last executing test programs: 13.786553927s ago: executing program 0 (id=3092): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000fbbbf18ea5e9d30ea4eabe43c1b8090200020000000004000000002604"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 13.55942462s ago: executing program 0 (id=3095): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x1d, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x2}, 0x11100a, 0x3, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x48a, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x98, 0x0, 0x0, 0x0, 0x0, 0x20030, 0x158920a4bc68a14d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) r4 = getpid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x4, 0x5, 0x0, 0x4, 0x0, 0x1}, r4, 0xfffffffffffffffe, r1, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRESHEX=r1, @ANYBLOB="110000000009000001000000", @ANYRES8=r1, @ANYBLOB, @ANYRESDEC=r0], 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e618294949a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="1700000054009155090893b31b71a54a07"], 0xfe33) 13.262358567s ago: executing program 0 (id=3099): r0 = gettid() socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a8c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010000, 0x0, @perf_config_ext={0x6, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x10}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f070918bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394416158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d700f2ff0f10"], 0x10b8}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2) 12.239375686s ago: executing program 0 (id=3105): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000fbbbf18ea5e9d30ea4eabe43c1b8090200020000000004000000002604"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 11.980627382s ago: executing program 0 (id=3108): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2efff00010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0xfe) 11.771267094s ago: executing program 0 (id=3111): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000fbbbf18ea5e9d30ea4eabe43c1b8090200020000000004000000002604"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000073013500000000009500000000000000fc87e45434febf37a84d5ecc15e825c298da66f558545cd4c7444c609d364b8a66b27a7e9841edd43b6e341e957227e7da0542a2c9f72f2d037fe2f2d5c4"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000040)=r8) close(r9) 6.883596249s ago: executing program 1 (id=3139): socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4315}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x480, 0x0, 0xc2ba, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40086602, 0x8230794d6280073) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c}, 0x40000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000"], 0x50) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1}, &(0x7f0000000040), &(0x7f0000000940)=r2}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad95a1c57a05f4f979ea13201bafe4f0f6ea508000000a0c548552b5708005647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177dc46c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6fe2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679043e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e77124d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21579fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b1a4090631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af0a1f5b83e69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225dae5e781b43545b51681b2158f41bab16f8a7df758b00ffa6e8522bd83e320ff897f177367278a1f0cdbde082d9983308b40c39740b6fd1ba4aa10c3a19c7374278d00"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 5.285850002s ago: executing program 4 (id=3141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x14, 0x3, 0xfff, 0x401, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0x6, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000a40)={&(0x7f0000000700)=@llc={0x1a, 0x108, 0x3, 0x0, 0x2, 0x80, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000780)="d99fe16db88c935872807f55fc74b3223c2bd3c7b7a5a9b1360fdc43166babd2f5cc2e4c613064ea5b1f58325365a7313bc23189d0fe12f9ecb463a8213959a36d923394ede172a6f87ad85ab7950ef0621c3bb9ce97080afe8b57c7e4e0c45383", 0x61}, {&(0x7f0000000240)="e235e2d2", 0x4}, {&(0x7f0000000800)="f7c92e218d6b2ec3c2d357e218a491cf095cb40494e0a9f85ebd75ee53ffda8cfb5dfeeefbad94237929f34baff11b29e5e0061e41bfd9", 0x37}, {&(0x7f0000000840)="0b499b5ca11f4add96188c5a82826aab8cd5025483f990c5ca61f10f114bd745740f37bd6c42b0ea1a0b9816684fe884338d89d66b15f0d0a20fff4f2c92270e1b2ac9d99581f4ff93347a620fc8bb9ba23c70c31642fe7344038262e408515fc70a463dffa59d6407ddd26e01ca7bb5c2f9909b9523da4753c7adb5d6774cef80f65ecc9bfbd366baa9e550f33c87688e6ad1a65ffc695971c50091ad285f19a27a536fcb74c6e11401adbfd919", 0xae}, {&(0x7f0000000900)="e5f856f5a616e2d99edb9345afda2896f6c8224e3d989bb67d8c4a6b54ecc7b3cdc1360eb47d3286750e86275a23f4c14530d2dad87d17655b1e9aed8d9b753d377e289882048602a962e4967e9f32df4f4b63871b30ea0e681a5ecbeac4fa1ba34d7041a890b2411cd41a16e5484f487e5b3200ccc5c6199dabc54ae24cb685f430f92a2900b66490", 0x89}], 0x5}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) close(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xa482}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x40000002) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1d, 0x3, 0x7, 0x0, 0x10000, r8, 0x3, '\x00', 0x0, r2, 0x1, 0x3, 0x2, 0x0, @void, @value, @value=r7}, 0x50) socket$kcm(0x2, 0x1000000000000002, 0x0) 4.97105565s ago: executing program 1 (id=3144): bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x13, 0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1042, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340)="8679d745f0b80b396ec933647f8c819f2caf10455655f319b587b0b49e0630144bee97213604d4cdf01c5ae09173ce55ba3567fd2977c01bef97778091e15a94abad6381b0d593bd628cb84b36e0cff2d1eef81ab8f799567a619ac5a2556a90b6afd45c82c56e237707cf75cede752475f1c66c54c5038974d51bcbe9197da1b70139"}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f00000003c0)=ANY=[], 0xffdd) syz_clone(0x4800800, &(0x7f00000001c0)="42babf630f475a92e5acf8b04bcd3c9d044dd9b1d7dbccd887f2842d4fcf23a1516d29720b027a744edfab674d1e3414c93c4cba9784547b39d698e83f5784f5e91a9cd477f744724978d024241ee5b887c40dd80846d12ea0cf3a3be854bd7339a3b909f259227d859eefe01b418ec089a3881a79c69c515b66eb3e243046a56c5b384d2fbafc9478ec32c5fef8cef3a38c58fc957ec034db8fcbd2d715a55df2e816574bbe9f36b0", 0xa9, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="df1bbd16cca47049263c195615") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a800160020", 0x35}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r1, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x16') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x4) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x100}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) 4.768688672s ago: executing program 2 (id=3145): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000006000000e9ffff0700000000000000000000610089dc86bd003e0ca5e10adea04587c1d1ad6734881fcb5374cace4510fee5f5217dc2e9ea90917dc0ef590ae4c7d48bbe10ebdfa77bcc65c5032616c3115dfa9ed0e8002dcd4d65ad1130fa20950222316a70cd996538c0ac6cca"], &(0x7f0000000580)=""/229, 0x2c, 0xe5, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="88de94cecdf714fc000000000a0000000000000082463df6ceeb46010c2d7761259edd18add5d83ecde263ecd360d330544fb0e52a497bf68452ffe8b79e3db3fcd9b2c4df36ba68e0812ce9b113f70db05f39c239f719ab486b5bfdcfb92368f4bb2f4c86894ea7169c99c032a8dd66aef4c560ef52bbfaaae7ac244c8b9a62521d2aad9ea132e51136a067d2f15842e10cef9d51d4faed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0xfffffffd, 0xe}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) 4.750245193s ago: executing program 4 (id=3146): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000fbbbf18ea5e9d30ea4eabe43c1b8090200020000000004000000002604"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000073013500000000009500000000000000fc87e45434febf37a84d5ecc15e825c298da66f558545cd4c7444c609d364b8a66b27a7e9841edd43b6e341e957227e7da0542a2c9f72f2d037fe2f2d5c4"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000040)=r7) close(r8) 4.396067804s ago: executing program 2 (id=3147): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xe, &(0x7f0000000100), 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="5c00000052006bab9a3fe3d86e6c17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a7052520957086ce998f70181689ab1c9520cc0a84c9f4d49380e78ff6a1577ae18ca099", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0xffffff84, 0x0}, 0x0) 3.77434982s ago: executing program 3 (id=3149): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0, 0x0, 0x0, 0x218}, 0x30048880) 3.753431682s ago: executing program 2 (id=3151): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000fbbbf18ea5e9d30ea4eabe43c1b8090200020000000004000000002604"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 3.734367123s ago: executing program 4 (id=3152): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2000000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x8800) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) r2 = socket$kcm(0x10, 0x400000002, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000000000000000040cbafa3ffee66b874f1ff00"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(r3, 0x6, 0x14, &(0x7f0000000500), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="140000002a000b05", 0x8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xfdef) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e04000081000000000000007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xce, &(0x7f00000005c0)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x6}, 0x94) 3.591250551s ago: executing program 1 (id=3153): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.581202322s ago: executing program 3 (id=3154): socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4315}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x480, 0x0, 0xc2ba, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40086602, 0x8230794d6280073) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c}, 0x40000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000"], 0x50) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1}, &(0x7f0000000040), &(0x7f0000000940)=r2}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 3.492923187s ago: executing program 1 (id=3155): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000080000000600000000000006040000000000000000005f004b601d24391647b128d3af3ac8a5ac1be77294e62312591f52745103cc9fde0123157d2b133294b5c07e25759c1633f61ead8167ff8a0749a8d895f1c94f434fc951cf884ce32aebb41dd4c999f9bd280e80db9d1626f2cc72eb327b1137d8e289b5fe6068febc643b2808d06e9998f92485f29d742c512a35e575f4"], &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x4, 0x0, 0xf5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca481f7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 3.359653855s ago: executing program 2 (id=3156): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) (fail_nth: 9) 2.055219061s ago: executing program 4 (id=3157): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000006000000e9ffff0700000000000000000000610089dc86bd003e0ca5e10adea04587c1d1ad6734881fcb5374cace4510fee5f5217dc2e9ea90917dc0ef590ae4c7d48bbe10ebdfa77bcc65c5032616c3115dfa9ed0e8002dcd4d65ad1130fa20950222316a70cd996538c0ac6cca"], &(0x7f0000000580)=""/229, 0x2c, 0xe5, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="88de94cecdf714fc000000000a0000000000000082463df6ceeb46010c2d7761259edd18add5d83ecde263ecd360d330544fb0e52a497bf68452ffe8b79e3db3fcd9b2c4df36ba68e0812ce9b113f70db05f39c239f719ab486b5bfdcfb92368f4bb2f4c86894ea7169c99c032a8dd66aef4c560ef52bbfaaae7ac244c8b9a62521d2aad9ea132e51136a067d2f15842e10cef9d51d4faed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0xfffffffd, 0xe}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) 2.021374412s ago: executing program 3 (id=3158): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000eaea7110be000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000002340)=""/4071, 0xfe7}, {&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000bc0)=""/215, 0xd7}, {&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000cc0)=""/205, 0xcd}, {&(0x7f0000000440)=""/153, 0xcc}, {&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000300)=""/135, 0x87}], 0xc}, 0x40002100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000380)='GPL\x00', 0x7, 0x9c, &(0x7f00000003c0)=""/156}, 0x80) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x541b, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x19, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x2) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="180000003f000b05d25a601037153e3704021680fc0b0900", 0x18}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0x84, &(0x7f0000000600)=""/132, 0x41100, 0xb, '\x00', 0x0, @fallback=0x2b, r4, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x9, 0x6, 0x19}, 0x10, 0x0, r4, 0x0, &(0x7f0000000980)=[r4, r6], 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x3, 0x0) 2.001703194s ago: executing program 2 (id=3159): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000006000000e9ffff0700000000000000000000610089dc86bd003e0ca5e10adea04587c1d1ad6734881fcb5374cace4510fee5f5217dc2e9ea90917dc0ef590ae4c7d48bbe10ebdfa77bcc65c5032616c3115dfa9ed0e8002dcd4d65ad1130fa20950222316a70cd996538c0ac6cca"], &(0x7f0000000580)=""/229, 0x2c, 0xe5, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="88de94cecdf714fc000000000a0000000000000082463df6ceeb46010c2d7761259edd18add5d83ecde263ecd360d330544fb0e52a497bf68452ffe8b79e3db3fcd9b2c4df36ba68e0812ce9b113f70db05f39c239f719ab486b5bfdcfb92368f4bb2f4c86894ea7169c99c032a8dd66aef4c560ef52bbfaaae7ac244c8b9a62521d2aad9ea132e51136a067d2f15842e10cef9d51d4faed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0xfffffffd, 0xe}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10400002}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) 1.903157279s ago: executing program 1 (id=3160): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000440)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800"/40], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1742aad0fdf7d7f40c22b4e00000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000020004000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000d00000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000300000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098ed6ed8951ff86c092399a8d11b76c5e00"/133, &(0x7f00000008c0)=""/206, 0x1000, 0x0, 0x1a, 0x64, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r9, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 1.861803772s ago: executing program 4 (id=3161): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x186a0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r0, 0x0) 1.72318765s ago: executing program 4 (id=3162): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_merged\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000fbbbf18ea5e9d30ea4eabe43c1b8090200020000000004000000002604"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000073013500000000009500000000000000fc87e45434febf37a84d5ecc15e825c298da66f558545cd4c7444c609d364b8a66b27a7e9841edd43b6e341e957227e7da0542a2c9f72f2d037fe2f2d5c4"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000040)=r7) close(r8) 1.709019371s ago: executing program 2 (id=3163): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff0000f7ffffff000000000700000075870100010000001801000020786c2500000000002020207b1af8ff00000000bfa1000f0000000007af0000f8ffffffb702000008000000b70300000000000007000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2f}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x7, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.38162972s ago: executing program 3 (id=3164): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 770.777776ms ago: executing program 3 (id=3165): r0 = socket$kcm(0xa, 0x922000000003, 0x11) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000050040001839000000000000000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x47, &(0x7f0000000180)=""/71, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x4, 0x4, 0xc}, {0x4, 0x1, 0x9, 0xd}, {0x4, 0x1, 0x6, 0xc}, {0x0, 0x2, 0x2}, {0x5, 0x2, 0xe, 0x4}], 0x10, 0xfffff9c0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)={r0, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) (async) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x5, 0x69, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x69, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) syz_clone(0x80002400, &(0x7f0000000640)="648ee44c70c0d542d57df0e0b06521533903ff0b23c38d9f89b8e0e82d347fd8ee5bc3325d3099b5bd298c787e70982ee02dd564af5a8a94912e58a5c1c9ec488cb4c30d4d6d5e0571457b261e41765874b1a804c784842f88f8bfb3309606723406f75471ea195db4a5e777fd6d98bd9b912eb833aee58a30e76cfb8b2c34b97c68ad6182f9d97d1357f9f4676eb3f6edf0056ed338a80b5cdecff57a3d450a878a", 0xa2, &(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000700)="e1d4ce6c814c4ed3aa1d34fb0312dbd4979b226891cde69824818cbfb3ac471ecc20aa77999bbfdc5b885b869c9afe8cbecc1d1d2d6a85ffe78c1b5cf35f5f10858776767ae125b26909cb0cc1e7e50f") (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) (async) r5 = socket$kcm(0x28, 0x5, 0x28) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 380.705188ms ago: executing program 3 (id=3166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x14, 0x3, 0xfff, 0x401, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0x6, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000a40)={&(0x7f0000000700)=@llc={0x1a, 0x108, 0x3, 0x0, 0x2, 0x80, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000780)="d99fe16db88c935872807f55fc74b3223c2bd3c7b7a5a9b1360fdc43166babd2f5cc2e4c613064ea5b1f58325365a7313bc23189d0fe12f9ecb463a8213959a36d923394ede172a6f87ad85ab7950ef0621c3bb9ce97080afe8b57c7e4e0c45383", 0x61}, {&(0x7f0000000240)="e235e2d2", 0x4}, {&(0x7f0000000800)="f7c92e218d6b2ec3c2d357e218a491cf095cb40494e0a9f85ebd75ee53ffda8cfb5dfeeefbad94237929f34baff11b29e5e0061e41bfd9", 0x37}, {&(0x7f0000000840)="0b499b5ca11f4add96188c5a82826aab8cd5025483f990c5ca61f10f114bd745740f37bd6c42b0ea1a0b9816684fe884338d89d66b15f0d0a20fff4f2c92270e1b2ac9d99581f4ff93347a620fc8bb9ba23c70c31642fe7344038262e408515fc70a463dffa59d6407ddd26e01ca7bb5c2f9909b9523da4753c7adb5d6774cef80f65ecc9bfbd366baa9e550f33c87688e6ad1a65ffc695971c50091ad285f19a27a536fcb74c6e11401adbfd919", 0xae}, {&(0x7f0000000900)="e5f856f5a616e2d99edb9345afda2896f6c8224e3d989bb67d8c4a6b54ecc7b3cdc1360eb47d3286750e86275a23f4c14530d2dad87d17655b1e9aed8d9b753d377e289882048602a962e4967e9f32df4f4b63871b30ea0e681a5ecbeac4fa1ba34d7041a890b2411cd41a16e5484f487e5b3200ccc5c6199dabc54ae24cb685f430f92a2900b66490b7633ee036a7d7a6f3df", 0x93}], 0x5}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) close(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xa482}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x40000002) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1d, 0x3, 0x7, 0x0, 0x10000, r8, 0x3, '\x00', 0x0, r2, 0x1, 0x3, 0x2, 0x0, @void, @value, @value=r7}, 0x50) socket$kcm(0x2, 0x1000000000000002, 0x0) 0s ago: executing program 1 (id=3167): socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4315}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x480, 0x0, 0xc2ba, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40086602, 0x8230794d6280073) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c}, 0x40000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000"], 0x50) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1}, &(0x7f0000000040), &(0x7f0000000940)=r2}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) kernel console output (not intermixed with test programs): oogle Compute Engine, BIOS Google 10/25/2025 [ 387.305027][T11798] Call Trace: [ 387.308326][T11798] [ 387.311273][T11798] dump_stack_lvl+0x188/0x24e [ 387.315966][T11798] ? show_regs_print_info+0x12/0x12 [ 387.321172][T11798] ? load_image+0x400/0x400 [ 387.325677][T11798] ? __might_sleep+0xd0/0xd0 [ 387.330272][T11798] ? __lock_acquire+0x7d10/0x7d10 [ 387.335309][T11798] ? verify_lock_unused+0x140/0x140 [ 387.340511][T11798] should_fail_ex+0x399/0x4d0 [ 387.345197][T11798] should_failslab+0x5/0x20 [ 387.349706][T11798] slab_pre_alloc_hook+0x59/0x310 [ 387.354743][T11798] ? mark_lock+0x94/0x320 [ 387.359079][T11798] kmem_cache_alloc_node+0x5a/0x320 [ 387.364291][T11798] ? __lock_acquire+0x12f4/0x7d10 [ 387.369426][T11798] ? __alloc_skb+0xfc/0x7e0 [ 387.373948][T11798] __alloc_skb+0xfc/0x7e0 [ 387.378288][T11798] alloc_skb_with_frags+0xa7/0x710 [ 387.383406][T11798] sock_alloc_send_pskb+0x87f/0x9a0 [ 387.388617][T11798] ? sock_kzfree_s+0x50/0x50 [ 387.393224][T11798] tun_get_user+0x915/0x3c70 [ 387.397834][T11798] ? rcu_read_unlock+0xa0/0xa0 [ 387.402623][T11798] ? tun_get+0x1c/0x2e0 [ 387.406799][T11798] ? __lock_acquire+0x7d10/0x7d10 [ 387.411935][T11798] ? tun_get+0x1c/0x2e0 [ 387.416100][T11798] tun_chr_write_iter+0x112/0x1f0 [ 387.421130][T11798] vfs_write+0x4b1/0xa30 [ 387.425390][T11798] ? file_end_write+0x250/0x250 [ 387.430250][T11798] ? __fget_files+0x43d/0x4b0 [ 387.435023][T11798] ? __fdget_pos+0x1d4/0x360 [ 387.439619][T11798] ? ksys_write+0x71/0x250 [ 387.444059][T11798] ksys_write+0x14c/0x250 [ 387.448392][T11798] ? __ia32_sys_read+0x80/0x80 [ 387.453164][T11798] ? lockdep_hardirqs_on+0x94/0x140 [ 387.458370][T11798] do_syscall_64+0x4c/0xa0 [ 387.462788][T11798] ? clear_bhb_loop+0x60/0xb0 [ 387.467467][T11798] ? clear_bhb_loop+0x60/0xb0 [ 387.472148][T11798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.478141][T11798] RIP: 0033:0x7fb46bb9aeb9 [ 387.482560][T11798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.502251][T11798] RSP: 002b:00007fb46c9e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 387.510671][T11798] RAX: ffffffffffffffda RBX: 00007fb46be15fa0 RCX: 00007fb46bb9aeb9 [ 387.518647][T11798] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 387.526704][T11798] RBP: 00007fb46c9e8090 R08: 0000000000000000 R09: 0000000000000000 [ 387.534676][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.542644][T11798] R13: 00007fb46be16038 R14: 00007fb46be15fa0 R15: 00007ffebc400508 [ 387.550624][T11798] [ 387.753602][T11809] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2268'. [ 387.945160][T11815] netlink: 'syz.3.2271': attribute type 29 has an invalid length. [ 388.011878][T11818] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 388.396027][T11834] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 388.428882][T11832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.721575][ T5142] wlan1: Trigger new scan to find an IBSS to join [ 389.778256][T11839] validate_nla: 2 callbacks suppressed [ 389.778311][T11839] netlink: 'syz.0.2279': attribute type 10 has an invalid length. [ 389.967745][T11839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2279'. [ 390.042930][T11839] bridge0: port 3(veth0_vlan) entered blocking state [ 390.069227][T11839] bridge0: port 3(veth0_vlan) entered disabled state [ 390.365731][T11839] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 390.388363][T11841] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.2279'. [ 390.605651][T11843] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2276'. [ 390.618006][T11855] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2285'. [ 390.660690][T11859] netlink: 'syz.4.2284': attribute type 29 has an invalid length. [ 390.712983][T11859] netlink: 'syz.4.2284': attribute type 29 has an invalid length. [ 390.727157][T11865] netlink: 'syz.4.2284': attribute type 29 has an invalid length. [ 391.481555][T11888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.158423][T11897] netlink: 'syz.1.2295': attribute type 29 has an invalid length. [ 392.488833][T11899] netlink: 'syz.0.2296': attribute type 10 has an invalid length. [ 392.506778][T11899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2296'. [ 392.544398][T11899] bridge0: port 3(veth0_vlan) entered blocking state [ 392.562531][T11899] bridge0: port 3(veth0_vlan) entered disabled state [ 392.675165][T11899] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 392.713535][T11888] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2292'. [ 392.724720][T11905] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.2296'. [ 392.790303][T11904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.065384][T11901] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2297'. [ 393.214808][T11927] netlink: 'syz.1.2305': attribute type 1 has an invalid length. [ 393.243269][T11927] netlink: 'syz.1.2305': attribute type 4 has an invalid length. [ 393.282460][T11927] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2305'. [ 393.316715][T11930] IPv6: Can't replace route, no match found [ 393.516706][T11940] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2309'. [ 393.843951][T11948] netlink: 'syz.3.2312': attribute type 10 has an invalid length. [ 393.924940][T11948] team0: Port device veth0_to_hsr added [ 394.020161][T11953] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2313'. [ 394.363633][T11965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.783816][T11969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.836916][ T5142] wlan1: Trigger new scan to find an IBSS to join [ 395.006531][T11974] netlink: 'syz.2.2316': attribute type 10 has an invalid length. [ 395.017822][T11974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2316'. [ 395.029111][T11974] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2316'. [ 395.331783][T11960] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2315'. [ 395.497694][T11958] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2314'. [ 395.706414][T11995] netlink: 'syz.4.2327': attribute type 29 has an invalid length. [ 395.722907][T11995] netlink: 'syz.4.2327': attribute type 29 has an invalid length. [ 395.744077][T11995] netlink: 'syz.4.2327': attribute type 29 has an invalid length. [ 395.807985][ T4352] wlan1: Creating new IBSS network, BSSID 7e:99:21:d5:71:8a [ 395.872495][T12002] sit0: mtu less than device minimum [ 396.377585][T12011] netlink: 'syz.1.2332': attribute type 10 has an invalid length. [ 396.392603][T12011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2332'. [ 396.423252][T12011] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 396.453318][T12017] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.2332'. [ 396.938321][T12031] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.037367][T12031] O3ãc¤±ÿÿ: renamed from bridge_slave_0 [ 397.186355][T12037] netlink: 'syz.4.2341': attribute type 29 has an invalid length. [ 397.303384][T12037] netlink: 'syz.4.2341': attribute type 29 has an invalid length. [ 397.348458][T12043] netlink: 'syz.4.2341': attribute type 29 has an invalid length. [ 398.131808][T12066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.670577][T12082] netlink: 'syz.4.2355': attribute type 10 has an invalid length. [ 398.743114][T12059] __nla_validate_parse: 2 callbacks suppressed [ 398.743147][T12059] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2350'. [ 399.296413][T12098] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2361'. [ 399.778650][T12107] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2360'. [ 400.224489][T12126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2369'. [ 400.523502][T12140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.119895][T12134] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2372'. [ 401.366703][T12166] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2382'. [ 401.868581][T12160] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2380'. [ 402.306730][T12201] netlink: 'syz.1.2394': attribute type 29 has an invalid length. [ 402.315354][T12201] netlink: 'syz.1.2394': attribute type 29 has an invalid length. [ 402.331694][T12201] netlink: 'syz.1.2394': attribute type 29 has an invalid length. [ 402.348020][T12202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 402.369996][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2394'. [ 402.772323][T12197] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2392'. [ 403.503457][T12224] netlink: 'syz.0.2401': attribute type 3 has an invalid length. [ 403.543851][T12224] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2401'. [ 403.925609][T12216] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2400'. [ 404.114358][T12241] FAULT_INJECTION: forcing a failure. [ 404.114358][T12241] name failslab, interval 1, probability 0, space 0, times 0 [ 404.151223][T12241] CPU: 1 PID: 12241 Comm: syz.0.2407 Not tainted syzkaller #0 [ 404.158743][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.166032][T12239] device syzkaller0 entered promiscuous mode [ 404.168801][T12241] Call Trace: [ 404.168812][T12241] [ 404.181013][T12241] dump_stack_lvl+0x188/0x24e [ 404.185725][T12241] ? show_regs_print_info+0x12/0x12 [ 404.190951][T12241] ? load_image+0x400/0x400 [ 404.195492][T12241] ? __might_sleep+0xd0/0xd0 [ 404.200118][T12241] ? __lock_acquire+0x7d10/0x7d10 [ 404.205179][T12241] should_fail_ex+0x399/0x4d0 [ 404.209900][T12241] should_failslab+0x5/0x20 [ 404.214436][T12241] slab_pre_alloc_hook+0x59/0x310 [ 404.219503][T12241] kmem_cache_alloc_node+0x5a/0x320 [ 404.224732][T12241] ? __alloc_skb+0xfc/0x7e0 [ 404.229289][T12241] __alloc_skb+0xfc/0x7e0 [ 404.233823][T12241] ? perf_trace_lock+0x301/0x390 [ 404.238799][T12241] alloc_skb_with_frags+0xa7/0x710 [ 404.243946][T12241] ? trace_event_raw_event_lock+0x250/0x250 [ 404.249874][T12241] ? perf_trace_buf_alloc+0x300/0x300 [ 404.255286][T12241] sock_alloc_send_pskb+0x87f/0x9a0 [ 404.260536][T12241] ? sock_kzfree_s+0x50/0x50 [ 404.265168][T12241] ? dev_get_by_index+0x1e/0x2d0 [ 404.270127][T12241] ? dev_get_by_index+0x1e/0x2d0 [ 404.275113][T12241] packet_sendmsg+0x32b0/0x4e60 [ 404.280035][T12241] ? __might_sleep+0xd0/0xd0 [ 404.284654][T12241] ? trace_event_raw_event_lock+0x250/0x250 [ 404.290596][T12241] ? aa_sk_perm+0x81f/0x950 [ 404.295146][T12241] ? packet_getsockopt+0x9a0/0x9a0 [ 404.300303][T12241] ? aa_sock_msg_perm+0x94/0x150 [ 404.305271][T12241] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 404.310581][T12241] ? security_socket_sendmsg+0x7c/0xa0 [ 404.316070][T12241] ? packet_getsockopt+0x9a0/0x9a0 [ 404.321218][T12241] ____sys_sendmsg+0x5be/0x970 [ 404.326033][T12241] ? __sys_sendmsg_sock+0x30/0x30 [ 404.331098][T12241] ? __import_iovec+0x315/0x500 [ 404.335995][T12241] ? import_iovec+0x6f/0xa0 [ 404.340540][T12241] ___sys_sendmsg+0x2a2/0x360 [ 404.345256][T12241] ? __sys_sendmsg+0x290/0x290 [ 404.350085][T12241] ? __lock_acquire+0x7d10/0x7d10 [ 404.355157][T12241] __se_sys_sendmsg+0x1bb/0x2a0 [ 404.360029][T12241] ? __x64_sys_sendmsg+0x80/0x80 [ 404.365006][T12241] ? lockdep_hardirqs_on+0x94/0x140 [ 404.370232][T12241] do_syscall_64+0x4c/0xa0 [ 404.374655][T12241] ? clear_bhb_loop+0x60/0xb0 [ 404.379334][T12241] ? clear_bhb_loop+0x60/0xb0 [ 404.384015][T12241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.390003][T12241] RIP: 0033:0x7f8fad99aeb9 [ 404.394429][T12241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.414040][T12241] RSP: 002b:00007f8fae821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.422466][T12241] RAX: ffffffffffffffda RBX: 00007f8fadc15fa0 RCX: 00007f8fad99aeb9 [ 404.430433][T12241] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 404.438400][T12241] RBP: 00007f8fae821090 R08: 0000000000000000 R09: 0000000000000000 [ 404.446370][T12241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.454337][T12241] R13: 00007f8fadc16038 R14: 00007f8fadc15fa0 R15: 00007fffc8a8f9a8 [ 404.462326][T12241] [ 404.757947][T12260] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2413'. [ 406.421277][T12260] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 406.434337][T12273] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 406.442252][T12260] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 406.453591][T12260] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 407.070206][T12298] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2421'. [ 409.681994][T12294] O3ãc¤±ÿÿ: renamed from bridge_slave_0 [ 409.937676][T12301] netlink: 'syz.0.2425': attribute type 10 has an invalid length. [ 409.952913][T12301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2425'. [ 409.967835][T12301] bridge0: port 3(veth0_vlan) entered blocking state [ 409.997690][T12301] bridge0: port 3(veth0_vlan) entered disabled state [ 410.040579][T12301] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 410.066194][T12310] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.2425'. [ 410.151315][T12311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.382478][T12321] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 410.586441][T12325] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2432'. [ 410.815809][T12306] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2426'. [ 410.977796][T12335] pimreg0: tun_chr_ioctl cmd 35111 [ 411.069855][T12340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.251523][T12345] FAULT_INJECTION: forcing a failure. [ 411.251523][T12345] name failslab, interval 1, probability 0, space 0, times 0 [ 411.266871][T12348] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2434'. [ 411.276887][T12345] CPU: 0 PID: 12345 Comm: syz.0.2440 Not tainted syzkaller #0 [ 411.284555][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.294696][T12345] Call Trace: [ 411.298145][T12345] [ 411.301070][T12345] dump_stack_lvl+0x188/0x24e [ 411.305836][T12345] ? show_regs_print_info+0x12/0x12 [ 411.311037][T12345] ? load_image+0x400/0x400 [ 411.315535][T12345] ? __might_sleep+0xd0/0xd0 [ 411.320115][T12345] ? __lock_acquire+0x7d10/0x7d10 [ 411.325143][T12345] should_fail_ex+0x399/0x4d0 [ 411.329820][T12345] should_failslab+0x5/0x20 [ 411.334321][T12345] slab_pre_alloc_hook+0x59/0x310 [ 411.339336][T12345] ? page_pool_create+0x6d/0x5c0 [ 411.344270][T12345] __kmem_cache_alloc_node+0x4f/0x260 [ 411.349632][T12345] ? page_pool_create+0x6d/0x5c0 [ 411.354577][T12345] kmalloc_node_trace+0x22/0xe0 [ 411.359462][T12345] page_pool_create+0x6d/0x5c0 [ 411.364250][T12345] bpf_test_run_xdp_live+0x223/0x1a90 [ 411.369639][T12345] ? 0xffffffffa0004440 [ 411.373804][T12345] ? text_poke_copy+0x79/0x90 [ 411.378481][T12345] ? 0xffffffffa0004440 [ 411.382643][T12345] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 411.388573][T12345] ? 