last executing test programs: 5.211292515s ago: executing program 3 (id=4950): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095", @ANYRESOCT=0x0, @ANYBLOB="1800000000000000000000000000000018000000", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x4, 0x0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000646c659b0f950000002020207b1af8ff00000000bfa10000ddffffff07010000f8ffffffb702000008000000b70300000100000085000000b00000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x12122) setsockopt$sock_attach_bpf(r3, 0x1, 0x46, &(0x7f0000000040)=r4, 0x4) 5.01368937s ago: executing program 1 (id=4953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x85ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 4.628078029s ago: executing program 1 (id=4956): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4c78}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r9, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r10, 0x4}, 0x38) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) r11 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f00000000c0)=0xa, 0x12) 2.980411239s ago: executing program 1 (id=4957): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x7, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @exit, @generic={0xca, 0xd, 0x1, 0x1000, 0x80000000}, @ldst={0x3, 0x3, 0x4, 0x9, 0x8, 0x18}, @exit, @call={0x85, 0x0, 0x0, 0xb2}], &(0x7f0000000280)='GPL\x00', 0x8001, 0x20, &(0x7f00000002c0)=""/32, 0x0, 0x67, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x5, 0x4, 0x1, 0x1}, {0x2, 0x1, 0xa, 0x9}, {0x0, 0x4, 0x0, 0x7}], 0x10, 0x5}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x9, 0x10}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='memory.stat\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00'}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000005c0), &(0x7f0000000740)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="ed3d19e00400000000000000dd00000085000013130000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xb6, &(0x7f0000000100)=""/182, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5c7}, 0x10, 0xffffffffffffffff, r0, 0x2, &(0x7f0000000680)=[r1, r3, r4, r5], &(0x7f00000006c0)=[{0x5, 0x3, 0x0, 0xa}, {0x2, 0x2, 0x1, 0x8}], 0x10, 0x9}, 0x94) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x248, @mcast1, 0x4}, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)="ce26f7573206d9b4b7747a535c4cdad4ef29e81b9e541f19e72b63d40f1db565f51fb73bdc7816ef", 0x28}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x238}, 0x4800) 2.948325209s ago: executing program 0 (id=4958): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x62}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000080), 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="ab10000000000000000011000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x441a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x2000, 0x2, 0xfffffffe, 0x9, 0x2, 0x2, 0x40, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 2.90928837s ago: executing program 3 (id=4959): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x100}) syz_clone(0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000008f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r5) 2.90755873s ago: executing program 4 (id=4960): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4c78}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r7}, 0xc) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r9, 0x4}, 0x38) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) r10 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f00000000c0)=0xa, 0x12) 2.788229483s ago: executing program 2 (id=4961): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xd012, 0xac5d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x9, 0x800, 0xdae3, &(0x7f0000000980)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000002000009aaa000500000000a90000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8cda, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"/301], &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r3, 0x20, &(0x7f0000000840)={&(0x7f0000003980)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="27ffffff00"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="09000000010000000500000000000000000000000000000000000000d3875b8c17525cadb02feb82ab9a209d"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5d, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7b, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000020000001500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000001c0)=""/201, 0x40f00, 0x40, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x0, 0x3}, 0x10, r8, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x5, 0x5, 0x8}, {0x3, 0x1, 0x1, 0x1}, {0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0) r9 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x541b, &(0x7f0000000180)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 2.625342627s ago: executing program 0 (id=4962): getpid() openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) socketpair(0x1d, 0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) recvmsg(0xffffffffffffffff, 0x0, 0x142) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040010) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r0, &(0x7f0000000380), 0x0}, 0x20) 2.541269249s ago: executing program 4 (id=4963): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4c78}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r3}, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r5, 0x4}, 0x38) r6 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0xa, 0x12) 2.420447162s ago: executing program 1 (id=4964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000001000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0xf2ff, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.053180131s ago: executing program 4 (id=4965): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80003f000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 1.907287664s ago: executing program 1 (id=4966): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x428, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000004000000280000002800000002004aaed8f900000200f30e000000040e000000000000000900000002000000050000000000000b"], 0x0, 0x42, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0x0, 0x6}]}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0x0, 0x6}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0xfe81, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.842848026s ago: executing program 0 (id=4967): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4c78}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r9, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r10, 0x4}, 0x38) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) r11 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f00000000c0)=0xa, 0x12) 1.841626136s ago: executing program 3 (id=4968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x3}, @union={0xa, 0x6, 0x0, 0x5, 0x0, 0x30e0, [{0x9, 0x3, 0x3}, {0x3, 0x3, 0xb9}, {0x4, 0x3, 0xfffffffc}, {0x6, 0x5, 0x4}, {0x4, 0x0, 0x10}, {0x2, 0x3, 0x68}]}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x2}}]}, {0x0, [0x2e]}}, &(0x7f0000000a80)=""/112, 0x9f, 0x70, 0x1, 0xc01eb29}, 0x28) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x2, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="1eaac8270ecfe16971d06c9bfab07032f35f8f57c8259a11aefc5deef0723475cb4784aa90c8df5394bf00a51cd153a14077459c31930bb8427497c308d7a8870ba5aafe10233ccf939b0eeb641b134518c87de73881673a8213c39f46d9fef430eca8c01b3db75077594bedb139d9ad016d7626c9d5991c3b5a389859dcb4895cb0cada63b09cd5fc", 0x89}, {&(0x7f0000000340)="602c24f82c49ce40c60c26955c03c3c509d8aa228c609e9760ca0639d9d517ff6a060bba9adf14082957e40f57e6e40665a5b6d130c103e17b5139ca9c5d56383f8f", 0x42}], 0x2, &(0x7f0000000640)=[{0xa0, 0x29, 0xe, "9df1ba850175655b35d99157ee4707bf867800c214a7075638f91473a2cbc1fc290da3a4b918c2c45f850bfd54d3d690cf3f1c47786f491c8985eb74c21167de9249f0455ca70544303325722a0889cc63f702414d60c99e1dea6b9eae66b5f4a0bfe53b88e7497627b2a5ea5dabacbaf6a25ea0d979735e2f126f95a476de5ceb1a1a69696309953e433a"}, {0xc0, 0x103, 0x0, "04c48d2b382043f9a2bd068b03efa4faee2b26baebffa33aa207f9b1d2c0455495984a3bf4c17b678916e620ddc356d38f98394077b3baded15098ce5395f25e737ef694687e9b8d699c10a10f9926340ceda1ebaa33372e9388b4c58daed91ea66420cc918fc3fdfe09cbbdfb5b160babc86f03732144762022b205a2f232949891bfae9158f2d35f7d34bf79ec57bf78a25d4792df6a4f1ac00b2524fd42ad8c2b42c5253e1528c2de86367b293f"}, {0x50, 0x116, 0x7, "409983400240718ecc1e0d79f9c02b2e304ff1376c14435346efee1c3e93958d6c7ecce0439ebf8e592c4466e99620be31732d743afeaadfa139"}, {0x98, 0x29, 0x4, "d3bbc819a07bfac67e7d182997c383819b1e8fbbade5e0d7e77a1ad6ea4e10079c5bd6c33a08e58d6fc6ed64684fea5ea3f80a15bda18e19393f5f36f0b628a5e54c71d59599cf25073c2afb5d272f53d02bf85cc5e86a2d09d2c984407a14cc6bc8a1fa4257eac54f567f65c1f654be458f077d7b8fc19b6b61026d73ebf0de5c1eb183"}, {0xa0, 0x102, 0xfffffffb, "3f02044b0288a1afd4271f42ca985006da9d09ea1c15fd1cfde0392e87230016c3abe4fb06ae48c73a78b21d11c82b0d4651691f03d8bd636921fe055c6255c21c3ff5e1a74a49303c7c0732b278d81c7b47f9935f4e3f67cd4e320d4870d75d8b1fe7b8a08200d9b7df63b2d5cdf6a12cd368afd94c13cf60efdd50065ddb8a20195f8f924c6b7d6d8660acbaf3ce"}], 0x2e8}, 0x40050) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="fa1acae17d460b0214a0718642ffed56c2f757c4d52fb0361e6029cf1a831f0554de854c375812fd5841ee7a1caf6b6c3f1a0adf84a272be48f3bd0c973e0d841cf846936e930e53b01ab8a14b1bd4123b747547085c224d47aa09f805907bc1ac76af0004964da228d4ec94368ac96508cdc01372823823d38c3e34ba496d50024a0832089bdf137ccc", 0x8a}, {&(0x7f0000000240)="e4a30e4c02979a6eb05813b277dd3aa2", 0x10}, {&(0x7f0000000280)="a1d7b6a009d97787add09900fe64714a23c79dd72d7a75afa4d20eab5a48b4ada38623ce7258ebd9650c6c30da86741f61d647b108dcfc5c7aa46079f9c5fe11eacc50f48b2177a470ef9d3dcff6b9370306311e4688f26d1c664aeda5f4e3381fe684588cdc1b978a4456bdc54d1b572834178c396c49173016fae3252cf2e5740b51f93a797caa6767b0979ef920e2f69f7431ba248e0c93ff046f97b55bd7e64d42a82970c9219fac908d4cb5ed46c235140b2af8e782f271bdf5242a9373bc55642c9bf28cb5401049fa62967d7dcbfaf1dbaf547ca8", 0xd8}, {&(0x7f0000000380)="9a5b8f7f11d7c7ab17e32300a21fc955af2c4fd4afa9fa5af43fb4acbb4c3bde6543c8b75677eec7fdf6d57bab4b26cbc4b0d26693", 0x35}, {&(0x7f00000003c0)="4e71a0a337dcd8d3d356816d762cf87083d6947dd9376f37d636141a32cd73fd942e5e2d0617e5f1ac95e14f342ea11cbc6b7502bc67", 0x36}, {&(0x7f0000000400)="aba77bbd01d6fa332b0bcab936d22b5a0e8ad7b4e57e5f54c3d0af8b3f9fb8a940fbb6fb1ab313cf8428ec0b21afce133b89190801b8758203d304514b29b812f91164f2bfd4b884dce5e2ddf678afeb30c6b016e859780ea1796c575a4e6e3a23f134f0acc09bb48f26bb1f43d79b42c1ec3fe8618c17925136fbfc2264f800f41180566b131a395b4c29aa1669df647e819bd25c50472933c152d4e951ad514ac6fcbe2ce2a730ba55e14996dcd6", 0xaf}, {&(0x7f00000004c0)="d4f1a8ef8ec8874e085cd504dd2a8117dbf3caec36cf5a1822c356551ed1542b931309c6bb3ae4bf42cc0cc96d095e1fe77544ec0ce3050fb751", 0x3a}], 0x7, &(0x7f0000000580)=[{0xb8, 0x0, 0x3, "052f0e72aad2e00d029138ef9b37c63b8a6dc488b53345144c7d417f1d94b876040da3937789cfd32abe7fd5fb7b83558ccf397f545e4d4b13f1f5a959813d8285286f0152178ddfa999afa97ade486a7e5eff2f7ff5aba2b2d8f8224ebe10c943a5538a53cd93b57fe2e9fdb31d1977be9793e788bea43c132e072a54d630182891aabe46639a956190dc44671c791850fe9a4d2b121d471e2ce6f7f561bc0d55b3d8f691"}], 0xb8}, 0x80) 1.799713097s ago: executing program 4 (id=4969): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'memory'}, {0x2b, 'rlimit'}]}, 0x10) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = syz_clone(0x80000, &(0x7f00000001c0)="45d175aa2986ee4f08b6ee160b410d273492e59a869dc96bdeb1da", 0x1b, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="44e45652e4059ebc13006d97a83b27dbed4fe324fd9d11d7515c45012668ecc5634660b0e0cb4cc75ab5f06667db63933cb484b0128757f26eab8626e7a9371ea5676c2f3640518bb818ef6432276e8ea9d991f36dff853b27a4a197f1de685b54731e8d128c55662d4a2f0d9e455b082e77d5311b1190df6ba003382554312e8959b9") r5 = perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x80, 0xb, 0x8, 0x4, 0x4, 0x0, 0x8c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x41, 0x0, @perf_config_ext={0x3}, 0x500, 0xfcb, 0x0, 0x9, 0x9, 0xab5, 0xe, 0x0, 0x10, 0x0, 0x2}, r3, 0x5, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r4, r5, 0x0, 0x0, &(0x7f00000003c0)}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = syz_clone(0x801800, &(0x7f0000000480)="ed74036c75d6dfa841ea42e99495ff8c0496caa418960db5eba9806b893c28d8fcb46c305f2dfdacaa86394ecb617b98e5c2a2cb2bda1bd375ae3a3755b87a22041f7af7b893ff8c34568c18fe89c86a2fde5620922788a2e7046af5aca1d910ca87e5bae52b779a96da3e1c8e8b8a790870784ede210ffb40c68fa2546f7420745cbcd72d99989159f7b8309e53563477a7", 0x92, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="3753dc3982ba894b99b67a7e30a9") perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x4, 0xc, 0x9, 0x6d, 0x0, 0xffffffff, 0x4000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000600), 0x1}, 0x800, 0x4, 0x7, 0x2, 0x2, 0x7, 0x2, 0x0, 0x3ce30535, 0x0, 0x401}, 0x0, 0xa, r5, 0x3) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000006c0)=r7, 0x12) r8 = openat$cgroup_freezer_state(r6, &(0x7f0000000700), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000740)='THAWED\x00', 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x1) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r2}, 0x8) sendmsg$kcm(r9, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="3f40e2a075e2c9a793fa01feb44648c86fda276fc0436f7c3ecf3c85386cca70dee9f3209105a4d74ced6395dba49566354e42079a0b0baec899c0677d5f45ac44e6cfe1b0bb97cc58a6e3fad8c87621c75b1ba0790a19bd6dd22ae438f558099e3dddc6be57e2cd80e631d8a84b93e4d86c4c4adf0c938fa2770e269a7ec92b37b69c7ad0fef37871c998766c402151c6de1fa65fca1a236f82bec676944c0d4f378adc32636a491e0e540f4942bd39f8389a4cc31ff081822b1b1fb42ab83634f9580c05781b121fdf541b0434492f349439fb766ff10c886cfb14878bf4182383e4f72f78e1c7104b358133b2b8", 0xef}, {&(0x7f0000001940)="a4c1268626e61f312368d289d71b23aa84e8e5c16ed17fa7c655d2a0273324048fb855f550c5848a8f14c99793c3dec1916a92b69c43618179c29b3040dfe9ff6aeaa5a4ebf60046be6750a87a09b0c97954172fffa35bbf62a0ababb71e636d662b687d38bb997d4cdab4a46a98a6c7dad744ed64d5547545bd378021a004f16c836c532ae1d4653a1881bed258b1c7c73e5844ae180edf0e45aa04c7f2bab7e2659f3825be59", 0xa7}, {&(0x7f0000001a00)="74bbb87098ae8a093ebca0af29a1043f38ae949f6100ef300e25f481be07c96a691f33d346756ec2fffacc7fcb571c79bea36de25b6d6fa15e335461ea264e8ac87526b8a045e6aa1c3317845a49c039932353349e5d971d2e7d41f9f9e2a3e59c4818983a5317d67b337d209792062a76c19a7a6820ff92b60cb81babae8039bb3da7180a44e1bf83fb690f230223aec5c33d1dc27562f1decb9ba1fb893037b6b70efe7a034e45", 0xa8}, {&(0x7f0000001ac0)}], 0x5, &(0x7f0000001b80)=[{0x88, 0x115, 0x1e38, "6126fb3136019bf75e460edc0e3225ccb59b7c0120fc6cd973ce379b1bb36aa2a590fb7e2902f0008af712fd88112b77ce37fb15bc162507a7f4cf624a64f276b1cf478ba5efb10cd88a99922037047d643d477470ebdc80ccb34f0313587a0e8254853d3590b832dd3ec6ad88f1f37567f0e072b5"}, {0xe0, 0x0, 0x8, "928a6ff7d97eb6f888cea499f8e83fa052abc52a829cbbcae9c6ec97bfeb467536578607190f37cedf31a36c2839ca8198c660084df2ed275a8210d1d49fdbf56bb5004cb3b1ba542ef7cf73c12d040ad21ed8fa00c9846d056ddcac443f582e7407f17b1e17ab3ab9db61a1a76d9169c093acec300a64e96f1638a51fc474cc8af9a6c24b1f336c5aa52b74f8d1598fa5f4141d277cced15d35c0fbeeff63d25ff7a95745af4698b4c04a9a0439ca51b7f6cb241e5396ae6ae2d900f4e1b7a274072cbd8d9f4bbe3620d6d12048e7"}, {0x70, 0x1, 0x9, "0e147a3fb5011059f39efab017fb18db838347a68b93f0782ecf84c811bcbd5731bc244ac13201b2d2c7daa10861308756b6d308d219917dab994e051f28bbbf7a885c7b5d8877c5100413c62a107683595f9b21c92a0215e681280b58"}, {0xe8, 0x88, 0x9, "b75b0d5a2dc9863f979ed6c2eb8058682c705ec111533ce2628b375e3308fe488a91fa93be0d2193ee5c8c45f9613b3b58aacf8ded7abe38c49b0eabba8c8e9015a7ad0208508cbdf63fa84aaa9139c97596f406d50e4c738a886648c1a0c39e61380c79764004ddad825e3c6e1bac7af47409d6d183c0fdf51896ed59f25454560a4dbd695ddd4e3a44ca2a0530e31e6f23d5c70194bf45ee800a27c069743245a6f4d2546d5b881bc4333525a83977b238f785b4f7527f42a6475b1ad35f7f463bbfad57bcb336474a432c29a1ffd5b7c4"}, {0xe0, 0x89, 0x1dc, "5312f60e7ebf7c4274425a3a9bfb53032513ea25dd827d2469d5ad488ed89e955dd06908e239e2ea817648446c5811666d5c468d66316031e25ad61f24f82c65aa4b252202dde3245e8b9a03547bc18055cd0dd96393e3cc007b4a73268a00315aa3f7024534d50bc2d9807e3c012f12d9252b98ebab5d4af644ea84c9c5ecd649cf7978955a8420bba18d22ce3d795622844436dcf6652de93ac4252e2ee537722a2d8e5fd8299a46225fb9407964f50f7ca1c307cec3d0c77b0351dc7e7af2758c909f7e26ff3cdd91f1"}], 0x3a0}, 0x20004000) perf_event_open(&(0x7f0000001f80)={0x1, 0x80, 0x3, 0x3, 0xb, 0x1, 0x0, 0x3, 0x4008, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x9, 0x6}, 0x201, 0x0, 0xd0ba, 0x3, 0xd6, 0x1, 0x5, 0x0, 0x7}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs$namespace(r7, &(0x7f0000002000)='ns/ipc\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000020c0)={r9, 0x58, &(0x7f0000002040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002100)={r10, 0x100, 0x10}, 0xc) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, &(0x7f0000002140)={0x3, 0x80, 0x9c, 0x1, 0x0, 0xe, 0x0, 0x0, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x86, 0x4, @perf_config_ext={0x5, 0x4}, 0x0, 0x2, 0x7, 0x7, 0x8, 0x1ff, 0x1, 0x0, 0xb9e, 0x0, 0x4}) perf_event_open(&(0x7f00000021c0)={0x5, 0x80, 0x2, 0x2, 0x40, 0x8, 0x0, 0x5, 0x2, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x5, 0x6}, 0x2100, 0xb6, 0x5, 0x9, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0xfffffffffffffff8}, r7, 0xc, r9, 0x2) syz_clone(0x4001000, &(0x7f0000002240)="2801ea49201457d8504c74a0df926be333a339d117315127bc7d08d4392376ec1f33c7f14599019d59dfe6b31fbd1e118f3c28e49b6ea6f8a3b5d4ff405886ef9047556cc8f544a4a6552613d1ec9d0e04f64c20beaca05ccc60729163e0d2f2c1323dc0059cc3dc7ea4ce34db77c4c56f82953e346f10820578bc4fbee863b2aef90c014619b107a6d570e490d90f72bd20d0430f56573b7cd0837fdde6c266121c4fce6a1fe81e1d2c5e703150bb29cc22eb34f55831078d1a28df6b34a76792a8c1263e3877e1d9b2512cf5fd10efac12109de042e6670ae2c2506c4cff9231a8196dcce95b35e800bb6f210a", 0xee, &(0x7f0000002340), &(0x7f0000002380), &(0x7f00000023c0)="b49b077d4d9f4d895fd8daaed2bb2b0ebb8f7a4a0c672a76d2bafe4d6f74080d22d70c8aee51245998481e6176342be86f45e3fbdbe4cf1e0aed3fcae498dc572affa4ec6318") ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000002440)='syz0\x00') ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000002480)='syz0\x00') ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f00000024c0)=0x1) 1.69575796s ago: executing program 2 (id=4970): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42482, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 1.451262925s ago: executing program 2 (id=4971): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xc0ff, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.450814985s ago: executing program 3 (id=4972): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x80, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xb, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080008000600000004"], 