last executing test programs: 4.064168299s ago: executing program 1 (id=1827): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x5, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 3.943722672s ago: executing program 3 (id=1830): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2000, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa00000000000071"], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 3.792034236s ago: executing program 1 (id=1831): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20044800) r0 = socket$kcm(0x29, 0xa, 0x0) sendmsg$inet(r0, 0x0, 0x40891) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x7f}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x80000001, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000040000000e0000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0xc, 0x0, 0x7fffffff, 0xc0000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x11}, 0x2, 0x9, 0x7, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x2004}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x880040001, 0x1430, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xd61, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) close(r5) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00( \x00\x00\x00', @ANYRES32], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 3.662741059s ago: executing program 3 (id=1834): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1, 0x0, 0x300}, 0x0) 3.61670728s ago: executing program 1 (id=1835): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000ff000000008000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) (async) sendmsg$inet(r2, 0x0, 0x8040) (async) close(r2) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x92301, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101a}, 0x141, 0x5, 0xfffffffd, 0x3, 0x9, 0x9, 0x885, 0x0, 0xc6}, 0x0, 0x6, 0xffffffffffffffff, 0x7d52ccb4e02ee533) (async) r3 = socket$kcm(0xa, 0x6, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x2, &(0x7f0000000040)=r4, 0x17) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xf91, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x1ffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30040041) setsockopt$sock_attach_bpf(r9, 0x1, 0x9, &(0x7f0000000800), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x1, 0x12) 3.456309024s ago: executing program 1 (id=1838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x445d3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) r2 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc75, 0x7ff}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) r7 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x541b, &(0x7f0000000180)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000100)=r10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 3.368249326s ago: executing program 3 (id=1839): socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89ef, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4b, 0x0, @perf_config_ext={0x4e, 0x200}, 0x152, 0x1, 0x0, 0x8, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x10000, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)="283de6b073b37b384862e3654fde8d") ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000480)="f4", 0x1}], 0x1}, 0x10) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)='Y', 0x1}], 0x1}, 0x40041) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="c1", 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000140)={0x2, 0x0, [0x0, 0x0]}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r5 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r5, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2}, 0x0) 3.254592989s ago: executing program 0 (id=1841): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x100000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000380)='\xb0\xe0p\xfc\xc5\fPd\xe2\xc6n\xe9\v(\xdd\xe1]\x10\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x100, 0x0, 0xa482, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0xd, 0x12) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair(0x22, 0x0, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01000100000000000000008d5df76c93fc0fdd00f5da83f248ebf8623da2a4106f84c11f37bf04d184bf0f93fa1fb6a350c8b341dd892f40e0cfb6232769348031e1e6ddbbed0b3c5b78ec1b240f5b5bb5a2dc7112e11dc743e1cc97d44ab5d6b189bc123ebe859d0802132a4147c26a1f23ec6a72fb117d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000400"/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) 2.731082232s ago: executing program 0 (id=1844): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x80000, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) 2.463070839s ago: executing program 2 (id=1846): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xf2ee, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x2, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x2020, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000feffffff0000000000000000b7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa10000f8ffffff07010000f8ffffffb702000008000000b70300000000000085000000b0000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.40639603s ago: executing program 3 (id=1847): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) r3 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x20000}, {0x2, 0x0, 0xfffffffe, 0x1}], 0x10, 0xfffffffc}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f00000001c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4004844) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3}, 0x94) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r9, 0x8) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) sendmsg$kcm(r10, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) 2.208875865s ago: executing program 2 (id=1848): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000580)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x255e35d075133d71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="1400000028000b6394f90509a16dd8e50000cc577836970686eb8790519b82b4aa31cc3ce90019982f", 0x29}], 0x1}, 0x4000000) r5 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000140000e8070000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba00001b2cc32b38d3740000ffffffefffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xc2}, 0x11c985, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1k\xfc\x9e\x98\xac;#\xdb\x0f!/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'cpu'}, {0x2d, 'freezer'}, {0x6, 'pids'}]}, 0x14) 1.936653472s ago: executing program 0 (id=1849): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xb80b) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c0000001e0081054e81f782db020000071d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94", 0x45}], 0x1}, 0x804) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat$cgroup(r1, &(0x7f00000001c0)='syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000000000000000000000181100ff", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 525.149616ms ago: executing program 0 (id=1850): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000)=r4, 0x8) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x8, 0xb}, 0x50) close(0x3) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x94) 472.192848ms ago: executing program 3 (id=1851): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2000, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa00000000000071"], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 471.915978ms ago: executing program 2 (id=1852): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x20}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000ff8d00"/40, 0xfd1b}], 0x1}, 0x20040000) 424.256569ms ago: executing program 1 (id=1853): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fc"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x5000000}, 0x94) 416.01479ms ago: executing program 0 (id=1854): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20044800) r0 = socket$kcm(0x29, 0xa, 0x0) sendmsg$inet(r0, 0x0, 0x40891) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x7f}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x80000001, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000040000000e0000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0xc, 0x0, 0x7fffffff, 0xc0000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x11}, 0x2, 0x9, 0x7, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x2004}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x880040001, 0x1430, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xd61, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) close(r5) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00( \x00\x00\x00', @ANYRES32], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 296.305312ms ago: executing program 2 (id=1855): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2}, 0x0) 238.607493ms ago: executing program 3 (id=1856): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) (async) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff038}, {0x6}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) write$cgroup_type(r3, &(0x7f0000000280), 0x9) close(r0) openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8906, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) 207.831504ms ago: executing program 1 (id=1857): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24048010) sendmsg$inet(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffbf88}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c7ffffc826a8", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='(())') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) r7 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r2, 0x58, &(0x7f0000000200)}, 0x10) write$cgroup_devices(r7, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0x9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001580)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="2e0000000000000000000000f947cee698b101c135dc", @ANYRES32, @ANYRESHEX=r0, @ANYRES64=0x0], 0x20) 202.152434ms ago: executing program 0 (id=1858): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x1ff) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$SIOCSIFHWADDR(r6, 0x8b30, &(0x7f0000000240)={'wlan1\x00', @multicast}) 188.533745ms ago: executing program 2 (id=1859): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000007c0)={&(0x7f0000000440)="3e1b31", 0x0, 0x0, 0x0, 0x9, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=@base={0x12, 0x2, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000005ac0)={r1, &(0x7f0000005a40)}, 0x20) 0s ago: executing program 2 (id=1860): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db00b904021d0800fd007c05e8fe55a10a000140014002020a0e1888caa971afff00060411000000160026000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43dbb19703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x8, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000340)={r4}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={0x0, 0x0, 0x4008}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="e5ffff"], 0xa0}, 0x4004881) socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc00, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 62.432169][ T5756] cgroup: Unknown subsys name 'net' [ 62.600009][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.895888][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.614508][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.622239][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.631044][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.639302][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.647541][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.654982][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.662586][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.670273][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.693128][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.693695][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.708894][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.710547][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.722752][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.730169][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.730829][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.737684][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.747080][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.752344][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.759360][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.766104][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.773262][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.786964][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.795296][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.808567][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.146889][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 