0xffffffffa0004440 [ 411.392746][T12345] ? xdp_convert_md_to_buff+0x330/0x330 [ 411.398317][T12345] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 411.404558][T12345] ? bpf_test_init+0x119/0x140 [ 411.409317][T12345] ? xdp_convert_md_to_buff+0x5b/0x330 [ 411.414777][T12345] bpf_prog_test_run_xdp+0x736/0xf10 [ 411.420064][T12345] ? dev_put+0x80/0x80 [ 411.424132][T12345] ? dev_put+0x80/0x80 [ 411.428191][T12345] bpf_prog_test_run+0x31e/0x390 [ 411.433122][T12345] __sys_bpf+0x62b/0x780 [ 411.437362][T12345] ? bpf_link_show_fdinfo+0x380/0x380 [ 411.442735][T12345] ? lock_chain_count+0x20/0x20 [ 411.447589][T12345] __x64_sys_bpf+0x78/0x90 [ 411.452000][T12345] do_syscall_64+0x4c/0xa0 [ 411.456410][T12345] ? clear_bhb_loop+0x60/0xb0 [ 411.461083][T12345] ? clear_bhb_loop+0x60/0xb0 [ 411.465752][T12345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.471638][T12345] RIP: 0033:0x7f8fad99aeb9 [ 411.476045][T12345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.495644][T12345] RSP: 002b:00007f8fae821028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.504049][T12345] RAX: ffffffffffffffda RBX: 00007f8fadc15fa0 RCX: 00007f8fad99aeb9 [ 411.512011][T12345] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 411.519974][T12345] RBP: 00007f8fae821090 R08: 0000000000000000 R09: 0000000000000000 [ 411.527935][T12345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.535895][T12345] R13: 00007f8fadc16038 R14: 00007f8fadc15fa0 R15: 00007fffc8a8f9a8 [ 411.543871][T12345] [ 411.594832][T12352] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 411.637927][T12353] netlink: 'syz.2.2441': attribute type 10 has an invalid length. [ 411.657997][T12353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2441'. [ 411.679237][T12347] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2441'. [ 412.245447][T12376] delete_channel: no stack [ 412.250942][T12376] delete_channel: no stack [ 412.279032][T12379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 412.752355][ T34] wlan1: Trigger new scan to find an IBSS to join [ 412.926353][T12392] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 412.959743][T12392] netlink: 'syz.0.2453': attribute type 39 has an invalid length. [ 413.043544][T12377] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2449'. [ 413.159792][T12399] netlink: 'syz.2.2456': attribute type 10 has an invalid length. [ 413.189099][T12399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2456'. [ 413.209042][T12401] netlink: 'syz.4.2457': attribute type 21 has an invalid length. [ 413.224725][T12401] netlink: 'syz.4.2457': attribute type 5 has an invalid length. [ 413.317239][T12404] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2456'. [ 413.562835][T12414] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 413.705766][T12420] netlink: 'syz.4.2463': attribute type 29 has an invalid length. [ 413.724824][T12420] netlink: 'syz.4.2463': attribute type 29 has an invalid length. [ 413.745310][T12420] netlink: 'syz.4.2463': attribute type 29 has an invalid length. [ 414.068604][T12437] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 414.489934][T12445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.398437][T12452] validate_nla: 1 callbacks suppressed [ 415.398469][T12452] netlink: 'syz.4.2474': attribute type 10 has an invalid length. [ 415.511883][T12452] __nla_validate_parse: 3 callbacks suppressed [ 415.511918][T12452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2474'. [ 415.555361][T12452] bridge0: port 4(veth0_vlan) entered blocking state [ 415.589432][T12452] bridge0: port 4(veth0_vlan) entered disabled state [ 415.650199][T12452] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 415.722729][T12464] netlink: 'syz.3.2478': attribute type 29 has an invalid length. [ 415.731123][T12466] device bridge_slave_1 left promiscuous mode [ 415.761276][T12466] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.792503][ T6248] wlan1: Trigger new scan to find an IBSS to join [ 415.810740][T12466] device O3ãc¤±ÿÿ left promiscuous mode [ 415.846195][T12466] bridge0: port 1(O3ãc¤±ÿÿ) entered disabled state [ 415.868625][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 415.898146][T12443] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2470'. [ 416.025742][T12455] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.2474'. [ 416.042476][T12464] netlink: 'syz.3.2478': attribute type 29 has an invalid length. [ 416.088911][T12469] netlink: 'syz.3.2478': attribute type 29 has an invalid length. [ 416.315309][T12481] netlink: 'syz.3.2483': attribute type 21 has an invalid length. [ 416.325201][T12481] netlink: 'syz.3.2483': attribute type 5 has an invalid length. [ 416.877026][T12497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.618146][T12512] netlink: 'syz.3.2493': attribute type 10 has an invalid length. [ 417.657730][T12517] netlink: 'syz.2.2494': attribute type 29 has an invalid length. [ 417.666311][T12512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2493'. [ 417.796376][T12512] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 417.834257][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'. [ 417.858135][T12517] netlink: 'syz.2.2494': attribute type 29 has an invalid length. [ 417.872837][T12515] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.2493'. [ 417.920395][T12521] netlink: 'syz.2.2494': attribute type 29 has an invalid length. [ 418.242892][T12542] delete_channel: no stack [ 418.247461][T12542] delete_channel: no stack [ 418.405656][T12493] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2486'. [ 418.474084][T12546] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2501'. [ 418.842478][ T6248] wlan1: Trigger new scan to find an IBSS to join [ 418.862506][ T4269] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 420.363237][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 422.399958][ T4352] wlan1: Creating new IBSS network, BSSID fa:38:71:00:0d:ae [ 422.727771][T12585] validate_nla: 5 callbacks suppressed [ 422.727800][T12585] netlink: 'syz.0.2512': attribute type 10 has an invalid length. [ 422.752415][T12585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2512'. [ 422.771090][T12585] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 422.794285][T12590] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.2512'. [ 423.065977][T12595] netlink: 'syz.1.2513': attribute type 21 has an invalid length. [ 423.093222][T12595] netlink: 'syz.1.2513': attribute type 5 has an invalid length. [ 423.129660][T12602] delete_channel: no stack [ 423.152816][T12602] delete_channel: no stack [ 423.459877][T12582] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2511'. [ 424.071193][T12622] FAULT_INJECTION: forcing a failure. [ 424.071193][T12622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.126009][T12622] CPU: 1 PID: 12622 Comm: syz.2.2519 Not tainted syzkaller #0 [ 424.133523][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.143607][T12622] Call Trace: [ 424.146902][T12622] [ 424.149843][T12622] dump_stack_lvl+0x188/0x24e [ 424.154548][T12622] ? show_regs_print_info+0x12/0x12 [ 424.159788][T12622] ? load_image+0x400/0x400 [ 424.164322][T12622] ? __lock_acquire+0x7d10/0x7d10 [ 424.169387][T12622] should_fail_ex+0x399/0x4d0 [ 424.174101][T12622] _copy_from_user+0x2c/0x170 [ 424.178799][T12622] ___sys_sendmsg+0x1c3/0x360 [ 424.183507][T12622] ? __sys_sendmsg+0x290/0x290 [ 424.188310][T12622] ? __lock_acquire+0x7d10/0x7d10 [ 424.193380][T12622] __se_sys_sendmsg+0x1bb/0x2a0 [ 424.198275][T12622] ? ct_nmi_exit+0x145/0x1c0 [ 424.202892][T12622] ? __x64_sys_sendmsg+0x80/0x80 [ 424.207865][T12622] ? lockdep_hardirqs_on+0x94/0x140 [ 424.213085][T12622] do_syscall_64+0x4c/0xa0 [ 424.217513][T12622] ? clear_bhb_loop+0x60/0xb0 [ 424.222201][T12622] ? clear_bhb_loop+0x60/0xb0 [ 424.226994][T12622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.232897][T12622] RIP: 0033:0x7ff00859aeb9 [ 424.237317][T12622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.256933][T12622] RSP: 002b:00007ff0093bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.265359][T12622] RAX: ffffffffffffffda RBX: 00007ff008815fa0 RCX: 00007ff00859aeb9 [ 424.273353][T12622] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 424.281380][T12622] RBP: 00007ff0093bf090 R08: 0000000000000000 R09: 0000000000000000 [ 424.289539][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.297525][T12622] R13: 00007ff008816038 R14: 00007ff008815fa0 R15: 00007ffee3b4fee8 [ 424.305524][T12622] [ 424.696611][T12619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 424.708171][T12632] FAULT_INJECTION: forcing a failure. [ 424.708171][T12632] name failslab, interval 1, probability 0, space 0, times 0 [ 424.721269][T12632] CPU: 0 PID: 12632 Comm: syz.1.2523 Not tainted syzkaller #0 [ 424.728754][T12632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.738821][T12632] Call Trace: [ 424.742112][T12632] [ 424.745050][T12632] dump_stack_lvl+0x188/0x24e [ 424.749754][T12632] ? show_regs_print_info+0x12/0x12 [ 424.754970][T12632] ? load_image+0x400/0x400 [ 424.759489][T12632] ? __local_bh_enable_ip+0x136/0x1c0 [ 424.764875][T12632] ? lockdep_hardirqs_on+0x94/0x140 [ 424.770096][T12632] should_fail_ex+0x399/0x4d0 [ 424.774806][T12632] should_failslab+0x5/0x20 [ 424.779330][T12632] slab_pre_alloc_hook+0x59/0x310 [ 424.784372][T12632] ? tipc_topsrv_queue_evt+0xeb/0x2d0 [ 424.789760][T12632] __kmem_cache_alloc_node+0x4f/0x260 [ 424.795141][T12632] ? tipc_topsrv_queue_evt+0x2d0/0x2d0 [ 424.800613][T12632] ? tipc_topsrv_queue_evt+0xeb/0x2d0 [ 424.805996][T12632] kmalloc_trace+0x26/0xe0 [ 424.810435][T12632] tipc_topsrv_queue_evt+0xeb/0x2d0 [ 424.815653][T12632] tipc_sub_report_overlap+0x4b4/0x8a0 [ 424.821141][T12632] tipc_nametbl_insert_publ+0xdb9/0x1310 [ 424.826819][T12632] tipc_nametbl_publish+0xc3/0x1e0 [ 424.831954][T12632] tipc_sk_publish+0x1c4/0x450 [ 424.836731][T12632] ? __lock_acquire+0x7d10/0x7d10 [ 424.841774][T12632] ? tipc_sk_withdraw+0x640/0x640 [ 424.846817][T12632] ? tipc_nametbl_build_group+0x2a/0x4c0 [ 424.852466][T12632] ? tipc_nametbl_build_group+0x484/0x4c0 [ 424.858205][T12632] ? tipc_nametbl_build_group+0x2a/0x4c0 [ 424.863864][T12632] tipc_sk_join+0x3a4/0x6a0 [ 424.868382][T12632] ? lockdep_hardirqs_on+0x94/0x140 [ 424.873604][T12632] ? __local_bh_enable_ip+0x136/0x1c0 [ 424.878991][T12632] ? __tipc_sendstream+0x12f0/0x12f0 [ 424.884309][T12632] tipc_setsockopt+0x6bf/0x960 [ 424.889100][T12632] ? tipc_shutdown+0x560/0x560 [ 424.893877][T12632] ? aa_sock_opt_perm+0x74/0x100 [ 424.898827][T12632] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 424.904385][T12632] ? security_socket_setsockopt+0x7a/0xa0 [ 424.910126][T12632] ? tipc_shutdown+0x560/0x560 [ 424.914903][T12632] __sys_setsockopt+0x2bf/0x3d0 [ 424.919778][T12632] __x64_sys_setsockopt+0xb1/0xc0 [ 424.924820][T12632] do_syscall_64+0x4c/0xa0 [ 424.929252][T12632] ? clear_bhb_loop+0x60/0xb0 [ 424.933937][T12632] ? clear_bhb_loop+0x60/0xb0 [ 424.938627][T12632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.944532][T12632] RIP: 0033:0x7fc124b9aeb9 [ 424.948960][T12632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.968575][T12632] RSP: 002b:00007fc1259d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 424.977006][T12632] RAX: ffffffffffffffda RBX: 00007fc124e16090 RCX: 00007fc124b9aeb9 [ 424.984988][T12632] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 424.992966][T12632] RBP: 00007fc1259d4090 R08: 00000000000004bd R09: 0000000000000000 [ 425.000942][T12632] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 425.008922][T12632] R13: 00007fc124e16128 R14: 00007fc124e16090 R15: 00007ffcc4aafc98 [ 425.016923][T12632] [ 425.110157][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 425.301436][T12643] netlink: 'syz.4.2528': attribute type 10 has an invalid length. [ 425.320391][T12643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2528'. [ 425.334441][T12643] bridge0: port 4(veth0_vlan) entered blocking state [ 425.342738][T12643] bridge0: port 4(veth0_vlan) entered disabled state [ 425.370462][T12643] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 425.419608][T12650] delete_channel: no stack [ 425.436669][T12650] delete_channel: no stack [ 425.446676][T12647] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.2528'. [ 425.752463][T12613] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2517'. [ 426.301889][T12672] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2536'. [ 426.338430][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'. [ 427.435947][T12723] netlink: 'syz.3.2553': attribute type 29 has an invalid length. [ 427.444212][T12723] netlink: 'syz.3.2553': attribute type 29 has an invalid length. [ 427.457323][T12723] netlink: 'syz.3.2553': attribute type 29 has an invalid length. [ 427.519331][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2553'. [ 427.588257][T12727] -1: renamed from syzkaller0 [ 428.149139][T12718] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2552'. [ 428.675236][T12750] netlink: 'syz.2.2572': attribute type 10 has an invalid length. [ 428.693968][T12750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2572'. [ 428.716631][T12750] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2572'. [ 428.882153][T12761] netlink: 'syz.0.2567': attribute type 29 has an invalid length. [ 428.890290][T12761] netlink: 'syz.0.2567': attribute type 29 has an invalid length. [ 428.931811][T12764] netlink: 'syz.0.2567': attribute type 29 has an invalid length. [ 429.006028][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2567'. [ 429.017815][T12767] netlink: 'syz.4.2569': attribute type 10 has an invalid length. [ 429.042465][T12767] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2569'. [ 429.058982][T12767] bridge0: port 4(veth0_vlan) entered blocking state [ 429.084759][T12767] bridge0: port 4(veth0_vlan) entered disabled state [ 429.143852][T12767] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 429.167690][T12772] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.2569'. [ 429.182531][T12775] device ÿÿÿÿÿÿ entered promiscuous mode [ 429.635723][T12791] netlink: 'syz.3.2580': attribute type 10 has an invalid length. [ 429.681577][T12791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2580'. [ 429.749167][T12794] netlink: 'syz.4.2582': attribute type 29 has an invalid length. [ 429.785099][T12791] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 429.860957][T12796] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.2580'. [ 429.879356][T12794] netlink: 'syz.4.2582': attribute type 29 has an invalid length. [ 429.890713][T12797] netlink: 'syz.4.2582': attribute type 29 has an invalid length. [ 429.988441][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2582'. [ 430.145392][T12806] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2585'. [ 430.153901][T12804] netlink: 'syz.1.2584': attribute type 1 has an invalid length. [ 430.331983][T12816] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 431.140644][T12842] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 431.449987][T12854] bridge0: port 4(veth0_vlan) entered blocking state [ 431.457281][T12854] bridge0: port 4(veth0_vlan) entered disabled state [ 431.467766][T12854] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 432.436627][T12888] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 432.565052][T12892] device bridge_slave_1 left promiscuous mode [ 432.571375][T12892] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.659237][T12892] device bridge_slave_0 left promiscuous mode [ 432.684210][T12892] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.841308][T12896] bridge0: port 3(dummy0) entered disabled state [ 432.856010][T12896] device bridge_slave_1 left promiscuous mode [ 432.866470][T12896] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.892213][T12896] device bridge_slave_0 left promiscuous mode [ 432.904205][T12896] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.026191][T12912] FAULT_INJECTION: forcing a failure. [ 433.026191][T12912] name failslab, interval 1, probability 0, space 0, times 0 [ 433.055064][T12912] CPU: 1 PID: 12912 Comm: syz.0.2625 Not tainted syzkaller #0 [ 433.062586][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.072688][T12912] Call Trace: [ 433.075980][T12912] [ 433.078923][T12912] dump_stack_lvl+0x188/0x24e [ 433.083632][T12912] ? verify_lock_unused+0x140/0x140 [ 433.088865][T12912] ? show_regs_print_info+0x12/0x12 [ 433.094096][T12912] ? load_image+0x400/0x400 [ 433.098633][T12912] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 433.105258][T12912] ? rcu_is_watching+0x11/0xa0 [ 433.110054][T12912] ? do_trace_netlink_extack+0x9c/0x220 [ 433.115634][T12912] should_fail_ex+0x399/0x4d0 [ 433.120349][T12912] should_failslab+0x5/0x20 [ 433.124879][T12912] slab_pre_alloc_hook+0x59/0x310 [ 433.129933][T12912] ? ___neigh_create+0x6ce/0x24c0 [ 433.134987][T12912] __kmem_cache_alloc_node+0x4f/0x260 [ 433.140394][T12912] ? ___neigh_create+0x6ce/0x24c0 [ 433.145440][T12912] __kmalloc+0xa0/0x240 [ 433.149632][T12912] ___neigh_create+0x6ce/0x24c0 [ 433.154497][T12912] ? neigh_lookup+0x37b/0x400 [ 433.159178][T12912] ? neigh_lookup+0xad/0x400 [ 433.163764][T12912] ? neigh_ifdown+0x30/0x30 [ 433.168279][T12912] ? __nla_parse+0x3c/0x50 [ 433.172701][T12912] neigh_add+0xb6a/0xe50 [ 433.176948][T12912] ? do_raw_spin_unlock+0x11d/0x230 [ 433.182146][T12912] ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0 [ 433.188401][T12912] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 433.193510][T12912] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 433.198624][T12912] ? neigh_proc_dointvec_unres_qlen+0x2a0/0x2a0 [ 433.204862][T12912] rtnetlink_rcv_msg+0x87c/0xfc0 [ 433.209810][T12912] ? rtnetlink_bind+0x80/0x80 [ 433.214489][T12912] ? __local_bh_enable_ip+0x136/0x1c0 [ 433.219858][T12912] ? lockdep_hardirqs_on+0x94/0x140 [ 433.225061][T12912] ? __local_bh_enable_ip+0x136/0x1c0 [ 