0x50) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000200)=""/14, 0xe}], 0x4}, 0x100) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85a, 0x0, @perf_config_ext={0x8a15, 0x5}, 0x411, 0x1, 0xb, 0x5, 0xe4c2, 0x0, 0x0, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x6) 1.420962186s ago: executing program 0 (id=4973): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4c78}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r7}, 0xc) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r9, 0x4}, 0x38) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) r10 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f00000000c0)=0xa, 0x12) 1.060875785s ago: executing program 4 (id=4974): unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r3, &(0x7f0000000a00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0x3, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r8 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r8, &(0x7f0000000c00)={&(0x7f0000000340)=@sco={0x1f, @none}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000700)="abb96000fb8507da48fdb9a0ed97f01557529f002dac0de45343b0a9325358c15e74f92f7343ef8a2258cb33902d816e7ee69dff6ed8d2a18c6ed9775c4d71b1808859553d50bbbd02e995bd9c4509efa22ac9d8000d44fdc068d4527a6d9dca8dcc877cb4201fd92d8b9ecb61d1ca2e54cf83ac36f8a8747b9eb91bf4da5f3bcb039d04dce374fa8f6264a9b2a1c2a50a611e4914ff7da41811ca1aaff6e73d3a04d4271cfe", 0xa6}, {&(0x7f00000007c0)="1eb9ab7acb8848c7ff20efce0b28638e4073da51544daa1da226538f9d735997f13ce5013475227ea0a8c047bc48bcbffe029be45efaaa07247fab1844b2da8c1a99bebe0f4e0debf7a93e465c71695744aed39c10526f0adb", 0x59}, {&(0x7f0000000840)="300940993dc7a7f29c010583a26d50a27e6fd33ff7f5803007a5d78e4a0f97603d87c489e25b4db494cd34c36973e14a5597d404e001fdd046e1d11ab1f1619bc27f2bb1092a9d8c8fce1b198a282f864207237fc4a34dcd207171b88888a97c33cb16aa6003cfe19af6c6190ddd74fecf456671a1424c1c87b0fd2b590087a75763b687ecd6014c6bfe95c6c55f5672fb3aebaa291d748e73aadd443a76b84c7fb2485f1c08b7a6432d8d708f814da9146386e96a296c8ab481e93595bcf9a8be102c9752af075a7f4a02e0c6fc66af58fd1ec0be7166fb85331189b09299cc058d2165378798983d96ac", 0xeb}], 0x3, &(0x7f0000000980)=[{0xf0, 0x10a, 0x2, "e9ad94c05017a18a4b3d6e80b4c5c0515ecb24b27e2031fefe0a6f79b5e453115cf66d43fa576d2f241db2f0000a7061adc2a2fcee3ffdd80b3eaae891aeb2a30aa2bd66f83e0da8b0d40fa6a63edcee5fe941c7a3d83e26e348360beed5293587367ad47a8a23b58e1c5020386490e4be35c9c35789b65689181e595a0936223a5b553a133c50b7ed5968bf3cd5d3799df52fe4c9596f607af9f0256163334ebd1c7e1e201b9ca72eb93dd53fe6b9ba97634c070e1377c6917d72b0336e8325430dba59f70c356ec8ee901188358b3e55e2d5b9b842f2f151338bca516ea4"}, {0x38, 0x114, 0x7, "538c8124682308be2b3e72a7faa69849aaa6323051378f807ad0b1e6d80c7d047c15aad8"}, {0x50, 0x12aa014fa3df86a5, 0x6, "e6acb3afccaff48f17149f08e8c7d9d2b0cf7257a260b59ae687867e740decbb9f2977e1ddb1f29beece5c58c9c67c9958418be6cbc4824f6dc2f1188eb40f"}, {0xf0, 0x107, 0x8, "ec41cff41d58d1c36f2f24e274d296c8c5378db91c42ca2da124615b4716b995978995c313d3efeaf4dd4da200b4a7becbf06e1fbeaef487a64ec15d48c13aa5195b6f10e1d52af432dfa6aaf950fef0c21dd93608464fa1dfae523901798db4d92b091bd590b78fab91a727d3b402501d1c0927c8376c0b04b42f5f3254d45212ee530e2fb940ea4a5408bb77a053bb0fdf5082da65d43ed48510fdb69e99f797b39b7078e96047264a9209c23be8f87bbc0dea6032338121e18b657fd44487048e51670a4fdae8a4bcdf461f5ffbe9965ea2e9afc4408109cc"}], 0x268}, 0x10000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000040) 824.217161ms ago: executing program 2 (id=4975): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4c78}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r3}, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r5, 0x4}, 0x38) r6 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0xa, 0x12) 397.504521ms ago: executing program 3 (id=4976): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xffffdfff00000001}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) 302.020703ms ago: executing program 0 (id=4977): getpid() openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) socketpair(0x1d, 0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) recvmsg(0xffffffffffffffff, 0x0, 0x142) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040010) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r0, &(0x7f0000000380), 0x0}, 0x20) 274.057664ms ago: executing program 2 (id=4978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000001000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0xf9ff, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 164.268916ms ago: executing program 3 (id=4979): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x100}) syz_clone(0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000008f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r5) 160.533566ms ago: executing program 1 (id=4980): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80003f000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 159.989326ms ago: executing program 4 (id=4981): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42482, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 77.195039ms ago: executing program 2 (id=4982): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @generic={0xfc, 0x0, 0x0, 0x0, 0x9}], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x29, 0x5, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000001c0)={r6}) ioctl$TUNSETVNETHDRSZ(r8, 0x800454e0, &(0x7f0000000480)=0x70dfd79b) 0s ago: executing program 0 (id=4983): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x20, 0x16, &(0x7f0000000d40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @netfilter}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x20, 0x16, &(0x7f0000000d40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @netfilter}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x6, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x6, 0x4}, {0x10, 0x2}, {0xd, 0x5}, {0x10, 0x3}, {0xf, 0x3}, {0x6, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x1000}}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x4b, 0x0, 0x22, 0x1}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0x66, 0x1}, @enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0x2, [{0x8, 0x3, 0x1dc00000}, {0x1, 0x400}]}, @union={0xc, 0x9, 0x0, 0x5, 0x1, 0x400, [{0x4, 0x4, 0x7}, {0x7, 0x0, 0x6}, {0xd, 0x3, 0x7}, {0x4, 0x3, 0x1}, {0x2, 0x4, 0x3}, {0x2, 0x5, 0x800}, {0x2, 0x4, 0x1}, {0x10, 0x3, 0x4ed}, {0x10, 0x0, 0x9}]}, @float={0x7, 0x0, 0x0, 0x10, 0x10}, @fwd={0xa}]}, {0x0, [0x5f, 0x30, 0x2e, 0x5f]}}, &(0x7f0000000900)=""/49, 0x146, 0x31, 0x0, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) kernel console output (not intermixed with test programs): erface batadv_slave_1 (retrying later): interface not active [ 780.907450][T15600] device hsr_slave_0 entered promiscuous mode [ 780.934527][T15600] device hsr_slave_1 entered promiscuous mode [ 780.975380][T15600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.985571][T15600] Cannot create hsr debugfs directory [ 781.319163][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 781.470449][T15656] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3156'. [ 782.507187][T15682] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3165'. [ 782.880448][T15682] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3165'. [ 783.339656][T15600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 783.398986][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 783.460043][T12906] device hsr_slave_0 left promiscuous mode [ 783.487782][T12906] device hsr_slave_1 left promiscuous mode [ 783.569488][T12906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.578096][T12906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.640140][T12906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.647651][T12906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.736951][T12906] device veth0_macvtap left promiscuous mode [ 783.743359][T12906] device veth0_vlan left promiscuous mode [ 783.910643][T15710] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3170'. [ 784.754663][T15733] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3178'. [ 784.849965][T12906] device team_slave_1 left promiscuous mode [ 784.864298][T12906] team0 (unregistering): Port device team_slave_1 removed [ 784.934394][T12906] device team_slave_0 left promiscuous mode [ 784.947509][T12906] team0 (unregistering): Port device team_slave_0 removed [ 784.993035][T12906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.049695][T15736] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3179'. [ 785.341785][T12906] bond0 (unregistering): Released all slaves [ 785.376541][T15600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 785.393359][T15600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 785.416787][T15600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 785.443415][T15726] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3174'. [ 785.463136][T15735] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3179'. [ 785.486923][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 785.936501][T15600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.992637][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 786.044197][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 786.097507][T15600] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.182650][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 786.220488][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 786.248605][T12879] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.256013][T12879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.361636][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 786.412237][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 786.433862][ T8146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 786.494375][ T8146] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.501771][ T8146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.597252][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 786.626530][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 786.651069][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 786.686974][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 786.706717][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 786.749026][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 786.765492][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 786.844682][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 786.906612][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 786.929830][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 786.952423][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 786.991355][T15600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 787.405537][ T4277] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 787.559345][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 787.927347][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 787.953129][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 788.007327][T15600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.176034][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 788.199974][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 788.278350][T12877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 788.331118][T12877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 788.363198][T12877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 788.389889][T12877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 788.420137][T15600] device veth0_vlan entered promiscuous mode [ 788.454611][T15600] device veth1_vlan entered promiscuous mode [ 788.645777][T12877] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 788.670206][T12877] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 788.712744][T12877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 788.732936][T12877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 788.783748][T15816] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3200'. [ 788.803363][T15816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 788.829590][T15600] device veth0_macvtap entered promiscuous mode [ 788.873075][T15600] device veth1_macvtap entered promiscuous mode [ 788.894621][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.905409][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.926060][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.946950][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.959474][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.981659][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.994925][T15600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.009330][T15814] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3200'. [ 789.039031][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 789.048936][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 789.063553][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 789.078091][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.089320][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.100502][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.111017][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.120918][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.131454][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.143258][T15600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.152763][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 789.181455][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 789.209882][T15600] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.218670][T15600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.283588][T15600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.307780][T15600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.484943][ T8146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.504336][ T8146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.542936][T12903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 789.577294][T12926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.591549][T12926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.637985][T12926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 790.495884][T15852] FAULT_INJECTION: forcing a failure. [ 790.495884][T15852] name failslab, interval 1, probability 0, space 0, times 0 [ 790.509022][T15852] CPU: 1 PID: 15852 Comm: syz.4.3213 Not tainted syzkaller #0 [ 790.516551][T15852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 790.526677][T15852] Call Trace: [ 790.530011][T15852] [ 790.532996][T15852] dump_stack_lvl+0x188/0x24e [ 790.537744][T15852] ? show_regs_print_info+0x12/0x12 [ 790.543016][T15852] ? load_image+0x410/0x410 [ 790.547594][T15852] ? skb_network_protocol+0x525/0x790 [ 790.553117][T15852] should_fail_ex+0x390/0x4c0 [ 790.557852][T15852] should_failslab+0x5/0x20 [ 790.562391][T15852] slab_pre_alloc_hook+0x59/0x300 [ 790.567452][T15852] ? netif_skb_features+0xafa/0x1630 [ 790.572786][T15852] kmem_cache_alloc+0x56/0x2f0 [ 790.577593][T15852] ? skb_clone+0x1e7/0x370 [ 790.582067][T15852] skb_clone+0x1e7/0x370 [ 790.586342][T15852] ? dev_queue_xmit_nit+0x200/0xba0 [ 790.591597][T15852] dev_queue_xmit_nit+0x23b/0xba0 [ 790.596657][T15852] ? dev_queue_xmit_nit+0x29/0xba0 [ 790.601811][T15852] ? validate_xmit_skb+0x7ca/0xe80 [ 790.606984][T15852] dev_hard_start_xmit+0x158/0x8b0 [ 790.612141][T15852] ? validate_xmit_skb_list+0x120/0x120 [ 790.617742][T15852] __dev_queue_xmit+0x1b4b/0x3810 [ 790.622831][T15852] ? __dev_queue_xmit+0x281/0x3810 [ 790.628000][T15852] ? netdev_core_pick_tx+0x360/0x360 [ 790.633339][T15852] ? __copy_skb_header+0x3ba/0x4f0 [ 790.638496][T15852] ? memcpy+0x3c/0x60 [ 790.642673][T15852] ? __copy_skb_header+0x3ba/0x4f0 [ 790.647862][T15852] ? __skb_clone+0x446/0x6c0 [ 790.652532][T15852] ? skb_clone+0x21b/0x370 [ 790.656985][T15852] __netlink_deliver_tap+0x55c/0x7e0 [ 790.662324][T15852] ? netlink_deliver_tap+0x2e/0x1b0 [ 790.667562][T15852] netlink_deliver_tap+0x19c/0x1b0 [ 790.672716][T15852] netlink_unicast+0x777/0x920 [ 790.677542][T15852] netlink_sendmsg+0x8ad/0xbd0 [ 790.682359][T15852] ? netlink_getsockopt+0x550/0x550 [ 790.687591][T15852] ? apparmor_socket_sendmsg+0x8a/0x330 [ 790.693189][T15852] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 790.698538][T15852] ? security_socket_sendmsg+0x7c/0xa0 [ 790.704063][T15852] ? netlink_getsockopt+0x550/0x550 [ 790.709311][T15852] ____sys_sendmsg+0x5ed/0x9a0 [ 790.714136][T15852] ? __sys_sendmsg_sock+0x30/0x30 [ 790.719209][T15852] ? __import_iovec+0x306/0x510 [ 790.724114][T15852] ? import_iovec+0x6f/0xa0 [ 790.728676][T15852] ___sys_sendmsg+0x2a2/0x360 [ 790.733396][T15852] ? __sys_sendmsg+0x2a0/0x2a0 [ 790.738226][T15852] ? __lock_acquire+0x7c40/0x7c40 [ 790.743344][T15852] __se_sys_sendmsg+0x1c3/0x2b0 [ 790.748265][T15852] ? __x64_sys_sendmsg+0x80/0x80 [ 790.753268][T15852] ? lockdep_hardirqs_on+0x94/0x140 [ 790.758507][T15852] do_syscall_64+0x4c/0xa0 [ 790.762992][T15852] ? clear_bhb_loop+0x60/0xb0 [ 790.767704][T15852] ? clear_bhb_loop+0x60/0xb0 [ 790.772428][T15852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.778363][T15852] RIP: 0033:0x7f633a79e159 [ 790.782824][T15852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.802467][T15852] RSP: 002b:00007f633b623028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.810922][T15852] RAX: ffffffffffffffda RBX: 00007f633aa25fa0 RCX: 00007f633a79e159 [ 790.818931][T15852] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 790.826933][T15852] RBP: 00007f633b623090 R08: 0000000000000000 R09: 0000000000000000 [ 790.834935][T15852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.842940][T15852] R13: 00007f633aa26038 R14: 00007f633aa25fa0 R15: 00007ffe9e7bfeb8 [ 790.850980][T15852] [ 791.029176][T15852] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3213'. [ 791.223518][T15865] netlink: 'syz.0.3215': attribute type 3 has an invalid length. [ 791.291275][T15865] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3215'. [ 791.568791][T15872] netlink: 'syz.4.3216': attribute type 6 has an invalid length. [ 791.594503][T15872] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.3216'. [ 791.606470][T15872] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3216'. [ 792.421058][T15898] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3226'. [ 792.440886][ T4277] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 792.441355][T15894] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3227'. [ 792.593310][T15892] netlink: 'syz.4.3229': attribute type 10 has an invalid length. [ 792.818081][T15906] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3231'. [ 792.892105][T15892] wlan1: mtu greater than device maximum [ 792.959541][T15910] netlink: 'syz.2.3234': attribute type 28 has an invalid length. [ 792.977996][T15910] netlink: 'syz.2.3234': attribute type 29 has