66.257624][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 66.327440][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 66.367979][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.378344][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.386095][ T5772] bridge_slave_0: entered allmulticast mode [ 66.393338][ T5772] bridge_slave_0: entered promiscuous mode [ 66.435039][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.442138][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.449406][ T5772] bridge_slave_1: entered allmulticast mode [ 66.456061][ T5772] bridge_slave_1: entered promiscuous mode [ 66.497340][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.504531][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.511666][ T5768] bridge_slave_0: entered allmulticast mode [ 66.519338][ T5768] bridge_slave_0: entered promiscuous mode [ 66.539556][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.549412][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 66.559138][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.568499][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.576303][ T5768] bridge_slave_1: entered allmulticast mode [ 66.583311][ T5768] bridge_slave_1: entered promiscuous mode [ 66.595497][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.674943][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.682078][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.689602][ T5769] bridge_slave_0: entered allmulticast mode [ 66.696788][ T5769] bridge_slave_0: entered promiscuous mode [ 66.707820][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.719990][ T5772] team0: Port device team_slave_0 added [ 66.740711][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.748182][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.757736][ T5769] bridge_slave_1: entered allmulticast mode [ 66.764490][ T5769] bridge_slave_1: entered promiscuous mode [ 66.775646][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.786678][ T5772] team0: Port device team_slave_1 added [ 66.834435][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.841400][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.867530][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.916494][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.925712][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.954295][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.967574][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.976838][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.984242][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.991371][ T5767] bridge_slave_0: entered allmulticast mode [ 66.998892][ T5767] bridge_slave_0: entered promiscuous mode [ 67.008592][ T5768] team0: Port device team_slave_0 added [ 67.017509][ T5768] team0: Port device team_slave_1 added [ 67.031500][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.049173][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.056974][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.065993][ T5767] bridge_slave_1: entered allmulticast mode [ 67.072863][ T5767] bridge_slave_1: entered promiscuous mode [ 67.096770][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.103884][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.129873][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.174604][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.181562][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.207977][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.227725][ T5769] team0: Port device team_slave_0 added [ 67.236227][ T5769] team0: Port device team_slave_1 added [ 67.250702][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.275577][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.309747][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.316952][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.343640][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.369673][ T5772] hsr_slave_0: entered promiscuous mode [ 67.376026][ T5772] hsr_slave_1: entered promiscuous mode [ 67.383288][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.390238][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.416498][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.463770][ T5768] hsr_slave_0: entered promiscuous mode [ 67.470232][ T5768] hsr_slave_1: entered promiscuous mode [ 67.476729][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.484556][ T5768] Cannot create hsr debugfs directory [ 67.496831][ T5767] team0: Port device team_slave_0 added [ 67.505104][ T5767] team0: Port device team_slave_1 added [ 67.551622][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.558695][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.584961][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.597641][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.604830][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.630808][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.703709][ T5769] hsr_slave_0: entered promiscuous mode [ 67.709841][ T5769] hsr_slave_1: entered promiscuous mode [ 67.716076][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.723949][ T5769] Cannot create hsr debugfs directory [ 67.811825][ T5767] hsr_slave_0: entered promiscuous mode [ 67.818382][ T5767] hsr_slave_1: entered promiscuous mode [ 67.825008][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.833543][ T5084] Bluetooth: hci3: command tx timeout [ 67.833556][ T5776] Bluetooth: hci1: command tx timeout [ 67.839111][ T5084] Bluetooth: hci0: command tx timeout [ 67.844770][ T5774] Bluetooth: hci2: command tx timeout [ 67.856172][ T5767] Cannot create hsr debugfs directory [ 68.156851][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.168692][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.179525][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.190631][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.263957][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.274253][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.285720][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.296399][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.384067][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.417879][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.428191][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.452106][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.475654][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.487343][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.498461][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.515233][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.549471][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.594326][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.649974][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.657382][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.667672][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.674776][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.709523][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.798806][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.810292][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.824159][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.844892][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.852019][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.886432][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.898713][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.905907][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.930108][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.946305][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.953483][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.980674][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.987857][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.019216][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.026420][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.063343][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.070506][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.151129][ T5769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.165507][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.195093][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.239634][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.360284][ T5772] veth0_vlan: entered promiscuous mode [ 69.408559][ T5772] veth1_vlan: entered promiscuous mode [ 69.478242][ T5772] veth0_macvtap: entered promiscuous mode [ 69.525814][ T5772] veth1_macvtap: entered promiscuous mode [ 69.590196][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.618350][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.639294][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.649333][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.660735][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.669654][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.690024][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.766186][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.779615][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.844252][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.855605][ T5767] veth0_vlan: entered promiscuous mode [ 69.862072][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.904271][ T5767] veth1_vlan: entered promiscuous mode [ 69.913372][ T5776] Bluetooth: hci0: command tx timeout [ 69.918809][ T5774] Bluetooth: hci1: command tx timeout [ 69.918838][ T5084] Bluetooth: hci3: command tx timeout [ 69.925804][ T5776] Bluetooth: hci2: command tx timeout [ 69.951509][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.982121][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.996665][ T5768] veth0_vlan: entered promiscuous mode [ 70.004703][ T5767] veth0_macvtap: entered promiscuous mode [ 70.012555][ T5769] veth0_vlan: entered promiscuous mode [ 70.025270][ T5768] veth1_vlan: entered promiscuous mode [ 70.032209][ T5767] veth1_macvtap: entered promiscuous mode [ 70.065433][ T5769] veth1_vlan: entered promiscuous mode [ 70.114137][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.126682][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.138242][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.151858][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.166034][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.176845][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.187863][ T5769] veth0_macvtap: entered promiscuous mode [ 70.203338][ T5769] veth1_macvtap: entered promiscuous mode [ 70.214393][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.230722][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.240450][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.255910][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.310062][ T5830] netlink: 'syz.3.4': attribute type 39 has an invalid length. [ 70.351797][ T5768] veth0_macvtap: entered promiscuous mode [ 70.377378][ T5768] veth1_macvtap: entered promiscuous mode [ 70.430733][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.444733][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.456597][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.467598][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.479290][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.503115][ T5831] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4'. [ 