433.230512][T12912] ? _local_bh_enable+0xa0/0xa0 [ 433.235361][T12912] ? __dev_queue_xmit+0x26b/0x37f0 [ 433.240475][T12912] ? __dev_queue_xmit+0x26b/0x37f0 [ 433.245590][T12912] ? __dev_queue_xmit+0x1c61/0x37f0 [ 433.250878][T12912] ? __dev_queue_xmit+0x26b/0x37f0 [ 433.255994][T12912] ? ref_tracker_free+0x68c/0x840 [ 433.261028][T12912] ? __copy_skb_header+0x3ba/0x4f0 [ 433.266138][T12912] ? refcount_inc+0x70/0x70 [ 433.270650][T12912] ? memcpy+0x3c/0x60 [ 433.274627][T12912] ? __copy_skb_header+0x3ba/0x4f0 [ 433.279740][T12912] ? __skb_clone+0x480/0x790 [ 433.284377][T12912] netlink_rcv_skb+0x1fb/0x450 [ 433.289178][T12912] ? rtnetlink_bind+0x80/0x80 [ 433.293943][T12912] ? netlink_ack+0x1170/0x1170 [ 433.298734][T12912] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.303939][T12912] netlink_unicast+0x74d/0x8d0 [ 433.308715][T12912] netlink_sendmsg+0x8ad/0xbd0 [ 433.313501][T12912] ? netlink_getsockopt+0x550/0x550 [ 433.318728][T12912] ? aa_sock_msg_perm+0x94/0x150 [ 433.323665][T12912] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 433.328942][T12912] ? security_socket_sendmsg+0x7c/0xa0 [ 433.334401][T12912] ? netlink_getsockopt+0x550/0x550 [ 433.339598][T12912] ____sys_sendmsg+0x5be/0x970 [ 433.344367][T12912] ? __sys_sendmsg_sock+0x30/0x30 [ 433.349389][T12912] ? __import_iovec+0x315/0x500 [ 433.354247][T12912] ? import_iovec+0x6f/0xa0 [ 433.358747][T12912] ___sys_sendmsg+0x2a2/0x360 [ 433.363432][T12912] ? __sys_sendmsg+0x290/0x290 [ 433.368224][T12912] ? __lock_acquire+0x7d10/0x7d10 [ 433.373266][T12912] __se_sys_sendmsg+0x1bb/0x2a0 [ 433.378511][T12912] ? __x64_sys_sendmsg+0x80/0x80 [ 433.383495][T12912] ? lockdep_hardirqs_on+0x94/0x140 [ 433.388713][T12912] do_syscall_64+0x4c/0xa0 [ 433.393147][T12912] ? clear_bhb_loop+0x60/0xb0 [ 433.397837][T12912] ? clear_bhb_loop+0x60/0xb0 [ 433.402529][T12912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.408427][T12912] RIP: 0033:0x7f8fad99aeb9 [ 433.412842][T12912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.432451][T12912] RSP: 002b:00007f8fae821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.440865][T12912] RAX: ffffffffffffffda RBX: 00007f8fadc15fa0 RCX: 00007f8fad99aeb9 [ 433.448845][T12912] RDX: 0000000020004800 RSI: 0000200000000080 RDI: 0000000000000005 [ 433.456814][T12912] RBP: 00007f8fae821090 R08: 0000000000000000 R09: 0000000000000000 [ 433.464784][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.472749][T12912] R13: 00007f8fadc16038 R14: 00007f8fadc15fa0 R15: 00007fffc8a8f9a8 [ 433.480734][T12912] [ 433.498476][T12914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 433.635636][T12921] __nla_validate_parse: 13 callbacks suppressed [ 433.635655][T12921] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2627'. [ 434.038949][T12917] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2624'. [ 434.298163][T12934] validate_nla: 11 callbacks suppressed [ 434.298299][T12934] netlink: 'syz.2.2632': attribute type 10 has an invalid length. [ 434.313613][T12934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2632'. [ 434.365949][T12934] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2632'. [ 434.774265][T12946] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2631'. [ 434.976393][T12965] FAULT_INJECTION: forcing a failure. [ 434.976393][T12965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 435.213512][T12965] CPU: 0 PID: 12965 Comm: syz.4.2640 Not tainted syzkaller #0 [ 435.221049][T12965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.231126][T12965] Call Trace: [ 435.234423][T12965] [ 435.237363][T12965] dump_stack_lvl+0x188/0x24e [ 435.242065][T12965] ? show_regs_print_info+0x12/0x12 [ 435.247281][T12965] ? load_image+0x400/0x400 [ 435.251806][T12965] ? __lock_acquire+0x7d10/0x7d10 [ 435.256856][T12965] should_fail_ex+0x399/0x4d0 [ 435.261556][T12965] prepare_alloc_pages+0x1e2/0x5f0 [ 435.266674][T12965] __alloc_pages+0x130/0x4f0 [ 435.271269][T12965] ? zone_statistics+0x170/0x170 [ 435.276210][T12965] ? verify_lock_unused+0x140/0x140 [ 435.281412][T12965] __folio_alloc+0xe/0x30 [ 435.285744][T12965] vma_alloc_folio+0x4a3/0x900 [ 435.290511][T12965] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 435.296324][T12965] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 435.302057][T12965] ? shmem_replace_folio+0xee0/0xee0 [ 435.307358][T12965] ? xas_load+0x127/0x140 [ 435.311692][T12965] ? __filemap_get_folio+0x10f/0xdb0 [ 435.316982][T12965] ? __filemap_get_folio+0xb24/0xdb0 [ 435.322263][T12965] ? __filemap_get_folio+0x10f/0xdb0 [ 435.327557][T12965] ? page_cache_prev_miss+0x380/0x380 [ 435.332931][T12965] ? _raw_spin_unlock_irq+0x1f/0x40 [ 435.338134][T12965] ? _raw_spin_unlock_irq+0x1f/0x40 [ 435.343329][T12965] shmem_get_folio_gfp+0x1361/0x3400 [ 435.348638][T12965] shmem_fallocate+0x8b2/0xfa0 [ 435.353415][T12965] ? shmem_mmap+0x170/0x170 [ 435.357950][T12965] ? rcu_read_lock_any_held+0xb0/0x130 [ 435.363424][T12965] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 435.368728][T12965] vfs_fallocate+0x584/0x6f0 [ 435.373320][T12965] do_vfs_ioctl+0x19af/0x1d40 [ 435.378007][T12965] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 435.383728][T12965] ? tomoyo_path_number_perm+0x205/0x650 [ 435.389364][T12965] ? __lock_acquire+0x7d10/0x7d10 [ 435.394473][T12965] ? slab_free_freelist_hook+0x131/0x1a0 [ 435.400123][T12965] ? tomoyo_path_number_perm+0x205/0x650 [ 435.405756][T12965] ? tomoyo_path_number_perm+0x5a4/0x650 [ 435.411390][T12965] ? tomoyo_path_number_perm+0x205/0x650 [ 435.417029][T12965] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 435.422514][T12965] ? __fget_files+0x28/0x4b0 [ 435.427105][T12965] ? __fget_files+0x28/0x4b0 [ 435.431708][T12965] ? bpf_lsm_file_ioctl+0x5/0x10 [ 435.436646][T12965] ? security_file_ioctl+0x7c/0xa0 [ 435.441757][T12965] __se_sys_ioctl+0x83/0x170 [ 435.446351][T12965] do_syscall_64+0x4c/0xa0 [ 435.450764][T12965] ? clear_bhb_loop+0x60/0xb0 [ 435.455459][T12965] ? clear_bhb_loop+0x60/0xb0 [ 435.460133][T12965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.466023][T12965] RIP: 0033:0x7f2012d9aeb9 [ 435.470434][T12965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.490044][T12965] RSP: 002b:00007f2013c5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.498550][T12965] RAX: ffffffffffffffda RBX: 00007f2013015fa0 RCX: 00007f2012d9aeb9 [ 435.506517][T12965] RDX: 0000200000000040 RSI: 0000000040305828 RDI: 0000000000000003 [ 435.514488][T12965] RBP: 00007f2013c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 435.522455][T12965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.530421][T12965] R13: 00007f2013016038 R14: 00007f2013015fa0 R15: 00007ffeb74df538 [ 435.538411][T12965] [ 436.157376][T12977] netlink: 'syz.3.2642': attribute type 29 has an invalid length. [ 436.325921][T12977] netlink: 'syz.3.2642': attribute type 29 has an invalid length. [ 436.416499][T12981] netlink: 'syz.3.2642': attribute type 29 has an invalid length. [ 436.540079][T12982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 437.730982][T12979] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2644'. [ 438.031821][T13003] netlink: 'syz.3.2648': attribute type 10 has an invalid length. [ 438.132356][T13003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2648'. [ 438.141955][T13003] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 438.295983][T13005] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.2648'. [ 439.204654][T13034] netlink: 'syz.4.2661': attribute type 29 has an invalid length. [ 439.286241][T13034] netlink: 'syz.4.2661': attribute type 29 has an invalid length. [ 439.348072][T13037] netlink: 'syz.4.2661': attribute type 29 has an invalid length. [ 440.208286][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.214816][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.388070][T13052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.537453][T13020] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2655'. [ 440.603974][T13058] netlink: 'syz.4.2668': attribute type 10 has an invalid length. [ 440.626875][T13058] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2668'. [ 440.676778][T13058] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 440.726538][T13061] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.2668'. [ 441.368336][T13064] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2665'. [ 442.006669][T13092] netlink: 'syz.3.2677': attribute type 1 has an invalid length. [ 442.966050][T13108] netlink: 'syz.3.2683': attribute type 10 has an invalid length. [ 443.012247][T13108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2683'. [ 443.061568][T13108] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 443.252358][T13116] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.2683'. [ 444.060911][T13130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.195998][T13135] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2687'. [ 445.783885][T13165] netlink: 'syz.2.2699': attribute type 10 has an invalid length. [ 445.838927][T13165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2699'. [ 445.889724][T13168] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2699'. [ 446.494002][T13183] netlink: 'syz.4.2706': attribute type 7 has an invalid length. [ 447.218984][T13203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 447.223480][T13205] netlink: 'syz.3.2715': attribute type 29 has an invalid length. [ 447.263196][T13205] netlink: 'syz.3.2715': attribute type 29 has an invalid length. [ 447.291733][T13206] netlink: 'syz.3.2715': attribute type 29 has an invalid length. [ 447.342895][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2715'. [ 447.488669][T13213] netlink: 'syz.0.2717': attribute type 29 has an invalid length. [ 447.544010][T13213] netlink: 'syz.0.2717': attribute type 29 has an invalid length. [ 447.561320][T13200] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2714'. [ 447.593187][T13213] netlink: 'syz.0.2717': attribute type 29 has an invalid length. [ 447.700898][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2717'. [ 447.815824][T13219] netlink: 'syz.1.2718': attribute type 10 has an invalid length. [ 447.895822][T13219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2718'. [ 447.987001][T13219] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 448.152147][T13222] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.2718'. [ 448.755874][T13245] netlink: 'syz.4.2727': attribute type 29 has an invalid length. [ 448.958534][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2729'. [ 449.150177][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2732'. [ 450.194676][T13275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2739'. [ 450.233941][T13275] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 451.854070][T13317] validate_nla: 9 callbacks suppressed [ 451.854088][T13317] netlink: 'syz.4.2756': attribute type 29 has an invalid length. [ 451.940346][T13317] netlink: 'syz.4.2756': attribute type 29 has an invalid length. [ 452.003246][T13321] netlink: 'syz.4.2756': attribute type 29 has an invalid length. [ 452.343528][T13326] netlink: 'syz.2.2758': attribute type 10 has an invalid length. [ 452.351809][T13326] __nla_validate_parse: 1 callbacks suppressed [ 452.351843][T13326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2758'. [ 452.457006][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 452.567311][T13332] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2758'. [ 453.523098][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 453.668683][T13356] netlink: 'syz.4.2769': attribute type 29 has an invalid length. [ 453.707266][T13356] netlink: 'syz.4.2769': attribute type 29 has an invalid length. [ 453.769622][T13360] netlink: 'syz.4.2769': attribute type 29 has an invalid length. [ 454.226104][T13375] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2777'. [ 454.238641][T13371] netlink: 'syz.1.2775': attribute type 10 has an invalid length. [ 454.248551][T13371] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2775'. [ 454.297608][T13371] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 454.343784][T13377] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.2775'. [ 454.706609][T13390] netlink: 'syz.2.2784': attribute type 29 has an invalid length. [ 454.751163][T13390] netlink: 'syz.2.2784': attribute type 29 has an invalid length. [ 454.793776][T13394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2785'. [ 455.603646][T13413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2791'. [ 455.626262][T13413] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 455.708327][T13415] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.2791'. [ 456.612322][T13441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.007650][T13444] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2800'. [ 457.290156][T13459] validate_nla: 8 callbacks suppressed [ 457.290175][T13459] netlink: 'syz.1.2806': attribute type 29 has an invalid length. [ 457.340783][T13459] netlink: 'syz.1.2806': attribute type 29 has an invalid length. [ 457.362877][T13461] netlink: 'syz.1.2806': attribute type 29 has an invalid length. [ 457.444413][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2806'. [ 457.618468][T13469] netlink: 'syz.4.2808': attribute type 29 has an invalid length. [ 457.638132][T13469] netlink: 'syz.4.2808': attribute type 29 has an invalid length. [ 457.657625][T13469] netlink: 'syz.4.2808': attribute type 29 has an invalid length. [ 457.828287][T13472] netlink: 'syz.1.2809': attribute type 10 has an invalid length. [ 457.857092][T13472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2809'. [ 457.904122][T13472] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 457.931195][T13476] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.2809'. [ 458.834352][T13503] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.118884][T13514] netlink: 'syz.2.2819': attribute type 29 has an invalid length. [ 459.163035][T13514] netlink: 'syz.2.2819': attribute type 29 has an invalid length. [ 459.212883][T13497] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2816'. [ 459.259716][T13514] netlink: 'syz.2.2819': attribute type 29 has an invalid length. [ 459.439369][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2819'. [ 459.865345][T13529] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2823'. [ 459.967353][T13529] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2823'. [ 461.845543][T13564] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2833'. [ 462.098640][T13566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.541642][T13574] validate_nla: 8 callbacks suppressed [ 462.541659][T13574] netlink: 'syz.0.2836': attribute type 29 has an invalid length. [ 462.614954][T13560] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2834'. [ 462.683115][T13574] netlink: 'syz.0.2836': attribute type 29 has an invalid length. [ 462.726219][T13575] netlink: 'syz.0.2836': attribute type 29 has an invalid length. [ 462.793196][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'. [ 464.297157][T13602] netlink: 'syz.1.2846': attribute type 29 has an invalid length. [ 464.348183][T13602] netlink: 'syz.1.2846': attribute type 29 has an invalid length. [ 464.545445][T13604] netlink: 'syz.1.2846': attribute type 29 has an invalid length. [ 465.654163][T13626] netlink: 'syz.1.2853': attribute type 29 has an invalid length. [ 465.708740][T13626] netlink: 'syz.1.2853': attribute type 29 has an invalid length. [ 465.753328][T13633] netlink: 'syz.1.2853': attribute type 29 has an invalid length. [ 465.821292][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2853'. [ 465.903014][T13627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.230758][T13647] netlink: 'syz.3.2859': attribute type 29 has an invalid length. [ 467.243841][T13631] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2852'. [ 468.713895][T13684] validate_nla: 2 callbacks suppressed [ 468.713914][T13684] netlink: 'syz.4.2872': attribute type 29 has an invalid length. [ 468.759497][T13684] netlink: 'syz.4.2872': attribute type 29 has an invalid length. [ 468.777840][T13683] netlink: 'syz.0.2869': attribute type 29 has an invalid length. [ 468.820879][T13689] netlink: 'syz.4.2872': attribute type 29 has an invalid length. [ 468.927433][T13683] netlink: 'syz.0.2869': attribute type 29 has an invalid length. [ 469.083641][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2869'. [ 469.200847][T13688] netlink: 'syz.0.2869': attribute type 29 has an invalid length. [ 469.930749][T13710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.982884][T13702] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2875'. [ 472.179470][T13736] netlink: 'syz.3.2884': attribute type 29 has an invalid length. [ 472.202463][T13736] netlink: 'syz.3.2884': attribute type 29 has an invalid length. [ 472.263697][T13737] netlink: 'syz.3.2884': attribute type 29 has an invalid length. [ 472.588715][T13747] netlink: 'syz.0.2886': attribute type 29 has an invalid length. [ 472.661127][T13747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 472.855122][T13751] FAULT_INJECTION: forcing a failure. [ 472.855122][T13751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.913665][T13751] CPU: 1 PID: 13751 Comm: syz.3.2891 Not tainted syzkaller #0 [ 472.921178][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.931254][T13751] Call Trace: [ 472.934558][T13751] [ 472.937513][T13751] dump_stack_lvl+0x188/0x24e [ 