an invalid length. [ 792.990803][T15910] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3234'. [ 793.523239][T15935] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3241'. [ 793.559768][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 793.579198][T15935] FAULT_INJECTION: forcing a failure. [ 793.579198][T15935] name failslab, interval 1, probability 0, space 0, times 0 [ 793.656331][T15935] CPU: 0 PID: 15935 Comm: syz.0.3241 Not tainted syzkaller #0 [ 793.663867][T15935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 793.673970][T15935] Call Trace: [ 793.677284][T15935] [ 793.680251][T15935] dump_stack_lvl+0x188/0x24e [ 793.684993][T15935] ? show_regs_print_info+0x12/0x12 [ 793.690263][T15935] ? load_image+0x410/0x410 [ 793.694835][T15935] ? verify_lock_unused+0x140/0x140 [ 793.700110][T15935] should_fail_ex+0x390/0x4c0 [ 793.704869][T15935] should_failslab+0x5/0x20 [ 793.709414][T15935] slab_pre_alloc_hook+0x59/0x300 [ 793.714546][T15935] kmem_cache_alloc+0x56/0x2f0 [ 793.719433][T15935] ? skb_clone+0x1e7/0x370 [ 793.723922][T15935] skb_clone+0x1e7/0x370 [ 793.728220][T15935] __netlink_deliver_tap+0x3e4/0x7e0 [ 793.733577][T15935] ? netlink_deliver_tap+0x2e/0x1b0 [ 793.738864][T15935] netlink_deliver_tap+0x19c/0x1b0 [ 793.744038][T15935] netlink_sendskb+0x64/0x130 [ 793.748784][T15935] netlink_ack+0xcd1/0x1160 [ 793.753357][T15935] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 793.759168][T15935] ? netlink_dump+0xcd0/0xcd0 [ 793.763941][T15935] ? __copy_skb_header+0x3ba/0x4f0 [ 793.769125][T15935] ? __skb_clone+0x446/0x6c0 [ 793.773789][T15935] netlink_rcv_skb+0x26d/0x440 [ 793.778617][T15935] ? rtnetlink_bind+0x80/0x80 [ 793.783450][T15935] ? netlink_ack+0x1160/0x1160 [ 793.788296][T15935] ? netlink_deliver_tap+0x2e/0x1b0 [ 793.793548][T15935] netlink_unicast+0x7ad/0x920 [ 793.798397][T15935] netlink_sendmsg+0x8ad/0xbd0 [ 793.803248][T15935] ? netlink_getsockopt+0x550/0x550 [ 793.808525][T15935] ? apparmor_socket_sendmsg+0x8a/0x330 [ 793.814132][T15935] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 793.819496][T15935] ? security_socket_sendmsg+0x7c/0xa0 [ 793.825021][T15935] ? netlink_getsockopt+0x550/0x550 [ 793.830300][T15935] ____sys_sendmsg+0x5ed/0x9a0 [ 793.835148][T15935] ? __sys_sendmsg_sock+0x30/0x30 [ 793.840236][T15935] ? __import_iovec+0x306/0x510 [ 793.845204][T15935] ? import_iovec+0x6f/0xa0 [ 793.849781][T15935] ___sys_sendmsg+0x2a2/0x360 [ 793.854572][T15935] ? __sys_sendmsg+0x2a0/0x2a0 [ 793.859463][T15935] ? __lock_acquire+0x7c40/0x7c40 [ 793.864609][T15935] __se_sys_sendmsg+0x1c3/0x2b0 [ 793.869538][T15935] ? __x64_sys_sendmsg+0x80/0x80 [ 793.874601][T15935] ? lockdep_hardirqs_on+0x94/0x140 [ 793.879874][T15935] do_syscall_64+0x4c/0xa0 [ 793.884348][T15935] ? clear_bhb_loop+0x60/0xb0 [ 793.889094][T15935] ? clear_bhb_loop+0x60/0xb0 [ 793.893844][T15935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 793.899794][T15935] RIP: 0033:0x7f036d59e159 [ 793.904266][T15935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.923933][T15935] RSP: 002b:00007f036e502028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.932409][T15935] RAX: ffffffffffffffda RBX: 00007f036d825fa0 RCX: 00007f036d59e159 [ 793.940432][T15935] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 793.948448][T15935] RBP: 00007f036e502090 R08: 0000000000000000 R09: 0000000000000000 [ 793.956460][T15935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 793.964490][T15935] R13: 00007f036d826038 R14: 00007f036d825fa0 R15: 00007ffdbcf0b868 [ 793.972560][T15935] [ 794.359715][T15945] device veth1_macvtap left promiscuous mode [ 794.421609][ T4277] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 795.407460][T15983] __nla_validate_parse: 1 callbacks suppressed [ 795.407480][T15983] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3262'. [ 795.440947][T15983] FAULT_INJECTION: forcing a failure. [ 795.440947][T15983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.479339][T15983] CPU: 0 PID: 15983 Comm: syz.3.3262 Not tainted syzkaller #0 [ 795.486894][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 795.496998][T15983] Call Trace: [ 795.500328][T15983] [ 795.503302][T15983] dump_stack_lvl+0x188/0x24e [ 795.508053][T15983] ? show_regs_print_info+0x12/0x12 [ 795.513323][T15983] ? load_image+0x410/0x410 [ 795.517889][T15983] ? __lock_acquire+0x7c40/0x7c40 [ 795.522975][T15983] ? snprintf+0xe5/0x140 [ 795.527305][T15983] should_fail_ex+0x390/0x4c0 [ 795.532064][T15983] _copy_to_user+0x2c/0x130 [ 795.536652][T15983] simple_read_from_buffer+0xe3/0x150 [ 795.542122][T15983] proc_fail_nth_read+0x1a6/0x220 [ 795.547224][T15983] ? proc_fault_inject_write+0x310/0x310 [ 795.552922][T15983] ? fsnotify_perm+0x248/0x550 [ 795.557749][T15983] ? proc_fault_inject_write+0x310/0x310 [ 795.563463][T15983] vfs_read+0x2db/0x960 [ 795.567709][T15983] ? kernel_read+0x1e0/0x1e0 [ 795.572376][T15983] ? __fget_files+0x28/0x460 [ 795.577038][T15983] ? __fget_files+0x3fc/0x460 [ 795.581814][T15983] ? __fdget_pos+0x2ae/0x360 [ 795.586463][T15983] ? ksys_read+0x70/0x260 [ 795.590870][T15983] ksys_read+0x14d/0x260 [ 795.595188][T15983] ? vfs_write+0x9a0/0x9a0 [ 795.599692][T15983] ? lockdep_hardirqs_on+0x94/0x140 [ 795.604970][T15983] do_syscall_64+0x4c/0xa0 [ 795.609470][T15983] ? clear_bhb_loop+0x60/0xb0 [ 795.614219][T15983] ? clear_bhb_loop+0x60/0xb0 [ 795.618977][T15983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.624955][T15983] RIP: 0033:0x7f052375e98e [ 795.629420][T15983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 795.649078][T15983] RSP: 002b:00007f052471ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 795.657555][T15983] RAX: ffffffffffffffda RBX: 00007f05247206c0 RCX: 00007f052375e98e [ 795.665604][T15983] RDX: 000000000000000f RSI: 00007f05247200a0 RDI: 0000000000000005 [ 795.673802][T15983] RBP: 00007f0524720090 R08: 0000000000000000 R09: 0000000000000000 [ 795.681843][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 795.689859][T15983] R13: 00007f0523a26038 R14: 00007f0523a25fa0 R15: 00007fff47d3b928 [ 795.697908][T15983] [ 795.865617][ T4277] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 795.873885][T15992] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3265'. [ 797.498121][ T4277] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 798.676300][T16050] netlink: 'syz.4.3287': attribute type 9 has an invalid length. [ 799.043185][ T4277] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 799.778705][T16087] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3303'. [ 800.529088][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 800.785947][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 800.817418][T16105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 802.394455][T16158] netlink: 'syz.0.3325': attribute type 2 has an invalid length. [ 802.444139][T16158] netlink: 'syz.0.3325': attribute type 8 has an invalid length. [ 802.469508][T16158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3325'. [ 802.558707][T16160] netlink: 'syz.0.3325': attribute type 2 has an invalid length. [ 802.608196][T16160] netlink: 'syz.0.3325': attribute type 8 has an invalid length. [ 802.632790][T16160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3325'. [ 803.330652][T16172] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3329'. [ 803.421387][T16179] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3333'. [ 805.158975][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 805.892785][T16203] netlink: 'syz.4.3342': attribute type 2 has an invalid length. [ 805.901496][T16203] netlink: 'syz.4.3342': attribute type 8 has an invalid length. [ 805.921782][T16203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3342'. [ 805.962462][T16203] netlink: 'syz.4.3342': attribute type 2 has an invalid length. [ 805.995762][T16203] netlink: 'syz.4.3342': attribute type 8 has an invalid length. [ 806.023696][T16203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3342'. [ 806.236140][T16208] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.3343'. [ 806.295478][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 806.305744][T16208] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 806.607077][T16226] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3347'. [ 806.692346][T16228] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3351'. [ 807.639680][T16251] netlink: 'syz.0.3360': attribute type 10 has an invalid length. [ 807.695232][T16253] sctp: [Deprecated]: syz.3.3361 (pid 16253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 807.695232][T16253] Use struct sctp_sack_info instead [ 807.726226][T16253] sctp: [Deprecated]: syz.3.3361 (pid 16253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 807.726226][T16253] Use struct sctp_sack_info instead [ 807.798002][T16251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.835783][T16254] netlink: 'syz.0.3360': attribute type 2 has an invalid length. [ 807.888539][T16251] team0: Port device batadv0 added [ 807.909156][T16254] netlink: 'syz.0.3360': attribute type 1 has an invalid length. [ 807.929679][T16247] netlink: 'syz.2.3358': attribute type 2 has an invalid length. [ 807.929776][T16254] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.3360'. [ 807.937581][T16247] netlink: 'syz.2.3358': attribute type 8 has an invalid length. [ 807.937723][T16247] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3358'. [ 808.053900][T16258] netlink: 'syz.2.3358': attribute type 2 has an invalid length. [ 808.079935][T16258] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3358'. [ 808.779053][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.785519][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.755606][T16300] ¥: port 1(bond0) entered blocking state [ 811.789012][T16300] ¥: port 1(bond0) entered disabled state [ 811.832420][T16300] device bond0 entered promiscuous mode [ 811.838039][T16300] device bond_slave_0 entered promiscuous mode [ 811.853037][T16300] device bond_slave_1 entered promiscuous mode [ 811.897247][T16308] IPv6: pim6reg1: Disabled Multicast RS [ 811.932134][T16309] validate_nla: 1 callbacks suppressed [ 811.932146][T16309] netlink: 'syz.3.3378': attribute type 21 has an invalid length. [ 811.976488][T16309] netlink: 'syz.3.3378': attribute type 20 has an invalid length. [ 812.034911][T16314] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 812.087437][T16316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3380'. [ 812.125713][T16316] : renamed from caif0 [ 812.181471][T16316] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 813.299385][T16340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3387'. [ 814.253455][T16367] netlink: 'syz.3.3394': attribute type 10 has an invalid length. [ 814.286983][T16367] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3394'. [ 814.478933][T16372] netlink: 'syz.0.3393': attribute type 25 has an invalid length. [ 814.486830][T16372] netlink: 'syz.0.3393': attribute type 29 has an invalid length. [ 814.640220][T16363] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3393'. [ 814.964318][T16383] netlink: 'syz.4.3398': attribute type 10 has an invalid length. [ 814.989835][T16383] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3398'. [ 815.010261][T16383] device hsr0 entered promiscuous mode [ 815.020862][T16383] bridge0: port 3(hsr0) entered blocking state [ 815.045826][T16383] bridge0: port 3(hsr0) entered disabled state [ 815.092951][T16383] bridge0: port 3(hsr0) entered blocking state [ 815.099306][T16383] bridge0: port 3(hsr0) entered forwarding state [ 816.529475][T16425] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3407'. [ 816.621774][T16432] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3409'. [ 817.841654][ T4288] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 818.789995][T16487] netlink: 'syz.2.3425': attribute type 10 has an invalid length. [ 818.878546][T16487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3425'. [ 818.943124][T16487] batman_adv: batadv0: Adding interface: virt_wifi0 [ 818.973258][T16487] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.100150][T16487] batman_adv: batadv0: Interface activated: virt_wifi0 [ 819.837117][ T4288] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 820.183427][T16517] netlink: 125520 bytes leftover after parsing attributes in process `syz.4.3435'. [ 820.644241][T16533] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3441'. [ 822.311872][ T4277] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 823.126959][T16576] netlink: 'syz.4.3456': attribute type 3 has an invalid length. [ 823.181962][T16576] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3456'. [ 823.202033][T16580] netlink: 'syz.0.3455': attribute type 41 has an invalid length. [ 823.596214][T16590] netlink: 15007 bytes leftover after parsing attributes in process `syz.4.3461'. [ 823.657227][T16592] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.3459'. [ 825.474227][T16621] netlink: 'syz.4.3471': attribute type 3 has an invalid length. [ 825.500265][T16621] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3471'. [ 825.832530][ T4288] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 826.342915][T16635] netlink: 15007 bytes leftover after parsing attributes in process `syz.1.3475'. [ 827.008442][T16661] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3483'. [ 827.391187][ T4277] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 827.907721][T16681] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3491'. [ 827.955485][T16681] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3491'. [ 828.007239][T16681] bond0: (slave bond_slave_0): Releasing backup interface [ 828.056919][T16681] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 828.604256][ T4277] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 829.497980][T16726] netlink: 'syz.4.3506': attribute type 13 has an invalid length. [ 829.529865][T16726] netlink: 'syz.4.3506': attribute type 14 has an invalid length. [ 829.547761][T16726] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3506'. [ 829.809015][T16732] netlink: 'syz.3.3507': attribute type 3 has an invalid length. [ 829.836791][T16735] netlink: 'syz.2.3508': attribute type 29 has an invalid length. [ 829.901873][ T4288] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 829.921773][T16732] netlink: 'syz.3.3507': attribute type 1 has an invalid length. [ 829.940366][T16732] netlink: 185292 bytes leftover after parsing attributes in process `syz.3.3507'. [ 829.986496][T16735] netlink: 'syz.2.3508': attribute type 29 has an invalid length. [ 830.010334][T16739] netlink: 'syz.2.3508': attribute type 29 has an invalid length. [ 830.072665][T16740] netlink: 'syz.2.3508': attribute type 10 has an invalid length. [ 830.179669][T16740] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 831.203972][T16768] netlink: 'syz.3.3519': attribute type 13 has an invalid length. [ 831.219088][T16768] netlink: 'syz.3.3519': attribute type 14 has an invalid length. [ 831.227460][T16768] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3519'. [ 832.055584][ T4288] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 832.907725][T16795] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3529'. [ 832.997011][T16801] netlink: 'syz.2.3531': attribute type 13 has an invalid length. [ 833.018099][T16801] netlink: 'syz.2.3531': attribute type 14 has an invalid length. [ 833.027602][T16801] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3531'. [ 833.605447][ T4288] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 833.711714][T16819] device lo entered promiscuous mode [ 833.834602][T16819] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 834.369142][T16843] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3544'. [ 834.416321][T16845] netlink: 'syz.3.3543': attribute type 10 has an invalid length. [ 834.434864][T16845] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3543'. [ 834.499221][T16845] batman_adv: batadv0: Adding interface: virt_wifi0 [ 834.505923][T16845] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.673680][T16845] batman_adv: batadv0: Interface activated: virt_wifi0 [ 837.691624][T16904] device sit0 entered promiscuous mode [ 838.128320][T16907] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3562'. [ 839.722063][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 840.497024][ T4277] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 840.826279][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 840.849257][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 840.858741][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 840.867485][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 840.876250][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 840.884107][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.097207][ T4276] bond0: (slave syz_tun): Releasing backup interface [ 842.220763][T16961] chnl_net:caif_netlink_parms(): no params data found [ 842.279055][T16982] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3590'. [ 842.369002][T16982] netlink: zone id is out of range [ 842.392699][T16982] netlink: zone id is out of range [ 842.540141][T16961] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.547327][T16961] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.595741][T16961] device bridge_slave_0 entered promiscuous mode [ 842.642100][T16961] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.649917][T16992] netlink: 'syz.4.3589': attribute type 3 has an invalid length. [ 842.688962][T16961] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.697358][T16961] device bridge_slave_1 entered promiscuous mode [ 842.706427][T16992] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3589'. [ 842.926423][ T4277] Bluetooth: hci5: command 0x0409 tx timeout [ 843.011832][T16961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.025566][T16961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.057854][T16961] team0: Port device team_slave_0 added [ 843.067519][T16961] team0: Port device team_slave_1 added [ 843.097237][ T4277] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 843.137744][T16961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.152474][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.198858][T16961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.242673][T16961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.252038][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.339026][T16961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.524826][T16961] device hsr_slave_0 entered promiscuous mode [ 843.568273][T16961] device hsr_slave_1 entered promiscuous mode [ 843.614229][T16961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 843.628921][T16961] Cannot create hsr debugfs directory [ 844.405129][T16961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.586463][T17021] device