772] Bluetooth: hci6: command tx timeout [ 864.422684][ T5772] Bluetooth: hci6: command tx timeout [ 866.514247][ T5772] Bluetooth: hci6: command tx timeout [ 869.655150][T10842] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 870.425128][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.431527][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.230002][T20209] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 881.252555][ T5085] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 881.262985][ T5085] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 881.274358][ T5085] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 881.284500][ T5085] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 881.293441][ T5085] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 881.302130][ T5085] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 883.382688][ T5085] Bluetooth: hci7: command tx timeout [ 885.462634][ T5085] Bluetooth: hci7: command tx timeout [ 887.542819][ T5085] Bluetooth: hci7: command tx timeout [ 889.622769][ T5085] Bluetooth: hci7: command tx timeout [ 900.682043][T10839] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 902.401188][ T5772] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 902.411381][ T5772] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 902.421642][ T5772] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 902.431568][ T5772] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 902.439469][ T5772] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 902.449555][ T5772] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 902.450905][T19134] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 902.467115][T19134] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 902.477325][T19134] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 902.494431][T19134] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 902.502226][T19134] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 902.509851][T19134] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 904.502615][T19134] Bluetooth: hci8: command tx timeout [ 904.583511][T19134] Bluetooth: hci9: command tx timeout [ 906.582566][T19134] Bluetooth: hci8: command tx timeout [ 906.662657][T19134] Bluetooth: hci9: command tx timeout [ 908.662548][T19134] Bluetooth: hci8: command tx timeout [ 908.742522][T19134] Bluetooth: hci9: command tx timeout [ 910.742647][T19134] Bluetooth: hci8: command tx timeout [ 910.822570][T19134] Bluetooth: hci9: command tx timeout [ 912.150855][T10839] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 918.358697][T20203] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 918.371898][T20203] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 918.380262][T20203] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 918.389858][T20203] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 918.399249][T20203] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 918.408189][T20203] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 920.502592][T19134] Bluetooth: hci10: command tx timeout [ 922.583372][T19134] Bluetooth: hci10: command tx timeout [ 924.662623][T19134] Bluetooth: hci10: command tx timeout [ 926.742646][T19134] Bluetooth: hci10: command tx timeout [ 931.709387][T10851] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 931.865478][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.871938][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.062547][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 941.389068][ T5772] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 941.398233][ T5772] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 941.406537][ T5772] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 941.417104][ T5772] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 941.426562][ T5772] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 941.435591][ T5772] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 943.075593][T10842] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 943.462563][T19134] Bluetooth: hci11: command tx timeout [ 944.182702][T19134] Bluetooth: hci2: command 0x0406 tx timeout [ 