472.942218][T13751] ? show_regs_print_info+0x12/0x12 [ 472.947445][T13751] ? load_image+0x400/0x400 [ 472.951974][T13751] ? __lock_acquire+0x7d10/0x7d10 [ 472.957025][T13751] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 472.963029][T13751] should_fail_ex+0x399/0x4d0 [ 472.967740][T13751] _copy_from_user+0x2c/0x170 [ 472.972430][T13751] ___sys_sendmsg+0x1c3/0x360 [ 472.977141][T13751] ? __sys_sendmsg+0x290/0x290 [ 472.981954][T13751] ? ktime_get_real_ts64+0x440/0x440 [ 472.987285][T13751] __se_sys_sendmsg+0x1bb/0x2a0 [ 472.992162][T13751] ? __x64_sys_sendmsg+0x80/0x80 [ 472.997131][T13751] ? lockdep_hardirqs_on+0x94/0x140 [ 473.002360][T13751] do_syscall_64+0x4c/0xa0 [ 473.006789][T13751] ? clear_bhb_loop+0x60/0xb0 [ 473.011555][T13751] ? clear_bhb_loop+0x60/0xb0 [ 473.016241][T13751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.022157][T13751] RIP: 0033:0x7fb46bb9aeb9 [ 473.026576][T13751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.046193][T13751] RSP: 002b:00007fb46c9e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.054612][T13751] RAX: ffffffffffffffda RBX: 00007fb46be15fa0 RCX: 00007fb46bb9aeb9 [ 473.062585][T13751] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000006 [ 473.070557][T13751] RBP: 00007fb46c9e8090 R08: 0000000000000000 R09: 0000000000000000 [ 473.078526][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.086500][T13751] R13: 00007fb46be16038 R14: 00007fb46be15fa0 R15: 00007ffebc400508 [ 473.094489][T13751] [ 473.374224][T13765] FAULT_INJECTION: forcing a failure. [ 473.374224][T13765] name failslab, interval 1, probability 0, space 0, times 0 [ 473.428867][T13765] CPU: 0 PID: 13765 Comm: syz.0.2896 Not tainted syzkaller #0 [ 473.436388][T13765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.446465][T13765] Call Trace: [ 473.449761][T13765] [ 473.452711][T13765] dump_stack_lvl+0x188/0x24e [ 473.457412][T13765] ? show_regs_print_info+0x12/0x12 [ 473.462648][T13765] ? load_image+0x400/0x400 [ 473.467177][T13765] ? __might_sleep+0xd0/0xd0 [ 473.471791][T13765] ? __lock_acquire+0x7d10/0x7d10 [ 473.476850][T13765] should_fail_ex+0x399/0x4d0 [ 473.481555][T13765] should_failslab+0x5/0x20 [ 473.486079][T13765] slab_pre_alloc_hook+0x59/0x310 [ 473.491130][T13765] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 473.496878][T13765] __kmem_cache_alloc_node+0x4f/0x260 [ 473.502282][T13765] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 473.508030][T13765] __kmalloc+0xa0/0x240 [ 473.512229][T13765] tomoyo_realpath_from_path+0xdf/0x5d0 [ 473.517815][T13765] ? tomoyo_path_number_perm+0x205/0x650 [ 473.523478][T13765] tomoyo_path_number_perm+0x22f/0x650 [ 473.528983][T13765] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 473.534467][T13765] ? ksys_write+0x1c0/0x250 [ 473.538994][T13765] ? common_file_perm+0x171/0x1c0 [ 473.544245][T13765] ? __fget_files+0x28/0x4b0 [ 473.548855][T13765] ? __fget_files+0x28/0x4b0 [ 473.553478][T13765] security_file_ioctl+0x6c/0xa0 [ 473.558434][T13765] __se_sys_ioctl+0x48/0x170 [ 473.563048][T13765] do_syscall_64+0x4c/0xa0 [ 473.567492][T13765] ? clear_bhb_loop+0x60/0xb0 [ 473.572235][T13765] ? clear_bhb_loop+0x60/0xb0 [ 473.576931][T13765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.582835][T13765] RIP: 0033:0x7f8fad99aeb9 [ 473.587263][T13765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.606994][T13765] RSP: 002b:00007f8fae821028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.615424][T13765] RAX: ffffffffffffffda RBX: 00007f8fadc15fa0 RCX: 00007f8fad99aeb9 [ 473.623406][T13765] RDX: 0000000000000000 RSI: 00000000401054d5 RDI: 0000000000000003 [ 473.631391][T13765] RBP: 00007f8fae821090 R08: 0000000000000000 R09: 0000000000000000 [ 473.639370][T13765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.647348][T13765] R13: 00007f8fadc16038 R14: 00007f8fadc15fa0 R15: 00007fffc8a8f9a8 [ 473.655354][T13765] [ 473.855457][T13771] validate_nla: 2 callbacks suppressed [ 473.855473][T13771] netlink: 'syz.1.2899': attribute type 29 has an invalid length. [ 473.902197][T13765] ERROR: Out of memory at tomoyo_realpath_from_path. [ 473.942225][T13771] netlink: 'syz.1.2899': attribute type 29 has an invalid length. [ 473.963063][T13771] netlink: 'syz.1.2899': attribute type 29 has an invalid length. [ 474.244974][T13775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 474.464227][T13787] netlink: 'syz.3.2903': attribute type 29 has an invalid length. [ 474.602533][T13787] netlink: 'syz.3.2903': attribute type 29 has an invalid length. [ 474.652599][T13790] netlink: 'syz.3.2903': attribute type 29 has an invalid length. [ 474.758870][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2903'. [ 474.964886][T13796] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2906'. [ 475.011955][T13769] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2897'. [ 475.280709][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 475.296834][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 475.305147][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 475.314201][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 475.321822][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 475.329191][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 475.964417][T13801] chnl_net:caif_netlink_parms(): no params data found [ 476.288709][T13801] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.413459][T13801] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.433732][T13801] device bridge_slave_0 entered promiscuous mode [ 476.454990][T13801] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.493732][T13801] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.514339][T13801] device bridge_slave_1 entered promiscuous mode [ 477.105260][T13801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.149779][T13801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.266740][T13801] team0: Port device team_slave_0 added [ 477.303263][T13801] team0: Port device team_slave_1 added [ 477.403436][T13802] Bluetooth: hci5: command 0x0409 tx timeout [ 477.469405][T13801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.476908][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.505752][T13801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.537419][T13801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.568055][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.659554][T13801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.867978][T13801] device hsr_slave_0 entered promiscuous mode [ 477.889614][T13801] device hsr_slave_1 entered promiscuous mode [ 477.906267][T13801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.919460][T13801] Cannot create hsr debugfs directory [ 478.526356][T13801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.798763][T13801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.958672][T13801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.044147][T13872] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2929'. [ 479.255192][T13801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.377137][T13885] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2934'. [ 479.472397][T13802] Bluetooth: hci5: command 0x041b tx timeout [ 479.481689][T13890] netlink: 'syz.0.2936': attribute type 10 has an invalid length. [ 479.493586][T13890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2936'. [ 479.541293][T13890] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 479.704198][T13801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 479.735350][T13801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 479.775831][T13801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 479.816414][T13903] netlink: 'syz.0.2939': attribute type 29 has an invalid length. [ 479.856327][T13801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 479.884615][T13903] netlink: 'syz.0.2939': attribute type 29 has an invalid length. [ 479.982860][T13904] netlink: 'syz.0.2939': attribute type 29 has an invalid length. [ 480.172967][T13801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.198381][T13801] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.207454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 480.255422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.315961][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.375604][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.491375][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.498660][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.563917][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.607965][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.756824][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.764017][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.845211][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 480.867459][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 480.877996][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 480.942764][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.973366][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.982674][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.994339][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 481.014462][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 481.038846][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 481.057817][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.097189][T13801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.118769][T13801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 481.138568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 481.167854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.420280][T13936] FAULT_INJECTION: forcing a failure. [ 481.420280][T13936] name failslab, interval 1, probability 0, space 0, times 0 [ 481.492258][T13936] CPU: 1 PID: 13936 Comm: syz.4.2947 Not tainted syzkaller #0 [ 481.499774][T13936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 481.509865][T13936] Call Trace: [ 481.513162][T13936] [ 481.516107][T13936] dump_stack_lvl+0x188/0x24e [ 481.520820][T13936] ? show_regs_print_info+0x12/0x12 [ 481.526041][T13936] ? load_image+0x400/0x400 [ 481.530560][T13936] ? __might_sleep+0xd0/0xd0 [ 481.535160][T13936] ? __lock_acquire+0x7d10/0x7d10 [ 481.540204][T13936] should_fail_ex+0x399/0x4d0 [ 481.544905][T13936] should_failslab+0x5/0x20 [ 481.549409][T13936] slab_pre_alloc_hook+0x59/0x310 [ 481.554449][T13936] ? tomoyo_encode+0x27e/0x540 [ 481.559218][T13936] __kmem_cache_alloc_node+0x4f/0x260 [ 481.564595][T13936] ? tomoyo_encode+0x27e/0x540 [ 481.569361][T13936] __kmalloc+0xa0/0x240 [ 481.573526][T13936] tomoyo_encode+0x27e/0x540 [ 481.578128][T13936] tomoyo_realpath_from_path+0x58e/0x5d0 [ 481.583778][T13936] ? tomoyo_path_number_perm+0x205/0x650 [ 481.589423][T13936] tomoyo_path_number_perm+0x22f/0x650 [ 481.594892][T13936] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 481.600354][T13936] ? ksys_write+0x1c0/0x250 [ 481.604861][T13936] ? common_file_perm+0x171/0x1c0 [ 481.609926][T13936] ? __fget_files+0x28/0x4b0 [ 481.614515][T13936] ? __fget_files+0x28/0x4b0 [ 481.619124][T13936] security_file_ioctl+0x6c/0xa0 [ 481.624068][T13936] __se_sys_ioctl+0x48/0x170 [ 481.628664][T13936] do_syscall_64+0x4c/0xa0 [ 481.633083][T13936] ? clear_bhb_loop+0x60/0xb0 [ 481.637758][T13936] ? clear_bhb_loop+0x60/0xb0 [ 481.642439][T13936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.648326][T13936] RIP: 0033:0x7f2012d9aeb9 [ 481.652740][T13936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.672349][T13936] RSP: 002b:00007f2013c5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.680780][T13936] RAX: ffffffffffffffda RBX: 00007f2013015fa0 RCX: 00007f2012d9aeb9 [ 481.688763][T13936] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 000000000000000a [ 481.696748][T13936] RBP: 00007f2013c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 481.704741][T13936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.712739][T13936] R13: 00007f2013016038 R14: 00007f2013015fa0 R15: 00007ffeb74df538 [ 481.720802][T13936] [ 481.727593][T13802] Bluetooth: hci5: command 0x040f tx timeout [ 481.812310][T13936] ERROR: Out of memory at tomoyo_realpath_from_path. [ 482.035653][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 482.062466][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 482.072714][T13949] netlink: 'syz.2.2949': attribute type 10 has an invalid length. [ 482.126118][T13933] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2946'. [ 482.165682][T13949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2949'. [ 482.209271][T13801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.245925][T13946] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2949'. [ 482.333334][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 482.374279][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.425176][T13953] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2950'. [ 482.472007][T13801] device veth0_vlan entered promiscuous mode [ 482.510808][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 482.523555][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.552904][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.571031][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.588065][T13801] device veth1_vlan entered promiscuous mode [ 482.632641][T13963] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2952'. [ 482.663499][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 482.681223][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 482.699105][T13964] netlink: 'syz.2.2953': attribute type 29 has an invalid length. [ 482.709532][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 482.718718][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 482.740143][T13801] device veth0_macvtap entered promiscuous mode [ 482.761203][T13801] device veth1_macvtap entered promiscuous mode [ 482.784494][T13964] netlink: 'syz.2.2953': attribute type 29 has an invalid length. [ 482.796389][T13966] netlink: 'syz.2.2953': attribute type 29 has an invalid length. [ 482.845592][T13801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.865348][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.882940][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.942411][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.974153][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.996833][T13801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.019116][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 483.034078][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 483.086126][T13801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.112441][T13801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.121188][T13801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.172102][T13801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.366450][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.391950][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.559303][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 483.589549][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.615672][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.726652][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 483.802134][T13802] Bluetooth: hci5: command 0x0419 tx timeout [ 484.684842][ T5142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.838231][T14002] FAULT_INJECTION: forcing a failure. [ 484.838231][T14002] name failslab, interval 1, probability 0, space 0, times 0 [ 484.902344][T14002] CPU: 1 PID: 14002 Comm: syz.3.2962 Not tainted syzkaller #0 [ 484.909854][T14002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.919922][T14002] Call Trace: [ 484.923210][T14002] [ 484.926151][T14002] dump_stack_lvl+0x188/0x24e [ 484.930857][T14002] ? show_regs_print_info+0x12/0x12 [ 484.936074][T14002] ? load_image+0x400/0x400 [ 484.940594][T14002] ? __might_sleep+0xd0/0xd0 [ 484.945198][T14002] ? __lock_acquire+0x7d10/0x7d10 [ 484.950243][T14002] should_fail_ex+0x399/0x4d0 [ 484.954951][T14002] should_failslab+0x5/0x20 [ 484.959475][T14002] slab_pre_alloc_hook+0x59/0x310 [ 484.964513][T14002] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 484.970166][T14002] __kmem_cache_alloc_node+0x4f/0x260 [ 484.975559][T14002] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 484.981126][T14002] __kmalloc+0xa0/0x240 [ 484.985306][T14002] bpf_prog_test_run_skb+0x234/0x12a0 [ 484.990692][T14002] ? __fget_files+0x28/0x4b0 [ 484.995303][T14002] ? __fget_files+0x28/0x4b0 [ 484.999923][T14002] ? __fget_files+0x43d/0x4b0 [ 485.004622][T14002] ? cpu_online+0xa0/0xa0 [ 485.008952][T14002] bpf_prog_test_run+0x31e/0x390 [ 485.013890][T14002] __sys_bpf+0x62b/0x780 [ 485.018133][T14002] ? bpf_link_show_fdinfo+0x380/0x380 [ 485.023512][T14002] ? lock_chain_count+0x20/0x20 [ 485.028366][T14002] __x64_sys_bpf+0x78/0x90 [ 485.032790][T14002] do_syscall_64+0x4c/0xa0 [ 485.037202][T14002] ? clear_bhb_loop+0x60/0xb0 [ 485.041872][T14002] ? clear_bhb_loop+0x60/0xb0 [ 485.046542][T14002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.052431][T14002] RIP: 0033:0x7fb46bb9aeb9 [ 485.056837][T14002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.076442][T14002] RSP: 002b:00007fb46c9c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.084848][T14002] RAX: ffffffffffffffda RBX: 00007fb46be16090 RCX: 00007fb46bb9aeb9 [ 485.092812][T14002] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 485.100790][T14002] RBP: 00007fb46c9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 