sit0 entered promiscuous mode [ 844.999088][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 845.080986][ T4277] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 845.273306][T16961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.494540][T16961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.566695][T17022] ieee80211 phy43: Failed to add default virtual iface [ 845.871149][T16961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.731217][T17064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3616'. [ 846.828655][T17067] netlink: 'syz.3.3616': attribute type 12 has an invalid length. [ 846.936579][T17067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3616'. [ 847.003944][T17064] netlink: 'syz.3.3616': attribute type 12 has an invalid length. [ 847.079064][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 847.108980][T17064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3616'. [ 847.156869][T16961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 847.175250][ T4277] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 849.159534][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 850.252564][T16961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.280238][T16961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 850.451013][T16961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 850.931997][T16961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.039866][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 851.059598][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 851.076239][T16961] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.103339][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 851.127896][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 851.158558][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.165844][T12904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.189377][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 851.247528][T12903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 851.279638][T12903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 851.319483][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.326758][T12903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.362943][T17093] device sit0 entered promiscuous mode [ 851.775916][T12903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 851.798074][T12903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 852.012965][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 852.046287][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 852.193746][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 852.217090][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 852.285345][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 852.293462][T14575] Bluetooth: hci3: command 0x0406 tx timeout [ 852.364984][T16961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 852.379543][T16961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 852.446178][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 852.469889][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 852.522101][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 852.545419][ T4277] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 852.553820][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 852.691110][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 853.184983][T17123] netlink: 'syz.0.3634': attribute type 2 has an invalid length. [ 853.224638][T17123] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3634'. [ 853.248634][T17118] netlink: 'syz.2.3632': attribute type 13 has an invalid length. [ 853.283082][T17118] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3632'. [ 853.345393][T17118] syz_tun: refused to change device tx_queue_len [ 853.409897][T17118] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 853.686407][T17140] netlink: 'syz.3.3636': attribute type 29 has an invalid length. [ 853.991516][T17146] netlink: 'syz.2.3638': attribute type 3 has an invalid length. [ 854.000025][T16961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.019212][T17146] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3638'. [ 854.045574][T17140] netlink: 'syz.3.3636': attribute type 29 has an invalid length. [ 854.086488][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 854.102254][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 854.175903][T12923] device bond0 left promiscuous mode [ 854.185424][T12923] device bond_slave_1 left promiscuous mode [ 854.192810][T12923] : port 1(bond0) entered disabled state [ 854.265260][T12923] device veth0_macvtap left promiscuous mode [ 854.276274][T12923] device veth1_vlan left promiscuous mode [ 854.310530][T12923] device veth0_vlan left promiscuous mode [ 854.399510][ T4277] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 855.547193][T12923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.801254][T17177] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3650'. [ 856.080399][T17182] netlink: 'syz.0.3651': attribute type 3 has an invalid length. [ 856.087824][T12923] bond0 (unregistering): Released all slaves [ 856.108071][T17182] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3651'. [ 856.202948][T17162] device sit0 entered promiscuous mode [ 856.376512][T17185] netlink: 'syz.2.3652': attribute type 7 has an invalid length. [ 856.385226][T17185] netlink: 'syz.2.3652': attribute type 6 has an invalid length. [ 856.419819][T12903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 856.431785][T12903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 856.600094][ T4277] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 856.647677][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 856.684037][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 856.728127][T16961] device veth0_vlan entered promiscuous mode [ 856.756634][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 856.813992][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 856.877005][T16961] device veth1_vlan entered promiscuous mode [ 857.228576][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 857.247162][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 857.266419][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 857.345212][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 857.361074][T16961] device veth0_macvtap entered promiscuous mode [ 857.389564][T16961] device veth1_macvtap entered promiscuous mode [ 857.448633][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.485783][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.509812][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.537069][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.559657][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.584016][T17200] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3657'. [ 857.600775][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.615119][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.645578][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.676774][T16961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.713918][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.743222][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.772773][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.804195][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.828649][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.857240][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.883912][T16961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.916115][T16961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.944216][T16961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.990144][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 857.998576][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 858.023467][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 858.035819][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 858.053210][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 858.067191][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 858.107243][T16961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.117191][T16961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.136058][T16961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.145267][T16961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.399495][T12904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.409035][T12904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.458188][T12893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 861.456109][T12917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.477312][T12917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.515325][T12893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 861.573687][T17224] netlink: 'syz.4.3663': attribute type 3 has an invalid length. [ 861.610185][T17224] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3663'. [ 861.846914][ T4277] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 862.322341][T17239] netlink: 'syz.2.3668': attribute type 30 has an invalid length. [ 862.747094][T17252] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3669'. [ 863.980415][T17267] netlink: 'syz.0.3674': attribute type 3 has an invalid length. [ 864.006421][ T4277] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 864.008672][T17267] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3674'. [ 864.258287][T17271] netlink: 'syz.2.3678': attribute type 29 has an invalid length. [ 864.275721][T17271] netlink: 'syz.2.3678': attribute type 29 has an invalid length. [ 864.304309][T17273] netlink: 'syz.2.3678': attribute type 29 has an invalid length. [ 865.266205][T17300] netlink: 'syz.3.3677': attribute type 11 has an invalid length. [ 865.332609][T17300] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3677'. [ 865.476441][T17300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.519494][ T4277] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 865.793895][T17287] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3683'. [ 865.821078][T17311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3689'. [ 865.898909][T17311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3689'. [ 865.929320][T17311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3689'. [ 865.964644][T17311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3689'. [ 866.254147][T17322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3694'. [ 866.935349][T17352] __nla_validate_parse: 2 callbacks suppressed [ 866.935369][T17352] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3706'. [ 868.122322][T17382] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3712'. [ 868.222048][T17391] netlink: 'syz.2.3715': attribute type 12 has an invalid length. [ 868.246203][T17391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3715'. [ 870.014756][T17433] device sit0 left promiscuous mode [ 870.144326][T17435] device sit0 entered promiscuous mode [ 870.212977][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.219534][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.853942][T17464] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3733'. [ 870.891470][T17468] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3734'. [ 872.278885][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 873.319339][T17526] netlink: 'syz.1.3753': attribute type 19 has an invalid length. [ 873.379087][T17526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3753'. [ 874.107947][T17548] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3759'. [ 874.172710][T17549] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3759'. [ 875.372046][T17577] netlink: 'syz.1.3770': attribute type 3 has an invalid length. [ 875.390528][T17577] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3770'. [ 876.458236][T17604] netlink: 'syz.3.3777': attribute type 2 has an invalid length. [ 876.514120][T17604] netlink: 'syz.3.3777': attribute type 8 has an invalid length. [ 876.571374][T17604] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3777'. [ 876.966909][T17612] netlink: 'syz.2.3778': attribute type 3 has an invalid length. [ 877.013852][T17612] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3778'. [ 877.130762][T17615] IPv6: NLM_F_CREATE should be specified when creating new route [ 877.138680][T17615] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3781'. [ 877.244380][T17612] netlink: 'syz.2.3778': attribute type 21 has an invalid length. [ 877.309576][T17612] netlink: 'syz.2.3778': attribute type 6 has an invalid length. [ 877.369496][T17612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3778'. [ 878.562208][T17642] tipc: Started in network mode [ 878.567163][T17642] tipc: Node identity 9215a268, cluster identity 4711 [ 878.608354][T17642] tipc: Node number set to 2450891368 [ 879.833409][T17660] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3795'. [ 879.862272][T17659] tun0: tun_chr_ioctl cmd 2148553947 [ 881.398461][T17685] device syzkaller0 entered promiscuous mode [ 881.991540][T17702] netlink: 'syz.3.3809': attribute type 3 has an invalid length. [ 882.002019][T17702] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3809'. [ 884.216756][T17719] device sit0 left promiscuous mode [ 885.705199][T17748] netlink: 'syz.0.3827': attribute type 3 has an invalid length. [ 885.736162][T17748] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3827'. [ 887.649148][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 888.152398][T17766] netlink: 13183 bytes leftover after parsing attributes in process `syz.4.3831'. [ 888.202733][T17766] netlink: 'syz.4.3831': attribute type 1 has an invalid length. [ 888.212819][T17766] netlink: 13183 bytes leftover after parsing attributes in process `syz.4.3831'. [ 888.534198][T17776] syz.3.3832 (17776) used obsolete PPPIOCDETACH ioctl [ 888.894375][T17786] netlink: 'syz.4.3840': attribute type 3 has an invalid length. [ 888.927722][T17786] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3840'. [ 889.336543][T17796] netlink: 'syz.2.3853': attribute type 3 has an invalid length. [ 889.410362][T17796] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3853'. [ 890.643193][T17830] netlink: 'syz.2.3856': attribute type 3 has an invalid length. [ 890.658917][T17830] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3856'. [ 892.284954][T17870] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.3867'. [ 892.424441][T17872] netlink: 'syz.1.3867': attribute type 9 has an invalid length. [ 892.705325][T17885] netlink: 'syz.0.3874': attribute type 3 has an invalid length. [ 892.713490][T17885] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3874'. [ 893.042754][T14575] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 894.202177][T17908] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3880'. [ 894.304793][T17915] netlink: 'syz.2.3880': attribute type 16 has an invalid length. [ 894.349803][T17915] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3880'. [ 894.384944][T17908] netlink: 'syz.2.3880': attribute type 10 has an invalid length. [ 894.782553][T17908] team0 (unregistering): Port device team_slave_0 removed [ 894.898146][T17908] team0 (unregistering): Port device team_slave_1 removed [ 895.029956][T17924] netlink: 'syz.3.3886': attribute type 3 has an invalid length. [ 895.049212][T17924] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3886'. [ 895.281672][T17930] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3889'. [ 895.315049][T17934] netlink: 'syz.1.3888': attribute type 3 has an invalid length. [ 895.366426][T17939] delete_channel: no stack [ 895.369038][T17934] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3888'. [ 895.397943][T17939] delete_channel: no stack [ 895.455450][T17939] netlink: 'syz.2.3890': attribute type 10 has an invalid length. [ 895.736051][T17947] device syzkaller0 entered promiscuous mode [ 899.976298][T18016] FAULT_INJECTION: forcing a failure. [ 899.976298][T18016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.015670][T18016] CPU: 1 PID: 18016 Comm: syz.0.3917 Not tainted syzkaller #0 [ 900.023231][T18016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.033326][T18016] Call Trace: [ 900.036636][T18016] [ 900.039599][T18016] dump_stack_lvl+0x188/0x24e [ 900.044335][T18016] ? show_regs_print_info+0x12/0x12 [ 900.049584][T18016] ? load_image+0x410/0x410 [ 900.054229][T18016] ? __lock_acquire+0x7c40/0x7c40 [ 900.059316][T18016] should_fail_ex+0x390/0x4c0 [ 900.064048][T18016] _copy_from_user+0x2c/0x170 [ 900.068782][T18016] __sys_bpf+0x2ea/0x780 [ 900.073081][T18016] ? bpf_link_show_fdinfo+0x380/0x380 [ 900.078512][T18016] ? lock_chain_count+0x20/0x20 [ 900.083443][T18016] __x64_sys_bpf+0x78/0x90 [ 900.087908][T18016] do_syscall_64+0x4c/0xa0 [ 900.092372][T18016] ? clear_bhb_loop+0x60/0xb0 [ 900.097097][T18016] ? clear_bhb_loop+0x60/0xb0 [ 900.101823][T18016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.107773][T18016] RIP: 0033:0x7f036d59e159 [ 900.112240][T18016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.131898][T18016] RSP: 002b:00007f036e502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 900.140356][T18016] RAX: ffffffffffffffda RBX: 00007f036d825fa0 RCX: 00007f036d59e159 [ 900.148389][T18016] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 900.156411][T18016] RBP: 00007f036e502090 R08: 0000000000000000 R09: 0000000000000000 [ 900.164424][T18016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.172433][T18016] R13: 00007f036d826038 R14: 00007f036d825fa0 R15: 00007ffdbcf0b868 [ 900.180464][T18016] [ 900.185457][T18019] netlink: 'syz.1.3919': attribute type 3 has an invalid length. [ 900.206959][T18022] netlink: 'syz.3.3920': attribute type 21 has an invalid length. [ 900.229615][T18022] netlink: 'syz.3.3920': attribute type 6 has an invalid length. [ 900.237463][T18022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3920'. [ 900.269077][T18019] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3919'. [ 900.798484][T18032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 901.004685][T18031] netlink: 1030 bytes leftover after parsing attributes in process `syz.4.3922'. [ 902.403521][T18074] FAULT_INJECTION: forcing a failure. [ 902.403521][T18074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.469062][T18074] CPU: 1 PID: 18074 Comm: syz.0.3934 Not tainted syzkaller #0 [ 902.476613][T18074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.486800][T18074] Call Trace: [ 902.490114][T18074] [ 902.493081][T18074] dump_stack_lvl+0x188/0x24e [ 902.497830][T18074] ? show_regs_print_info+0x12/0x12 [ 902.503092][T18074] ? load_image+0x410/0x410 [ 902.507644][T18074] ? __lock_acquire+0x7c40/0x7c40 [ 902.512754][T18074] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 902.518733][T18074] should_fail_ex+0x390/0x4c0 [ 902.523476][T18074] _copy_to_user+0x2c/0x130 [ 