70.526977][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.537760][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.548569][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.559779][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.569843][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.580571][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.593598][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.606540][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.617448][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.627560][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.638670][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.649790][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.678536][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.689159][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.699264][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.710542][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.721473][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.732008][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.745839][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.757546][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.774859][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.795752][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.812604][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.821434][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.830986][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.846147][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.855058][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.866541][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.876030][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.918363][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.926293][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.077992][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.100626][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.132936][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.140797][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.293166][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.302663][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.305741][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.347080][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.438479][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.445104][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.682484][ C1] hrtimer: interrupt took 45118 ns [ 71.765222][ T5845] veth1_to_bond: entered allmulticast mode [ 72.002633][ T5776] Bluetooth: hci3: command tx timeout [ 72.008076][ T5776] Bluetooth: hci2: command tx timeout [ 72.008811][ T5774] Bluetooth: hci0: command tx timeout [ 72.013954][ T51] Bluetooth: hci1: command tx timeout [ 72.105687][ T5851] netlink: 'syz.0.7': attribute type 4 has an invalid length. [ 72.161730][ T5853] FAULT_INJECTION: forcing a failure. [ 72.161730][ T5853] name failslab, interval 1, probability 0, space 0, times 1 [ 72.201628][ T5853] CPU: 0 PID: 5853 Comm: syz.2.8 Not tainted syzkaller #0 [ 72.208793][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.218871][ T5853] Call Trace: [ 72.222160][ T5853] [ 72.225103][ T5853] dump_stack_lvl+0x18c/0x250 [ 72.229808][ T5853] ? show_regs_print_info+0x20/0x20 [ 72.235026][ T5853] ? load_image+0x420/0x420 [ 72.239556][ T5853] ? __might_sleep+0xe0/0xe0 [ 72.244166][ T5853] ? __lock_acquire+0x7d80/0x7d80 [ 72.249205][ T5853] ? rcu_is_watching+0x15/0xb0 [ 72.253988][ T5853] should_fail_ex+0x394/0x4c0 [ 72.258692][ T5853] should_failslab+0x9/0x20 [ 72.263214][ T5853] slab_pre_alloc_hook+0x59/0x300 [ 72.268266][ T5853] kmem_cache_alloc_node+0x5e/0x310 [ 72.273486][ T5853] ? __alloc_skb+0x103/0x2c0 [ 72.278092][ T5853] __alloc_skb+0x103/0x2c0 [ 72.282527][ T5853] kcm_sendmsg+0x9aa/0x27b0 [ 72.287083][ T5853] ? kcm_getsockopt+0x280/0x280 [ 72.291946][ T5853] ? apparmor_socket_sendmsg+0x8e/0x330 [ 72.297504][ T5853] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 72.302803][ T5853] ? security_socket_sendmsg+0x80/0xa0 [ 72.308271][ T5853] ? kcm_getsockopt+0x280/0x280 [ 72.313141][ T5853] ____sys_sendmsg+0x61b/0x980 [ 72.317935][ T5853] ? __asan_memset+0x22/0x40 [ 72.322548][ T5853] ? __sys_sendmsg_sock+0x30/0x30 [ 72.327586][ T5853] ? __import_iovec+0x5f2/0x850 [ 72.332476][ T5853] ? import_iovec+0x73/0xa0 [ 72.337008][ T5853] ___sys_sendmsg+0x2a6/0x360 [ 72.341703][ T5853] ? get_pid_task+0x20/0x1e0 [ 72.346320][ T5853] ? __sys_sendmsg+0x2b0/0x2b0 [ 72.351120][ T5853] ? __lock_acquire+0x7d80/0x7d80 [ 72.356188][ T5853] __se_sys_sendmsg+0x1d0/0x2c0 [ 72.361056][ T5853] ? __x64_sys_sendmsg+0x80/0x80 [ 72.366024][ T5853] ? lockdep_hardirqs_on+0x98/0x150 [ 72.371242][ T5853] do_syscall_64+0x55/0xb0 [ 72.375679][ T5853] ? clear_bhb_loop+0x40/0x90 [ 72.380378][ T5853] ? clear_bhb_loop+0x40/0x90 [ 72.385077][ T5853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.390995][ T5853] RIP: 0033:0x7f9ce179e0d9 [ 72.395440][ T5853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.415061][ T5853] RSP: 002b:00007f9ce25cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.423500][ T5853] RAX: ffffffffffffffda RBX: 00007f9ce1a25fa0 RCX: 00007f9ce179e0d9 [ 72.431484][ T5853] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 72.439464][ T5853] RBP: 00007f9ce25cb090 R08: 0000000000000000 R09: 0000000000000000 [ 72.447448][ T5853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.455431][ T5853] R13: 00007f9ce1a26038 R14: 00007f9ce1a25fa0 R15: 00007ffd23483478 [ 72.463432][ T5853] [ 73.398348][ T5878] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 73.420862][ T5878] netlink: 'syz.1.14': attribute type 29 has an invalid length. [ 73.571775][ T5890] netlink: 21 bytes leftover after parsing attributes in process `syz.0.22'. [ 73.582059][ T5890] ksmbd: Unknown IPC event: 0, ignore. [ 73.607836][ T5890] netlink: 'syz.0.22': attribute type 21 has an invalid length. [ 73.618408][ T5890] netlink: 128 bytes leftover after parsing attributes in process `syz.0.22'. [ 74.077606][ T51] Bluetooth: hci2: command tx timeout [ 74.084320][ T5084] Bluetooth: hci3: command tx timeout [ 74.089731][ T5084] Bluetooth: hci1: command tx timeout [ 74.095412][ T5776] Bluetooth: hci0: command tx timeout [ 75.697745][ T5927] warning: `syz.0.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.769700][ T5932] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.672027][ T5954] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.47'. [ 76.697614][ T5954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.705157][ T5954] IPv6: NLM_F_CREATE should be set when creating new route [ 76.712514][ T5954] IPv6: NLM_F_CREATE should be set when creating new route [ 76.719761][ T5954] IPv6: NLM_F_CREATE should be set when creating new route [ 76.823452][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 77.213692][ T5965] veth1_to_bond: entered allmulticast mode [ 77.417654][ T5977] netlink: 'syz.0.55': attribute type 11 has an invalid length. [ 77.452572][ T5977] netlink: 140 bytes leftover after parsing attributes in process `syz.0.55'. [ 78.568141][ T5999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.950479][ T6012] netlink: 'syz.3.70': attribute type 12 has an invalid length. [ 78.978974][ T6012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.70'. [ 79.388684][ T6028] netlink: 'syz.0.77': attribute type 21 has an invalid length. [ 79.417092][ T6028] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.444295][ T6028] IPv6: Can't replace route, no match found [ 79.549930][ T6028] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 79.619521][ T6028] team0: Device wg1 is of different type [ 79.781575][ T6028] syz.0.77 (6028) used greatest stack depth: 19176 bytes left [ 80.003308][ T6045] vcan0: entered allmulticast mode [ 80.036903][ T5774] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 80.066516][ T6045] netlink: 'syz.0.84': attribute type 10 has an invalid length. [ 80.169377][ T5774] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 80.195938][ T6045] veth0_macvtap: left promiscuous mode [ 81.161847][ T6065] netlink: 'syz.3.93': attribute type 21 has an invalid length. [ 81.181018][ T6065] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.193314][ T6065] IPv6: Can't replace route, no match found [ 81.235594][ T6065] netlink: 'syz.3.93': attribute type 10 has an invalid length. [ 81.337900][ T6065] team0: Device wg1 is of different type [ 81.676338][ T175] cfg80211: failed to load regulatory.db [ 81.774307][ T6087] netlink: 'syz.3.101': attribute type 11 has an invalid length. [ 81.791212][ T6087] netlink: 140 bytes leftover after parsing attributes in process `syz.3.101'. [ 82.908400][ T6114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.853221][ T6147] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.125'. [ 84.391905][ T6167] vcan0: entered allmulticast mode [ 84.437660][ T6167] netlink: 'syz.1.134': attribute type 10 has an invalid length. [ 84.467949][ T6167] veth0_macvtap: left promiscuous mode [ 86.948735][ T6213] netlink: 'syz.1.154': attribute type 11 has an invalid length. [ 86.962804][ T6213] netlink: 140 bytes leftover after parsing attributes in process `syz.1.154'. [ 86.987193][ T6214] netlink: 'syz.0.161': attribute type 21 has an invalid length. [ 87.003205][ T6214] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 87.021419][ T6214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.161'. [ 87.262215][ T6216] vcan0: entered allmulticast mode [ 87.389278][ T6216] netlink: 'syz.2.153': attribute type 10 has an invalid length. [ 87.456444][ T6216] veth0_macvtap: left promiscuous mode [ 88.774719][ T6257] netlink: 'syz.1.171': attribute type 5 has an invalid length. [ 88.802601][ T6257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.171'. [ 89.642122][ T6279] netlink: 'syz.3.178': attribute type 39 has an invalid length. [ 89.682827][ T6278] Illegal XDP return value 4294967274 on prog (id 123) dev N/A, expect packet loss! [ 91.974024][ T6305] netlink: 'syz.0.188': attribute type 11 has an invalid length. [ 91.981808][ T6305] netlink: 140 bytes leftover after parsing attributes in process `syz.0.188'. [ 92.556289][ T6319] veth1_to_bond: entered allmulticast mode [ 93.070336][ T6336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.805553][ T6373] netlink: 10 bytes leftover after parsing attributes in process `syz.0.216'. [ 95.776577][ T6410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.967295][ T6415] netlink: 22 bytes leftover after parsing attributes in process `syz.2.233'. [ 96.660983][ T6425] netlink: 'syz.1.237': attribute type 3 has an invalid length. [ 96.771065][ T6425] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.237'. [ 98.260042][ T6471] netlink: 'syz.1.253': attribute type 11 has an invalid length. [ 98.342643][ T6471] netlink: 140 bytes leftover after parsing attributes in process `syz.1.253'. [ 98.643309][ T6480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.723885][ T6483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.258'. [ 98.769837][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.951405][ T6483] bridge_slave_0 (unregistering): left allmulticast mode [ 99.006984][ T6483] bridge_slave_0 (unregistering): left promiscuous mode [ 99.028002][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.720475][ T6535] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 100.737330][ T6535] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.277'. [ 101.466708][ T6549] netlink: 'syz.3.284': attribute type 27 has an invalid length. [ 101.496895][ T6549] netlink: 164 bytes leftover after parsing attributes in process `syz.3.284'. [ 101.583017][ T6549] netlink: 'syz.3.284': attribute type 27 has an invalid length. [ 101.622656][ T6549] netlink: 164 bytes leftover after parsing attributes in process `syz.3.284'. [ 101.848231][ T6560] FAULT_INJECTION: forcing a failure. [ 101.848231][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 101.932721][ T6560] CPU: 0 PID: 6560 Comm: syz.1.288 Not tainted syzkaller #0 [ 101.940077][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.950153][ T6560] Call Trace: [ 101.953453][ T6560] [ 101.956398][ T6560] dump_stack_lvl+0x18c/0x250 [ 101.961100][ T6560] ? show_regs_print_info+0x20/0x20 [ 101.966315][ T6560] ? load_image+0x420/0x420 [ 101.970846][ T6560] ? __might_sleep+0xe0/0xe0 [ 101.975457][ T6560] ? __lock_acquire+0x7d80/0x7d80 [ 101.980511][ T6560] should_fail_ex+0x394/0x4c0 [ 101.985221][ T6560] should_failslab+0x9/0x20 [ 101.989748][ T6560] slab_pre_alloc_hook+0x59/0x300 [ 101.994810][ T6560] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 102.000556][ T6560] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 102.006303][ T6560] __kmem_cache_alloc_node+0x53/0x250 [ 102.011708][ T6560] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 102.017452][ T6560] __kmalloc+0xa7/0x240 [ 102.021636][ T6560] tomoyo_realpath_from_path+0xe6/0x5c0 [ 102.027212][ T6560] ? tomoyo_domain+0xd6/0x120 [ 102.032013][ T6560] tomoyo_path_number_perm+0x248/0x5e0 [ 102.037494][ T6560] ? tomoyo_path_number_perm+0x217/0x5e0 [ 102.043154][ T6560] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 102.048639][ T6560] ? ksys_write+0x1d2/0x260 [ 102.053203][ T6560] ? __fget_files+0x28/0x460 [ 102.057833][ T6560] security_file_ioctl+0x70/0xa0 [ 102.062795][ T6560] __se_sys_ioctl+0x48/0x170 [ 102.067420][ T6560] do_syscall_64+0x55/0xb0 [ 102.071858][ T6560] ? clear_bhb_loop+0x40/0x90 [ 102.076575][ T6560] ? clear_bhb_loop+0x40/0x90 [ 102.081280][ T6560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.087190][ T6560] RIP: 0033:0x7f364b99e0d9 [ 102.091621][ T6560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.111242][ T6560] RSP: 002b:00007f364c796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.119675][ T6560] RAX: ffffffffffffffda RBX: 00007f364bc25fa0 RCX: 00007f364b99e0d9 [ 102.127662][ T6560] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 102.135651][ T6560] RBP: 00007f364c796090 R08: 0000000000000000 R09: 0000000000000000 [ 102.143637][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.151629][ T6560] R13: 00007f364bc26038 R14: 00007f364bc25fa0 R15: 00007ffd706fc288 [ 102.159635][ T6560] [ 102.195531][ T6560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.236039][ T6565] netlink: 'syz.2.290': attribute type 3 has an invalid length. [ 102.261699][ T6565] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.290'. [ 102.658001][ T6587] netlink: 'syz.2.297': attribute type 11 has an invalid length. [ 102.673159][ T6587] netlink: 140 bytes leftover after parsing attributes in process `syz.2.297'. [ 102.860808][ T6591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.379053][ T6650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.320'. [ 104.579839][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.832864][ T6650] bridge_slave_0 (unregistering): left allmulticast mode [ 104.892730][ T6650] bridge_slave_0 (unregistering): left promiscuous mode [ 104.947646][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.640150][ T6678] netlink: 'syz.1.328': attribute type 29 has an invalid length. [ 105.667435][ T6678] netlink: 'syz.1.328': attribute type 29 has an invalid length. [ 105.957382][ T6685] netlink: 'syz.3.329': attribute type 10 has an invalid length. [ 106.002006][ T6685] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.329'. [ 107.029067][ T6703] FAULT_INJECTION: forcing a failure. [ 107.029067][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 107.071003][ T6703] CPU: 1 PID: 6703 Comm: syz.0.337 Not tainted syzkaller #0 [ 107.078334][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.088407][ T6703] Call Trace: [ 107.091700][ T6703] [ 107.094645][ T6703] dump_stack_lvl+0x18c/0x250 [ 107.099359][ T6703] ? show_regs_print_info+0x20/0x20 [ 107.104589][ T6703] ? load_image+0x420/0x420 [ 107.109124][ T6703] ? __might_sleep+0xe0/0xe0 [ 107.113742][ T6703] ? __lock_acquire+0x7d80/0x7d80 [ 107.118786][ T6703] should_fail_ex+0x394/0x4c0 [ 107.123487][ T6703] should_failslab+0x9/0x20 [ 107.128006][ T6703] slab_pre_alloc_hook+0x59/0x300 [ 107.133055][ T6703] ? tomoyo_encode+0x2ad/0x570 [ 107.137818][ T6703] ? tomoyo_encode+0x2ad/0x570 [ 107.142577][ T6703] __kmem_cache_alloc_node+0x53/0x250 [ 107.147948][ T6703] ? tomoyo_encode+0x2ad/0x570 [ 107.152705][ T6703] __kmalloc+0xa7/0x240 [ 107.156860][ T6703] tomoyo_encode+0x2ad/0x570 [ 107.161454][ T6703] tomoyo_realpath_from_path+0x57c/0x5c0 [ 107.167088][ T6703] ? tomoyo_domain+0xd6/0x120 [ 107.171768][ T6703] tomoyo_path_number_perm+0x248/0x5e0 [ 107.177257][ T6703] ? tomoyo_path_number_perm+0x217/0x5e0 [ 107.182887][ T6703] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 107.188365][ T6703] ? __fget_files+0x28/0x460 [ 107.192986][ T6703] security_file_ioctl+0x70/0xa0 [ 107.197930][ T6703] __se_sys_ioctl+0x48/0x170 [ 107.202522][ T6703] do_syscall_64+0x55/0xb0 [ 107.206945][ T6703] ? clear_bhb_loop+0x40/0x90 [ 107.211621][ T6703] ? clear_bhb_loop+0x40/0x90 [ 107.216296][ T6703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.222183][ T6703] RIP: 0033:0x7fcc8f99e0d9 [ 107.226602][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.246208][ T6703] RSP: 002b:00007fcc908fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.254618][ T6703] RAX: ffffffffffffffda RBX: 00007fcc8fc25fa0 RCX: 00007fcc8f99e0d9 [ 107.262588][ T6703] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 107.270561][ T6703] RBP: 00007fcc908fd090 R08: 0000000000000000 R09: 0000000000000000 [ 107.278524][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.286486][ T6703] R13: 00007fcc8fc26038 R14: 00007fcc8fc25fa0 R15: 00007ffe7af36bc8 [ 107.294460][ T6703] [ 107.357745][ T6703] ERROR: Out of memory at tomoyo_realpath_from_path. [ 107.404283][ T6709] netlink: 'syz.2.340': attribute type 11 has an invalid length. [ 107.417763][ T6709] netlink: 140 bytes leftover after parsing attributes in process `syz.2.340'. [ 107.618064][ T6723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.100884][ T6736] netlink: 'syz.2.346': attribute type 10 has an invalid length. [ 108.106425][ T6730] netlink: 'syz.3.347': attribute type 10 has an invalid length. [ 108.154748][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.160890][ T6736] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.346'. [ 108.290379][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.298345][ T6730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.390403][ T6730] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.991592][ T6754] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 109.002587][ T6754] pim6reg0: ignored: set checksum disabled [ 109.466289][ T6767] netlink: 'syz.1.361': attribute type 6 has an invalid length. [ 109.480939][ T6767] netlink: 168 bytes leftover after parsing attributes in process `syz.1.361'. [ 109.975952][ T6781] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.367'. [ 110.060896][ T6781] netlink: 10 bytes leftover after parsing attributes in process `syz.1.367'. [ 110.128273][ T6781] netlink: 14 bytes leftover after parsing attributes in process `syz.1.367'. [ 110.261050][ T6781] hsr_slave_0: left promiscuous mode [ 110.346690][ T6781] hsr_slave_1: left promiscuous mode [ 110.869414][ T6791] netlink: 'syz.0.370': attribute type 39 has an invalid length. [ 111.589787][ T6815] netlink: 'syz.0.377': attribute type 10 has an invalid length. [ 111.663301][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.670949][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.744157][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.751357][ T6815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.758891][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.766103][ T6815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.829327][ T6815] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 111.859305][ T6821] netlink: 'syz.2.381': attribute type 11 has an invalid length. [ 111.868420][ T6821] netlink: 140 bytes leftover after parsing attributes in process `syz.2.381'. [ 112.101257][ T6827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.911307][ T6855] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 112.953544][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.961194][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.070182][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.077386][ T6855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.084951][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.092828][ T6855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.130680][ T6855] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 113.824158][ T6882] netlink: 'syz.1.409': attribute type 39 has an invalid length. [ 113.899848][ T6885] veth1_to_bond: entered allmulticast mode [ 117.950791][ T6924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.958140][ T6924] IPv6: NLM_F_CREATE should be set when creating new route [ 117.965449][ T6924] IPv6: NLM_F_CREATE should be set when creating new route [ 117.972723][ T6924] IPv6: NLM_F_CREATE should be set when creating new route [ 118.487941][ T6942] Zero length message leads to an empty skb [ 121.325776][ T5774] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 121.733702][ T7050] netlink: 'syz.2.476': attribute type 10 has an invalid length. [ 121.741819][ T7050] hsr0: entered promiscuous mode [ 121.804383][ T7050] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 122.928435][ T7091] netlink: 'syz.0.492': attribute type 10 has an invalid length. [ 122.994769][ T7091] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 123.119532][ T7095] netlink: 'syz.3.494': attribute type 10 has an invalid length. [ 123.149380][ T7095] netlink: 55 bytes leftover after parsing attributes in process `syz.3.494'. [ 123.243855][ T7098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.492590][ T7104] netlink: 'syz.1.506': attribute type 2 has an invalid length. [ 125.387646][ T7164] FAULT_INJECTION: forcing a failure. [ 125.387646][ T7164] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.434739][ T7164] CPU: 0 PID: 7164 Comm: syz.0.525 Not tainted syzkaller #0 [ 125.442065][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.452143][ T7164] Call Trace: [ 125.455440][ T7164] [ 125.458388][ T7164] dump_stack_lvl+0x18c/0x250 [ 125.463100][ T7164] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 125.469268][ T7164] ? show_regs_print_info+0x20/0x20 [ 125.474483][ T7164] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 125.480668][ T7164] should_fail_ex+0x394/0x4c0 [ 125.485389][ T7164] _copy_from_user+0x2f/0xe0 [ 125.490013][ T7164] ethtool_get_stats+0x196/0x3a0 [ 125.494978][ T7164] ? ethtool_phys_id+0x530/0x530 [ 125.499954][ T7164] dev_ethtool+0xa63/0x18d0 [ 125.504492][ T7164] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 125.510764][ T7164] ? __lock_acquire+0x7d80/0x7d80 [ 125.515810][ T7164] ? lockdep_hardirqs_on+0x98/0x150 [ 125.521032][ T7164] ? full_name_hash+0x92/0xe0 [ 125.525735][ T7164] ? dev_load+0x21/0x1f0 [ 125.530006][ T7164] dev_ioctl+0x392/0x1140 [ 125.534366][ T7164] sock_do_ioctl+0x239/0x310 [ 125.538978][ T7164] ? sock_show_fdinfo+0xb0/0xb0 [ 125.543861][ T7164] sock_ioctl+0x5be/0x7e0 [ 125.548218][ T7164] ? sock_poll+0x3e0/0x3e0 [ 125.552668][ T7164] ? bpf_lsm_file_ioctl+0x9/0x10 [ 125.557630][ T7164] ? security_file_ioctl+0x80/0xa0 [ 125.562761][ T7164] ? sock_poll+0x3e0/0x3e0 [ 125.567198][ T7164] __se_sys_ioctl+0xfd/0x170 [ 125.571815][ T7164] do_syscall_64+0x55/0xb0 [ 125.576251][ T7164] ? clear_bhb_loop+0x40/0x90 [ 125.580951][ T7164] ? clear_bhb_loop+0x40/0x90 [ 125.585647][ T7164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.591578][ T7164] RIP: 0033:0x7fcc8f99e0d9 [ 125.596015][ T7164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.615635][ T7164] RSP: 002b:00007fcc908fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.624074][ T7164] RAX: ffffffffffffffda RBX: 00007fcc8fc25fa0 RCX: 00007fcc8f99e0d9 [ 125.632061][ T7164] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 125.640051][ T7164] RBP: 00007fcc908fd090 R08: 0000000000000000 R09: 0000000000000000 [ 125.648035][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.656011][ T7164] R13: 00007fcc8fc26038 R14: 00007fcc8fc25fa0 R15: 00007ffe7af36bc8 [ 125.664003][ T7164] [ 125.838824][ T7179] netlink: 'syz.2.531': attribute type 11 has an invalid length. [ 125.860461][ T7179] netlink: 140 bytes leftover after parsing attributes in process `syz.2.531'. [ 125.911456][ T7181] netlink: 'syz.0.532': attribute type 5 has an invalid length. [ 125.952806][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.532'. [ 126.205280][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.233181][ T7189] bridge0: entered allmulticast mode [ 126.384741][ T7192] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.535'. [ 126.397877][ T7192] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.535'. [ 126.413210][ T7189] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.535'. [ 126.423485][ T7192] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.535'. [ 126.809954][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.356683][ T7252] netlink: 'syz.0.562': attribute type 21 has an invalid length. [ 128.392306][ T7252] netlink: 168 bytes leftover after parsing attributes in process `syz.0.562'. [ 130.220892][ T7306] netlink: 'syz.0.587': attribute type 21 has an invalid length. [ 130.733918][ T7323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.203211][ T7339] netlink: 'syz.0.591': attribute type 3 has an invalid length. [ 131.243768][ T7339] netlink: 132 bytes leftover after parsing attributes in process `syz.0.591'. [ 131.255190][ T7341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.593'. [ 131.283287][ T7341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.593'. [ 131.312986][ T7341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.593'. [ 131.343261][ T7341] netlink: 'syz.1.593': attribute type 10 has an invalid length. [ 131.425755][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.439076][ T7341] bridge_slave_1: left allmulticast mode [ 131.452538][ T7341] bridge_slave_1: left