485.108783][T14002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.116755][T14002] R13: 00007fb46be16128 R14: 00007fb46be16090 R15: 00007ffebc400508 [ 485.124753][T14002] [ 485.210213][T14006] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.2965'. [ 485.252157][T14006] openvswitch: netlink: Flow actions attr not present in new flow. [ 485.576256][T13802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.586412][T13802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.594948][T13802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.622690][T13802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.630412][T13802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 485.635308][T13999] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2961'. [ 485.648085][T13802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 486.147607][T14020] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.2971'. [ 486.178994][T14020] openvswitch: netlink: Flow actions attr not present in new flow. [ 486.774048][ T4352] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.037545][ T4352] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.526365][ T4352] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.649467][T14008] chnl_net:caif_netlink_parms(): no params data found [ 487.715241][T13802] Bluetooth: hci0: command 0x0409 tx timeout [ 487.912955][ T4352] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.351164][T14008] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.391291][T14008] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.421804][T14008] device bridge_slave_0 entered promiscuous mode [ 488.872641][T14008] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.882329][T14008] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.899529][T14008] device bridge_slave_1 entered promiscuous mode [ 488.917482][T14051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2978'. [ 489.177610][T14008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.237425][T14008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.248104][T14063] netlink: 'syz.0.2981': attribute type 29 has an invalid length. [ 489.296685][T14055] netlink: 'syz.2.2979': attribute type 10 has an invalid length. [ 489.364953][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'. [ 489.406377][T14055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2979'. [ 489.731389][T14061] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2979'. [ 489.774910][T14063] netlink: 'syz.0.2981': attribute type 29 has an invalid length. [ 489.792257][T13802] Bluetooth: hci0: command 0x041b tx timeout [ 489.867084][T14059] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2980'. [ 490.035854][T14067] netlink: 'syz.0.2981': attribute type 29 has an invalid length. [ 490.079929][T14008] team0: Port device team_slave_0 added [ 490.188983][T14008] team0: Port device team_slave_1 added [ 490.370775][T14008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.402597][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.530165][T14008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.648864][T14008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.677490][T14008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.811133][T14008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.047408][T14008] device hsr_slave_0 entered promiscuous mode [ 491.097680][T14008] device hsr_slave_1 entered promiscuous mode [ 491.116480][T14008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.130072][T14008] Cannot create hsr debugfs directory [ 491.742451][T14107] netlink: 'syz.2.2990': attribute type 21 has an invalid length. [ 491.746586][T14113] netlink: 'syz.3.2993': attribute type 29 has an invalid length. [ 491.770765][T14107] netlink: 'syz.2.2990': attribute type 11 has an invalid length. [ 491.861862][T14113] netlink: 'syz.3.2993': attribute type 29 has an invalid length. [ 491.872167][T13802] Bluetooth: hci0: command 0x040f tx timeout [ 491.878710][T14115] netlink: 'syz.3.2993': attribute type 29 has an invalid length. [ 492.009102][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2993'. [ 492.300648][ T4352] device hsr_slave_0 left promiscuous mode [ 492.376195][ T4352] device veth1_vlan left promiscuous mode [ 493.409751][T14130] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2995'. [ 493.953871][T13802] Bluetooth: hci0: command 0x0419 tx timeout [ 494.047874][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.626069][ T4352] bond0 (unregistering): Released all slaves [ 494.674402][T14128] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2996'. [ 494.687491][T14131] netlink: 'syz.3.2996': attribute type 21 has an invalid length. [ 494.704767][T14131] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2996'. [ 494.734097][T14151] netlink: 'syz.1.3001': attribute type 25 has an invalid length. [ 495.195421][T14163] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3005'. [ 495.506595][T14171] netlink: 'syz.0.3006': attribute type 29 has an invalid length. [ 495.610481][T14171] netlink: 'syz.0.3006': attribute type 29 has an invalid length. [ 495.694855][T14173] netlink: 'syz.0.3006': attribute type 29 has an invalid length. [ 495.881563][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3006'. [ 495.943213][T14178] netlink: 'syz.3.3007': attribute type 10 has an invalid length. [ 495.951071][T14178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3007'. [ 496.006697][T14178] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 496.122437][T14175] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.3007'. [ 496.427459][T14008] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 496.465919][T14008] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 496.516314][T14008] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 496.586443][T14008] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 496.781658][T14008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.811821][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 496.825343][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.861050][T14008] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.886084][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.899513][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.930324][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.937551][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.999187][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 497.041845][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.080159][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.124828][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.131958][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.183945][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.227793][T14224] netlink: 'syz.3.3020': attribute type 29 has an invalid length. [ 497.254309][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.285422][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.323571][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.367013][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.428049][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.445434][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'. [ 497.484270][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.514503][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.107808][T14008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.160504][T14235] FAULT_INJECTION: forcing a failure. [ 498.160504][T14235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.186810][T14008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 498.422907][T14224] netlink: 'syz.3.3020': attribute type 29 has an invalid length. [ 498.522392][T14235] CPU: 1 PID: 14235 Comm: syz.2.3022 Not tainted syzkaller #0 [ 498.528911][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 498.529874][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.547123][T14235] Call Trace: [ 498.550409][T14235] [ 498.553342][T14235] dump_stack_lvl+0x188/0x24e [ 498.558033][T14235] ? show_regs_print_info+0x12/0x12 [ 498.563238][T14235] ? load_image+0x400/0x400 [ 498.567739][T14235] ? __lock_acquire+0x7d10/0x7d10 [ 498.572767][T14235] should_fail_ex+0x399/0x4d0 [ 498.577448][T14235] _copy_from_user+0x2c/0x170 [ 498.582128][T14235] ___sys_sendmsg+0x1c3/0x360 [ 498.586806][T14235] ? __sys_sendmsg+0x290/0x290 [ 498.591586][T14235] ? __lock_acquire+0x7d10/0x7d10 [ 498.596623][T14235] __se_sys_sendmsg+0x1bb/0x2a0 [ 498.601471][T14235] ? ct_nmi_exit+0x145/0x1c0 [ 498.606055][T14235] ? __x64_sys_sendmsg+0x80/0x80 [ 498.611001][T14235] ? lockdep_hardirqs_on+0x94/0x140 [ 498.616201][T14235] do_syscall_64+0x4c/0xa0 [ 498.620613][T14235] ? clear_bhb_loop+0x60/0xb0 [ 498.625282][T14235] ? clear_bhb_loop+0x60/0xb0 [ 498.629953][T14235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.635839][T14235] RIP: 0033:0x7ff00859aeb9 [ 498.640252][T14235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.659852][T14235] RSP: 002b:00007ff0093bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.668263][T14235] RAX: ffffffffffffffda RBX: 00007ff008815fa0 RCX: 00007ff00859aeb9 [ 498.676227][T14235] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 498.684188][T14235] RBP: 00007ff0093bf090 R08: 0000000000000000 R09: 0000000000000000 [ 498.692150][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.700110][T14235] R13: 00007ff008816038 R14: 00007ff008815fa0 R15: 00007ffee3b4fee8 [ 498.708261][T14235] [ 498.743533][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 498.762509][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.891965][T14236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.202852][T14240] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3018'. [ 499.838660][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.856859][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.895288][T14008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.991642][T14275] FAULT_INJECTION: forcing a failure. [ 499.991642][T14275] name failslab, interval 1, probability 0, space 0, times 0 [ 500.092404][T14271] netlink: 'syz.0.3028': attribute type 10 has an invalid length. [ 500.100285][T14271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3028'. [ 500.195050][T14275] CPU: 0 PID: 14275 Comm: syz.2.3031 Not tainted syzkaller #0 [ 500.202574][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.212652][T14275] Call Trace: [ 500.215959][T14275] [ 500.218909][T14275] dump_stack_lvl+0x188/0x24e [ 500.223621][T14275] ? show_regs_print_info+0x12/0x12 [ 500.228863][T14275] ? load_image+0x400/0x400 [ 500.233397][T14275] ? __might_sleep+0xd0/0xd0 [ 500.238007][T14275] ? __lock_acquire+0x7d10/0x7d10 [ 500.243139][T14275] should_fail_ex+0x399/0x4d0 [ 500.247855][T14275] should_failslab+0x5/0x20 [ 500.252467][T14275] slab_pre_alloc_hook+0x59/0x310 [ 500.257531][T14275] kmem_cache_alloc_node+0x5a/0x320 [ 500.262756][T14275] ? __alloc_skb+0xfc/0x7e0 [ 500.267295][T14275] __alloc_skb+0xfc/0x7e0 [ 500.271661][T14275] ? netlink_autobind+0xda/0x300 [ 500.276636][T14275] netlink_sendmsg+0x654/0xbd0 [ 500.281448][T14275] ? netlink_getsockopt+0x550/0x550 [ 500.286676][T14275] ? aa_sock_msg_perm+0x94/0x150 [ 500.291641][T14275] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 500.296940][T14275] ? security_socket_sendmsg+0x7c/0xa0 [ 500.302424][T14275] ? netlink_getsockopt+0x550/0x550 [ 500.307644][T14275] ____sys_sendmsg+0x5be/0x970 [ 500.312451][T14275] ? __sys_sendmsg_sock+0x30/0x30 [ 500.317518][T14275] ? __import_iovec+0x315/0x500 [ 500.322413][T14275] ? import_iovec+0x6f/0xa0 [ 500.326950][T14275] ___sys_sendmsg+0x2a2/0x360 [ 500.331677][T14275] ? __sys_sendmsg+0x290/0x290 [ 500.336523][T14275] ? __lock_acquire+0x7d10/0x7d10 [ 500.341620][T14275] __se_sys_sendmsg+0x1bb/0x2a0 [ 500.346512][T14275] ? __x64_sys_sendmsg+0x80/0x80 [ 500.351502][T14275] ? lockdep_hardirqs_on+0x94/0x140 [ 500.356743][T14275] do_syscall_64+0x4c/0xa0 [ 500.361178][T14275] ? clear_bhb_loop+0x60/0xb0 [ 500.365873][T14275] ? clear_bhb_loop+0x60/0xb0 [ 500.370579][T14275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.376486][T14275] RIP: 0033:0x7ff00859aeb9 [ 500.380920][T14275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.400545][T14275] RSP: 002b:00007ff0093bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.408985][T14275] RAX: ffffffffffffffda RBX: 00007ff008815fa0 RCX: 00007ff00859aeb9 [ 500.416975][T14275] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 500.424960][T14275] RBP: 00007ff0093bf090 R08: 0000000000000000 R09: 0000000000000000 [ 500.432948][T14275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.440934][T14275] R13: 00007ff008816038 R14: 00007ff008815fa0 R15: 00007ffee3b4fee8 [ 500.448955][T14275] [ 500.577120][T14271] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 501.044166][T14289] netlink: 'syz.3.3032': attribute type 10 has an invalid length. [ 501.137255][T14289] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 501.157131][T14295] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3032'. [ 501.180209][T14294] netlink: 'syz.0.3034': attribute type 10 has an invalid length. [ 501.199269][T14294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3034'. [ 501.218557][T14294] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 501.403372][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.409711][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.572378][T14304] sctp: [Deprecated]: syz.3.3036 (pid 14304) Use of int in max_burst socket option deprecated. [ 501.572378][T14304] Use struct sctp_assoc_value instead [ 501.723297][T14304] netlink: 'syz.3.3036': attribute type 11 has an invalid length. [ 501.731173][T14304] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3036'. [ 501.828135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.852698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.935970][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.961662][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.989162][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.029749][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.078426][T14008] device veth0_vlan entered promiscuous mode [ 502.121265][T14008] device veth1_vlan entered promiscuous mode [ 502.246161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.255451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 502.291701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.319101][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.376970][T14008] device veth0_macvtap entered promiscuous mode [ 502.397950][T14008] device veth1_macvtap entered promiscuous mode [ 502.447519][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.498768][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.527193][T14008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.575181][T14321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 502.654919][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 502.676601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 502.722586][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 502.748650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 502.786705][T14008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.803537][T14008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.848746][T14008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.875980][T14008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.892375][T14008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.932140][T14008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.955911][T14008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.996029][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 503.023221][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 503.031612][T14312] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3038'. [ 504.801813][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.819936][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.046973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 505.148868][ T5142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.196240][ T5142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.218176][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 505.787207][T14372] netlink: 'syz.4.2964': attribute type 29 has an invalid length. [ 505.861049][T14372] netlink: 'syz.4.2964': attribute type 29 has an invalid length. [ 505.905243][T14375] netlink: 'syz.4.2964': attribute type 29 has an invalid length. [ 506.705513][T13802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 506.714930][T13802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 506.732949][T13802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 506.741743][T13802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 506.749621][T13802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 506.758789][T13802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 507.523233][ T4271] bond0: (slave syz_tun): Releasing backup interface [ 507.991145][ T6249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.354098][ T6249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.624533][ T6249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.760353][ T6249] bond0: (slave netdevsim0): Releasing backup interface [ 508.842584][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 508.854740][ T6249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.062827][T14426] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3055'. [ 