902.528025][T18074] bpf_prog_test_run_raw_tp+0x4de/0x680 [ 902.533728][T18074] ? trace_bpf_test_finish+0x220/0x220 [ 902.539246][T18074] ? trace_bpf_test_finish+0x220/0x220 [ 902.544753][T18074] bpf_prog_test_run+0x31c/0x390 [ 902.549751][T18074] __sys_bpf+0x62b/0x780 [ 902.554052][T18074] ? bpf_link_show_fdinfo+0x380/0x380 [ 902.559508][T18074] ? lock_chain_count+0x20/0x20 [ 902.564420][T18074] __x64_sys_bpf+0x78/0x90 [ 902.568907][T18074] do_syscall_64+0x4c/0xa0 [ 902.573390][T18074] ? clear_bhb_loop+0x60/0xb0 [ 902.578123][T18074] ? clear_bhb_loop+0x60/0xb0 [ 902.582860][T18074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 902.588815][T18074] RIP: 0033:0x7f036d59e159 [ 902.593277][T18074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.612940][T18074] RSP: 002b:00007f036e502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 902.621413][T18074] RAX: ffffffffffffffda RBX: 00007f036d825fa0 RCX: 00007f036d59e159 [ 902.629437][T18074] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 902.637471][T18074] RBP: 00007f036e502090 R08: 0000000000000000 R09: 0000000000000000 [ 902.645511][T18074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.653551][T18074] R13: 00007f036d826038 R14: 00007f036d825fa0 R15: 00007ffdbcf0b868 [ 902.661616][T18074] [ 902.999638][T14575] Bluetooth: hci2: command 0x0406 tx timeout [ 903.288503][T18088] netlink: 'syz.4.3940': attribute type 3 has an invalid length. [ 903.308178][T18088] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3940'. [ 903.510848][T18095] netlink: 'syz.0.3942': attribute type 3 has an invalid length. [ 903.527194][T18095] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3942'. [ 904.568302][T18118] FAULT_INJECTION: forcing a failure. [ 904.568302][T18118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.592252][T18118] CPU: 1 PID: 18118 Comm: syz.3.3948 Not tainted syzkaller #0 [ 904.599797][T18118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 904.609885][T18118] Call Trace: [ 904.613213][T18118] [ 904.616182][T18118] dump_stack_lvl+0x188/0x24e [ 904.620912][T18118] ? show_regs_print_info+0x12/0x12 [ 904.626163][T18118] ? load_image+0x410/0x410 [ 904.630734][T18118] ? __lock_acquire+0x7c40/0x7c40 [ 904.635816][T18118] ? snprintf+0xe5/0x140 [ 904.640109][T18118] should_fail_ex+0x390/0x4c0 [ 904.644845][T18118] _copy_to_user+0x2c/0x130 [ 904.649408][T18118] simple_read_from_buffer+0xe3/0x150 [ 904.654826][T18118] proc_fail_nth_read+0x1a6/0x220 [ 904.659894][T18118] ? proc_fault_inject_write+0x310/0x310 [ 904.665579][T18118] ? fsnotify_perm+0x248/0x550 [ 904.670391][T18118] ? proc_fault_inject_write+0x310/0x310 [ 904.676090][T18118] vfs_read+0x2db/0x960 [ 904.680308][T18118] ? kernel_read+0x1e0/0x1e0 [ 904.684958][T18118] ? __fget_files+0x28/0x460 [ 904.689599][T18118] ? __fget_files+0x3fc/0x460 [ 904.694336][T18118] ? __fdget_pos+0x2ae/0x360 [ 904.698973][T18118] ? ksys_read+0x70/0x260 [ 904.703336][T18118] ksys_read+0x14d/0x260 [ 904.707612][T18118] ? vfs_write+0x9a0/0x9a0 [ 904.712067][T18118] ? lockdep_hardirqs_on+0x94/0x140 [ 904.717305][T18118] do_syscall_64+0x4c/0xa0 [ 904.721759][T18118] ? clear_bhb_loop+0x60/0xb0 [ 904.726470][T18118] ? clear_bhb_loop+0x60/0xb0 [ 904.731205][T18118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.737131][T18118] RIP: 0033:0x7f052375e98e [ 904.741574][T18118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 904.761207][T18118] RSP: 002b:00007f052471ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 904.769661][T18118] RAX: ffffffffffffffda RBX: 00007f05247206c0 RCX: 00007f052375e98e [ 904.777661][T18118] RDX: 000000000000000f RSI: 00007f05247200a0 RDI: 0000000000000006 [ 904.785654][T18118] RBP: 00007f0524720090 R08: 0000000000000000 R09: 0000000000000000 [ 904.793672][T18118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.801664][T18118] R13: 00007f0523a26038 R14: 00007f0523a25fa0 R15: 00007fff47d3b928 [ 904.809669][T18118] [ 905.508079][T18135] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3955'. [ 905.615451][T18135] netlink: 'syz.4.3955': attribute type 10 has an invalid length. [ 905.653010][T18135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3955'. [ 905.684534][T18135] device team0 entered promiscuous mode [ 905.717624][T18135] device team_slave_0 entered promiscuous mode [ 905.769100][T18135] device team_slave_1 entered promiscuous mode [ 905.871347][T18135] bridge0: port 4(team0) entered blocking state [ 905.899993][T18135] bridge0: port 4(team0) entered disabled state [ 906.021919][T18135] bridge0: port 4(team0) entered blocking state [ 906.029247][T18135] bridge0: port 4(team0) entered forwarding state [ 907.681400][T18166] netlink: 'syz.1.3963': attribute type 3 has an invalid length. [ 907.795524][T18166] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3963'. [ 908.573720][T18185] netlink: 'syz.4.3971': attribute type 3 has an invalid length. [ 908.597223][T18185] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3971'. [ 910.396598][T18217] netlink: 'syz.0.3983': attribute type 3 has an invalid length. [ 910.414232][T18205] device syzkaller0 entered promiscuous mode [ 910.426817][T18217] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3983'. [ 912.780166][T18254] netlink: 'syz.2.3996': attribute type 3 has an invalid length. [ 912.808432][T18254] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3996'. [ 914.809372][T18262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 914.886517][T18267] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.3998'. [ 916.186909][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4009'. [ 917.244473][T18298] netlink: 'syz.2.4010': attribute type 3 has an invalid length. [ 917.272481][T18298] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4010'. [ 917.747809][T18304] device syzkaller0 entered promiscuous mode [ 919.657371][T18355] netlink: 'syz.2.4024': attribute type 29 has an invalid length. [ 921.221130][T18347] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4021'. [ 921.233949][T18354] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4021'. [ 921.306862][T18361] netlink: 'syz.4.4025': attribute type 3 has an invalid length. [ 921.314867][T18361] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4025'. [ 921.326038][T18355] netlink: 'syz.2.4024': attribute type 29 has an invalid length. [ 921.550298][T18366] netlink: 1030 bytes leftover after parsing attributes in process `syz.4.4029'. [ 921.649930][T18378] netlink: 'syz.1.4026': attribute type 41 has an invalid length. [ 921.866651][T18385] netlink: 'syz.2.4032': attribute type 10 has an invalid length. [ 922.324387][T18404] netlink: 'syz.0.4039': attribute type 3 has an invalid length. [ 922.382316][T18404] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4039'. [ 922.442981][T18402] device syzkaller0 entered promiscuous mode [ 922.753126][T18413] delete_channel: no stack [ 922.780468][T18413] delete_channel: no stack [ 923.210829][T18429] netlink: 'syz.0.4046': attribute type 11 has an invalid length. [ 923.247029][T18429] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4046'. [ 923.261181][T18428] netlink: 'syz.0.4046': attribute type 11 has an invalid length. [ 923.296470][T18428] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4046'. [ 924.053424][T18427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.440748][T18428] netlink: 'syz.0.4046': attribute type 8 has an invalid length. [ 925.449169][T18428] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4046'. [ 925.511511][T18442] device syzkaller0 entered promiscuous mode [ 925.701784][T18463] netlink: 'syz.4.4055': attribute type 3 has an invalid length. [ 925.766108][T18463] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4055'. [ 926.744335][T18469] netlink: 'syz.2.4057': attribute type 9 has an invalid length. [ 926.794077][T18469] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4057'. [ 929.593034][T18501] device syzkaller0 entered promiscuous mode [ 929.655958][T18504] netlink: 'syz.4.4068': attribute type 10 has an invalid length. [ 929.678856][T18504] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4068'. [ 931.643583][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.650169][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.572029][T18549] delete_channel: no stack [ 932.578252][T18549] delete_channel: no stack [ 933.884870][T18552] netlink: 'syz.0.4083': attribute type 10 has an invalid length. [ 933.914135][T18552] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4083'. [ 933.927296][T18552] device hsr0 entered promiscuous mode [ 933.934024][T18552] bridge0: port 3(hsr0) entered blocking state [ 933.940770][T18552] bridge0: port 3(hsr0) entered disabled state [ 933.950031][T18552] bridge0: port 3(hsr0) entered blocking state [ 933.956337][T18552] bridge0: port 3(hsr0) entered forwarding state [ 934.379913][T18577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4094'. [ 936.368539][T18617] netlink: 'syz.1.4102': attribute type 10 has an invalid length. [ 936.388853][T18617] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4102'. [ 936.397784][T18617] device hsr0 entered promiscuous mode [ 936.420278][T18617] bridge0: port 3(hsr0) entered blocking state [ 936.426976][T18617] bridge0: port 3(hsr0) entered disabled state [ 936.437507][T18617] bridge0: port 3(hsr0) entered blocking state [ 936.443841][T18617] bridge0: port 3(hsr0) entered forwarding state [ 936.494221][ T4277] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 936.822492][T18638] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4114'. [ 936.915193][T18640] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4114'. [ 936.998879][T18652] netlink: 'syz.0.4118': attribute type 1 has an invalid length. [ 937.023650][T18652] netlink: 'syz.0.4118': attribute type 4 has an invalid length. [ 937.044867][T18652] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4118'. [ 937.961682][ T4277] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 938.293879][T18676] netlink: 'syz.1.4125': attribute type 4 has an invalid length. [ 938.349421][T18676] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4125'. [ 941.217656][T18702] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4133'. [ 941.456050][ T4277] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 942.465353][T18715] FAULT_INJECTION: forcing a failure. [ 942.465353][T18715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.519530][T18715] CPU: 0 PID: 18715 Comm: syz.2.4139 Not tainted syzkaller #0 [ 942.527068][T18715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 942.537162][T18715] Call Trace: [ 942.540476][T18715] [ 942.543433][T18715] dump_stack_lvl+0x188/0x24e [ 942.548175][T18715] ? show_regs_print_info+0x12/0x12 [ 942.553435][T18715] ? load_image+0x410/0x410 [ 942.557993][T18715] ? __lock_acquire+0x7c40/0x7c40 [ 942.563092][T18715] should_fail_ex+0x390/0x4c0 [ 942.567863][T18715] _copy_from_user+0x2c/0x170 [ 942.572597][T18715] __sys_bpf+0x2ea/0x780 [ 942.576940][T18715] ? bpf_link_show_fdinfo+0x380/0x380 [ 942.582485][T18715] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 942.588712][T18715] __x64_sys_bpf+0x78/0x90 [ 942.593186][T18715] do_syscall_64+0x4c/0xa0 [ 942.597657][T18715] ? clear_bhb_loop+0x60/0xb0 [ 942.602390][T18715] ? clear_bhb_loop+0x60/0xb0 [ 942.607122][T18715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 942.613062][T18715] RIP: 0033:0x7f9b7dd9e159 [ 942.617522][T18715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.637259][T18715] RSP: 002b:00007f9b7ebc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 942.645723][T18715] RAX: ffffffffffffffda RBX: 00007f9b7e025fa0 RCX: 00007f9b7dd9e159 [ 942.653759][T18715] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 942.661775][T18715] RBP: 00007f9b7ebc8090 R08: 0000000000000000 R09: 0000000000000000 [ 942.669808][T18715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.677830][T18715] R13: 00007f9b7e026038 R14: 00007f9b7e025fa0 R15: 00007fff9978cd48 [ 942.685890][T18715] [ 943.359218][T18744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 943.366536][T18744] IPv6: NLM_F_CREATE should be set when creating new route [ 943.373909][T18744] IPv6: NLM_F_CREATE should be set when creating new route [ 943.381199][T18744] IPv6: NLM_F_CREATE should be set when creating new route [ 943.417914][ T4277] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 944.391613][T18757] netlink: 'syz.3.4154': attribute type 2 has an invalid length. [ 944.485944][T18757] netlink: 'syz.3.4154': attribute type 8 has an invalid length. [ 944.519809][T18757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4154'. [ 944.688050][T18766] FAULT_INJECTION: forcing a failure. [ 944.688050][T18766] name failslab, interval 1, probability 0, space 0, times 0 [ 944.756369][T18766] CPU: 0 PID: 18766 Comm: syz.2.4158 Not tainted syzkaller #0 [ 944.763909][T18766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 944.774004][T18766] Call Trace: [ 944.777326][T18766] [ 944.780331][T18766] dump_stack_lvl+0x188/0x24e [ 944.785071][T18766] ? show_regs_print_info+0x12/0x12 [ 944.790504][T18766] ? load_image+0x410/0x410 [ 944.795079][T18766] ? __lock_acquire+0x7c40/0x7c40 [ 944.800163][T18766] should_fail_ex+0x390/0x4c0 [ 944.804895][T18766] should_failslab+0x5/0x20 [ 944.809452][T18766] slab_pre_alloc_hook+0x59/0x300 [ 944.814566][T18766] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 944.820151][T18766] __kmem_cache_alloc_node+0x4f/0x270 [ 944.825583][T18766] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 944.831176][T18766] __kmalloc+0xa3/0x240 [ 944.835398][T18766] bpf_prog_test_run_skb+0x23e/0x18e0 [ 944.840822][T18766] ? __fget_files+0x28/0x460 [ 944.845474][T18766] ? __fget_files+0x3fc/0x460 [ 944.850223][T18766] ? cpu_online+0xa0/0xa0 [ 944.854596][T18766] bpf_prog_test_run+0x31c/0x390 [ 944.859601][T18766] __sys_bpf+0x62b/0x780 [ 944.863898][T18766] ? bpf_link_show_fdinfo+0x380/0x380 [ 944.869325][T18766] ? lock_chain_count+0x20/0x20 [ 944.874205][T18766] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 944.880238][T18766] __x64_sys_bpf+0x78/0x90 [ 944.884680][T18766] do_syscall_64+0x4c/0xa0 [ 944.889125][T18766] ? clear_bhb_loop+0x60/0xb0 [ 944.893843][T18766] ? clear_bhb_loop+0x60/0xb0 [ 944.898566][T18766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 944.904500][T18766] RIP: 0033:0x7f9b7dd9e159 [ 944.908955][T18766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.928626][T18766] RSP: 002b:00007f9b7ebc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 944.937068][T18766] RAX: ffffffffffffffda RBX: 00007f9b7e025fa0 RCX: 00007f9b7dd9e159 [ 944.945068][T18766] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 944.953059][T18766] RBP: 00007f9b7ebc8090 R08: 0000000000000000 R09: 0000000000000000 [ 944.961078][T18766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.969073][T18766] R13: 00007f9b7e026038 R14: 00007f9b7e025fa0 R15: 00007fff9978cd48 [ 944.977085][T18766] [ 945.553069][ T4277] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 947.199533][ T4277] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 947.292663][T18814] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4177'. [ 947.375930][T18816] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4176'. [ 948.239104][T18833] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.4181'. [ 948.351890][T18828] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4181'. [ 948.441782][T18828] netlink: zone id is out of range [ 948.447004][T18828] netlink: zone id is out of range [ 948.458910][T18828] netlink: zone id is out of range [ 948.464090][T18828] netlink: zone id is out of range [ 948.485449][T18828] netlink: zone id is out of range [ 948.498170][T18828] netlink: zone id is out of range [ 948.536805][T18828] netlink: zone id is out of range [ 948.574986][T18828] netlink: zone id is out of range [ 948.611917][T18828] netlink: zone id is out of range [ 948.647375][T18828] netlink: zone id is out of range [ 949.237773][T18844] netlink: 'syz.0.4185': attribute type 3 has an invalid length. [ 949.258962][T18844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4185'. [ 949.648343][T18856] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4188'. [ 950.186263][T18870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 950.193639][T18870] IPv6: NLM_F_CREATE should be set when creating new route [ 950.201012][T18870] IPv6: NLM_F_CREATE should be set when creating new route [ 950.208290][T18870] IPv6: NLM_F_CREATE should be set when creating new route [ 951.034430][T18902] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.4204'. [ 951.882523][T18914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 952.086232][T18918] netlink: 'syz.0.4210': attribute type 9 has an invalid length. [ 952.105771][T18916] netlink: 'syz.0.4210': attribute type 9 has an invalid length. [ 952.172148][T18918] netlink: 'syz.0.4210': attribute type 10 has an invalid length. [ 952.189777][T18918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4210'. [ 952.206099][T18918] device ipvlan1 entered promiscuous mode [ 952.215401][T18918] bridge0: port 4(ipvlan1) entered blocking state [ 952.222530][T18918] bridge0: port 4(ipvlan1) entered disabled state [ 952.333454][T18920] mac80211_hwsim hwsim31 »»»»»»: renamed from wlan0 [ 952.998333][T18946] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4218'. [ 953.175344][T18955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4231'. [ 953.431167][T18964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 953.438479][T18964] IPv6: NLM_F_CREATE should be set when creating new route [ 953.445841][T18964] IPv6: NLM_F_CREATE should be set when creating new route [ 953.453175][T18964] IPv6: NLM_F_CREATE should be set when creating new route [ 953.873617][T18971] netlink: 'syz.3.4226': attribute type 10 has an invalid length. [ 953.890407][T18971] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4226'. [ 953.906901][T18971] device hsr0 entered promiscuous mode [ 953.930403][T18971] bridge0: port 3(hsr0) entered blocking state [ 953.936876][T18971] bridge0: port 3(hsr0) entered disabled state [ 953.946399][T18971] bridge0: port 3(hsr0) entered blocking state [ 953.952767][T18971] bridge0: port 3(hsr0) entered forwarding state [ 954.103122][T18978] netlink: 'syz.0.4228': attribute type 3 has an invalid length. [ 954.111421][T18975] netlink: 'syz.1.4227': attribute type 9 has an invalid length. [ 954.159247][T18975] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4227'. [ 954.180220][T18978] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4228'. [ 955.325468][T19016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 955.586349][T19023] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4238'. [ 955.918067][T19036] netlink: 'syz.2.4245': attribute type 3 has an invalid length. [ 955.926386][T19036] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4245'. [ 