promiscuous mode [ 131.458391][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.473148][ T7341] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 131.508851][ T7346] netlink: 60 bytes leftover after parsing attributes in process `syz.1.593'. [ 131.894291][ T7361] netlink: 'syz.1.601': attribute type 3 has an invalid length. [ 131.923093][ T7361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.601'. [ 132.466684][ T7378] syz.3.607[7378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.466989][ T7378] syz.3.607[7378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.578438][ T7383] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.609'. [ 132.877149][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883787][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.238349][ T7404] netlink: 'syz.1.617': attribute type 2 has an invalid length. [ 133.262910][ T7404] netlink: 'syz.1.617': attribute type 1 has an invalid length. [ 133.276805][ T7404] netlink: 9 bytes leftover after parsing attributes in process `syz.1.617'. [ 133.421303][ T7411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.991985][ T7427] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.628'. [ 134.003083][ T7427] netlink: 144 bytes leftover after parsing attributes in process `syz.0.628'. [ 134.029439][ T7427] team0: Port device team_slave_0 removed [ 134.060201][ T7427] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 134.102158][ T7422] netlink: 'syz.3.624': attribute type 21 has an invalid length. [ 134.128018][ T7431] netlink: 'syz.2.629': attribute type 11 has an invalid length. [ 134.136094][ T7431] netlink: 140 bytes leftover after parsing attributes in process `syz.2.629'. [ 134.398764][ T7439] netlink: 'syz.0.633': attribute type 21 has an invalid length. [ 134.413657][ T7439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.633'. [ 134.789002][ T7451] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.639'. [ 134.809542][ T7451] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 135.222934][ T7461] netlink: 'syz.1.640': attribute type 21 has an invalid length. [ 136.103186][ T7478] netlink: 188 bytes leftover after parsing attributes in process `syz.1.651'. [ 136.526656][ T7488] netlink: 'syz.2.655': attribute type 29 has an invalid length. [ 136.548397][ T7488] netlink: 'syz.2.655': attribute type 29 has an invalid length. [ 136.936544][ T7502] netlink: 'syz.0.661': attribute type 11 has an invalid length. [ 136.952722][ T7502] netlink: 140 bytes leftover after parsing attributes in process `syz.0.661'. [ 139.253617][ T7574] netlink: 'syz.0.692': attribute type 11 has an invalid length. [ 139.298493][ T7574] netlink: 140 bytes leftover after parsing attributes in process `syz.0.692'. [ 141.723614][ T7625] netlink: 'syz.1.709': attribute type 4 has an invalid length. [ 141.731595][ T7625] netlink: 105560 bytes leftover after parsing attributes in process `syz.1.709'. [ 145.098074][ T7738] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.752'. [ 145.331744][ T7738] netlink: 'syz.1.752': attribute type 10 has an invalid length. [ 145.407635][ T7738] syz_tun: entered promiscuous mode [ 145.478190][ T7745] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.752'. [ 145.583051][ T7738] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 147.616599][ T7767] netlink: 'syz.2.763': attribute type 21 has an invalid length. [ 147.624747][ T7767] netlink: 'syz.2.763': attribute type 6 has an invalid length. [ 148.245891][ T7786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.772'. [ 148.528944][ T7791] netlink: 'syz.0.774': attribute type 10 has an invalid length. [ 148.550478][ T7791] netlink: 55 bytes leftover after parsing attributes in process `syz.0.774'. [ 149.517584][ T7814] netlink: 132 bytes leftover after parsing attributes in process `syz.3.783'. [ 149.804045][ T7822] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.786'. [ 149.925167][ T7824] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.785'. [ 149.961706][ T7822] netlink: 'syz.3.786': attribute type 10 has an invalid length. [ 149.995508][ T7834] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.786'. [ 154.357420][ T7977] netlink: 'syz.3.835': attribute type 11 has an invalid length. [ 154.389297][ T7977] netlink: 140 bytes leftover after parsing attributes in process `syz.3.835'. [ 155.381933][ T8002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.596156][ T8122] netlink: 'syz.1.896': attribute type 2 has an invalid length. [ 158.615918][ T8122] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 158.637657][ T8122] netlink: 152 bytes leftover after parsing attributes in process `syz.1.896'. [ 158.934807][ T8134] netlink: 'syz.3.900': attribute type 11 has an invalid length. [ 158.947593][ T8134] netlink: 140 bytes leftover after parsing attributes in process `syz.3.900'. [ 158.988696][ T8137] netlink: 'syz.0.901': attribute type 21 has an invalid length. [ 159.575477][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.592807][ T8155] bridge0: entered allmulticast mode [ 160.851149][ T8196] netlink: 'syz.2.926': attribute type 10 has an invalid length. [ 160.864807][ T8196] bridge0: left allmulticast mode [ 160.883179][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.891015][ T8196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.001219][ T8196] team0: Port device bridge0 added [ 161.044548][ T8200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.926'. [ 161.694530][ T8227] netlink: 'syz.2.940': attribute type 9 has an invalid length. [ 161.708414][ T8227] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.940'. [ 162.202909][ T8244] syz.0.946 uses obsolete (PF_INET,SOCK_PACKET) [ 162.323040][ T8237] netlink: 'syz.2.943': attribute type 10 has an invalid length. [ 162.377906][ T8237] team0: Port device dummy0 added [ 162.504514][ T8251] netlink: 132 bytes leftover after parsing attributes in process `syz.0.949'. [ 162.827139][ T8269] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.955'. [ 162.913075][ T8269] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.955'. [ 163.274698][ T8285] netlink: 'syz.1.964': attribute type 10 has an invalid length. [ 163.329981][ T8285] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.964'. [ 163.352670][ T8285] openvswitch: netlink: Flow key attr not present in new flow. [ 163.446157][ T8292] netlink: 'syz.0.966': attribute type 11 has an invalid length. [ 163.511798][ T8292] netlink: 140 bytes leftover after parsing attributes in process `syz.0.966'. [ 164.988576][ T8353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.991427][ T8389] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1005'. [ 166.427915][ T8404] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1012'. [ 166.440438][ T8404] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 166.451586][ T8404] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 167.555334][ T8448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.681733][ T8452] netlink: 'syz.0.1034': attribute type 3 has an invalid length. [ 167.702747][ T8452] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1034'. [ 167.746656][ T8452] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1034'. [ 167.765745][ T8452] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1034'. [ 170.216618][ T8531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.889955][ T8625] netlink: 'syz.0.1096': attribute type 3 has an invalid length. [ 172.930660][ T8625] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1096'. [ 173.499716][ T8639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.713452][ T8693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1123'. [ 176.098131][ T5774] Bluetooth: hci0: ISO packet for unknown connection handle 3875 [ 176.497582][ T8725] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1136'. [ 176.688682][ T8732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.341474][ T8756] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1149'. [ 177.578452][ T8759] can: request_module (can-proto-0) failed. [ 178.954463][ T8770] netlink: 'syz.2.1155': attribute type 10 has an invalid length. [ 179.150578][ T8770] team0: Device vxcan1 is of different type [ 180.227152][ T8789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1160'. [ 181.034211][ T8806] netlink: 'syz.3.1166': attribute type 10 has an invalid length. [ 181.042151][ T8806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1166'. [ 181.053203][ T8806] ipvlan1: entered promiscuous mode [ 181.058745][ T8806] ipvlan1: entered allmulticast mode [ 181.073347][ T8806] veth0_vlan: entered allmulticast mode [ 181.086857][ T8806] bridge0: port 1(ipvlan1) entered blocking state [ 181.138231][ T8806] bridge0: port 1(ipvlan1) entered disabled state [ 181.156427][ T8806] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 181.180380][ T8808] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1167'. [ 181.247791][ T8815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1173'. [ 182.046650][ T8847] netlink: 'syz.1.1179': attribute type 10 has an invalid length. [ 182.063273][ T8847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1179'. [ 182.088251][ T8847] ipvlan1: entered promiscuous mode [ 182.104455][ T8847] ipvlan1: entered allmulticast mode [ 182.110018][ T8847] veth0_vlan: entered allmulticast mode [ 182.176777][ T8847] bridge0: port 2(ipvlan1) entered blocking state [ 182.193345][ T8847] bridge0: port 2(ipvlan1) entered disabled state [ 182.256974][ T8847] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 182.324998][ T8855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1180'. [ 182.524808][ T8860] netlink: 'syz.0.1184': attribute type 39 has an invalid length. [ 183.577355][ T8884] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 183.660295][ T8885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.937691][ T8889] netlink: 'syz.1.1194': attribute type 3 has an invalid length. [ 184.001820][ T8889] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1194'. [ 184.341604][ T8897] FAULT_INJECTION: forcing a failure. [ 184.341604][ T8897] name failslab, interval 1, probability 0, space 0, times 0 [ 184.372520][ T8897] CPU: 1 PID: 8897 Comm: syz.1.1197 Not tainted syzkaller #0 [ 184.373743][ T8895] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1196'. [ 184.379913][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.379943][ T8897] Call Trace: [ 184.379951][ T8897] [ 184.379959][ T8897] dump_stack_lvl+0x18c/0x250 [ 184.379989][ T8897] ? show_regs_print_info+0x20/0x20 [ 184.415052][ T8897] ? load_image+0x420/0x420 [ 184.419562][ T8897] ? __might_sleep+0xe0/0xe0 [ 184.424148][ T8897] ? __lock_acquire+0x7d80/0x7d80 [ 184.429174][ T8897] should_fail_ex+0x394/0x4c0 [ 184.433847][ T8897] should_failslab+0x9/0x20 [ 184.438349][ T8897] slab_pre_alloc_hook+0x59/0x300 [ 184.443370][ T8897] ? tomoyo_encode+0x2ad/0x570 [ 184.448127][ T8897] ? tomoyo_encode+0x2ad/0x570 [ 184.452883][ T8897] __kmem_cache_alloc_node+0x53/0x250 [ 184.458254][ T8897] ? tomoyo_encode+0x2ad/0x570 [ 184.463011][ T8897] __kmalloc+0xa7/0x240 [ 184.467165][ T8897] tomoyo_encode+0x2ad/0x570 [ 184.471755][ T8897] tomoyo_realpath_from_path+0x57c/0x5c0 [ 184.477391][ T8897] ? tomoyo_domain+0xd6/0x120 [ 184.482067][ T8897] tomoyo_path_number_perm+0x248/0x5e0 [ 184.487518][ T8897] ? tomoyo_path_number_perm+0x217/0x5e0 [ 184.493146][ T8897] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 184.498636][ T8897] ? trace_call_bpf+0xc3/0x6c0 [ 184.503405][ T8897] ? trace_call_bpf+0xc3/0x6c0 [ 184.508163][ T8897] ? trace_call_bpf+0x5e9/0x6c0 [ 184.513044][ T8897] ? __fget_files+0x28/0x460 [ 184.517648][ T8897] security_file_ioctl+0x70/0xa0 [ 184.522588][ T8897] __se_sys_ioctl+0x48/0x170 [ 184.527176][ T8897] do_syscall_64+0x55/0xb0 [ 184.531581][ T8897] ? clear_bhb_loop+0x40/0x90 [ 184.536253][ T8897] ? clear_bhb_loop+0x40/0x90 [ 184.540927][ T8897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.546817][ T8897] RIP: 0033:0x7f364b99e0d9 [ 184.551223][ T8897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.570827][ T8897] RSP: 002b:00007f364c796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.579261][ T8897] RAX: ffffffffffffffda RBX: 00007f364bc25fa0 RCX: 00007f364b99e0d9 [ 184.587227][ T8897] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 184.595193][ T8897] RBP: 00007f364c796090 R08: 0000000000000000 R09: 0000000000000000 [ 184.603156][ T8897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.611112][ T8897] R13: 00007f364bc26038 R14: 00007f364bc25fa0 R15: 00007ffd706fc288 [ 184.619085][ T8897] [ 184.682014][ T8897] ERROR: Out of memory at tomoyo_realpath_from_path. [ 184.688249][ T8901] netlink: 'syz.0.1198': attribute type 9 has an invalid length. [ 184.721085][ T8901] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1198'. [ 184.776762][ T8903] netlink: 'syz.0.1198': attribute type 9 has an invalid length. [ 184.818226][ T8903] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1198'. [ 184.832308][ T8905] netlink: 'syz.0.1198': attribute type 9 has an invalid length. [ 184.861367][ T8901] netlink: 'syz.0.1198': attribute type 9 has an invalid length. [ 185.688632][ T8937] __nla_validate_parse: 2 callbacks suppressed [ 185.688675][ T8937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1211'. [ 185.896394][ T8949] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1217'. [ 185.926336][ T8949] netlink: set zone limit has 4 unknown bytes [ 186.375799][ T8964] netlink: 'syz.1.1224': attribute type 10 has an invalid length. [ 186.422151][ T8964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1224'. [ 186.694729][ T8967] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1226'. [ 187.074943][ T8981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1228'. [ 187.427778][ T8994] FAULT_INJECTION: forcing a failure. [ 187.427778][ T8994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.452541][ T8994] CPU: 1 PID: 8994 Comm: syz.1.1234 Not tainted syzkaller #0 [ 187.459956][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.470019][ T8994] Call Trace: [ 187.473297][ T8994] [ 187.476242][ T8994] dump_stack_lvl+0x18c/0x250 [ 187.480943][ T8994] ? show_regs_print_info+0x20/0x20 [ 187.486161][ T8994] ? load_image+0x420/0x420 [ 187.490696][ T8994] ? __might_fault+0xaa/0x120 [ 187.495392][ T8994] ? __lock_acquire+0x7d80/0x7d80 [ 187.500444][ T8994] should_fail_ex+0x394/0x4c0 [ 187.505161][ T8994] _copy_from_user+0x2f/0xe0 [ 187.509763][ T8994] sock_do_ioctl+0x190/0x310 [ 187.514362][ T8994] ? sock_show_fdinfo+0xb0/0xb0 [ 187.519250][ T8994] sock_ioctl+0x5be/0x7e0 [ 187.523603][ T8994] ? sock_poll+0x3e0/0x3e0 [ 187.528022][ T8994] ? bpf_lsm_file_ioctl+0x9/0x10 [ 187.532959][ T8994] ? security_file_ioctl+0x80/0xa0 [ 187.538066][ T8994] ? sock_poll+0x3e0/0x3e0 [ 187.542486][ T8994] __se_sys_ioctl+0xfd/0x170 [ 187.547093][ T8994] do_syscall_64+0x55/0xb0 [ 187.551503][ T8994] ? clear_bhb_loop+0x40/0x90 [ 187.556174][ T8994] ? clear_bhb_loop+0x40/0x90 [ 187.560857][ T8994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.566741][ T8994] RIP: 0033:0x7f364b99e0d9 [ 187.571145][ T8994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.590741][ T8994] RSP: 002b:00007f364c796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.599148][ T8994] RAX: ffffffffffffffda RBX: 00007f364bc25fa0 RCX: 00007f364b99e0d9 [ 187.607113][ T8994] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 187.615078][ T8994] RBP: 00007f364c796090 R08: 0000000000000000 R09: 0000000000000000 [ 187.623039][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.631000][ T8994] R13: 00007f364bc26038 R14: 00007f364bc25fa0 R15: 00007ffd706fc288 [ 187.638972][ T8994] [ 187.994718][ T9002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1237'. [ 188.518030][ T9006] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 189.316396][ T9040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.448069][ T9038] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1248'. [ 190.025781][ T9063] FAULT_INJECTION: forcing a failure. [ 190.025781][ T9063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.047146][ T9063] CPU: 0 PID: 9063 Comm: syz.1.1261 Not tainted syzkaller #0 [ 190.054552][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.064624][ T9063] Call Trace: [ 190.067921][ T9063] [ 190.070869][ T9063] dump_stack_lvl+0x18c/0x250 [ 190.075576][ T9063] ? show_regs_print_info+0x20/0x20 [ 190.080794][ T9063] ? load_image+0x420/0x420 [ 190.085325][ T9063] ? __might_fault+0xaa/0x120 [ 190.090022][ T9063] ? __lock_acquire+0x7d80/0x7d80 [ 190.095069][ T9063] should_fail_ex+0x394/0x4c0 [ 190.099779][ T9063] _copy_from_user+0x2f/0xe0 [ 190.104399][ T9063] dev_ethtool+0xc6/0x18d0 [ 190.108846][ T9063] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 190.115113][ T9063] ? __lock_acquire+0x7d80/0x7d80 [ 190.120158][ T9063] ? full_name_hash+0x92/0xe0 [ 190.124855][ T9063] ? dev_load+0x21/0x1f0 [ 190.129123][ T9063] dev_ioctl+0x392/0x1140 [ 190.133479][ T9063] sock_do_ioctl+0x239/0x310 [ 190.138093][ T9063] ? sock_show_fdinfo+0xb0/0xb0 [ 190.142984][ T9063] sock_ioctl+0x5be/0x7e0 [ 190.147335][ T9063] ? sock_poll+0x3e0/0x3e0 [ 190.151923][ T9063] ? bpf_lsm_file_ioctl+0x9/0x10 [ 190.156884][ T9063] ? security_file_ioctl+0x80/0xa0 [ 190.162014][ T9063] ? sock_poll+0x3e0/0x3e0 [ 190.166458][ T9063] __se_sys_ioctl+0xfd/0x170 [ 190.171075][ T9063] do_syscall_64+0x55/0xb0 [ 190.175510][ T9063] ? clear_bhb_loop+0x40/0x90 [ 190.180200][ T9063] ? clear_bhb_loop+0x40/0x90 [ 190.184896][ T9063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.190809][ T9063] RIP: 0033:0x7f364b99e0d9 [ 190.195246][ T9063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.214865][ T9063] RSP: 002b:00007f364c796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.219075][ T9064] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1262'. [ 190.223278][ T9063] RAX: ffffffffffffffda RBX: 00007f364bc25fa0 RCX: 00007f364b99e0d9 [ 190.223294][ T9063] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 190.223305][ T9063] RBP: 00007f364c796090 R08: 0000000000000000 R09: 0000000000000000 [ 190.223316][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.223326][ T9063] R13: 00007f364bc26038 R14: 00007f364bc25fa0 R15: 00007ffd706fc288 [ 190.223350][ T9063] [ 190.638193][ T9077] syzkaller0: entered promiscuous mode [ 190.646526][ T9077] syzkaller0: entered allmulticast mode [ 190.654696][ T9076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1266'. [ 191.276038][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 191.276132][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 191.282143][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 191.290609][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 192.898082][ T9088] netlink: 'syz.0.1269': attribute type 39 has an invalid length. [ 193.038051][ T9101] netlink: 'syz.3.1274': attribute type 6 has an invalid length. [ 193.061354][ T9101] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1274'. [ 193.336231][ T9114] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1278'. [ 193.364518][ T9112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.755926][ T9125] FAULT_INJECTION: forcing a failure. [ 193.755926][ T9125] name failslab, interval 1, probability 0, space 0, times 0 [ 193.796920][ T9125] CPU: 0 PID: 9125 Comm: syz.1.1285 Not tainted syzkaller #0 [ 193.804332][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.813483][ T9118] syzkaller0: entered promiscuous mode [ 193.814382][ T9125] Call Trace: [ 193.814392][ T9125] [ 193.826058][ T9125] dump_stack_lvl+0x18c/0x250 [ 193.830021][ T9118] syzkaller0: entered allmulticast mode [ 193.830748][ T9125] ? show_regs_print_info+0x20/0x20 [ 193.841488][ T9125] ? load_image+0x420/0x420 [ 193.846021][ T9125] ? __might_sleep+0xe0/0xe0 [ 193.850632][ T9125] ? __lock_acquire+0x7d80/0x7d80 [ 193.855678][ T9125] should_fail_ex+0x394/0x4c0 [ 193.860378][ T9125] should_failslab+0x9/0x20 [ 193.864904][ T9125] slab_pre_alloc_hook+0x59/0x300 [ 193.869949][ T9125] ? __lock_acquire+0x7d80/0x7d80 [ 193.874987][ T9125] ? dev_ethtool+0x129/0x18d0 [ 193.879684][ T9125] __kmem_cache_alloc_node+0x53/0x250 [ 193.885077][ T9125] ? __might_fault+0xaa/0x120 [ 193.889776][ T9125] ? dev_ethtool+0x129/0x18d0 [ 193.894471][ T9125] kmalloc_trace+0x2a/0xe0 [ 193.898916][ T9125] dev_ethtool+0x129/0x18d0 [ 193.903447][ T9125] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 193.909705][ T9125] ? __lock_acquire+0x7d80/0x7d80 [ 193.914747][ T9125] ? full_name_hash+0x92/0xe0 [ 193.919444][ T9125] ? dev_load+0x21/0x1f0 [ 193.923708][ T9125] dev_ioctl+0x392/0x1140 [ 193.928060][ T9125] sock_do_ioctl+0x239/0x310 [ 193.932672][ T9125] ? sock_show_fdinfo+0xb0/0xb0 [ 193.937551][ T9125] sock_ioctl+0x5be/0x7e0 [ 193.941897][ T9125] ? sock_poll+0x3e0/0x3e0 [ 193.946337][ T9125] ? bpf_lsm_file_ioctl+0x9/0x10 [ 193.951287][ T9125] ? security_file_ioctl+0x80/0xa0 [ 193.956415][ T9125] ? sock_poll+0x3e0/0x3e0 [ 193.960847][ T9125] __se_sys_ioctl+0xfd/0x170 [ 193.965454][ T9125] do_syscall_64+0x55/0xb0 [ 193.969881][ T9125] ? clear_bhb_loop+0x40/0x90 [ 193.974570][ T9125] ? clear_bhb_loop+0x40/0x90 [ 193.979261][ T9125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.985168][ T9125] RIP: 0033:0x7f364b99e0d9 [ 193.989595][ T9125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.009217][ T9125] RSP: 002b:00007f364c796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.017643][ T9125] RAX: ffffffffffffffda RBX: 00007f364bc25fa0 RCX: 00007f364b99e0d9 [ 194.025630][ T9125] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 194.033609][ T9125] RBP: 00007f364c796090 R08: 0000000000000000 R09: 0000000000000000 [ 194.041588][ T9125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.049568][ T9125] R13: 00007f364bc26038 R14: 00007f364bc25fa0 R15: 00007ffd706fc288 [ 194.057566][ T9125] [ 194.077313][ T9119] netlink: 'syz.2.1281': attribute type 4 has an invalid length. [ 194.088546][ T9119] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1281'. [ 194.121519][ T9119] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 194.339020][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.345875][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.727779][ T9159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1293'. [ 195.953590][ T9143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.778072][ T9186] netlink: 'syz.2.1303': attribute type 27 has an invalid length. [ 196.790838][ T9186] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1303'. [ 196.801484][ T9186] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 197.057411][ T9191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1304'. [ 197.621235][ T9207] netlink: 'syz.0.1310': attribute type 13 has an invalid length. [ 197.749517][ T9212] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.1311'. [ 198.956251][ T9236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1321'. [ 199.443487][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 200.009309][ T9263] syzkaller0: entered promiscuous mode [ 200.040664][ T9263] syzkaller0: entered allmulticast mode [ 200.255295][ T9276] netlink: 'syz.2.1334': attribute type 4 has an invalid length. [ 200.266148][ T9276] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1334'. [ 200.352305][ T9276] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 201.041381][ T9294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.762729][ T5827] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 202.035753][ T9280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1335'. [ 202.762055][ T9320] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1352'. [ 206.020943][ T9349] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1361'. [ 206.302165][ T9353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1362'. [ 208.006846][ T9374] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1372'. [ 208.373024][ T9383] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1373'. [ 210.638290][ T9407] syzkaller0: entered promiscuous mode [ 210.643960][ T9407] syzkaller0: entered allmulticast mode [ 210.688501][ T9407] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 214.885243][ T9414] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1385'. [ 215.611800][ T9455] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1402'. [ 215.935210][ T9470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.126634][ T9476] netlink: 'syz.1.1412': attribute type 2 has an invalid length. [ 216.144387][ T9476] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1412'. [ 216.183984][ T9476] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1412'. [ 216.246193][ T9482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1415'. [ 216.280281][ T9482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1415'. [ 216.301930][ T9482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1415'. [ 216.350250][ T9482] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1415'. [ 216.480977][ T9482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1415'. [ 216.577695][ T9492] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1417'. [ 217.066109][ T9512] netlink: 'syz.1.1425': attribute type 3 has an invalid length. [ 217.858117][ T9537] netlink: 'syz.3.1438': attribute type 10 has an invalid length. [ 218.766849][ T9562] netlink: 'syz.1.1446': attribute