945.542549][ T5772] Bluetooth: hci11: command tx timeout [ 947.622512][ T5772] Bluetooth: hci11: command tx timeout [ 949.702581][ T5772] Bluetooth: hci11: command tx timeout [ 962.635820][T20214] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 962.718059][ T5085] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 962.728436][ T5085] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 962.740304][ T5085] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 962.749360][ T5085] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 962.758553][ T5085] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 962.767431][ T5085] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 962.795651][T20203] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 962.805331][T20203] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 962.815902][T20203] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 962.824494][T20203] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 962.832454][T20203] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 962.840119][T20203] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 964.662682][T20203] Bluetooth: hci4: command 0x0406 tx timeout [ 964.669412][ T5085] Bluetooth: hci5: command 0x0406 tx timeout [ 964.822606][ T5772] Bluetooth: hci12: command tx timeout [ 964.902566][ T5772] Bluetooth: hci13: command tx timeout [ 966.902590][ T5772] Bluetooth: hci12: command tx timeout [ 966.982587][ T5772] Bluetooth: hci13: command tx timeout [ 968.982899][ T5772] Bluetooth: hci12: command tx timeout [ 969.062493][ T5772] Bluetooth: hci13: command tx timeout [ 971.062513][ T5772] Bluetooth: hci12: command tx timeout [ 971.142569][ T5772] Bluetooth: hci13: command tx timeout [ 974.000733][T20214] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 978.605782][T19134] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 978.616215][T19134] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 978.626511][T19134] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 978.636276][T19134] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 978.646522][T19134] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 978.653993][T19134] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 980.752571][T19134] Bluetooth: hci14: command tx timeout [ 982.822579][T19134] Bluetooth: hci14: command tx timeout [ 984.902626][T19134] Bluetooth: hci14: command tx timeout [ 984.982675][ T28] INFO: task dhcpcd:5435 blocked for more than 143 seconds. [ 984.990015][ T28] Not tainted syzkaller #0 [ 984.995186][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 985.003929][ T28] task:dhcpcd state:D stack:20968 pid:5435 ppid:5434 flags:0x00004002 [ 985.013238][ T28] Call Trace: [ 985.016530][ T28] [ 985.019472][ T28] __schedule+0x1553/0x45a0 [ 985.024035][ T28] ? trace_event_raw_event_lock+0x250/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 985.029956][ T28] ? asan.module_dtor+0x20/0x20 [ 985.034881][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 985.039582][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 985.045326][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 985.051695][ T28] schedule+0xbd/0x170 [ 985.055863][ T28] schedule_preempt_disabled+0x13/0x20 [ 985.062049][ T28] __mutex_lock+0x6a9/0xcc0 [ 985.066910][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 985.071635][ T28] ? devinet_ioctl+0x30c/0x1c40 [ 985.076538][ T28] ? mutex_lock_nested+0x20/0x20 [ 985.081495][ T28] ? bpf_lsm_capable+0x9/0x10 [ 985.086227][ T28] ? security_capable+0x89/0xb0 [ 985.091112][ T28] devinet_ioctl+0x30c/0x1c40 [ 985.096438][ T28] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 985.101589][ T28] ? _copy_from_user+0xa5/0xe0 [ 985.106888][ T28] ? get_user_ifreq+0x12b/0x180 [ 985.111780][ T28] inet_ioctl+0x42b/0x560 [ 985.116838][ T28] ? tomoyo_path_number_perm+0x217/0x620 [ 985.122775][ T28] ? inet_shutdown+0x370/0x370 [ 985.127660][ T28] ? slab_free_freelist_hook+0x130/0x1a0 [ 985.134651][ T28] ? tomoyo_path_number_perm+0x500/0x620 [ 985.140337][ T28] ? __kmem_cache_free+0xba/0x1e0 [ 985.145569][T19134] Bluetooth: hci6: command 0x0406 tx timeout [ 985.154630][ T28] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 985.160163][ T28] sock_do_ioctl+0xfc/0x310 [ 985.166003][ T28] ? sock_show_fdinfo+0xb0/0xb0 [ 985.170911][ T28] sock_ioctl+0x5ba/0x7e0 [ 985.175769][ T28] ? perf_trace_preemptirq_template+0xac/0x330 [ 985.181974][ T28] ? sock_poll+0x3e0/0x3e0 [ 985.186845][ T28] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 985.193213][ T28] ? fd_install+0x60/0x4e0 [ 985.197668][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 985.203170][ T28] ? security_file_ioctl+0x80/0xa0 [ 985.208324][ T28] ? sock_poll+0x3e0/0x3e0 [ 985.213167][ T28] __se_sys_ioctl+0xfd/0x170 [ 985.218471][ T28] do_syscall_64+0x55/0xa0 [ 985.223343][ T28] ? clear_bhb_loop+0x40/0x90 [ 985.228056][ T28] ? clear_bhb_loop+0x40/0x90 [ 985.233172][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 985.239196][ T28] RIP: 0033:0x7fa3e1e54378 [ 985.244062][ T28] RSP: 002b:00007fff53a1edd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 985.252874][ T28] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 00007fa3e1e54378 [ 985.260904][ T28] RDX: 00007fff53a2efd0 RSI: 0000000000008914 RDI: 0000000000000016 [ 985.292457][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 985.300504][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff53a3f170 [ 985.308986][ T28] R13: 00007fa3e1d546c8 R14: 0000000000000028 R15: 0000000000008914 [ 985.317304][ T28] [ 985.322558][ T28] INFO: task kworker/1:5:5822 blocked for more than 143 seconds. [ 985.330487][ T28] Not tainted syzkaller #0 [ 985.336011][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 985.361519][ T28] task:kworker/1:5 state:D stack:23280 pid:5822 ppid:2 flags:0x00004000 [ 985.375305][ T28] Workqueue: events switchdev_deferred_process_work [ 985.386807][ T28] Call Trace: [ 985.390108][ T28] [ 985.393847][ T28] __schedule+0x1553/0x45a0 [ 985.398434][ T28] ? mark_lock+0x94/0x320 [ 985.403772][ T28] ? asan.module_dtor+0x20/0x20 [ 985.408705][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 985.414049][ T28] schedule+0xbd/0x170 [ 985.418331][ T28] schedule_preempt_disabled+0x13/0x20 [ 985.426278][ T28] __mutex_lock+0x6a9/0xcc0 [ 985.430867][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 985.435614][ T28] ? switchdev_deferred_process_work+0xe/0x20 [ 985.441752][ T28] ? mutex_lock_nested+0x20/0x20 [ 985.448464][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 985.454380][ T28] ? process_scheduled_works+0x96f/0x15d0 [ 985.460318][ T28] switchdev_deferred_process_work+0xe/0x20 [ 985.467877][ T28] process_scheduled_works+0xa5d/0x15d0 [ 985.474438][ T28] ? worker_attach_to_pool+0x380/0x380 [ 985.479961][ T28] ? assign_work+0x3d2/0x5d0 [ 985.486490][ T28] worker_thread+0xa55/0xfc0 [ 985.491138][ T28] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 985.497176][ T28] ? _raw_spin_unlock+0x40/0x40 [ 985.502057][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 985.508328][ T28] kthread+0x2fa/0x390 [ 985.512481][ T28] ? pr_cont_work+0x560/0x560 [ 985.517294][ T28] ? kthread_blkcg+0xd0/0xd0 [ 985.522161][ T28] ret_from_fork+0x48/0x80 [ 985.527014][ T28] ? kthread_blkcg+0xd0/0xd0 [ 985.531646][ T28] ret_from_fork_asm+0x11/0x20 [ 985.536646][ T28] [ 985.539712][ T28] INFO: task kworker/u4:29:10847 blocked for more than 143 seconds. [ 985.548403][ T28] Not tainted syzkaller #0 [ 985.553523][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 985.562205][ T28] task:kworker/u4:29 state:D stack:21288 pid:10847 ppid:2 flags:0x00004000 [ 985.571769][ T28] Workqueue: events_unbound linkwatch_event [ 985.577748][ T28] Call Trace: [ 985.581031][ T28] [ 985.584045][ T28] __schedule+0x1553/0x45a0 [ 985.588669][ T28] ? asan.module_dtor+0x20/0x20 [ 985.593825][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 985.598552][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 985.604131][ T28] ? kthread_data+0x4f/0xc0 [ 985.608682][ T28] ? wq_worker_sleeping+0x63/0x240 [ 985.613923][ T28] schedule+0xbd/0x170 [ 985.618156][ T28] schedule_preempt_disabled+0x13/0x20 [ 985.624130][ T28] __mutex_lock+0x6a9/0xcc0 [ 985.628687][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 985.633457][ T28] ? linkwatch_event+0xe/0x60 [ 985.638167][ T28] ? mutex_lock_nested+0x20/0x20 [ 985.643331][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 985.648651][ T28] ? process_scheduled_works+0x96f/0x15d0 [ 985.654447][ T28] linkwatch_event+0xe/0x60 [ 985.658988][ T28] process_scheduled_works+0xa5d/0x15d0 [ 985.664645][ T28] ? worker_attach_to_pool+0x380/0x380 [ 985.670147][ T28] ? assign_work+0x3d2/0x5d0 [ 985.675158][ T28] worker_thread+0xa55/0xfc0 [ 985.679801][ T28] kthread+0x2fa/0x390 [ 985.683986][ T28] ? pr_cont_work+0x560/0x560 [ 985.688693][ T28] ? kthread_blkcg+0xd0/0xd0 [ 985.693435][ T28] ret_from_fork+0x48/0x80 [ 985.697909][ T28] ? kthread_blkcg+0xd0/0xd0 [ 985.702594][ T28] ret_from_fork_asm+0x11/0x20 [ 985.707483][ T28] [ 985.710734][ T28] INFO: task syz-executor:20068 blocked for more than 144 seconds. [ 985.719186][ T28] Not tainted syzkaller #0 [ 985.724352][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 985.733377][ T28] task:syz-executor state:D stack:22280 pid:20068 ppid:1 flags:0x00004004 [ 985.743055][ T28] Call Trace: [ 985.746377][ T28] [ 985.749324][ T28] __schedule+0x1553/0x45a0 [ 985.754057][ T28] ? asan.module_dtor+0x20/0x20 [ 985.758929][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 985.763726][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 985.769299][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 985.775839][ T28] schedule+0xbd/0x170 [ 985.779956][ T28] schedule_preempt_disabled+0x13/0x20 [ 985.785548][ T28] __mutex_lock+0x6a9/0xcc0 [ 985.790147][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 985.794914][ T28] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 985.800052][ T28] ? mutex_lock_nested+0x20/0x20 [ 985.805067][ T28] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 985.810218][ T28] rtnetlink_rcv_msg+0x811/0xfa0 [ 985.815241][ T28] ? rtnetlink_bind+0x80/0x80 [ 985.820304][ T28] ? mark_lock+0x94/0x320 [ 985.824765][ T28] ? __lock_acquire+0x1273/0x7d40 [ 985.829968][ T28] ? __kernel_text_address+0xd/0x30 [ 985.835275][ T28] ? mark_lock+0x94/0x320 [ 985.839695][ T28] ? mark_lock+0x94/0x320 [ 985.844206][ T28] ? __lock_acquire+0x1273/0x7d40 [ 985.849255][ T28] ? kmalloc_reserve+0x95/0x240 [ 985.854161][ T28] ? verify_lock_unused+0x140/0x140 [ 985.859382][ T28] ? verify_lock_unused+0x140/0x140 [ 985.864970][ T28] netlink_rcv_skb+0x241/0x4d0 [ 985.869862][ T28] ? rtnetlink_bind+0x80/0x80 [ 985.874686][ T28] ? netlink_ack+0x1180/0x1180 [ 985.879628][ T28] ? __lock_acquire+0x7d40/0x7d40 [ 985.884805][ T28] ? net_generic+0x1e/0x240 [ 985.889341][ T28] ? netlink_deliver_tap+0x2e/0x1b0 [ 985.894641][ T28] netlink_unicast+0x751/0x8d0 [ 985.899490][ T28] netlink_sendmsg+0x8d0/0xbf0 [ 985.904374][ T28] ? netlink_getsockopt+0x590/0x590 [ 985.909599][ T28] ? aa_sock_msg_perm+0x94/0x150 [ 985.914677][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 985.920034][ T28] ? security_socket_sendmsg+0x80/0xa0 [ 985.925777][ T28] __sys_sendto+0x4a9/0x6b0 [ 985.930303][ T28] ? __ia32_sys_getpeername+0x90/0x90 [ 985.935858][ T28] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 985.942475][ T28] ? lock_chain_count+0x20/0x20 [ 985.947382][ T28] __x64_sys_sendto+0xde/0xf0 [ 985.952258][ T28] do_syscall_64+0x55/0xa0 [ 985.956790][ T28] ? clear_bhb_loop+0x40/0x90 [ 985.961764][ T28] ? clear_bhb_loop+0x40/0x90 [ 985.966538][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 985.972715][ T28] RIP: 0033:0x7fd53755d04e [ 985.977146][ T28] RSP: 002b:00007ffd8f132608 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 985.985985][ T28] RAX: ffffffffffffffda RBX: 000055556db51500 RCX: 00007fd53755d04e [ 985.994174][ T28] RDX: 0000000000000064 RSI: 00007fd538344670 RDI: 0000000000000003 [ 986.002722][ T28] RBP: 0000000000000001 R08: 00007ffd8f132684 R09: 000000000000000c [ 986.010746][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 986.019180][ T28] R13: 0000000000000000 R14: 00007fd538344670 R15: 0000000000000000 [ 986.027366][ T28] [ 986.030549][ T28] INFO: task syz.3.4821:20183 blocked for more than 144 seconds. [ 986.039014][ T28] Not tainted syzkaller #0 [ 986.044057][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 986.052975][ T28] task:syz.3.4821 state:D stack:25768 pid:20183 ppid:13685 flags:0x00004004 [ 986.062295][ T28] Call Trace: [ 986.065662][ T28] [ 986.068622][ T28] __schedule+0x1553/0x45a0 [ 986.073218][ T28] ? asan.module_dtor+0x20/0x20 [ 986.078104][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 986.083210][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 986.088716][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 986.094961][ T28] schedule+0xbd/0x170 [ 986.099058][ T28] schedule_preempt_disabled+0x13/0x20 [ 986.104836][ T28] __mutex_lock+0x6a9/0xcc0 [ 986.109375][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 986.114229][ T28] ? __tun_chr_ioctl+0x400/0x2000 [ 986.119291][ T28] ? mutex_lock_nested+0x20/0x20 [ 986.126244][ T28] __tun_chr_ioctl+0x400/0x2000 [ 986.131144][ T28] ? tun_flow_create+0x310/0x310 [ 986.137010][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 986.141968][ T28] ? security_file_ioctl+0x80/0xa0 [ 986.148737][ T28] ? tun_chr_poll+0x630/0x630 [ 986.154077][ T28] __se_sys_ioctl+0xfd/0x170 [ 986.158691][ T28] do_syscall_64+0x55/0xa0 [ 986.164704][ T28] ? clear_bhb_loop+0x40/0x90 [ 986.169405][ T28] ? clear_bhb_loop+0x40/0x90 [ 986.174182][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.180095][ T28] RIP: 0033:0x7fbfaf99c819 [ 986.186886][ T28] RSP: 002b:00007fbfadbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.195641][ T28] RAX: ffffffffffffffda RBX: 00007fbfafc16090 RCX: 00007fbfaf99c819 [ 986.203768][ T28] RDX: 0000000000000000 RSI: 00000000400454d0 RDI: 000000000000000b [ 986.211940][ T28] RBP: 00007fbfafa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 986.220181][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.228254][ T28] R13: 00007fbfafc16128 R14: 00007fbfafc16090 R15: 00007ffd81914f18 [ 986.236326][ T28] [ 986.239497][ T28] INFO: task syz.2.4822:20189 blocked for more than 144 seconds. [ 986.247445][ T28] Not tainted syzkaller #0 [ 986.252446][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 986.261217][ T28] task:syz.2.4822 state:D stack:26504 pid:20189 ppid:19866 flags:0x00004004 [ 986.270778][ T28] Call Trace: [ 986.274535][ T28] [ 986.277493][ T28] __schedule+0x1553/0x45a0 [ 986.282126][ T28] ? trace_event_raw_event_lock+0x250/0x250 [ 986.288701][ T28] ? asan.module_dtor+0x20/0x20 [ 986.293934][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 986.298654][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 986.304375][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 986.310596][ T28] schedule+0xbd/0x170 [ 986.316549][ T28] schedule_preempt_disabled+0x13/0x20 [ 986.322071][ T28] __mutex_lock+0x6a9/0xcc0 [ 986.326702][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 986.331406][ T28] ? do_ipv6_setsockopt+0x42c/0x3e20 [ 986.336771][ T28] ? mutex_lock_nested+0x20/0x20 [ 986.341746][ T28] ? __might_fault+0xaa/0x120 [ 986.346743][ T28] ? __might_fault+0xc6/0x120 [ 986.351462][ T28] ? __might_fault+0xaa/0x120 [ 986.356259][ T28] do_ipv6_setsockopt+0x42c/0x3e20 [ 986.361420][ T28] ? sk_dst_reset+0xa0/0xa0 [ 986.365999][ T28] ? tracing_gen_ctx_irq_test+0xbc/0x140 [ 986.371674][ T28] ? perf_swevent_event+0x4be/0x570 [ 986.376955][ T28] ? perf_tp_event+0x1520/0x1520 [ 986.381915][ T28] ? perf_trace_buf_alloc+0x290/0x290 [ 986.387405][ T28] ? mark_lock+0x94/0x320 [ 986.391946][ T28] ? __lock_acquire+0x1273/0x7d40 [ 986.397853][ T28] ? aa_label_sk_perm+0x463/0x5c0 [ 986.403175][ T28] ? aa_sk_perm+0x970/0x970 [ 986.407719][ T28] ? trace_event_raw_event_lock+0x250/0x250 [ 986.414004][ T28] ? __might_sleep+0xe0/0xe0 [ 986.418648][ T28] ? aa_sk_perm+0x83c/0x970 [ 986.428312][ T28] ? __fget_files+0x28/0x4b0 [ 986.433021][ T28] ? aa_af_perm+0x330/0x330 [ 986.437574][ T28] ? __fget_files+0x28/0x4b0 [ 986.442279][ T28] ? __fget_files+0x28/0x4b0 [ 986.446960][ T28] ? aa_sock_opt_perm+0x74/0x100 [ 986.451971][ T28] ipv6_setsockopt+0x59/0x190 [ 986.456831][ T28] ? sock_common_recvmsg+0x190/0x190 [ 986.462154][ T28] do_sock_setsockopt+0x175/0x1a0 [ 986.467285][ T28] ? __fdget+0x180/0x210 [ 986.471557][ T28] __x64_sys_setsockopt+0x182/0x200 [ 986.476846][ T28] do_syscall_64+0x55/0xa0 [ 986.481299][ T28] ? clear_bhb_loop+0x40/0x90 [ 986.486083][ T28] ? clear_bhb_loop+0x40/0x90 [ 986.490815][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.497110][ T28] RIP: 0033:0x7fac3c99c819 [ 986.501611][ T28] RSP: 002b:00007fac3d889028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 986.510275][ T28] RAX: ffffffffffffffda RBX: 00007fac3cc15fa0 RCX: 00007fac3c99c819 [ 986.518499][ T28] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000008 [ 986.526687][ T28] RBP: 00007fac3ca32c91 R08: 0000000000000120 R09: 0000000000000000 [ 986.534753][ T28] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 986.543051][ T28] R13: 00007fac3cc16038 R14: 00007fac3cc15fa0 R15: 00007ffc13bfcb98 [ 986.551341][ T28] [ 986.554464][ T28] INFO: task syz.2.4822:20192 blocked for more than 144 seconds. [ 986.562199][ T28] Not tainted syzkaller #0 [ 986.567372][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 986.576121][ T28] task:syz.2.4822 state:D stack:28712 pid:20192 ppid:19866 flags:0x00004004 [ 986.585418][ T28] Call Trace: [ 986.588707][ T28] [ 986.591653][ T28] __schedule+0x1553/0x45a0 [ 986.596441][ T28] ? trace_event_raw_event_lock+0x250/0x250 [ 986.602449][ T28] ? asan.module_dtor+0x20/0x20 [ 986.607347][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 986.612039][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 986.617576][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 986.623909][ T28] schedule+0xbd/0x170 [ 986.628012][ T28] schedule_preempt_disabled+0x13/0x20 [ 986.633691][ T28] __mutex_lock+0x6a9/0xcc0 [ 986.638421][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 986.643201][ T28] ? do_ipv6_setsockopt+0x42c/0x3e20 [ 986.648505][ T28] ? mutex_lock_nested+0x20/0x20 [ 986.653555][ T28] ? __might_fault+0xaa/0x120 [ 986.658268][ T28] ? __might_fault+0xc6/0x120 [ 986.663351][ T28] ? __might_fault+0xaa/0x120 [ 986.668285][ T28] do_ipv6_setsockopt+0x42c/0x3e20 [ 986.673487][ T28] ? sk_dst_reset+0xa0/0xa0 [ 986.678002][ T28] ? trace_event_raw_event_lock+0x250/0x250 [ 986.684046][ T28] ? asan.module_dtor+0x20/0x20 [ 986.688953][ T28] ? mark_lock+0x94/0x320 [ 986.693362][ T28] ? __lock_acquire+0x1273/0x7d40 [ 986.698629][ T28] ? futex_wait_queue+0x27/0x1b0 [ 986.703692][ T28] ? aa_label_sk_perm+0x463/0x5c0 [ 986.708818][ T28] ? aa_sk_perm+0x970/0x970 [ 986.713425][ T28] ? trace_event_raw_event_lock+0x250/0x250 [ 986.719501][ T28] ? __might_sleep+0xe0/0xe0 [ 986.724232][ T28] ? aa_sk_perm+0x83c/0x970 [ 986.728766][ T28] ? __fget_files+0x28/0x4b0 [ 986.733423][ T28] ? aa_af_perm+0x330/0x330 [ 986.737956][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 986.744261][ T28] ? __fget_files+0x28/0x4b0 [ 986.748983][ T28] ? __fget_files+0x28/0x4b0 [ 986.753646][ T28] ? aa_sock_opt_perm+0x74/0x100 [ 986.758755][ T28] ipv6_setsockopt+0x59/0x190 [ 986.763520][ T28] ? sock_common_recvmsg+0x190/0x190 [ 986.768831][ T28] do_sock_setsockopt+0x175/0x1a0 [ 986.773931][ T28] ? __fdget+0x180/0x210 [ 986.778255][ T28] __x64_sys_setsockopt+0x182/0x200 [ 986.783706][ T28] do_syscall_64+0x55/0xa0 [ 986.788154][ T28] ? clear_bhb_loop+0x40/0x90 [ 986.792967][ T28] ? clear_bhb_loop+0x40/0x90 [ 986.797663][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.803888][ T28] RIP: 0033:0x7fac3c99c819 [ 986.808329][ T28] RSP: 002b:00007fac3d868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 986.816988][ T28] RAX: ffffffffffffffda RBX: 00007fac3cc16090 RCX: 00007fac3c99c819 [ 986.825040][ T28] RDX: 0000000000000015 RSI: 0000000000000029 RDI: 0000000000000008 [ 986.833099][ T28] RBP: 00007fac3ca32c91 R08: 000000000000003d R09: 0000000000000000 [ 986.841091][ T28] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 986.849190][ T28] R13: 00007fac3cc16128 R14: 00007fac3cc16090 R15: 00007ffc13bfcb98 [ 986.857559][ T28] [ 986.860627][ T28] [ 986.860627][ T28] Showing all locks held in the system: [ 986.869106][ T28] 1 lock held by khungtaskd/28: [ 986.874082][ T28] #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 986.884094][ T28] 3 locks held by kworker/0:3/5155: [ 986.889325][ T28] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 986.902345][ T28] #1: ffffc900032c7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 