956.081634][T19029] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4238'. [ 956.393509][T19044] FAULT_INJECTION: forcing a failure. [ 956.393509][T19044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.428989][T19044] CPU: 0 PID: 19044 Comm: syz.0.4247 Not tainted syzkaller #0 [ 956.436532][T19044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.446638][T19044] Call Trace: [ 956.449960][T19044] [ 956.452937][T19044] dump_stack_lvl+0x188/0x24e [ 956.457676][T19044] ? show_regs_print_info+0x12/0x12 [ 956.463063][T19044] ? load_image+0x410/0x410 [ 956.467659][T19044] ? __lock_acquire+0x7c40/0x7c40 [ 956.472758][T19044] should_fail_ex+0x390/0x4c0 [ 956.477524][T19044] _copy_from_user+0x2c/0x170 [ 956.482250][T19044] __sys_bpf+0x2ea/0x780 [ 956.486548][T19044] ? bpf_link_show_fdinfo+0x380/0x380 [ 956.491956][T19044] ? lock_chain_count+0x20/0x20 [ 956.496833][T19044] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 956.502846][T19044] __x64_sys_bpf+0x78/0x90 [ 956.507298][T19044] do_syscall_64+0x4c/0xa0 [ 956.511751][T19044] ? clear_bhb_loop+0x60/0xb0 [ 956.516468][T19044] ? clear_bhb_loop+0x60/0xb0 [ 956.521203][T19044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.527139][T19044] RIP: 0033:0x7f036d59e159 [ 956.531598][T19044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.551233][T19044] RSP: 002b:00007f036e502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 956.559675][T19044] RAX: ffffffffffffffda RBX: 00007f036d825fa0 RCX: 00007f036d59e159 [ 956.567682][T19044] RDX: 000000000000000c RSI: 0000200000000300 RDI: 0000000000000009 [ 956.575699][T19044] RBP: 00007f036e502090 R08: 0000000000000000 R09: 0000000000000000 [ 956.583710][T19044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.591732][T19044] R13: 00007f036d826038 R14: 00007f036d825fa0 R15: 00007ffdbcf0b868 [ 956.599757][T19044] [ 956.747497][T19054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 956.754903][T19054] IPv6: NLM_F_CREATE should be set when creating new route [ 956.762219][T19054] IPv6: NLM_F_CREATE should be set when creating new route [ 956.769514][T19054] IPv6: NLM_F_CREATE should be set when creating new route [ 956.953355][T19058] netlink: 'syz.4.4251': attribute type 10 has an invalid length. [ 957.252656][T19065] netlink: 'syz.0.4255': attribute type 9 has an invalid length. [ 957.418835][T19065] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4255'. [ 957.920816][T19077] netlink: 'syz.2.4259': attribute type 3 has an invalid length. [ 957.928641][T19077] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4259'. [ 958.091857][T19065] netlink: 'syz.0.4255': attribute type 10 has an invalid length. [ 958.107023][T19065] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4255'. [ 958.662317][T19089] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4261'. [ 958.749400][T19091] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4261'. [ 959.292023][T19104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 959.352356][T19103] FAULT_INJECTION: forcing a failure. [ 959.352356][T19103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.393461][T19103] CPU: 0 PID: 19103 Comm: syz.2.4266 Not tainted syzkaller #0 [ 959.401017][T19103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 959.411120][T19103] Call Trace: [ 959.414442][T19103] [ 959.417421][T19103] dump_stack_lvl+0x188/0x24e [ 959.422209][T19103] ? show_regs_print_info+0x12/0x12 [ 959.427483][T19103] ? load_image+0x410/0x410 [ 959.432066][T19103] ? __lock_acquire+0x7c40/0x7c40 [ 959.437147][T19103] ? snprintf+0xe5/0x140 [ 959.441439][T19103] should_fail_ex+0x390/0x4c0 [ 959.446167][T19103] _copy_to_user+0x2c/0x130 [ 959.450706][T19103] simple_read_from_buffer+0xe3/0x150 [ 959.456115][T19103] proc_fail_nth_read+0x1a6/0x220 [ 959.461183][T19103] ? proc_fault_inject_write+0x310/0x310 [ 959.466858][T19103] ? fsnotify_perm+0x248/0x550 [ 959.471649][T19103] ? proc_fault_inject_write+0x310/0x310 [ 959.477337][T19103] vfs_read+0x2db/0x960 [ 959.481546][T19103] ? kernel_read+0x1e0/0x1e0 [ 959.486181][T19103] ? __fget_files+0x28/0x460 [ 959.490812][T19103] ? __fget_files+0x3fc/0x460 [ 959.495531][T19103] ? __fdget_pos+0x2ae/0x360 [ 959.500167][T19103] ? ksys_read+0x70/0x260 [ 959.504554][T19103] ksys_read+0x14d/0x260 [ 959.508846][T19103] ? vfs_write+0x9a0/0x9a0 [ 959.513307][T19103] ? syscall_enter_from_user_mode+0x2a/0x80 [ 959.519248][T19103] do_syscall_64+0x4c/0xa0 [ 959.523708][T19103] ? clear_bhb_loop+0x60/0xb0 [ 959.528416][T19103] ? clear_bhb_loop+0x60/0xb0 [ 959.533138][T19103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 959.539063][T19103] RIP: 0033:0x7f9b7dd5e98e [ 959.543500][T19103] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 959.563132][T19103] RSP: 002b:00007f9b7ebc7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 959.571578][T19103] RAX: ffffffffffffffda RBX: 00007f9b7ebc86c0 RCX: 00007f9b7dd5e98e [ 959.579572][T19103] RDX: 000000000000000f RSI: 00007f9b7ebc80a0 RDI: 0000000000000009 [ 959.587580][T19103] RBP: 00007f9b7ebc8090 R08: 0000000000000000 R09: 0000000000000000 [ 959.595583][T19103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.603580][T19103] R13: 00007f9b7e026038 R14: 00007f9b7e025fa0 R15: 00007fff9978cd48 [ 959.611596][T19103] [ 960.014918][T19114] netlink: 61787 bytes leftover after parsing attributes in process `syz.4.4271'. [ 960.093221][T19114] netlink: 'syz.4.4271': attribute type 10 has an invalid length. [ 960.114673][T19114] netlink: 'syz.4.4271': attribute type 19 has an invalid length. [ 960.136543][T19114] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.4271'. [ 960.138140][T19118] netlink: 'syz.3.4272': attribute type 3 has an invalid length. [ 960.169371][T19118] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4272'. [ 960.753958][T19131] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4276'. [ 960.836513][T19134] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4276'. [ 960.870917][T19132] netlink: 'syz.1.4274': attribute type 9 has an invalid length. [ 961.014230][T19132] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4274'. [ 961.099838][T19136] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4277'. [ 961.191578][T19132] netlink: 'syz.1.4274': attribute type 10 has an invalid length. [ 961.399324][T19145] netlink: 'syz.0.4279': attribute type 29 has an invalid length. [ 961.635215][T19140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 961.647486][T19145] netlink: 'syz.0.4279': attribute type 29 has an invalid length. [ 962.236507][T19166] device syzkaller0 entered promiscuous mode [ 964.441787][T14575] Bluetooth: hci5: command 0x0406 tx timeout [ 965.151944][T19193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 965.432282][T19201] validate_nla: 1 callbacks suppressed [ 965.432302][T19201] netlink: 'syz.4.4298': attribute type 21 has an invalid length. [ 965.508961][T19201] __nla_validate_parse: 3 callbacks suppressed [ 965.508980][T19201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4298'. [ 965.516213][T19204] netlink: 'syz.3.4300': attribute type 9 has an invalid length. [ 965.568354][T19209] netlink: 'syz.2.4301': attribute type 3 has an invalid length. [ 965.576798][T19204] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4300'. [ 965.586902][T19209] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4301'. [ 965.661245][T19204] netlink: 'syz.3.4300': attribute type 10 has an invalid length. [ 965.689576][T19204] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4300'. [ 967.038496][T19204] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 967.199812][T19204] batman_adv: batadv0: Removing interface: virt_wifi0 [ 967.842652][T19241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 967.916934][T19239] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.4307'. [ 968.366401][T19254] netlink: 63595 bytes leftover after parsing attributes in process `syz.4.4313'. [ 968.564135][T19256] netlink: 'syz.1.4314': attribute type 3 has an invalid length. [ 968.652128][T19256] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4314'. [ 968.691336][T19249] device syzkaller0 entered promiscuous mode [ 972.570087][T19276] device syzkaller0 entered promiscuous mode [ 972.577852][T19296] netlink: 'syz.3.4327': attribute type 10 has an invalid length. [ 972.627058][T19296] team0: Port device wlan1 added [ 972.675282][T19304] netlink: 'syz.2.4329': attribute type 3 has an invalid length. [ 972.690126][T19304] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4329'. [ 974.768833][T19310] netlink: 'syz.4.4330': attribute type 27 has an invalid length. [ 975.199429][T19327] netlink: 'syz.1.4336': attribute type 9 has an invalid length. [ 975.699796][T19338] netlink: 'syz.4.4340': attribute type 3 has an invalid length. [ 975.778306][T19338] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4340'. [ 976.343673][T19345] IPv6: NLM_F_CREATE should be specified when creating new route [ 976.367602][T19345] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4341'. [ 976.400530][T19348] netlink: 'syz.1.4343': attribute type 3 has an invalid length. [ 976.408532][T19348] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4343'. [ 976.821367][T19355] netlink: 'syz.3.4344': attribute type 10 has an invalid length. [ 976.893638][T19355] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.926704][T19355] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.015912][T19355] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 977.968084][T19389] netlink: 'syz.1.4356': attribute type 3 has an invalid length. [ 977.983260][T19389] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4356'. [ 978.522665][T19398] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4358'. [ 978.576693][T12923] tipc: Subscription rejected, illegal request [ 978.591756][T19402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 978.656927][T19394] tap0: tun_chr_ioctl cmd 35111 [ 978.685273][T19401] netlink: 'syz.0.4361': attribute type 10 has an invalid length. [ 978.956191][T19401] device veth0_vlan left promiscuous mode [ 979.022500][T19401] device veth0_vlan entered promiscuous mode [ 979.082065][T19401] team0: Device veth0_vlan failed to register rx_handler [ 979.396893][T19420] FAULT_INJECTION: forcing a failure. [ 979.396893][T19420] name failslab, interval 1, probability 0, space 0, times 0 [ 979.458369][T19420] CPU: 1 PID: 19420 Comm: syz.1.4364 Not tainted syzkaller #0 [ 979.465940][T19420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 979.476050][T19420] Call Trace: [ 979.479367][T19420] [ 979.482338][T19420] dump_stack_lvl+0x188/0x24e [ 979.487077][T19420] ? show_regs_print_info+0x12/0x12 [ 979.492331][T19420] ? load_image+0x410/0x410 [ 979.496886][T19420] ? __might_sleep+0xd0/0xd0 [ 979.501531][T19420] ? __lock_acquire+0x7c40/0x7c40 [ 979.506627][T19420] should_fail_ex+0x390/0x4c0 [ 979.511455][T19420] should_failslab+0x5/0x20 [ 979.516008][T19420] slab_pre_alloc_hook+0x59/0x300 [ 979.521085][T19420] ? __lock_acquire+0x138a/0x7c40 [ 979.526182][T19420] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 979.532037][T19420] __kmem_cache_alloc_node+0x4f/0x270 [ 979.537468][T19420] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 979.543288][T19420] __kmalloc+0xa3/0x240 [ 979.547507][T19420] tomoyo_realpath_from_path+0xe2/0x5c0 [ 979.553117][T19420] ? tomoyo_domain+0xd2/0x120 [ 979.557858][T19420] ? tomoyo_path_number_perm+0x205/0x650 [ 979.563584][T19420] tomoyo_path_number_perm+0x22f/0x650 [ 979.569095][T19420] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 979.574603][T19420] ? ksys_write+0x1ce/0x260 [ 979.579165][T19420] ? common_file_perm+0x171/0x1c0 [ 979.584284][T19420] ? __fget_files+0x28/0x460 [ 979.588942][T19420] security_file_ioctl+0x6c/0xa0 [ 979.593941][T19420] __se_sys_ioctl+0x48/0x170 [ 979.598664][T19420] do_syscall_64+0x4c/0xa0 [ 979.603166][T19420] ? clear_bhb_loop+0x60/0xb0 [ 979.607909][T19420] ? clear_bhb_loop+0x60/0xb0 [ 979.612650][T19420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 979.618612][T19420] RIP: 0033:0x7f54a8b9e159 [ 979.623080][T19420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.642755][T19420] RSP: 002b:00007f54a9b2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 979.651233][T19420] RAX: ffffffffffffffda RBX: 00007f54a8e25fa0 RCX: 00007f54a8b9e159 [ 979.659288][T19420] RDX: 0000200000000400 RSI: 0000000000008946 RDI: 0000000000000004 [ 979.667309][T19420] RBP: 00007f54a9b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 979.675326][T19420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.683343][T19420] R13: 00007f54a8e26038 R14: 00007f54a8e25fa0 R15: 00007ffc3fce0ec8 [ 979.691383][T19420] [ 979.814399][T19420] ERROR: Out of memory at tomoyo_realpath_from_path. [ 980.313096][T19446] netlink: 'syz.3.4370': attribute type 3 has an invalid length. [ 980.371052][T19446] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4370'. [ 981.161434][T19454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 982.718004][T19478] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4377'. [ 982.887089][T19478] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 983.099858][T19493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 983.443776][T19497] netlink: 'syz.3.4385': attribute type 3 has an invalid length. [ 983.481329][T19497] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4385'. [ 983.899699][T19511] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 987.026411][T19539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 988.820927][T14575] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 989.799567][T19585] netlink: 'syz.1.4404': attribute type 10 has an invalid length. [ 989.921236][T19585] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.951608][T19585] device bridge_slave_1 left promiscuous mode [ 989.957924][T19585] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.096927][T19585] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 990.978162][T19597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 991.396447][T19619] IPv6: Can't replace route, no match found [ 992.796929][T19647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 993.081326][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.087694][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.759801][T19665] netlink: 'syz.3.4430': attribute type 9 has an invalid length. [ 993.830077][T19665] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4430'. [ 994.330303][T19676] netlink: 63579 bytes leftover after parsing attributes in process `syz.4.4434'. [ 994.613458][T19682] netlink: 'syz.0.4436': attribute type 3 has an invalid length. [ 994.711184][T19682] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4436'. [ 994.805455][T19682] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4436'. [ 995.329749][T19694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 995.812714][T19700] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4441'. [ 995.843345][T19700] : port 1(ip6gretap0) entered blocking state [ 995.851271][T19700] : port 1(ip6gretap0) entered disabled state [ 995.865596][T19700] device ip6gretap0 entered promiscuous mode [ 997.040358][T19722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 997.266847][T19726] device syzkaller0 entered promiscuous mode [ 1001.493859][T19779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1001.526012][T19783] netlink: 'syz.0.4465': attribute type 3 has an invalid length. [ 1001.560094][T19783] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4465'. [ 1001.635553][T19787] FAULT_INJECTION: forcing a failure. [ 1001.635553][T19787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.675547][T19787] CPU: 0 PID: 19787 Comm: syz.1.4466 Not tainted syzkaller #0 [ 1001.683085][T19787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.693189][T19787] Call Trace: [ 1001.696517][T19787] [ 1001.699492][T19787] dump_stack_lvl+0x188/0x24e [ 1001.704224][T19787] ? show_regs_print_info+0x12/0x12 [ 1001.709477][T19787] ? load_image+0x410/0x410 [ 1001.714037][T19787] ? __lock_acquire+0x7c40/0x7c40 [ 1001.719133][T19787] should_fail_ex+0x390/0x4c0 [ 1001.723870][T19787] _copy_from_user+0x2c/0x170 [ 1001.728605][T19787] ___sys_sendmsg+0x1c3/0x360 [ 1001.733345][T19787] ? __sys_sendmsg+0x2a0/0x2a0 [ 1001.738254][T19787] ? __lock_acquire+0x7c40/0x7c40 [ 1001.743388][T19787] __se_sys_sendmsg+0x1c3/0x2b0 [ 1001.748293][T19787] ? __x64_sys_sendmsg+0x80/0x80 [ 1001.753311][T19787] ? lockdep_hardirqs_on+0x94/0x140 [ 1001.758564][T19787] do_syscall_64+0x4c/0xa0 [ 1001.763048][T19787] ? clear_bhb_loop+0x60/0xb0 [ 1001.767867][T19787] ? clear_bhb_loop+0x60/0xb0 [ 1001.772597][T19787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.778529][T19787] RIP: 0033:0x7f54a8b9e159 [ 1001.782983][T19787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.802628][T19787] RSP: 002b:00007f54a9b2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.811098][T19787] RAX: ffffffffffffffda RBX: 00007f54a8e25fa0 RCX: 00007f54a8b9e159 [ 1001.819115][T19787] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1001.827126][T19787] RBP: 00007f54a9b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.835137][T19787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.843154][T19787] R13: 00007f54a8e26038 R14: 00007f54a8e25fa0 R15: 00007ffc3fce0ec8 [ 1001.851185][T19787] [ 1002.866567][T19816] device syzkaller0 entered promiscuous mode [ 1002.934646][T19823] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1004.996184][T19814] netlink: 'syz.4.4472': attribute type 10 has an invalid length. [ 1005.004538][T19814] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4472'. [ 1005.014980][T19814] net_ratelimit: 283 callbacks suppressed [ 1005.014994][T19814] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1005.055103][T19827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1005.142320][T19834] device batadv_slave_0 entered promiscuous mode [ 1005.353820][T19843] netlink: 'syz.3.4482': attribute type 3 has an invalid length. [ 1005.388894][T19843] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4482'. [ 1006.017592][T19867] device syzkaller0 entered promiscuous mode [ 1008.091280][T19897] netlink: 'syz.3.4498': attribute type 3 has an invalid length. [ 1008.099745][T19897] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4498'. [ 1008.965173][T19879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1008.972521][T19879] IPv6: NLM_F_CREATE should be set when creating new route [ 1008.979868][T19879] IPv6: NLM_F_CREATE should be set when creating new route [ 1008.987137][T19879] IPv6: NLM_F_CREATE should be set when creating new route [ 1009.553495][T19906] netlink: 'syz.4.4502': attribute type 10 has an invalid length. [ 1009.702721][T19906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4502'. [ 1009.760614][T19906] bridge0: port 5(veth0_vlan) entered blocking