type 39 has an invalid length. [ 219.009138][ T9562] bond0: (slave syz_tun): Releasing backup interface [ 219.933580][ T9578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.086603][ T9582] tap0: tun_chr_ioctl cmd 1074025692 [ 220.160474][ T9586] netlink: 'syz.2.1455': attribute type 27 has an invalid length. [ 220.206384][ T9586] netlink: 'syz.2.1455': attribute type 4 has an invalid length. [ 220.248530][ T9586] __nla_validate_parse: 5 callbacks suppressed [ 220.248541][ T9586] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1455'. [ 222.162072][ T9637] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1477'. [ 222.395988][ T9646] FAULT_INJECTION: forcing a failure. [ 222.395988][ T9646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.463976][ T9646] CPU: 0 PID: 9646 Comm: syz.2.1482 Not tainted syzkaller #0 [ 222.471398][ T9646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.481471][ T9646] Call Trace: [ 222.484767][ T9646] [ 222.487715][ T9646] dump_stack_lvl+0x18c/0x250 [ 222.492417][ T9646] ? show_regs_print_info+0x20/0x20 [ 222.497640][ T9646] ? load_image+0x420/0x420 [ 222.502165][ T9646] ? __might_fault+0xaa/0x120 [ 222.506861][ T9646] ? __lock_acquire+0x7d80/0x7d80 [ 222.511906][ T9646] should_fail_ex+0x394/0x4c0 [ 222.516625][ T9646] _copy_from_user+0x2f/0xe0 [ 222.521241][ T9646] ___sys_sendmsg+0x1c7/0x360 [ 222.525942][ T9646] ? get_pid_task+0x20/0x1e0 [ 222.530560][ T9646] ? __sys_sendmsg+0x2b0/0x2b0 [ 222.535357][ T9646] ? __lock_acquire+0x7d80/0x7d80 [ 222.540398][ T9646] __se_sys_sendmsg+0x1d0/0x2c0 [ 222.545246][ T9646] ? perf_trace_preemptirq_template+0x269/0x330 [ 222.551485][ T9646] ? __x64_sys_sendmsg+0x80/0x80 [ 222.556427][ T9646] ? lockdep_hardirqs_on+0x98/0x150 [ 222.561629][ T9646] do_syscall_64+0x55/0xb0 [ 222.566040][ T9646] ? clear_bhb_loop+0x40/0x90 [ 222.570711][ T9646] ? clear_bhb_loop+0x40/0x90 [ 222.575386][ T9646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.581273][ T9646] RIP: 0033:0x7f9ce179e0d9 [ 222.585686][ T9646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.605282][ T9646] RSP: 002b:00007f9ce25cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.613691][ T9646] RAX: ffffffffffffffda RBX: 00007f9ce1a25fa0 RCX: 00007f9ce179e0d9 [ 222.621654][ T9646] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 222.629621][ T9646] RBP: 00007f9ce25cb090 R08: 0000000000000000 R09: 0000000000000000 [ 222.637583][ T9646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.645545][ T9646] R13: 00007f9ce1a26038 R14: 00007f9ce1a25fa0 R15: 00007ffd23483478 [ 222.653517][ T9646] [ 223.621045][ T9686] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1496'. [ 225.854926][ T9753] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1523'. [ 227.043900][ T9780] FAULT_INJECTION: forcing a failure. [ 227.043900][ T9780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.057534][ T9780] CPU: 1 PID: 9780 Comm: syz.3.1533 Not tainted syzkaller #0 [ 227.064914][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.074980][ T9780] Call Trace: [ 227.078256][ T9780] [ 227.081179][ T9780] dump_stack_lvl+0x18c/0x250 [ 227.085863][ T9780] ? show_regs_print_info+0x20/0x20 [ 227.091071][ T9780] ? load_image+0x420/0x420 [ 227.095585][ T9780] ? __lock_acquire+0x7d80/0x7d80 [ 227.100612][ T9780] should_fail_ex+0x394/0x4c0 [ 227.105291][ T9780] _copy_from_user+0x2f/0xe0 [ 227.109879][ T9780] __copy_msghdr+0x388/0x560 [ 227.114470][ T9780] ___sys_sendmsg+0x214/0x360 [ 227.119146][ T9780] ? get_pid_task+0x20/0x1e0 [ 227.123741][ T9780] ? __sys_sendmsg+0x2b0/0x2b0 [ 227.128518][ T9780] ? __lock_acquire+0x7d80/0x7d80 [ 227.133566][ T9780] __se_sys_sendmsg+0x1d0/0x2c0 [ 227.138424][ T9780] ? __x64_sys_sendmsg+0x80/0x80 [ 227.143367][ T9780] ? lockdep_hardirqs_on+0x98/0x150 [ 227.148569][ T9780] do_syscall_64+0x55/0xb0 [ 227.152982][ T9780] ? clear_bhb_loop+0x40/0x90 [ 227.157656][ T9780] ? clear_bhb_loop+0x40/0x90 [ 227.162326][ T9780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.168216][ T9780] RIP: 0033:0x7f04ac19e0d9 [ 227.172638][ T9780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.192241][ T9780] RSP: 002b:00007f04ad153028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.200649][ T9780] RAX: ffffffffffffffda RBX: 00007f04ac425fa0 RCX: 00007f04ac19e0d9 [ 227.208615][ T9780] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 227.216581][ T9780] RBP: 00007f04ad153090 R08: 0000000000000000 R09: 0000000000000000 [ 227.224543][ T9780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.232512][ T9780] R13: 00007f04ac426038 R14: 00007f04ac425fa0 R15: 00007ffd11842538 [ 227.240489][ T9780] [ 228.391651][ T9820] tun0: tun_chr_ioctl cmd 1074812117 [ 228.399757][ T9821] tun0: tun_chr_ioctl cmd 1074812117 [ 229.000387][ T9846] netlink: 'syz.0.1560': attribute type 9 has an invalid length. [ 229.013255][ T9846] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1560'. [ 229.706348][ T9866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.104561][ T9900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1581'. [ 231.640578][ T9930] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1594'. [ 231.667783][ T9934] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1594'. [ 231.966405][ T9941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1597'. [ 232.063980][ T9944] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.1599'. [ 232.084368][ T9946] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.1599'. [ 232.384102][ T9956] netlink: 'syz.3.1605': attribute type 9 has an invalid length. [ 232.401594][ T9956] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1605'. [ 232.936420][ T9974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1611'. [ 233.316692][ T9988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.853558][T10003] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1622'. [ 235.133722][T10027] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1618'. [ 236.211045][T10041] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1634'. [ 236.835165][T10064] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1640'. [ 236.863879][T10065] netlink: 'syz.2.1641': attribute type 23 has an invalid length. [ 236.871884][T10065] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1641'. [ 237.121861][T10071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'. [ 237.137425][T10071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'. [ 237.148405][T10071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'. [ 237.158760][T10071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'. [ 237.325666][T10075] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1647'. [ 237.514330][T10077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.740815][T10101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1657'. [ 239.383930][T10117] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1663'. [ 239.506401][T10113] netlink: 'syz.3.1663': attribute type 10 has an invalid length. [ 239.529760][T10113] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 239.538795][T10113] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.607820][T10113] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 242.327597][T10157] __nla_validate_parse: 5 callbacks suppressed [ 242.327643][T10157] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1681'. [ 242.619395][T10167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.791742][T10154] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1681'. [ 243.012653][T10154] team0: Port device dummy0 removed [ 243.752281][T10192] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1689'. [ 243.796395][T10192] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1689'. [ 243.855548][T10185] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1689'. [ 243.903299][T10202] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1689'. [ 243.928587][T10192] netlink: 'syz.0.1689': attribute type 10 has an invalid length. [ 243.945595][T10192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1689'. [ 243.970016][T10192] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 243.994011][T10192] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.038964][T10192] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 245.143394][T10246] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1713'. [ 247.022805][T10291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.313777][T10302] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1736'. [ 247.523591][T10308] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1736'. [ 247.932600][T10319] syz.1.1741[10319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.932895][T10319] syz.1.1741[10319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.165771][T10326] FAULT_INJECTION: forcing a failure. [ 248.165771][T10326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.212649][T10326] CPU: 0 PID: 10326 Comm: syz.1.1743 Not tainted syzkaller #0 [ 248.220160][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.230238][T10326] Call Trace: [ 248.233531][T10326] [ 248.236479][T10326] dump_stack_lvl+0x18c/0x250 [ 248.241190][T10326] ? show_regs_print_info+0x20/0x20 [ 248.246410][T10326] ? load_image+0x420/0x420 [ 248.250939][T10326] ? __lock_acquire+0x7d80/0x7d80 [ 248.255993][T10326] ? snprintf+0xe9/0x140 [ 248.260269][T10326] should_fail_ex+0x394/0x4c0 [ 248.264991][T10326] _copy_to_user+0x2f/0xa0 [ 248.269437][T10326] simple_read_from_buffer+0xe7/0x150 [ 248.274847][T10326] proc_fail_nth_read+0x1e8/0x260 [ 248.279906][T10326] ? proc_fault_inject_write+0x360/0x360 [ 248.285576][T10326] ? fsnotify_perm+0x271/0x5e0 [ 248.290360][T10326] ? proc_fault_inject_write+0x360/0x360 [ 248.296018][T10326] vfs_read+0x298/0x990 [ 248.300210][T10326] ? kernel_read+0x1e0/0x1e0 [ 248.304838][T10326] ? __fget_files+0x28/0x460 [ 248.309466][T10326] ? __fget_files+0x3fc/0x460 [ 248.314181][T10326] ? __fdget_pos+0x2a3/0x330 [ 248.318796][T10326] ? ksys_read+0x74/0x260 [ 248.323165][T10326] ksys_read+0x151/0x260 [ 248.327439][T10326] ? vfs_write+0x9a0/0x9a0 [ 248.331881][T10326] ? lockdep_hardirqs_on+0x98/0x150 [ 248.337127][T10326] do_syscall_64+0x55/0xb0 [ 248.341565][T10326] ? clear_bhb_loop+0x40/0x90 [ 248.346270][T10326] ? clear_bhb_loop+0x40/0x90 [ 248.350973][T10326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.356927][T10326] RIP: 0033:0x7f364b95e90e [ 248.361354][T10326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 248.380982][T10326] RSP: 002b:00007f364c795fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.389416][T10326] RAX: ffffffffffffffda RBX: 00007f364c7966c0 RCX: 00007f364b95e90e [ 248.397405][T10326] RDX: 000000000000000f RSI: 00007f364c7960a0 RDI: 0000000000000003 [ 248.405379][T10326] RBP: 00007f364c796090 R08: 0000000000000000 R09: 0000000000000000 [ 248.413354][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.421326][T10326] R13: 00007f364bc26038 R14: 00007f364bc25fa0 R15: 00007ffd706fc288 [ 248.429335][T10326] [ 248.701005][T10338] netlink: 'syz.1.1748': attribute type 1 has an invalid length. [ 248.708943][T10338] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1748'. [ 248.741422][T10338] netlink: 'syz.1.1748': attribute type 3 has an invalid length. [ 248.750786][T10338] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1748'. [ 248.794841][T10338] netlink: 'syz.1.1748': attribute type 10 has an invalid length. [ 249.095123][T10338] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 249.242614][T10338] syz.1.1748 (10338) used greatest stack depth: 18600 bytes left [ 249.418755][T10361] netlink: 'syz.2.1757': attribute type 21 has an invalid length. [ 249.437443][T10361] netlink: 'syz.2.1757': attribute type 1 has an invalid length. [ 249.456670][T10361] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1757'. [ 250.143597][T10378] netlink: 'syz.2.1763': attribute type 2 has an invalid length. [ 250.172873][T10378] netlink: 'syz.2.1763': attribute type 1 has an invalid length. [ 250.202621][T10378] netlink: 'syz.2.1763': attribute type 8 has an invalid length. [ 250.282833][T10378] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1763'. [ 251.268114][T10411] syzkaller0: entered promiscuous mode [ 251.274606][T10411] syzkaller0: entered allmulticast mode [ 251.305480][T10411] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1776'. [ 251.468847][T10417] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1779'. [ 252.055233][T10431] syzkaller0: entered promiscuous mode [ 252.091433][T10431] syzkaller0: entered allmulticast mode [ 252.116818][T10429] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1784'. [ 254.927161][T10465] netlink: 'syz.3.1797': attribute type 21 has an invalid