986.913838][ T28] #2: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 986.924540][ T28] 1 lock held by dhcpcd/5435: [ 986.929237][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40 [ 986.938495][ T28] 2 locks held by getty/5529: [ 986.943398][ T28] #0: ffff88814dc580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 986.953363][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 986.964037][ T28] 3 locks held by kworker/1:5/5822: [ 986.969252][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 986.980391][ T28] #1: ffffc9000475fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 986.991569][ T28] #2: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 986.992522][ T5772] Bluetooth: hci14: command tx timeout [ 987.002168][ T28] 3 locks held by kworker/u4:16/10832: [ 987.013271][ T28] #0: ffff88814c504538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 987.025270][ T28] #1: ffffc9000b99fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 987.039044][ T28] #2: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 987.048721][ T28] 4 locks held by kworker/u4:22/10840: [ 987.054643][ T28] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 987.065720][ T28] #1: ffffc9000ba0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 987.076609][ T28] #2: ffffffff8e3b4950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 987.086186][ T28] #3: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xf2/0xa80 [ 987.096588][ T28] 3 locks held by kworker/u4:29/10847: [ 987.102092][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 987.114227][ T28] #1: ffffc9000ba7fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 987.125310][ T28] #2: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 987.134625][ T28] 1 lock held by syz-executor/20068: [ 987.139938][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.149442][ T28] 1 lock held by syz.3.4821/20183: [ 987.154813][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000 [ 987.164325][ T28] 1 lock held by syz.2.4822/20189: [ 987.169458][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x42c/0x3e20 [ 987.180240][ T28] 1 lock held by syz.2.4822/20192: [ 987.185665][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x42c/0x3e20 [ 987.195464][ T28] 1 lock held by syz-executor/20198: [ 987.200763][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.210485][ T28] 1 lock held by syz-executor/20199: [ 987.215862][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.225402][ T28] 1 lock held by syz.0.4826/20208: [ 987.230531][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x83c/0x1140 [ 987.239449][ T28] 1 lock held by syz-executor/20211: [ 987.244792][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.254854][ T28] 1 lock held by syz-executor/20216: [ 987.260156][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.269869][ T28] 1 lock held by syz-executor/20221: [ 987.275242][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.284753][ T28] 1 lock held by syz-executor/20224: [ 987.290060][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.299754][ T28] 1 lock held by syz-executor/20228: [ 987.305105][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.314922][ T28] 1 lock held by syz-executor/20233: [ 987.320318][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.329923][ T28] 1 lock held by syz-executor/20238: [ 987.335322][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.344812][ T28] 1 lock held by syz-executor/20241: [ 987.350121][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.359736][ T28] 1 lock held by syz-executor/20244: [ 987.365152][ T28] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 987.374644][ T28] [ 987.376989][ T28] ============================================= [ 987.376989][ T28] [ 987.385738][ T28] NMI backtrace for cpu 0 [ 987.390082][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 987.397282][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 987.407332][ T28] Call Trace: [ 987.410618][ T28] [ 987.413539][ T28] dump_stack_lvl+0x18c/0x250 [ 987.418412][ T28] ? preempt_count_add+0x91/0x1a0 [ 987.423459][ T28] ? show_regs_print_info+0x20/0x20 [ 