last executing test programs: 2.486368216s ago: executing program 3 (id=3033): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001540)=""/4111, 0x100f}], 0x10}, 0x0) socket$kcm(0x10, 0xc, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000380)="b9ff03076804268c989e14f088a847e089061416e0885a040000000000008100", 0x0, 0x40000001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c6394f90424fc602f1a03000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x6, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93824fc60100c024002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) 2.354675011s ago: executing program 2 (id=3035): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00ffc313006bcd9e3fe3dc6e48aa31086b8703110000001f03100000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.317513912s ago: executing program 2 (id=3038): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$kcm(0xa, 0x1, 0x106) (rerun: 32) sendmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x20000000) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x24000059) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000001c0000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000feffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file1\x00'}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) (async) close(r0) 2.065254421s ago: executing program 4 (id=3041): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703110000001f00ffa100000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.905407553s ago: executing program 2 (id=3043): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000060400000000000000010000840200000000000000010000000000000100004594ca"], 0x0, 0x3e, 0x0, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000c40)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001380)={r1, &(0x7f00000011c0), &(0x7f0000001280)=""/209, 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000019c0)="b9ff0307684435231d0114f088a847aa31cbb2b556a88ca98cb4ea74", 0x0, 0x0, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0x3, 0x0, &(0x7f0000000100)="ff412f", 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}, 0x0) 1.50741234s ago: executing program 4 (id=3045): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000ac0)='rpm_return_int\x00'}, 0x10) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffe96, 0x0}, 0x120) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00000004010c0008000800114004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.467249293s ago: executing program 0 (id=3047): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200004580000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.402339941s ago: executing program 2 (id=3048): perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0xd8ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001280), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0), 0x48) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000002940)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000800)="6204a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48b462428087ed4460", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e29f367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000980)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f97", 0xb6}, {&(0x7f0000001580)="f96e37f854b1c8bab0a14a54ede5956395e4f1611c3507390ed2823505121893595c16d47e5f6d727645a8d84cce2769e894ec7c8049e26dcf9fc0e674a5b68872502d7f5ff0cc87a9ebde8d4dd841323ddd341daa6edb0a2df1e1375dfe6d36d8ad3b018df23e3a42ee7caa30e47d68a3483a9a7a2dc8fe42530b50d8fc56d460e108f5b89a302e07e3df52ffcd55b7ec9416730dad7d35f3f2be7917542c4b73537716bd09e33f79a2be49bf38257d235c1ebdffd936eaf1dfcd3c4355e171a32d553973e43f720aba1b26e2759282fce689b46920605f6a8facd94f8ebe86146ded05a0f1d37b0eb130574486ab4da628a6e76d0d8d64551762338c01ea78625c90c7a00797d82030ffc574ce30f86b6b0b83e8fd929d0ac9168956c500ecd44cea7f47a49c21a6cb96b5677ece169ada1c74be76e11ec1f5045eaaa6598081410ef2830ffaa371f5f89795ba74098b329c410a69e94aab58cf90d3b7f2332f887049aede8e176a30a177de237ccf4aa738b9a68e4fbb2ab3616360787b6fa5a69b977f69a83b85fceb51e0c7a8775f645137743452cf258398695fd475568c08bbd3649438223b99e67cd7810ec60e55921f4d7768a7030791984651523f61b3bfc16d993907f923c5efb072a4d6e2746b79c8792aba76327535d5ffba3fcb6fc2a6336aaa8bdad5e52d9bd320610c856e77779aea8ab80b861f8597ea566045fa209c2c965dc0344fd6ef3f3dc27a8a3b97bf7ede507cb376c5c890a90c5a1bbdbdebd4e96595801db82a0c749f7b330221a1ed56fc89a22591e1f7e2bfbb85714fb898168c744a69a5e491579623cf12fc78fc80349e7f90752429506d77c22bf0f2d32499ecf5adbc75681b881820e98c7eb6179ce9ed66a68af7b6d62c607bb7191300c601d38cad3188e1630492221be161d777da45e35ff6974f1ac78de3b02841bcfbbb0310e642a007b234c1266542409f65131cd0437a45b8e6744a561f118bb1ab957fb1c17cc3b9f5879c4e3aee35987b5b04739dec064605b7ea692313f8a7329e558574032bb7a7d3e2e3cf53b19f9d7d984ffc82c71f93b5849c2b805bda642c77554557aa140eb27f02fafad317883c8e71922cd0b1e1efd0c4ae7bfef0e80b97d9583b5a12a5f3e4d026dd4c3454f441596c46e992880d6839a313746964aebaf969188c4489e8626dde5c46fd6ca4d67df5a7", 0x35d}], 0x4}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="39000000140081ae10003c008311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebf37358582bdbb7d553b4e92155148bcf54c6469b55688ebe47e81312b7dac579cc05f8fa782b339f66e63d311daa50ef5e1bb941816463ab956f4f15bc3a2d46f42e2572d5e1ce6114041e629badf6aeb156e1e11cd390000000", 