length. [ 254.956108][T10465] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 254.980192][T10465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1797'. [ 255.270814][T10476] netlink: 'syz.0.1800': attribute type 39 has an invalid length. [ 255.434259][T10476] hsr_slave_1 (unregistering): left promiscuous mode [ 255.772054][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.781269][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.894909][T10484] sctp: [Deprecated]: syz.3.1804 (pid 10484) Use of int in maxseg socket option. [ 255.894909][T10484] Use struct sctp_assoc_value instead [ 256.085754][T10495] FAULT_INJECTION: forcing a failure. [ 256.085754][T10495] name failslab, interval 1, probability 0, space 0, times 0 [ 256.112464][T10495] CPU: 1 PID: 10495 Comm: syz.2.1810 Not tainted syzkaller #0 [ 256.119991][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.130056][T10495] Call Trace: [ 256.133332][T10495] [ 256.136260][T10495] dump_stack_lvl+0x18c/0x250 [ 256.140937][T10495] ? show_regs_print_info+0x20/0x20 [ 256.146134][T10495] ? load_image+0x420/0x420 [ 256.150666][T10495] ? __might_sleep+0xe0/0xe0 [ 256.155261][T10495] ? __lock_acquire+0x7d80/0x7d80 [ 256.160280][T10495] ? stack_trace_save+0xaa/0x100 [ 256.165217][T10495] should_fail_ex+0x394/0x4c0 [ 256.169901][T10495] should_failslab+0x9/0x20 [ 256.174403][T10495] slab_pre_alloc_hook+0x59/0x300 [ 256.179431][T10495] kmem_cache_alloc_lru+0x4d/0x2b0 [ 256.184537][T10495] ? __d_alloc+0x31/0x710 [ 256.188865][T10495] __d_alloc+0x31/0x710 [ 256.193015][T10495] d_alloc_pseudo+0x1d/0x70 [ 256.197521][T10495] alloc_file_pseudo+0xe4/0x210 [ 256.202369][T10495] ? fput+0x1a0/0x1a0 [ 256.206350][T10495] ? __lock_acquire+0x7d80/0x7d80 [ 256.211368][T10495] ? __local_bh_enable_ip+0x13a/0x1c0 [ 256.216752][T10495] ? _local_bh_enable+0xa0/0xa0 [ 256.221600][T10495] anon_inode_getfile+0xc5/0x1a0 [ 256.226538][T10495] bpf_link_prime+0xa6/0x1d0 [ 256.231120][T10495] tcx_link_attach+0x218/0x960 [ 256.235882][T10495] ? tcx_prog_query+0x140/0x140 [ 256.240751][T10495] ? __fget_files+0x3fc/0x460 [ 256.245428][T10495] ? bpf_prog_attach_check_attach_type+0x188/0x440 [ 256.251928][T10495] link_create+0x390/0x720 [ 256.256342][T10495] __sys_bpf+0x4d7/0x890 [ 256.260578][T10495] ? bpf_link_show_fdinfo+0x390/0x390 [ 256.265952][T10495] ? lock_chain_count+0x20/0x20 [ 256.270802][T10495] __x64_sys_bpf+0x7c/0x90 [ 256.275301][T10495] do_syscall_64+0x55/0xb0 [ 256.279710][T10495] ? clear_bhb_loop+0x40/0x90 [ 256.284380][T10495] ? clear_bhb_loop+0x40/0x90 [ 256.289047][T10495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.294931][T10495] RIP: 0033:0x7f9ce179e0d9 [ 256.299338][T10495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.318935][T10495] RSP: 002b:00007f9ce25cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.327342][T10495] RAX: ffffffffffffffda RBX: 00007f9ce1a25fa0 RCX: 00007f9ce179e0d9 [ 256.335342][T10495] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 000000000000001c [ 256.343307][T10495] RBP: 00007f9ce25cb090 R08: 0000000000000000 R09: 0000000000000000 [ 256.351268][T10495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.359230][T10495] R13: 00007f9ce1a26038 R14: 00007f9ce1a25fa0 R15: 00007ffd23483478 [ 256.367208][T10495] [ 256.489738][T10497] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 256.502574][T10497] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1809'. [ 256.701528][T10507] netlink: 'syz.1.1815': attribute type 2 has an invalid length. [ 256.728884][T10507] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1815'. [ 256.772249][T10507] netlink: 'syz.1.1815': attribute type 5 has an invalid length. [ 257.150092][T10524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.348068][T10546] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1832'. [ 258.392938][T10546] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1832'. [ 259.346061][T10568] syzkaller0: entered promiscuous mode [ 259.358289][T10568] syzkaller0: entered allmulticast mode [ 259.679747][T10587] sit0: entered allmulticast mode [ 259.713766][T10582] sit0: entered promiscuous mode [ 262.059429][ C1] [ 262.059436][ C1] ================================ [ 262.059440][ C1] WARNING: inconsistent lock state [ 262.059460][ C1] syzkaller #0 Not tainted [ 262.059467][ C1] -------------------------------- [ 262.059472][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 262.059479][ C1] syz.0.1858/10622 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 262.059495][ C1] ffffffff8d2978d8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0 [ 262.059543][ C1] {INITIAL USE} state was registered at: [ 262.059549][ C1] lock_acquire+0x19e/0x420 [ 262.059567][ C1] _raw_write_lock_irq+0xaf/0xf0 [ 262.059589][ C1] kernfs_rename_ns+0x5e4/0x830 [ 262.059609][ C1] sysfs_rename_link_ns+0x175/0x1b0 [ 262.059625][ C1] device_rename+0x110/0x1e0 [ 262.059642][ C1] dev_change_name+0x308/0x8e0 [ 262.059660][ C1] do_setlink+0x925/0x3f40 [ 262.059676][ C1] rtnl_newlink+0x1848/0x2170 [ 262.059691][ C1] rtnetlink_rcv_msg+0x843/0xf90 [ 262.059707][ C1] netlink_rcv_skb+0x235/0x4c0 [ 262.059721][ C1] netlink_unicast+0x7b1/0x930 [ 262.059742][ C1] netlink_sendmsg+0x8d0/0xbf0 [ 262.059755][ C1] __sys_sendto+0x4a9/0x6b0 [ 262.059769][ C1] __x64_sys_sendto+0xde/0xf0 [ 262.059783][ C1] do_syscall_64+0x55/0xb0 [ 262.059798][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.059819][ C1] irq event stamp: 5182 [ 262.059825][ C1] hardirqs last enabled at (5181): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.059848][ C1] hardirqs last disabled at (5182): [] exc_debug+0x73/0x140 [ 262.059868][ C1] softirqs last enabled at (4230): [] __irq_exit_rcu+0xd3/0x190 [ 262.059889][ C1] softirqs last disabled at (4019): [] __irq_exit_rcu+0xd3/0x190 [ 262.059908][ C1] [ 262.059908][ C1] other info that might help us debug this: [ 262.059912][ C1] Possible unsafe locking scenario: [ 262.059912][ C1] [ 262.059922][ C1] CPU0 [ 262.059924][ C1] ---- [ 262.059927][ C1] lock(kernfs_rename_lock); [ 262.059937][ C1] [ 262.059940][ C1] lock(kernfs_rename_lock); [ 262.059949][ C1] [ 262.059949][ C1] *** DEADLOCK *** [ 262.059949][ C1] [ 262.059952][ C1] 3 locks held by syz.0.1858/10622: [ 262.059961][ C1] #0: ffff88802dc79248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 262.060005][ C1] #1: ffff88801e7ac418 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 262.060049][ C1] #2: ffff88805ecaa4a0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: shmem_file_write_iter+0x82/0x120 [ 262.060093][ C1] [ 262.060093][ C1] stack backtrace: [ 262.060098][ C1] CPU: 1 PID: 10622 Comm: syz.0.1858 Not tainted syzkaller #0 [ 262.060112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.060121][ C1] Call Trace: [ 262.060127][ C1] <#DB> [ 262.060133][ C1] dump_stack_lvl+0x18c/0x250 [ 262.060152][ C1] ? show_regs_print_info+0x20/0x20 [ 262.060172][ C1] ? print_usage_bug+0x43d/0x6a0 [ 262.060191][ C1] ? verify_lock_unused+0x15/0x140 [ 262.060210][ C1] lock_acquire+0x2c2/0x420 [ 262.060228][ C1] ? trim_init_extable+0x6f0/0x6f0 [ 262.060249][ C1] ? kernfs_path_from_node+0x88/0xbd0 [ 262.060272][ C1] ? read_lock_is_recursive+0x20/0x20 [ 262.060289][ C1] ? __get_user_nocheck_8+0xa/0x20 [ 262.060310][ C1] ? fixup_exception+0x11bb/0x1d90 [ 262.060329][ C1] ? look_up_lock_class+0x75/0x140 [ 262.060352][ C1] _raw_read_lock_irqsave+0xbc/0x100 [ 262.060374][ C1] ? kernfs_path_from_node+0x88/0xbd0 [ 262.060396][ C1] ? _raw_read_lock+0x50/0x50 [ 262.060417][ C1] ? rcu_is_watching+0x15/0xb0 [ 262.060438][ C1] ? lock_release+0xb5/0x8c0 [ 262.060455][ C1] ? percpu_ref_tryget+0x15/0x180 [ 262.060475][ C1] kernfs_path_from_node+0x88/0xbd0 [ 262.060497][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 262.060516][ C1] ? rcu_is_watching+0x15/0xb0 [ 262.060538][ C1] ? kernfs_name+0x140/0x140 [ 262.060559][ C1] ? get_mem_cgroup_from_mm+0x38/0x290 [ 262.060577][ C1] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 262.060595][ C1] get_mm_memcg_path+0xb9/0x360 [ 262.060619][ C1] __mmap_lock_do_trace_start_locking+0xe6/0x2f0 [ 262.060645][ C1] ? __bpf_trace_mmap_lock_acquire_returned+0x230/0x230 [ 262.060681][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 262.060703][ C1] ? _raw_spin_unlock+0x28/0x40 [ 262.060727][ C1] stack_map_get_build_id_offset+0x5d3/0x720 [ 262.060750][ C1] ? pcpu_freelist_pop+0x12a/0x190 [ 262.060773][ C1] ? __bpf_get_stackid+0x900/0x900 [ 262.060792][ C1] ? perf_prepare_sample+0x1558/0x1db0 [ 262.060814][ C1] __bpf_get_stackid+0x564/0x900 [ 262.060839][ C1] bpf_prog_12712c88fd19bd5b+0x29/0x2d [ 262.060856][ C1] bpf_overflow_handler+0x1fc/0x510 [ 262.060879][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 262.060897][ C1] ? bpf_overflow_handler+0xde/0x510 [ 262.060925][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 262.060951][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 262.060971][ C1] __perf_event_overflow+0x461/0x660 [ 262.060993][ C1] perf_swevent_event+0x319/0x570 [ 262.061013][ C1] ? perf_tp_event+0x1550/0x1550 [ 262.061031][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 262.061056][ C1] perf_bp_event+0x319/0x430 [ 262.061078][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 262.061111][ C1] ? lock_acquire+0x2c2/0x420 [ 262.061133][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 262.061156][ C1] notifier_call_chain+0x18f/0x380 [ 262.061178][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 262.061200][ C1] atomic_notifier_call_chain+0xda/0x180 [ 262.061221][ C1] notify_die+0x145/0x1a0 [ 262.061242][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 262.061266][ C1] ? rcu_is_watching+0x15/0xb0 [ 262.061288][ C1] notify_debug+0x2e/0x50 [ 262.061303][ C1] exc_debug+0xde/0x140 [ 262.061322][ C1] asm_exc_debug+0x1e/0x40 [ 262.061338][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 262.061357][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 262.061370][ C1] RSP: 0018:ffffc900035e79b8 EFLAGS: 00050206 [ 262.061383][ C1] RAX: ffffffff84303001 RBX: dffffc0000000000 RCX: 0000000000000de0 [ 262.061395][ C1] RDX: 0000000000000001 RSI: 0000200000000320 RDI: ffff8880524e3220 [ 262.061405][ C1] RBP: ffffc900035e7b50 R08: ffff8880524e3fff R09: 1ffff1100a49c7ff [ 262.061417][ C1] R10: dffffc0000000000 R11: ffffed100a49c800 R12: 1ffff920006bcfb7 [ 262.061428][ C1] R13: 0000000000001000 R14: 0000200000000100 R15: ffff8880524e3000 [ 262.061443][ C1] ? copy_page_from_iter_atomic+0x231/0x13d0 [ 262.061469][ C1] [ 262.061474][ C1] [ 262.061478][ C1] copy_page_from_iter_atomic+0x2db/0x13d0 [ 262.061499][ C1] ? shmem_get_folio_gfp+0x2780/0x2b40 [ 262.061525][ C1] ? iov_iter_zero+0x1160/0x1160 [ 262.061549][ C1] ? shmem_write_begin+0x1cf/0x430 [ 262.061570][ C1] generic_perform_write+0x353/0x5c0 [ 262.061596][ C1] ? generic_file_direct_write+0x3e0/0x3e0 [ 262.061618][ C1] ? file_update_time+0x192/0x1a0 [ 262.061639][ C1] shmem_file_write_iter+0xfb/0x120 [ 262.061659][ C1] vfs_write+0x474/0x9a0 [ 262.061684][ C1] ? file_end_write+0x250/0x250 [ 262.061707][ C1] ? __fget_files+0x3fc/0x460 [ 262.061732][ C1] ? __fdget_pos+0x2a3/0x330 [ 262.061752][ C1] ? ksys_write+0x74/0x260 [ 262.061773][ C1] ksys_write+0x151/0x260 [ 262.061795][ C1] ? __ia32_sys_read+0x90/0x90 [ 262.061821][ C1] do_syscall_64+0x55/0xb0 [ 262.061837][ C1] ? clear_bhb_loop+0x40/0x90 [ 262.061854][ C1] ? clear_bhb_loop+0x40/0x90 [ 262.061872][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.061889][ C1] RIP: 0033:0x7fcc8f99e0d9 [ 262.061901][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.061923][ C1] RSP: 002b:00007fcc908fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.061938][ C1] RAX: ffffffffffffffda RBX: 00007fcc8fc25fa0 RCX: 00007fcc8f99e0d9 [ 262.061950][ C1] RDX: 0000000000001001 RSI: 0000200000000100 RDI: 0000000000000004 [ 262.061960][ C1] RBP: 00007fcc8fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 262.061969][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.061978][ C1] R13: 00007fcc8fc26038 R14: 00007fcc8fc25fa0 R15: 00007ffe7af36bc8 [ 262.061997][ C1] [ 262.916791][T10626] netlink: 'syz.2.1860': attribute type 1 has an invalid length. [ 262.924629][T10626] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1860'. [ 262.963452][T10626] netlink: 'syz.2.1860': attribute type 3 has an invalid length. [ 262.971282][T10626] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1860'. [ 263.032003][T10626] netlink: 'syz.2.1860': attribute type 10 has an invalid length. [ 263.041504][T10626] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 263.049315][T10626] wlan1: mtu less than device minimum [ 263.054828][T10626] bond0: (slave wlan1): Error -22 calling dev_set_mtu