state [ 1009.773805][T19915] FAULT_INJECTION: forcing a failure. [ 1009.773805][T19915] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.840399][T19906] bridge0: port 5(veth0_vlan) entered disabled state [ 1009.857562][T19915] CPU: 1 PID: 19915 Comm: syz.2.4505 Not tainted syzkaller #0 [ 1009.865094][T19915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1009.875194][T19915] Call Trace: [ 1009.878509][T19915] [ 1009.881514][T19915] dump_stack_lvl+0x188/0x24e [ 1009.886259][T19915] ? show_regs_print_info+0x12/0x12 [ 1009.891550][T19915] ? load_image+0x410/0x410 [ 1009.896116][T19915] ? __might_sleep+0xd0/0xd0 [ 1009.900757][T19915] ? __lock_acquire+0x7c40/0x7c40 [ 1009.905847][T19915] ? verify_lock_unused+0x140/0x140 [ 1009.911148][T19915] should_fail_ex+0x390/0x4c0 [ 1009.915901][T19915] should_failslab+0x5/0x20 [ 1009.920448][T19915] slab_pre_alloc_hook+0x59/0x300 [ 1009.925525][T19915] ? __get_vm_area_node+0x122/0x330 [ 1009.930795][T19915] __kmem_cache_alloc_node+0x4f/0x270 [ 1009.936228][T19915] ? __get_vm_area_node+0x122/0x330 [ 1009.941505][T19915] kmalloc_node_trace+0x22/0xe0 [ 1009.946427][T19915] __get_vm_area_node+0x122/0x330 [ 1009.951518][T19915] ? __local_bh_enable_ip+0x136/0x1c0 [ 1009.956954][T19915] __vmalloc_node_range+0x357/0x1380 [ 1009.962334][T19915] ? netlink_sendmsg+0x5ec/0xbd0 [ 1009.967340][T19915] ? netlink_insert+0x28d/0x13b0 [ 1009.972347][T19915] ? free_vm_area+0x50/0x50 [ 1009.976916][T19915] ? netlink_sendmsg+0x5ec/0xbd0 [ 1009.981906][T19915] vmalloc+0x75/0x80 [ 1009.985880][T19915] ? netlink_sendmsg+0x5ec/0xbd0 [ 1009.990873][T19915] netlink_sendmsg+0x5ec/0xbd0 [ 1009.995710][T19915] ? netlink_getsockopt+0x550/0x550 [ 1010.000980][T19915] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1010.006596][T19915] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1010.011950][T19915] ? security_socket_sendmsg+0x7c/0xa0 [ 1010.017456][T19915] ? netlink_getsockopt+0x550/0x550 [ 1010.022697][T19915] ____sys_sendmsg+0x5ed/0x9a0 [ 1010.027526][T19915] ? __sys_sendmsg_sock+0x30/0x30 [ 1010.032618][T19915] ? __import_iovec+0x306/0x510 [ 1010.037537][T19915] ? import_iovec+0x6f/0xa0 [ 1010.042114][T19915] ___sys_sendmsg+0x2a2/0x360 [ 1010.046858][T19915] ? __sys_sendmsg+0x2a0/0x2a0 [ 1010.051710][T19915] ? __lock_acquire+0x7c40/0x7c40 [ 1010.056825][T19915] __se_sys_sendmsg+0x1c3/0x2b0 [ 1010.061741][T19915] ? __x64_sys_sendmsg+0x80/0x80 [ 1010.066762][T19915] ? lockdep_hardirqs_on+0x94/0x140 [ 1010.072043][T19915] do_syscall_64+0x4c/0xa0 [ 1010.076524][T19915] ? clear_bhb_loop+0x60/0xb0 [ 1010.081263][T19915] ? clear_bhb_loop+0x60/0xb0 [ 1010.086008][T19915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1010.091969][T19915] RIP: 0033:0x7f9b7dd9e159 [ 1010.096439][T19915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.116103][T19915] RSP: 002b:00007f9b7ebc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.124575][T19915] RAX: ffffffffffffffda RBX: 00007f9b7e025fa0 RCX: 00007f9b7dd9e159 [ 1010.132603][T19915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1010.140738][T19915] RBP: 00007f9b7ebc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.148753][T19915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.156774][T19915] R13: 00007f9b7e026038 R14: 00007f9b7e025fa0 R15: 00007fff9978cd48 [ 1010.164824][T19915] [ 1010.212686][T19906] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1010.259152][T19915] syz.2.4505: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1010.306839][T19915] CPU: 0 PID: 19915 Comm: syz.2.4505 Not tainted syzkaller #0 [ 1010.314388][T19915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1010.324496][T19915] Call Trace: [ 1010.327862][T19915] [ 1010.330839][T19915] dump_stack_lvl+0x188/0x24e [ 1010.335580][T19915] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1010.342052][T19915] ? show_regs_print_info+0x12/0x12 [ 1010.347315][T19915] ? load_image+0x410/0x410 [ 1010.351875][T19915] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1010.358351][T19915] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1010.364905][T19915] warn_alloc+0x242/0x330 [ 1010.369314][T19915] ? __get_vm_area_node+0x122/0x330 [ 1010.374560][T19915] ? zone_watermark_ok_safe+0x270/0x270 [ 1010.380177][T19915] ? rcu_is_watching+0x11/0xa0 [ 1010.385011][T19915] ? __get_vm_area_node+0x318/0x330 [ 1010.390265][T19915] ? __local_bh_enable_ip+0x136/0x1c0 [ 1010.395695][T19915] __vmalloc_node_range+0x37c/0x1380 [ 1010.401069][T19915] ? netlink_insert+0x28d/0x13b0 [ 1010.406080][T19915] ? free_vm_area+0x50/0x50 [ 1010.410652][T19915] ? netlink_sendmsg+0x5ec/0xbd0 [ 1010.415638][T19915] vmalloc+0x75/0x80 [ 1010.419581][T19915] ? netlink_sendmsg+0x5ec/0xbd0 [ 1010.424573][T19915] netlink_sendmsg+0x5ec/0xbd0 [ 1010.429395][T19915] ? netlink_getsockopt+0x550/0x550 [ 1010.434644][T19915] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1010.440250][T19915] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1010.445584][T19915] ? security_socket_sendmsg+0x7c/0xa0 [ 1010.451127][T19915] ? netlink_getsockopt+0x550/0x550 [ 1010.456379][T19915] ____sys_sendmsg+0x5ed/0x9a0 [ 1010.461216][T19915] ? __sys_sendmsg_sock+0x30/0x30 [ 1010.466295][T19915] ? __import_iovec+0x306/0x510 [ 1010.471214][T19915] ? import_iovec+0x6f/0xa0 [ 1010.475800][T19915] ___sys_sendmsg+0x2a2/0x360 [ 1010.480547][T19915] ? __sys_sendmsg+0x2a0/0x2a0 [ 1010.485402][T19915] ? __lock_acquire+0x7c40/0x7c40 [ 1010.490514][T19915] __se_sys_sendmsg+0x1c3/0x2b0 [ 1010.495439][T19915] ? __x64_sys_sendmsg+0x80/0x80 [ 1010.500490][T19915] ? lockdep_hardirqs_on+0x94/0x140 [ 1010.505749][T19915] do_syscall_64+0x4c/0xa0 [ 1010.510219][T19915] ? clear_bhb_loop+0x60/0xb0 [ 1010.514947][T19915] ? clear_bhb_loop+0x60/0xb0 [ 1010.519692][T19915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1010.525628][T19915] RIP: 0033:0x7f9b7dd9e159 [ 1010.530088][T19915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.549744][T19915] RSP: 002b:00007f9b7ebc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.558216][T19915] RAX: ffffffffffffffda RBX: 00007f9b7e025fa0 RCX: 00007f9b7dd9e159 [ 1010.566235][T19915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1010.574276][T19915] RBP: 00007f9b7ebc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.582317][T19915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.590378][T19915] R13: 00007f9b7e026038 R14: 00007f9b7e025fa0 R15: 00007fff9978cd48 [ 1010.598419][T19915] [ 1010.794201][T19915] Mem-Info: [ 1010.797704][T19915] active_anon:8243 inactive_anon:2 isolated_anon:0 [ 1010.797704][T19915] active_file:20363 inactive_file:30460 isolated_file:0 [ 1010.797704][T19915] unevictable:768 dirty:255 writeback:0 [ 1010.797704][T19915] slab_reclaimable:18922 slab_unreclaimable:97917 [ 1010.797704][T19915] mapped:30023 shmem:1361 pagetables:594 [ 1010.797704][T19915] sec_pagetables:0 bounce:0 [ 1010.797704][T19915] kernel_misc_reclaimable:0 [ 1010.797704][T19915] free:1318175 free_pcp:14911 free_cma:0 [ 1010.850791][T19926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1010.861428][T19915] Node 0 active_anon:32872kB inactive_anon:8kB active_file:81452kB inactive_file:121640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120092kB dirty:1020kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10528kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no [ 1010.999345][T19915] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1011.159785][T19931] device syzkaller0 entered promiscuous mode [ 1011.182719][T19915] Node 0 DMA free:15156kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:204kB local_pcp:92kB free_cma:0kB [ 1011.269424][T19915] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1011.275313][T19915] Node 0 DMA32 free:1371516kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:33228kB inactive_anon:8kB active_file:81452kB inactive_file:121640kB unevictable:1536kB writepending:228kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:14228kB local_pcp:4080kB free_cma:0kB [ 1011.318396][T19915] lowmem_reserve[]: 0 0 1 1 1 [ 1011.338796][T19915] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1011.406680][T19915] lowmem_reserve[]: 0 0 0 0 0 [ 1011.413001][T19915] Node 1 Normal free:3879968kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:38424kB local_pcp:18184kB free_cma:0kB [ 1011.446110][T19915] lowmem_reserve[]: 0 0 0 0 0 [ 1011.458151][T19915] Node 0 DMA: 11*4kB (UM) 9*8kB (UM) 10*16kB (UM) 11*32kB (UM) 7*64kB (UM) 10*128kB (UM) 6*256kB (UM) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 0*4096kB = 15156kB [ 1011.537837][T19915] Node 0 DMA32: 675*4kB (UME) 1006*8kB (UME) 512*16kB (UME) 160*32kB (UME) 1688*64kB (UME) 1535*128kB (UME) 860*256kB (UME) 621*512kB (UME) 433*1024kB (UME) 20*2048kB (UM) 5*4096kB (M) = 1371516kB [ 1011.608429][T19915] Node 0 Normal: 1*4kB (U) 3*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 1011.627615][T19915] Node 1 Normal: 218*4kB (UME) 53*8kB (UE) 23*16kB (UME) 205*32kB (UME) 74*64kB (UME) 31*128kB (UME) 14*256kB (UME) 4*512kB (UM) 1*1024kB (E) 11*2048kB (UE) 936*4096kB (UM) = 3879968kB [ 1011.666913][T19915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1011.678202][T19915] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1011.702812][T19915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1011.736363][T19915] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1011.758274][T19915] 52184 total pagecache pages [ 1011.765688][T19915] 0 pages in swap cache [ 1011.775583][T19915] Free swap = 124996kB [ 1011.797610][T19915] Total swap = 124996kB [ 1011.807495][T19915] 2097051 pages RAM [ 1011.817878][T19915] 0 pages HighMem/MovableOnly [ 1011.826739][T19915] 415223 pages reserved [ 1011.862261][T19915] 0 pages cma reserved [ 1014.136362][T19953] netlink: 'syz.3.4519': attribute type 21 has an invalid length. [ 1014.195767][T19960] device macvlan0 entered promiscuous mode [ 1014.311539][T19955] netlink: 'syz.1.4520': attribute type 3 has an invalid length. [ 1014.499843][T19959] device syzkaller0 entered promiscuous mode [ 1014.562996][T19955] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4520'. [ 1018.103942][T19972] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4523'. [ 1018.113587][T19975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1018.523681][T19995] netlink: 'syz.3.4528': attribute type 27 has an invalid length. [ 1018.585274][T19995] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4528'. [ 1018.703662][T19995] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1021.674645][T20017] netlink: 'syz.4.4535': attribute type 3 has an invalid length. [ 1021.722709][T20017] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4535'. [ 1022.335715][T20035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1024.824461][T20045] netlink: 'syz.0.4544': attribute type 10 has an invalid length. [ 1024.926631][T20045] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1025.173960][T20052] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4542'. [ 1025.214320][T20052] bond0: (slave bond_slave_0): Releasing backup interface [ 1025.234720][T20052] device bond_slave_0 left promiscuous mode [ 1025.260190][T20058] netlink: 'syz.4.4542': attribute type 3 has an invalid length. [ 1025.279831][T20058] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4542'. [ 1025.355120][T20052] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1026.089691][T20127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1026.430891][T20132] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4552'. [ 1027.326969][T20160] netlink: 'syz.4.4560': attribute type 3 has an invalid length. [ 1027.359004][T20160] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4560'. [ 1027.391440][T20162] netlink: 'syz.3.4563': attribute type 21 has an invalid length. [ 1027.411885][T20162] netlink: 'syz.3.4563': attribute type 1 has an invalid length. [ 1027.425530][T20162] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4563'. [ 1027.525572][T20160] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 1027.545590][T20160] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 1027.767149][T20169] netlink: 'syz.0.4562': attribute type 27 has an invalid length. [ 1027.790463][T20169] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4562'. [ 1027.864526][T20169] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1030.109875][T20182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1033.489787][T20194] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4570'. [ 1033.852329][T20209] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1033.882501][T20208] netlink: 63775 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1034.059234][T20214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1034.253303][T20221] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.4582'. [ 1034.302242][T20222] netlink: 'syz.0.4582': attribute type 21 has an invalid length. [ 1034.363925][T20221] netlink: 'syz.0.4582': attribute type 21 has an invalid length. [ 1035.570378][T20237] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4585'. [ 1035.759192][T20242] netlink: 'syz.1.4587': attribute type 3 has an invalid length. [ 1035.846959][T20242] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4587'. [ 1036.393277][T20261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1037.030145][T20284] netlink: 'syz.3.4600': attribute type 3 has an invalid length. [ 1037.037951][T20284] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4600'. [ 1037.495878][T20291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.518817][T20294] netlink: 'syz.4.4604': attribute type 2 has an invalid length. [ 1037.526867][T20294] netlink: 'syz.4.4604': attribute type 1 has an invalid length. [ 1037.535113][T20294] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.4604'. [ 1037.786177][T20302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1037.942164][T20307] netlink: 'syz.2.4608': attribute type 3 has an invalid length. [ 1037.966315][T20307] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4608'. [ 1038.054385][T20307] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 1038.099316][T20307] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 1039.651361][T20344] netlink: 'syz.0.4618': attribute type 3 has an invalid length. [ 1039.679135][T20344] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4618'. [ 1039.771268][T20349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1040.045396][T20359] device syzkaller0 entered promiscuous mode [ 1043.375689][T20386] netlink: 'syz.1.4633': attribute type 3 has an invalid length. [ 1043.384767][T20386] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1043.451598][T20384] netlink: 'syz.2.4631': attribute type 3 has an invalid length. [ 1043.473657][T20384] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4631'. [ 1045.475402][T20382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1045.910713][T20404] netlink: 'syz.1.4640': attribute type 10 has an invalid length. [ 1046.437372][T20404] team0: Port device geneve1 added [ 1046.469176][T20416] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.4646'. [ 1046.497259][T20417] netlink: 'syz.0.4646': attribute type 10 has an invalid length. [ 1047.205132][T20423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1047.225527][T20422] netlink: 'syz.2.4648': attribute type 3 has an invalid length. [ 1047.246199][T20422] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4648'. [ 1047.499448][T20431] device syzkaller0 entered promiscuous mode [ 1047.680045][T20441] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4655'. [ 1050.754501][T20441] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1050.785621][T20472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1051.059450][T20481] netlink: 'syz.3.4664': attribute type 1 has an invalid length. [ 1051.080301][T20481] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.4664'. [ 1051.840415][T20489] bridge0: port 3(hsr0) entered disabled state [ 1051.846852][T20489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.402747][T20505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1054.521732][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.528448][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.572265][T20522] netlink: 'syz.2.4679': attribute type 3 has an invalid length. [ 1054.658856][T20522] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4679'. [ 1055.004392][T20536] netlink: 'syz.2.4685': attribute type 3 has an invalid length. [ 1055.033523][T20536] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4685'. [ 1057.832039][T20586] netlink: 'syz.1.4701': attribute type 3 has an invalid length. [ 1057.938950][T20586] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4701'. [ 1058.443144][T20600] netlink: 'syz.4.4705': attribute type 3 has an invalid length. [ 1058.550153][T20600] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4705'. [ 1058.845802][T20588] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1058.855122][T20588] syzkaller1: linktype set to 825 [ 1059.367880][T20611] device syzkaller0 entered promiscuous mode [ 1063.577868][T20653] netlink: 'syz.3.4722': attribute type 29 has an invalid length. [ 1063.677775][T20653] netlink: 'syz.3.4722': attribute type 29 has an invalid length. [ 1063.856742][T20665] netlink: 'syz.1.4725': attribute type 3 has an invalid length. [ 1063.875387][T20665] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4725'. [ 1065.095081][T20702] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4737'. [ 1065.957824][T20715] netlink: 'syz.1.4742': attribute type 1 has an invalid length. [ 1066.033655][T20715] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.4742'. [ 1066.213097][T20725] netlink: 'syz.3.4746': attribute type 3 has an invalid length. [ 1066.261503][T20725] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1067.001698][T20746] netlink: 'syz.2.4755': attribute type 10 has an invalid length. [ 1067.151022][T20749] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1067.242762][T20748] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1067.856454][T20763] device syzkaller0 entered promiscuous mode [ 1068.544028][T20779] netlink: 'syz.0.4764': attribute type 3 has an invalid length. [ 1068.553064][T20779] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1070.991960][T20772] netlink: 'syz.3.4761': attribute type 21 has an invalid length. [ 1071.006786][T20776] netlink: 'syz.2.4762': attribute type 12 has an invalid length. [ 1071.018950][T20776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4762'. [ 1071.396634][T20799] netlink: 'syz.4.4772': attribute type 21 has an invalid length. [ 1071.476245][T20799] netlink: 'syz.4.4772': attribute type 2 has an invalid length. [ 1071.507764][T20799] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4772'. [ 1071.547696][T20804] netlink: 'syz.4.4772': attribute type 21 