509.077523][T14398] chnl_net:caif_netlink_parms(): no params data found [ 509.460196][T14415] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3053'. [ 509.662424][T14398] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.691638][T14398] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.731210][T14398] device bridge_slave_0 entered promiscuous mode [ 509.754107][T14398] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.771425][T14398] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.783659][T14398] device bridge_slave_1 entered promiscuous mode [ 509.864535][T14448] netlink: 'syz.2.3057': attribute type 29 has an invalid length. [ 509.965561][T14453] FAULT_INJECTION: forcing a failure. [ 509.965561][T14453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.993122][T14453] CPU: 0 PID: 14453 Comm: syz.0.3067 Not tainted syzkaller #0 [ 510.000630][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 510.010702][T14453] Call Trace: [ 510.013994][T14453] [ 510.016940][T14453] dump_stack_lvl+0x188/0x24e [ 510.021665][T14453] ? show_regs_print_info+0x12/0x12 [ 510.026887][T14453] ? load_image+0x400/0x400 [ 510.031411][T14453] ? __lock_acquire+0x7d10/0x7d10 [ 510.033969][T14398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.036442][T14453] should_fail_ex+0x399/0x4d0 [ 510.050133][T14453] _copy_from_user+0x2c/0x170 [ 510.054839][T14453] iovec_from_user+0x143/0x360 [ 510.059625][T14453] __import_iovec+0x6d/0x500 [ 510.064241][T14453] import_iovec+0x6f/0xa0 [ 510.068610][T14453] ___sys_sendmsg+0x252/0x360 [ 510.073326][T14453] ? __sys_sendmsg+0x290/0x290 [ 510.078137][T14453] ? __lock_acquire+0x7d10/0x7d10 [ 510.083202][T14453] __se_sys_sendmsg+0x1bb/0x2a0 [ 510.084939][T14398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.088059][T14453] ? __x64_sys_sendmsg+0x80/0x80 [ 510.102025][T14453] ? lockdep_hardirqs_on+0x94/0x140 [ 510.107254][T14453] do_syscall_64+0x4c/0xa0 [ 510.111689][T14453] ? clear_bhb_loop+0x60/0xb0 [ 510.116378][T14453] ? clear_bhb_loop+0x60/0xb0 [ 510.121067][T14453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.126967][T14453] RIP: 0033:0x7f8fad99aeb9 [ 510.131385][T14453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.151002][T14453] RSP: 002b:00007f8fae821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.159430][T14453] RAX: ffffffffffffffda RBX: 00007f8fadc15fa0 RCX: 00007f8fad99aeb9 [ 510.167409][T14453] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000005 [ 510.175395][T14453] RBP: 00007f8fae821090 R08: 0000000000000000 R09: 0000000000000000 [ 510.183372][T14453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.191360][T14453] R13: 00007f8fadc16038 R14: 00007f8fadc15fa0 R15: 00007fffc8a8f9a8 [ 510.199358][T14453] [ 510.219340][T14448] netlink: 'syz.2.3057': attribute type 29 has an invalid length. [ 510.349987][T14451] netlink: 'syz.2.3057': attribute type 29 has an invalid length. [ 510.528912][T14398] team0: Port device team_slave_0 added [ 510.564597][T14398] team0: Port device team_slave_1 added [ 510.679388][T14398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.710543][T14398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.812125][T14398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.912304][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 511.501031][T14398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.535046][T14398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.607203][T14398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.058236][T14398] device hsr_slave_0 entered promiscuous mode [ 512.205965][T14398] device hsr_slave_1 entered promiscuous mode [ 512.230263][T14398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.250629][T14398] Cannot create hsr debugfs directory [ 512.704386][T14498] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3068'. [ 512.992170][T13802] Bluetooth: hci4: command 0x040f tx timeout [ 513.248256][T14507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3071'. [ 513.290991][T14508] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3071'. [ 513.866907][T14510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 513.912897][T14520] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.3072'. [ 513.941414][T14512] netlink: 'syz.4.3072': attribute type 10 has an invalid length. [ 513.992481][T14512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3072'. [ 514.091641][T14512] bridge0: port 3(veth0_vlan) entered blocking state [ 514.132846][T14512] bridge0: port 3(veth0_vlan) entered disabled state [ 514.252765][T14512] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 514.288828][T14504] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3070'. [ 514.302373][T14521] netlink: 'syz.1.3073': attribute type 2 has an invalid length. [ 514.342459][ T6249] device hsr_slave_0 left promiscuous mode [ 514.387030][ T6249] device veth1_macvtap left promiscuous mode [ 514.404774][ T6249] device veth0_macvtap left promiscuous mode [ 514.424593][ T6249] device veth1_vlan left promiscuous mode [ 515.072266][T13802] Bluetooth: hci4: command 0x0419 tx timeout [ 515.429742][ T6249] team0 (unregistering): Port device veth0_to_hsr removed [ 515.580369][ T6249] team0 (unregistering): Port device team_slave_1 removed [ 515.634904][ T6249] team0 (unregistering): Port device team_slave_0 removed [ 515.676742][ T6249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.917731][ T6249] bond0 (unregistering): Released all slaves [ 515.944074][T14522] netlink: 'syz.1.3073': attribute type 2 has an invalid length. [ 515.945375][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 515.969798][T14533] netlink: 'syz.2.3076': attribute type 10 has an invalid length. [ 516.235461][T14398] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 516.278260][T14398] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.338701][T14398] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 516.367677][T14398] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 516.731149][T14398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.804900][T14564] netlink: 'syz.0.3083': attribute type 1 has an invalid length. [ 516.819496][T14398] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.837630][T14564] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3083'. [ 516.863118][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 516.884314][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 516.975473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 516.995235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 517.045464][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.052631][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.101361][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 517.135000][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 517.188941][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.196132][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.205120][T14558] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3080'. [ 517.256411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 517.308547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 517.399004][T14581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.442633][T14580] netlink: 'syz.2.3087': attribute type 10 has an invalid length. [ 517.454943][T14580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3087'. [ 517.473416][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 517.488128][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 517.509367][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 517.540521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 517.578297][T14585] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.3087'. [ 517.615935][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 517.628009][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 517.688518][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 517.729344][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 517.759763][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 517.773166][T14584] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3086'. [ 517.823429][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 517.841158][T14590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.861145][T14590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.887097][T14590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.907665][T14590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.068817][T14398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 518.467641][T14616] netlink: 'syz.1.3097': attribute type 10 has an invalid length. [ 518.487884][T14616] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3097'. [ 518.529108][T14616] bridge0: port 3(veth0_vlan) entered blocking state [ 518.562890][T14616] bridge0: port 3(veth0_vlan) entered disabled state [ 518.605405][T14616] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 518.661484][T14614] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.3097'. [ 518.686918][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 518.707815][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.741544][T14398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.767046][T14627] netlink: 'syz.2.3100': attribute type 10 has an invalid length. [ 518.836643][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 518.858280][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 518.896604][T14398] device veth0_vlan entered promiscuous mode [ 518.926044][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 518.942990][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 518.983459][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 519.000341][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 519.031730][T14398] device veth1_vlan entered promiscuous mode [ 519.068121][T14632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 519.075560][T14632] IPv6: NLM_F_CREATE should be set when creating new route [ 519.083079][T14632] IPv6: NLM_F_CREATE should be set when creating new route [ 519.090497][T14632] IPv6: NLM_F_CREATE should be set when creating new route [ 519.140594][T14618] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3098'. [ 519.165912][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 519.183623][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 519.202366][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 519.215023][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 519.241977][T14398] device veth0_macvtap entered promiscuous mode [ 519.268462][T14398] device veth1_macvtap entered promiscuous mode [ 519.331344][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 519.341537][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 519.370761][T14398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.389101][T14398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.413685][T14398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.448895][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 519.461741][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 519.510269][T14398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.545785][T14632] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3101'. [ 519.556989][T14398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.581854][T14398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.597964][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 519.613029][ T6249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.626172][T14398] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.656812][T14398] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.669835][T14398] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.690606][T14398] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.727306][T14648] netlink: 'syz.2.3107': attribute type 29 has an invalid length. [ 519.756462][T14648] netlink: 'syz.2.3107': attribute type 29 has an invalid length. [ 519.781630][T14648] netlink: 'syz.2.3107': attribute type 29 has an invalid length. [ 519.797456][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.834546][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.864208][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 519.908517][ T5142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.936026][ T5142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.970825][ T6248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 520.104293][T14658] netlink: 'syz.0.3111': attribute type 10 has an invalid length. [ 520.149016][T14658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3111'. [ 520.171357][T14658] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 520.241343][T14667] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.3111'. [ 520.596089][T14678] FAULT_INJECTION: forcing a failure. [ 520.596089][T14678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.744770][T14678] CPU: 0 PID: 14678 Comm: syz.2.3114 Not tainted syzkaller #0 [ 520.752290][T14678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 520.762362][T14678] Call Trace: [ 520.765666][T14678] [ 520.768611][T14678] dump_stack_lvl+0x188/0x24e [ 520.773319][T14678] ? show_regs_print_info+0x12/0x12 [ 520.778543][T14678] ? load_image+0x400/0x400 [ 520.783241][T14678] ? __lock_acquire+0x7d10/0x7d10 [ 520.788298][T14678] should_fail_ex+0x399/0x4d0 [ 520.793011][T14678] _copy_from_user+0x2c/0x170 [ 520.797717][T14678] kstrtouint_from_user+0xda/0x170 [ 520.802863][T14678] ? kstrtol_from_user+0x190/0x190 [ 520.808014][T14678] proc_fail_nth_write+0x8b/0x200 [ 520.813058][T14678] ? proc_fail_nth_read+0x220/0x220 [ 520.818273][T14678] ? common_file_perm+0x171/0x1c0 [ 520.823316][T14678] ? proc_fail_nth_read+0x220/0x220 [ 520.828636][T14678] vfs_write+0x2e6/0xa30 [ 520.832909][T14678] ? file_end_write+0x250/0x250 [ 520.837782][T14678] ? __fget_files+0x28/0x4b0 [ 520.842398][T14678] ? __fget_files+0x28/0x4b0 [ 520.847011][T14678] ? __fget_files+0x43d/0x4b0 [ 520.851723][T14678] ? __fdget_pos+0x2ae/0x360 [ 520.856343][T14678] ? ksys_write+0x71/0x250 [ 520.860789][T14678] ksys_write+0x14c/0x250 [ 520.865156][T14678] ? __ia32_sys_read+0x80/0x80 [ 520.869990][T14678] ? lockdep_hardirqs_on+0x94/0x140 [ 520.875228][T14678] do_syscall_64+0x4c/0xa0 [ 520.879667][T14678] ? clear_bhb_loop+0x60/0xb0 [ 520.884363][T14678] ? clear_bhb_loop+0x60/0xb0 [ 520.889061][T14678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.894971][T14678] RIP: 0033:0x7ff00855b78e [ 520.899400][T14678] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 520.919027][T14678] RSP: 002b:00007ff0093befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 520.927472][T14678] RAX: ffffffffffffffda RBX: 00007ff0093bf6c0 RCX: 00007ff00855b78e [ 520.935467][T14678] RDX: 0000000000000001 RSI: 00007ff0093bf0a0 RDI: 0000000000000004 [ 520.943460][T14678] RBP: 00007ff0093bf090 R08: 0000000000000000 R09: 0000000000000000 [ 520.951443][T14678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.959433][T14678] R13: 00007ff008816038 R14: 00007ff008815fa0 R15: 00007ffee3b4fee8 [ 520.967553][T14678] [ 521.177494][T14674] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3113'. [ 521.224703][T14685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 521.408930][T14693] FAULT_INJECTION: forcing a failure. [ 521.408930][T14693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.487059][T14693] CPU: 0 PID: 14693 Comm: syz.4.3121 Not tainted syzkaller #0 [ 521.494569][T14693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 521.504621][T14693] Call Trace: [ 521.507893][T14693] [ 521.510818][T14693] dump_stack_lvl+0x188/0x24e [ 521.515502][T14693] ? show_regs_print_info+0x12/0x12 [ 521.520694][T14693] ? load_image+0x400/0x400 [ 521.525190][T14693] ? __lock_acquire+0x7d10/0x7d10 [ 521.530215][T14693] ? snprintf+0xe5/0x140 [ 521.534448][T14693] should_fail_ex+0x399/0x4d0 [ 521.539128][T14693] _copy_to_user+0x2c/0x130 [ 521.543632][T14693] simple_read_from_buffer+0xe3/0x150 [ 521.549007][T14693] proc_fail_nth_read+0x1a6/0x220 [ 521.554027][T14693] ? proc_fault_inject_write+0x310/0x310 [ 521.559653][T14693] ? fsnotify_perm+0x248/0x550 [ 521.564413][T14693] ? proc_fault_inject_write+0x310/0x310 [ 521.570036][T14693] vfs_read+0x2de/0xa00 [ 521.574193][T14693] ? kernel_read+0x1e0/0x1e0 [ 521.578784][T14693] ? __fget_files+0x28/0x4b0 [ 521.583371][T14693] ? __fget_files+0x28/0x4b0 [ 521.587963][T14693] ? __fget_files+0x43d/0x4b0 [ 521.592645][T14693] ? __fdget_pos+0x2ae/0x360 [ 521.597231][T14693] ? ksys_read+0x71/0x250 [ 521.601556][T14693] ksys_read+0x14c/0x250 [ 521.605793][T14693] ? vfs_write+0xa30/0xa30 [ 521.610204][T14693] ? lockdep_hardirqs_on+0x94/0x140 [ 521.615399][T14693] do_syscall_64+0x4c/0xa0 [ 521.619809][T14693] ? clear_bhb_loop+0x60/0xb0 [ 521.624479][T14693] ? clear_bhb_loop+0x60/0xb0 [ 521.629146][T14693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.635032][T14693] RIP: 0033:0x7fb7bd35b78e [ 521.639438][T14693] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 521.659036][T14693] RSP: 002b:00007fb7be1e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 521.667438][T14693] RAX: ffffffffffffffda RBX: 00007fb7be1e66c0 RCX: 00007fb7bd35b78e [ 521.675402][T14693] RDX: 000000000000000f RSI: 00007fb7be1e60a0 RDI: 0000000000000009 [ 521.683361][T14693] RBP: 00007fb7be1e6090 R08: 0000000000000000 R09: 0000000000000000 [ 521.691325][T14693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.699285][T14693] R13: 00007fb7bd616038 R14: 00007fb7bd615fa0 R15: 00007ffe8f7c0c98 [ 521.707258][T14693] [ 521.748364][T14685] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3119'. [ 521.789243][T13802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 521.798788][T13802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 521.807418][T13802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 521.815294][T13802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 521.844766][T13802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 521.853171][T13802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 521.881711][ T5142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.030501][ T5142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.179981][ T5142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.198795][T14708] device veth0_vlan left promiscuous mode [ 522.208527][T14708] device veth0_vlan entered promiscuous mode [ 522.914429][ T5142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.467324][T14696] chnl_net:caif_netlink_parms(): no params data found [ 523.855068][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.872446][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 523.929913][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.971430][T14696] device bridge_slave_0 entered promiscuous mode [ 524.128291][T14745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.135829][T14745] IPv6: NLM_F_CREATE should be set when creating new route [ 524.143490][T14745] IPv6: NLM_F_CREATE should be set when creating new route [ 524.150909][T14745] IPv6: NLM_F_CREATE should be set when creating new route [ 524.435967][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.449915][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.477046][T14696] device bridge_slave_1 entered promiscuous mode [ 524.519069][T14743] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3134'. [ 524.565723][T14760] FAULT_INJECTION: forcing a failure. [ 524.565723][T14760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.635660][T14760] CPU: 1 PID: 14760 Comm: syz.2.3136 Not tainted syzkaller #0 [ 524.643180][T14760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 524.653256][T14760] Call Trace: [ 524.656599][T14760] [ 524.659539][T14760] dump_stack_lvl+0x188/0x24e [ 524.664241][T14760] ? show_regs_print_info+0x12/0x12 [ 524.669461][T14760] ? load_image+0x400/0x400 [ 524.673983][T14760] ? __lock_acquire+0x7d10/0x7d10 [ 524.679037][T14760] should_fail_ex+0x399/0x4d0 [ 524.683744][T14760] _copy_from_user+0x2c/0x170 [ 524.688449][T14760] __sys_bpf+0x2ea/0x780 [ 524.692723][T14760] ? bpf_link_show_fdinfo+0x380/0x380 [ 524.698128][T14760] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 524.704313][T14760] __x64_sys_bpf+0x78/0x90 [ 524.708117][T14766] netlink: 'syz.4.3137': attribute type 29 has an invalid length. [ 524.708738][T14760] do_syscall_64+0x4c/0xa0 [ 524.720950][T14760] ? clear_bhb_loop+0x60/0xb0 [ 524.725642][T14760] ? clear_bhb_loop+0x60/0xb0 [ 524.730337][T14760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.736249][T14760] RIP: 0033:0x7ff00859aeb9 [ 524.740681][T14760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.760313][T14760] RSP: 002b:00007ff0093bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.768751][T14760] RAX: ffffffffffffffda RBX: 00007ff008815fa0 RCX: 00007ff00859aeb9 [ 524.776746][T14760] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 524.784736][T14760] RBP: 00007ff0093bf090 R08: 0000000000000000 R09: 0000000000000000 [ 524.792716][T14760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.800706][T14760] R13: 00007ff008816038 R14: 00007ff008815fa0 R15: 00007ffee3b4fee8 [ 524.808712][T14760] [ 524.855380][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 524.915540][T14766] netlink: 'syz.4.3137': attribute type 29 has an invalid length. [ 524.936345][T14767] netlink: 'syz.4.3137': attribute type 29 has an invalid length. [ 524.970249][T14696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.014004][T14696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.062307][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 526.639329][T14696] team0: Port device team_slave_0 added [ 526.731513][T14696] team0: Port device team_slave_1 added [ 526.787499][T14787] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3142'. [ 526.870425][T14696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.891304][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.974680][T14696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.094697][T14696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.101687][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.251355][T14696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.449758][ T5142] device wlan1 left promiscuous mode [ 527.477710][ T5142] team0: Port device wlan1 removed [ 527.506689][T14798] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3144'. [ 527.561018][T14802] netlink: 'syz.4.3146': attribute type 10 has an invalid length. [ 527.612304][T14802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3146'. [ 527.648540][T14802] bridge0: port 3(veth0_vlan) entered blocking state [ 527.676567][T14802] bridge0: port 3(veth0_vlan) entered disabled state [ 527.734641][T14802] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 527.789597][T14807] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.3146'. [ 528.112281][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 528.151816][T14696] device hsr_slave_0 entered promiscuous mode [ 528.179162][T14696] device hsr_slave_1 entered promiscuous mode [ 528.209976][T14696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.242192][T14696] Cannot create hsr debugfs directory [ 528.298855][ T5142] device hsr_slave_0 left promiscuous mode [ 528.348270][ T5142] device veth1_macvtap left promiscuous mode [ 528.360153][ T5142] device veth0_macvtap left promiscuous mode [ 528.385579][ T5142] device veth1_vlan left promiscuous mode [ 529.241024][ T5142] device team_slave_1 left promiscuous mode [ 529.248333][ T5142] team0 (unregistering): Port device team_slave_1 removed [ 529.288626][ T5142] device team_slave_0 left promiscuous mode [ 529.295617][ T5142] team0 (unregistering): Port device team_slave_0 removed [ 529.337225][ T5142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.346335][ T5142] device bond_slave_1 left promiscuous mode [ 529.574477][ T5142] bond0 (unregistering): (slave team0): Releasing backup interface [ 529.583654][ T5142] device team0 left promiscuous mode [ 529.612382][ T5142] bond0 (unregistering): Released all slaves [ 529.881508][T14845] netlink: 'syz.3.3158': attribute type 29 has an invalid length. [ 529.926022][T14845] netlink: 'syz.3.3158': attribute type 29 has an invalid length. [ 529.986080][T14851] netlink: 'syz.3.3158': attribute type 29 has an invalid length. [ 530.100554][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 530.202846][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 610.992165][T13802] Bluetooth: hci0: command 0x0406 tx timeout [ 635.372089][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 635.379071][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14858/1:b..l [ 635.387488][ C0] (detected by 0, t=10502 jiffies, g=69945, q=3565 ncpus=2) [ 635.394873][ C0] task:syz.2.3163 state:R running task stack:23568 pid:14858 ppid:4277 flags:0x00004004 [ 635.406489][ C0] Call Trace: [ 635.409794][ C0] [ 635.412738][ C0] __schedule+0x11d1/0x40e0 [ 635.417268][ C0] ? ct_nmi_exit+0x145/0x1c0 [ 635.421869][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 635.427885][ C0] ? __sched_text_start+0x8/0x8 [ 635.432757][ C0] ? lock_chain_count+0x20/0x20 [ 635.437627][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 635.442930][ C0] preempt_schedule_irq+0xbb/0x160 [ 635.448052][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 635.453782][ C0] ? rcu_is_watching+0x76/0xa0 [ 635.458560][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 635.464387][ C0] irqentry_exit+0x63/0x70 [ 635.468810][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 635.474795][ C0] RIP: 0010:__local_bh_enable_ip+0x13e/0x1c0 [ 635.480780][ C0] Code: 8a e8 76 04 dd 08 65 66 8b 05 7e 3a b4 7e 66 85 c0 75 54 bf 01 00 00 00 e8 6f 85 09 00 e8 3a 75 39 00 fb 65 8b 05 2a 09 b3 7e <85> c0 75 05 e8 79 1d b1 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 635.500392][ C0] RSP: 0018:ffffc90003ff77e0 EFLAGS: 00000282 [ 635.506467][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 974b1a65b8dc9a00 [ 635.514441][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0c20 [ 635.522415][ C0] RBP: ffffc90003ff7870 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 635.530389][ C0] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: ffffffff886a46f8 [ 635.538364][ C0] R13: ffff88805e870500 R14: dffffc0000000000 R15: 1ffff920007feefc [ 635.546341][ C0] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 635.551912][ C0] ? _local_bh_enable+0xa0/0xa0 [ 635.556764][ C0] ? rcu_is_watching+0x11/0xa0 [ 635.561564][ C0] ? netif_receive_skb_list+0xd7/0x4e0 [ 635.567040][ C0] ? bpf_test_run_xdp_live+0x178b/0x1a90 [ 635.572693][ C0] bpf_test_run_xdp_live+0x1834/0x1a90 [ 635.578165][ C0] ? 0xffffffffa0004440 [ 635.582341][ C0] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 635.587897][ C0] ? xdp_convert_md_to_buff+0x330/0x330 [ 635.593483][ C0] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 635.599742][ C0] ? xdp_convert_md_to_buff+0x5b/0x330 [ 635.605208][ C0] bpf_prog_test_run_xdp+0x736/0xf10 [ 635.610513][ C0] ? dev_put+0x80/0x80 [ 635.614598][ C0] ? dev_put+0x80/0x80 [ 635.618678][ C0] bpf_prog_test_run+0x31e/0x390 [ 635.623631][ C0] __sys_bpf+0x62b/0x780 [ 635.627889][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 635.633286][ C0] ? lock_chain_count+0x20/0x20 [ 635.638154][ C0] __x64_sys_bpf+0x78/0x90 [ 635.642581][ C0] do_syscall_64+0x4c/0xa0 [ 635.647005][ C0] ? clear_bhb_loop+0x60/0xb0 [ 635.651689][ C0] ? clear_bhb_loop+0x60/0xb0 [ 635.656372][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.662267][ C0] RIP: 0033:0x7ff00859aeb9 [ 635.666681][ C0] RSP: 002b:00007ff0093bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 635.675097][ C0] RAX: ffffffffffffffda RBX: 00007ff008815fa0 RCX: 00007ff00859aeb9 [ 635.683074][ C0] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 635.691045][ C0] RBP: 00007ff008608c1f R08: 0000000000000000 R09: 0000000000000000 [ 635.699016][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.706987][ C0] R13: 00007ff008816038 R14: 00007ff008815fa0 R15: 00007ffee3b4fee8 [ 635.714977][ C0] [ 635.717998][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10301 jiffies! g69945 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 635.730320][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=30853 [ 635.738466][ C0] rcu: rcu_preempt kthread starved for 10302 jiffies! g69945 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 635.749834][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 635.759803][ C0] rcu: RCU grace-period kthread stack dump: [ 635.765689][ C0] task:rcu_preempt state:I stack:27120 pid:16 ppid:2 flags:0x00004000 [ 635.774902][ C0] Call Trace: [ 635.778180][ C0] [ 635.781118][ C0] __schedule+0x11d1/0x40e0 [ 635.785645][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 635.791642][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 635.797545][ C0] ? __sched_text_start+0x8/0x8 [ 635.802401][ C0] ? __mod_timer+0x91e/0xd00 [ 635.807008][ C0] schedule+0xb9/0x180 [ 635.811083][ C0] schedule_timeout+0x184/0x2d0 [ 635.815943][ C0] ? console_conditional_schedule+0x40/0x40 [ 635.821847][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 635.827742][ C0] ? update_process_times+0x1b0/0x1b0 [ 635.833137][ C0] ? prepare_to_swait_event+0x335/0x350 [ 635.838705][ C0] rcu_gp_fqs_loop+0x303/0x1340 [ 635.843585][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 635.848443][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 635.854607][ C0] ? rcu_gp_init+0x14e0/0x14e0 [ 635.859376][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 635.864230][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 635.869432][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 635.874638][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 635.879854][ C0] rcu_gp_kthread+0x99/0x3b0 [ 635.884452][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 635.889571][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 635.895469][ C0] ? __kthread_parkme+0x162/0x1c0 [ 635.900509][ C0] kthread+0x29d/0x330 [ 635.904588][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 635.909706][ C0] ? kthread_blkcg+0xd0/0xd0 [ 635.914307][ C0] ret_from_fork+0x1f/0x30 [ 635.918743][ C0] [ 635.921763][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 635.928090][ C0] Sending NMI from CPU 0 to CPUs 1: [ 635.933299][ C1] NMI backtrace for cpu 1 [ 635.933308][ C1] CPU: 1 PID: 14890 Comm: syz.1.3167 Not tainted syzkaller #0 [ 635.933322][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 635.933330][ C1] RIP: 0010:asm_sysvec_irq_work+0x0/0x20 [ 635.933350][ C1] Code: e9 b5 03 00 00 90 90 90 90 90 0f 01 ca fc 6a ff e8 b5 02 00 00 48 89 c4 48 89 e7 e8 ca 1f ec ff e9 95 03 00 00 90 90 90 90 90 <0f> 01 ca fc 6a ff e8 95 02 00 00 48 89 c4 48 89 e7 e8 9a 24 ec ff [ 635.933362][ C1] RSP: 0018:ffffc900001e0dd8 EFLAGS: 00000086 [ 635.933379][ C1] RAX: cba54f419934bc00 RBX: 0000000000000200 RCX: cba54f419934bc00 [ 635.933390][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0c20 [ 635.933400][ C1] RBP: ffffc900001e0f30 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 635.933411][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: dffffc0000000000 [ 635.933421][ C1] R13: 0000000000000000 R14: ffffffff8c80a0c0 R15: 000000000000000a [ 635.933430][ C1] FS: 00007f812ed9d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 635.933444][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.933454][ C1] CR2: 00007f812dfe8600 CR3: 000000007d693000 CR4: 00000000003506e0 [ 635.933466][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 635.933474][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 635.933482][ C1] Call Trace: [ 635.933488][ C1] [ 635.933492][ C1] RIP: 0010:handle_softirqs+0x1c8/0x930 [ 635.933506][ C1] Code: 89 7c 24 44 0f b7 db 48 c7 c7 00 08 8b 8a e8 0f 00 dd 08 65 66 c7 05 15 36 b4 7e 00 00 e8 e0 70 39 00 fb 49 c7 c6 c0 a0 80 8c <89> 5c 24 4c b8 ff ff ff ff 0f bc 44 24 4c 41 89 c5 41 ff c5 0f 84 [ 635.933517][ C1] RSP: 0018:ffffc900001e0e00 EFLAGS: 00000286 [ 635.933539][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 635.933557][ C1] ? clockevents_program_event+0x22c/0x310 [ 635.933573][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 635.933593][ C1] ? do_softirq+0x210/0x210 [ 635.933619][ C1] __irq_exit_rcu+0x13b/0x230 [ 635.933634][ C1] ? irq_exit_rcu+0x20/0x20 [ 635.933661][ C1] irq_exit_rcu+0x5/0x20 [ 635.933673][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 635.933694][ C1] [ 635.933698][ C1] [ 635.933703][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 635.933718][ C1] RIP: 0010:rcu_read_unlock_special+0x0/0x510 [ 635.933732][ C1] Code: 36 1f 66 00 eb b0 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 94 49 89 fd 4c 89 f7 e8 1c 1f 66 00 4c 89 ef eb 84 0f 1f 80 00 00 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 00 [ 635.933743][ C1] RSP: 0018:ffffc90003b47bb8 EFLAGS: 00000202 [ 635.933754][ C1] RAX: 0000000000000000 RBX: ffff888077b521fc RCX: 0000000000080000 [ 635.933763][ C1] RDX: ffffc9001c74e000 RSI: 000000000001e5d8 RDI: ffff888077b51dc0 [ 635.933773][ C1] RBP: dffffc0000000000 R08: ffff88801bdf063f R09: 1ffff110037be0c7 [ 635.933783][ C1] R10: dffffc0000000000 R11: ffffed10037be0c8 R12: 1ffff1100ef6a43f [ 635.933793][ C1] R13: 0000000000000003 R14: ffff888077b52200 R15: dffffc0000000000 [ 635.933824][ C1] __rcu_read_unlock+0x78/0xd0 [ 635.933841][ C1] page_ext_put+0x91/0xb0 [ 635.933859][ C1] free_unref_page_prepare+0x8b4/0x9a0 [ 635.933886][ C1] free_unref_page+0x2e/0x3f0 [ 635.933911][ C1] qlist_free_all+0x76/0xe0 [ 635.933930][ C1] kasan_quarantine_reduce+0x144/0x160 [ 635.933948][ C1] __kasan_slab_alloc+0x1e/0x80 [ 635.933969][ C1] slab_post_alloc_hook+0x4b/0x480 [ 635.933983][ C1] ? slab_pre_alloc_hook+0x2e7/0x310 [ 635.933998][ C1] ? slab_pre_alloc_hook+0xb6/0x310 [ 635.934017][ C1] kmem_cache_alloc_lru+0x11a/0x2e0 [ 635.934031][ C1] ? sock_alloc_inode+0x24/0xc0 [ 635.934052][ C1] sock_alloc_inode+0x24/0xc0 [ 635.934064][ C1] ? sockfs_init_fs_context+0xa0/0xa0 [ 635.934075][ C1] new_inode_pseudo+0x5f/0x1c0 [ 635.934095][ C1] __sock_create+0x129/0x940 [ 635.934124][ C1] __sys_socket+0xc4/0x190 [ 635.934146][ C1] __x64_sys_socket+0x76/0x80 [ 635.934165][ C1] do_syscall_64+0x4c/0xa0 [ 635.934180][ C1] ? clear_bhb_loop+0x60/0xb0 [ 635.934194][ C1] ? clear_bhb_loop+0x60/0xb0 [ 635.934212][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.934226][ C1] RIP: 0033:0x7f812df9aeb9 [ 635.934241][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.934252][ C1] RSP: 002b:00007f812ed9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 635.934265][ C1] RAX: ffffffffffffffda RBX: 00007f812e216090 RCX: 00007f812df9aeb9 [ 635.934275][ C1] RDX: 0000000000000000 RSI: 0200000000000001 RDI: 0000000000000002 [ 635.934283][ C1] RBP: 00007f812e008c1f R08: 0000000000000000 R09: 0000000000000000 [ 635.934292][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.934301][ C1] R13: 00007f812e216128 R14: 00007f812e216090 R15: 00007ffd05470e88 [ 635.934330][ C1]