987.428758][ T28] ? load_image+0x400/0x400 [ 987.433274][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 987.438219][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 987.444378][ T28] ? _printk+0xde/0x130 [ 987.448632][ T28] ? load_image+0x400/0x400 [ 987.453165][ T28] ? load_image+0x400/0x400 [ 987.457662][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 987.463737][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 987.469729][ T28] watchdog+0xf3d/0xf80 [ 987.473963][ T28] ? watchdog+0x1e1/0xf80 [ 987.478293][ T28] kthread+0x2fa/0x390 [ 987.482353][ T28] ? hungtask_pm_notify+0x90/0x90 [ 987.487377][ T28] ? kthread_blkcg+0xd0/0xd0 [ 987.492309][ T28] ret_from_fork+0x48/0x80 [ 987.496719][ T28] ? kthread_blkcg+0xd0/0xd0 [ 987.501296][ T28] ret_from_fork_asm+0x11/0x20 [ 987.506072][ T28] [ 987.509559][ T28] Sending NMI from CPU 0 to CPUs 1: [ 987.514897][ C1] NMI backtrace for cpu 1 [ 987.514908][ C1] CPU: 1 PID: 20209 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 987.514925][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 987.514935][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 987.514956][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 987.514990][ C1] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d bc e4 03 0d 48 89 de 5b e9 53 6c 57 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d 90 95 7c 7e 65 8b 15 91 95 7c [ 987.515004][ C1] RSP: 0018:ffffc900035bfbb8 EFLAGS: 00000002 [ 987.515016][ C1] RAX: ffffffff8158cda6 RBX: 0000000000000004 RCX: ffff88802d555a00 [ 987.515028][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 987.515037][ C1] RBP: ffffc900035bfda8 R08: ffff888024f40667 R09: 1ffff110049e80cc [ 987.515049][ C1] R10: dffffc0000000000 R11: ffffed10049e80cd R12: ffff888024f40660 [ 987.515060][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88805cf18c18 [ 987.515071][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 987.515084][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 987.515094][ C1] CR2: 000055d392f0a630 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 987.515108][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 987.515118][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 987.515127][ C1] Call Trace: [ 987.515133][ C1] [ 987.515139][ C1] process_scheduled_works+0x825/0x15d0 [ 987.515167][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 987.515191][ C1] ? worker_attach_to_pool+0x380/0x380 [ 987.515212][ C1] ? assign_work+0x3d2/0x5d0 [ 987.515232][ C1] worker_thread+0xa55/0xfc0 [ 987.515250][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 987.515268][ C1] ? _raw_spin_unlock+0x40/0x40 [ 987.515283][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 987.515309][ C1] kthread+0x2fa/0x390 [ 987.515323][ C1] ? pr_cont_work+0x560/0x560 [ 987.515340][ C1] ? kthread_blkcg+0xd0/0xd0 [ 987.515354][ C1] ret_from_fork+0x48/0x80 [ 987.515372][ C1] ? kthread_blkcg+0xd0/0xd0 [ 987.515386][ C1] ret_from_fork_asm+0x11/0x20 [ 987.515411][ C1] [ 987.523017][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 987.523029][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 987.523046][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 987.523055][ T28] Call Trace: [ 987.523061][ T28] [ 987.523068][ T28] dump_stack_lvl+0x18c/0x250 [ 987.523098][ T28] ? show_regs_print_info+0x20/0x20 [ 987.523120][ T28] ? load_image+0x400/0x400 [ 987.523149][ T28] panic+0x2dc/0x730 [ 987.523166][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 987.523191][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 987.523207][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 987.523229][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 987.523251][ T28] watchdog+0xf7c/0xf80 [ 987.523272][ T28] ? watchdog+0x1e1/0xf80 [ 987.523296][ T28] kthread+0x2fa/0x390 [ 987.523310][ T28] ? hungtask_pm_notify+0x90/0x90 [ 987.523330][ T28] ? kthread_blkcg+0xd0/0xd0 [ 987.523345][ T28] ret_from_fork+0x48/0x80 [ 987.523362][ T28] ? kthread_blkcg+0xd0/0xd0 [ 987.523378][ T28] ret_from_fork_asm+0x11/0x20 [ 987.523407][ T28] [ 987.527146][ T28] Kernel Offset: disabled [ 987.854850][ T28] Rebooting in 86400 seconds..