has an invalid length. [ 1071.619188][T20804] netlink: 'syz.4.4772': attribute type 2 has an invalid length. [ 1071.627026][T20804] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4772'. [ 1072.089139][T20821] netlink: 'syz.2.4778': attribute type 10 has an invalid length. [ 1072.131369][T20822] netlink: 'syz.2.4778': attribute type 10 has an invalid length. [ 1072.310180][T14575] Bluetooth: hci4: ISO packet for unknown connection handle 7 [ 1072.323048][T20830] netlink: 'syz.4.4780': attribute type 13 has an invalid length. [ 1072.349229][T20830] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.4780'. [ 1072.949498][T20848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1073.821112][T20867] device syzkaller0 entered promiscuous mode [ 1073.863788][ T4320] syzkaller0: tun_net_xmit 48 [ 1073.900832][T20867] syzkaller0: create flow: hash 1399068908 index 1 [ 1074.221221][T20866] syzkaller0: delete flow: hash 1399068908 index 1 [ 1077.945671][T20890] netlink: 'syz.4.4797': attribute type 3 has an invalid length. [ 1077.953619][T20890] netlink: 42732 bytes leftover after parsing attributes in process `syz.4.4797'. [ 1077.963726][T20902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1077.973886][T20914] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4807'. [ 1077.998906][T20918] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1078.258155][T20929] wlan0: mtu less than device minimum [ 1078.300048][T20929] netlink: 'syz.2.4810': attribute type 10 has an invalid length. [ 1079.544058][T20952] netlink: 'syz.4.4818': attribute type 2 has an invalid length. [ 1079.633259][T20952] netlink: 'syz.4.4818': attribute type 8 has an invalid length. [ 1079.648800][T20952] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1079.664187][T20954] netlink: 'syz.4.4818': attribute type 2 has an invalid length. [ 1079.680320][T20954] netlink: 'syz.4.4818': attribute type 8 has an invalid length. [ 1079.701795][T20954] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1079.747562][T20956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1080.376356][T14575] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1080.541336][T20963] netlink: 'syz.3.4822': attribute type 3 has an invalid length. [ 1080.599470][T20963] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4822'. [ 1081.295939][T20981] tap0: tun_chr_ioctl cmd 1074025675 [ 1081.309148][T20981] tap0: persist enabled [ 1081.337298][T20981] tap0: tun_chr_ioctl cmd 1074025675 [ 1081.360806][T20981] tap0: persist disabled [ 1081.501398][T20984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1082.082903][T14575] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 1083.590480][T21028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1084.044055][T14575] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 1084.100325][T21044] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4848'. [ 1085.579609][T21066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1085.767827][T14575] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1086.406086][T21089] netlink: 'syz.2.4870': attribute type 27 has an invalid length. [ 1086.487496][T21091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4870'. [ 1086.728154][T21089] bond0: (slave bond_slave_0): Releasing backup interface [ 1087.007328][T21091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4870'. [ 1087.077824][T21094] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4870'. [ 1087.163034][T21097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1087.195751][T21098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4870'. [ 1088.473396][T21120] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4879'. [ 1088.500942][T21120] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.4879'. [ 1088.555438][T21120] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4879'. [ 1088.718235][T21140] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4879'. [ 1088.737676][T21140] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.4879'. [ 1088.984440][T21148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1090.001042][T21168] netlink: 'syz.1.4891': attribute type 2 has an invalid length. [ 1090.017402][T21168] netlink: 'syz.1.4891': attribute type 1 has an invalid length. [ 1090.026134][T21168] netlink: 'syz.1.4891': attribute type 4 has an invalid length. [ 1090.041504][T21168] __nla_validate_parse: 1 callbacks suppressed [ 1090.041542][T21168] netlink: 208312 bytes leftover after parsing attributes in process `syz.1.4891'. [ 1090.973982][T21191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1091.178147][T21195] netlink: 'syz.4.4901': attribute type 9 has an invalid length. [ 1091.186778][T21195] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4901'. [ 1091.307225][T21195] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.4901'. [ 1091.417551][T21195] netlink: zone id is out of range [ 1091.437662][T21195] netlink: zone id is out of range [ 1092.800881][T14575] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 1092.839896][T21233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1094.972205][T14575] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 1095.072475][T21269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.739798][T14575] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 1096.971834][T21313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1097.986603][T14575] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 1098.146909][T21348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.452605][T21369] netlink: 'syz.2.4961': attribute type 10 has an invalid length. [ 1100.481257][T21369] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4961'. [ 1101.029509][T21382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1101.260284][T21386] netlink: 'syz.3.4968': attribute type 10 has an invalid length. [ 1101.345691][T21386] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1101.377699][T14575] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 1103.071968][T14575] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 1103.081600][T21427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1103.142914][T21426] ================================================================== [ 1103.151066][T21426] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1103.158921][T21426] Write of size 48 at addr ffff88807cb5d090 by task syz.2.4982/21426 [ 1103.167025][T21426] [ 1103.169387][T21426] CPU: 0 PID: 21426 Comm: syz.2.4982 Not tainted syzkaller #0 [ 1103.176890][T21426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1103.186983][T21426] Call Trace: [ 1103.190296][T21426] [ 1103.193264][T21426] dump_stack_lvl+0x188/0x24e [ 1103.198052][T21426] ? __lock_acquire+0x7c40/0x7c40 [ 1103.203136][T21426] ? show_regs_print_info+0x12/0x12 [ 1103.208389][T21426] ? load_image+0x410/0x410 [ 1103.212946][T21426] ? __virt_addr_valid+0x467/0x540 [ 1103.218109][T21426] ? __bpf_get_stackid+0x6c9/0x920 [ 1103.223268][T21426] print_report+0xa8/0x210 [ 1103.227770][T21426] kasan_report+0x10b/0x140 [ 1103.232331][T21426] ? __bpf_get_stackid+0x6c9/0x920 [ 1103.237515][T21426] kasan_check_range+0x235/0x290 [ 1103.242493][T21426] ? __bpf_get_stackid+0x6c9/0x920 [ 1103.247652][T21426] memcpy+0x3c/0x60 [ 1103.251522][T21426] __bpf_get_stackid+0x6c9/0x920 [ 1103.256515][T21426] bpf_get_stackid_pe+0x33f/0x400 [ 1103.261592][T21426] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1103.267091][T21426] bpf_overflow_handler+0x50b/0x790 [ 1103.272368][T21426] ? bpf_overflow_handler+0xd9/0x790 [ 1103.277700][T21426] ? perf_swevent_overflow+0x230/0x230 [ 1103.283293][T21426] ? ct_irq_exit_irqson+0x113/0x170 [ 1103.288533][T21426] ? __lock_acquire+0x7c40/0x7c40 [ 1103.293610][T21426] ? __perf_event_account_interrupt+0x187/0x280 [ 1103.299933][T21426] __perf_event_overflow+0x457/0x630 [ 1103.305272][T21426] perf_swevent_event+0x315/0x570 [ 1103.310347][T21426] ? perf_tp_event+0xc10/0xc10 [ 1103.315161][T21426] ? lock_chain_count+0x20/0x20 [ 1103.320069][T21426] ___perf_sw_event+0x498/0x6d0 [ 1103.324971][T21426] ? ___perf_sw_event+0x184/0x6d0 [ 1103.330057][T21426] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1103.336526][T21426] ? __lock_acquire+0x1465/0x7c40 [ 1103.341615][T21426] ? verify_lock_unused+0x140/0x140 [ 1103.346864][T21426] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1103.352909][T21426] ? schedule+0xd0/0x180 [ 1103.357215][T21426] ? lock_chain_count+0x20/0x20 [ 1103.362125][T21426] __perf_sw_event+0x135/0x260 [ 1103.366970][T21426] do_user_addr_fault+0x497/0xb20 [ 1103.372056][T21426] ? trace_hardirqs_off_finish+0x86/0x180 [ 1103.377824][T21426] exc_page_fault+0x60/0x100 [ 1103.382499][T21426] asm_exc_page_fault+0x22/0x30 [ 1103.387406][T21426] RIP: 0010:__get_user_4+0x1c/0x30 [ 1103.392574][T21426] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 1103.412234][T21426] RSP: 0018:ffffc9000d3efd48 EFLAGS: 00050202 [ 1103.418355][T21426] RAX: 0000000000000004 RBX: ffffc9000d3efe20 RCX: 12203707e2d9ec00 [ 1103.426370][T21426] RDX: ffffffffffffffff RSI: ffffffff8a8c2a20 RDI: ffffffff8adf6420 [ 1103.434383][T21426] RBP: ffffc9000d3eff10 R08: ffffffff8e2116af R09: 1ffffffff1c422d5 [ 1103.442392][T21426] R10: dffffc0000000000 R11: fffffbfff1c422d6 R12: 0000000000000000 [ 1103.450414][T21426] R13: 0000000000000004 R14: dffffc0000000000 R15: 0000000000000000 [ 1103.458437][T21426] perf_copy_attr+0x45/0x840 [ 1103.463077][T21426] __se_sys_perf_event_open+0xf5/0x1ec0 [ 1103.468675][T21426] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1103.474372][T21426] ? lockdep_hardirqs_on+0x94/0x140 [ 1103.479640][T21426] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1103.485348][T21426] do_syscall_64+0x4c/0xa0 [ 1103.489817][T21426] ? clear_bhb_loop+0x60/0xb0 [ 1103.494637][T21426] ? clear_bhb_loop+0x60/0xb0 [ 1103.499372][T21426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1103.505314][T21426] RIP: 0033:0x7f9b7dd9e159 [ 1103.509773][T21426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.529434][T21426] RSP: 002b:00007f9b7ebc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1103.537896][T21426] RAX: ffffffffffffffda RBX: 00007f9b7e025fa0 RCX: 00007f9b7dd9e159 [ 1103.545908][T21426] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 1103.553901][T21426] RBP: 00007f9b7de35024 R08: 0000000000000000 R09: 0000000000000000 [ 1103.561903][T21426] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1103.569920][T21426] R13: 00007f9b7e026038 R14: 00007f9b7e025fa0 R15: 00007fff9978cd48 [ 1103.577967][T21426] [ 1103.581024][T21426] [ 1103.583379][T21426] Allocated by task 21426: [ 1103.587825][T21426] kasan_set_track+0x4b/0x70 [ 1103.592472][T21426] __kasan_kmalloc+0x8e/0xa0 [ 1103.597123][T21426] __kmalloc_node+0xb2/0x240 [ 1103.601776][T21426] bpf_map_area_alloc+0x47/0xe0 [ 1103.606683][T21426] prealloc_elems_and_freelist+0x86/0x1c0 [ 1103.612458][T21426] stack_map_alloc+0x386/0x510 [ 1103.617275][T21426] map_create+0x524/0xff0 [ 1103.621668][T21426] __sys_bpf+0x38b/0x780 [ 1103.625965][T21426] __x64_sys_bpf+0x78/0x90 [ 1103.630448][T21426] do_syscall_64+0x4c/0xa0 [ 1103.634925][T21426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1103.640878][T21426] [ 1103.643235][T21426] The buggy address belongs to the object at ffff88807cb5d080 [ 1103.643235][T21426] which belongs to the cache kmalloc-cg-64 of size 64 [ 1103.657430][T21426] The buggy address is located 16 bytes inside of [ 1103.657430][T21426] 64-byte region [ffff88807cb5d080, ffff88807cb5d0c0) [ 1103.670579][T21426] [ 1103.672939][T21426] The buggy address belongs to the physical page: [ 1103.679397][T21426] page:ffffea0001f2d740 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cb5d [ 1103.689594][T21426] memcg:ffff88807e5a8801 [ 1103.693860][T21426] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1103.701450][T21426] raw: 00fff00000000200 ffffea0001936dc0 dead000000000005 ffff888017442780 [ 1103.710077][T21426] raw: 0000000000000000 0000000000200020 00000001ffffffff ffff88807e5a8801 [ 1103.718700][T21426] page dumped because: kasan: bad access detected [ 1103.725163][T21426] page_owner tracks the page as allocated [ 1103.730918][T21426] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 15600, tgid 15600 (syz-executor), ts 1090735249170, free_ts 1090734871425 [ 1103.749822][T21426] post_alloc_hook+0x173/0x1a0 [ 1103.754650][T21426] get_page_from_freelist+0x206b/0x2180 [ 1103.760334][T21426] __alloc_pages+0x1ec/0x4f0 [ 1103.764992][T21426] alloc_slab_page+0x5d/0x180 [ 1103.769724][T21426] new_slab+0x87/0x2d0 [ 1103.773836][T21426] ___slab_alloc+0xbc5/0x1240 [ 1103.778554][T21426] __kmem_cache_alloc_node+0x126/0x270 [ 1103.784062][T21426] kmalloc_trace+0x26/0xe0 [ 1103.788539][T21426] alloc_fdtable+0xca/0x2c0 [ 1103.793106][T21426] dup_fd+0x743/0xa20 [ 1103.797138][T21426] copy_files+0x72/0xe0 [ 1103.801420][T21426] copy_process+0x180e/0x4070 [ 1103.806141][T21426] kernel_clone+0x24b/0x900 [ 1103.810701][T21426] __x64_sys_clone+0x1a7/0x220 [ 1103.815534][T21426] do_syscall_64+0x4c/0xa0 [ 1103.820015][T21426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1103.825959][T21426] page last free stack trace: [ 1103.830666][T21426] free_unref_page_prepare+0x8e5/0x9e0 [ 1103.836187][T21426] free_unref_page+0x2e/0x3f0 [ 1103.840914][T21426] __vunmap+0x874/0xa40 [ 1103.845117][T21426] do_ip6t_get_ctl+0xea2/0x11c0 [ 1103.850100][T21426] nf_getsockopt+0x25e/0x280 [ 1103.854807][T21426] ipv6_getsockopt+0x22f/0x2e0 [ 1103.859689][T21426] __sys_getsockopt+0x1b0/0x230 [ 1103.864614][T21426] __x64_sys_getsockopt+0xb1/0xc0 [ 1103.869695][T21426] do_syscall_64+0x4c/0xa0 [ 1103.874165][T21426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1103.880138][T21426] [ 1103.882496][T21426] Memory state around the buggy address: [ 1103.888156][T21426] ffff88807cb5cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1103.896267][T21426] ffff88807cb5d000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1103.904370][T21426] >ffff88807cb5d080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1103.912474][T21426] ^ [ 1103.917883][T21426] ffff88807cb5d100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1103.925984][T21426] ffff88807cb5d180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1103.934087][T21426] ================================================================== [ 1103.942196][T21426] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1103.949430][T21426] CPU: 0 PID: 21426 Comm: syz.2.4982 Not tainted syzkaller #0 [ 1103.956931][T21426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1103.967023][T21426] Call Trace: [ 1103.970340][T21426] [ 1103.973308][T21426] dump_stack_lvl+0x188/0x24e [ 1103.978035][T21426] ? memcpy+0x3c/0x60 [ 1103.982053][T21426] ? show_regs_print_info+0x12/0x12 [ 1103.987308][T21426] ? load_image+0x410/0x410 [ 1103.991873][T21426] panic+0x2d3/0x710 [ 1103.995831][T21426] ? bpf_jit_dump+0xd0/0xd0 [ 1104.000379][T21426] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1104.006364][T21426] ? _raw_spin_unlock+0x40/0x40 [ 1104.011278][T21426] ? print_memory_metadata+0x314/0x400 [ 1104.016793][T21426] check_panic_on_warn+0x80/0xa0 [ 1104.021786][T21426] ? __bpf_get_stackid+0x6c9/0x920 [ 1104.026949][T21426] end_report+0x66/0x110 [ 1104.031243][T21426] kasan_report+0x118/0x140 [ 1104.035838][T21426] ? __bpf_get_stackid+0x6c9/0x920 [ 1104.041007][T21426] kasan_check_range+0x235/0x290 [ 1104.045999][T21426] ? __bpf_get_stackid+0x6c9/0x920 [ 1104.051166][T21426] memcpy+0x3c/0x60 [ 1104.055027][T21426] __bpf_get_stackid+0x6c9/0x920 [ 1104.060012][T21426] bpf_get_stackid_pe+0x33f/0x400 [ 1104.065093][T21426] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1104.070598][T21426] bpf_overflow_handler+0x50b/0x790 [ 1104.075853][T21426] ? bpf_overflow_handler+0xd9/0x790 [ 1104.081186][T21426] ? perf_swevent_overflow+0x230/0x230 [ 1104.086685][T21426] ? ct_irq_exit_irqson+0x113/0x170 [ 1104.091947][T21426] ? __lock_acquire+0x7c40/0x7c40 [ 1104.097041][T21426] ? __perf_event_account_interrupt+0x187/0x280 [ 1104.103338][T21426] __perf_event_overflow+0x457/0x630 [ 1104.108690][T21426] perf_swevent_event+0x315/0x570 [ 1104.113772][T21426] ? perf_tp_event+0xc10/0xc10 [ 1104.118613][T21426] ? lock_chain_count+0x20/0x20 [ 1104.123521][T21426] ___perf_sw_event+0x498/0x6d0 [ 1104.128518][T21426] ? ___perf_sw_event+0x184/0x6d0 [ 1104.133597][T21426] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1104.140077][T21426] ? __lock_acquire+0x1465/0x7c40 [ 1104.145174][T21426] ? verify_lock_unused+0x140/0x140 [ 1104.150429][T21426] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1104.156466][T21426] ? schedule+0xd0/0x180 [ 1104.160770][T21426] ? lock_chain_count+0x20/0x20 [ 1104.165690][T21426] __perf_sw_event+0x135/0x260 [ 1104.170544][T21426] do_user_addr_fault+0x497/0xb20 [ 1104.175629][T21426] ? trace_hardirqs_off_finish+0x86/0x180 [ 1104.181406][T21426] exc_page_fault+0x60/0x100 [ 1104.186048][T21426] asm_exc_page_fault+0x22/0x30 [ 1104.190951][T21426] RIP: 0010:__get_user_4+0x1c/0x30 [ 1104.196117][T21426] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 1104.215773][T21426] RSP: 0018:ffffc9000d3efd48 EFLAGS: 00050202 [ 1104.221902][T21426] RAX: 0000000000000004 RBX: ffffc9000d3efe20 RCX: 12203707e2d9ec00 [ 1104.229919][T21426] RDX: ffffffffffffffff RSI: ffffffff8a8c2a20 RDI: ffffffff8adf6420 [ 1104.237953][T21426] RBP: ffffc9000d3eff10 R08: ffffffff8e2116af R09: 1ffffffff1c422d5 [ 1104.245972][T21426] R10: dffffc0000000000 R11: fffffbfff1c422d6 R12: 0000000000000000 [ 1104.253995][T21426] R13: 0000000000000004 R14: dffffc0000000000 R15: 0000000000000000 [ 1104.262036][T21426] perf_copy_attr+0x45/0x840 [ 1104.266675][T21426] __se_sys_perf_event_open+0xf5/0x1ec0 [ 1104.272262][T21426] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1104.277957][T21426] ? lockdep_hardirqs_on+0x94/0x140 [ 1104.283205][T21426] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1104.288895][T21426] do_syscall_64+0x4c/0xa0 [ 1104.293374][T21426] ? clear_bhb_loop+0x60/0xb0 [ 1104.298118][T21426] ? clear_bhb_loop+0x60/0xb0 [ 1104.302853][T21426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1104.308796][T21426] RIP: 0033:0x7f9b7dd9e159 [ 1104.313250][T21426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.332913][T21426] RSP: 002b:00007f9b7ebc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1104.341385][T21426] RAX: ffffffffffffffda RBX: 00007f9b7e025fa0 RCX: 00007f9b7dd9e159 [ 1104.349405][T21426] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 1104.357421][T21426] RBP: 00007f9b7de35024 R08: 0000000000000000 R09: 0000000000000000 [ 1104.365433][T21426] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1104.373443][T21426] R13: 00007f9b7e026038 R14: 00007f9b7e025fa0 R15: 00007fff9978cd48 [ 1104.381462][T21426] [ 1104.385088][T21426] Kernel Offset: disabled [ 1104.389430][T21426] Rebooting in 86400 seconds..