0x83}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000037c0)=ANY=[@ANYBLOB="1c8c00005f00071b"], 0xfe33) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.40094256s ago: executing program 3 (id=3049): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000040000000000000085000000bc0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x30, 0xe0, 0x0, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0xa, &(0x7f0000000680)=ANY=[@ANYRES32=r5, @ANYBLOB="a08b6fd722cfdd5cc6e4c507cc1a6dd7c5c7dd258125a4babac59a5fa191b79499c645e1967975e571d2d469ee14b8b4b4b0bd18efb04cf09bb5e49a82e446d46cbcd34c51000200d961fee17d30d2df4fc3f5505a8e9ac9547f5b0773deb00c735e55202d2e6b065360cfb4982f81a13893fc0b5890c733469bf8ae72064d80e934371b068da6be0f732e48ef9729a663037b738c43efd29d45fb87eee3ed7f53e823f2a80d490f3667f7f352c1c55bbf9e07c00dd1d78d40e384626795857a28a5bec7", @ANYBLOB="000000000000001f2c0000000000000018100000", @ANYRES32=r2, @ANYRESOCT=r0, @ANYRESDEC=r4], &(0x7f0000000300)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x1ff000, 0x66, 0x7f, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f00000003c0)="14", 0x0}, 0x20) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r6, 0x401c5820, &(0x7f0000000080)={'ipvlan1\x00', @broadcast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x6d, 0x0, 0x0, 0x7}, {0x6, 0x88}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0xa004}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) 1.320915916s ago: executing program 4 (id=3050): openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x7, 0x10001, 0x9}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800005d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) (async) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x4c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000039644bc90000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffcae, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) close(0xffffffffffffffff) (async) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.29619492s ago: executing program 2 (id=3051): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7040000080000e6840000009500000018110000", @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x900}, 0x80) 1.166448171s ago: executing program 4 (id=3053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func, @map_fd, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x13, &(0x7f0000000340)=""/222}, 0x21) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x69, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006001100000016000500014002002500035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) 1.118005771s ago: executing program 0 (id=3054): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000080), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, 0x0, 0x20000000}, 0x20) close(r2) 1.06577012s ago: executing program 4 (id=3055): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc82}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x102, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x6a) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x90) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfffffffe}, 0x48) (async, rerun: 32) recvmsg(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@sco, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000004c0)=""/143, 0x8f}], 0x2}, 0x20002161) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) (async) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000340)=r4, 0x4) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffff801, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async, rerun: 64) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) (rerun: 64) close(r10) (async, rerun: 32) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xee4, 0x800}, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x5, 0xffffffffffffffff, 0x1) (async, rerun: 32) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async, rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 32) close(r12) (async, rerun: 32) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x102401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) (async) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) close(r11) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0f0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r5, 0x0) 1.065249997s ago: executing program 1 (id=3056): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="640ac4ff0000000071100b000000000095"], &(0x7f0000000480)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xc00}, 0x90) 1.003819343s ago: executing program 3 (id=3057): socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x24}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000004200)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x90) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000140)={@cgroup, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@cgroup, 0xffffffffffffffff, 0x29}, 0x20) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x75, &(0x7f0000000100)}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.003420349s ago: executing program 0 (id=3058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000c0"], 0x0}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x4006f9}, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x9, 0x10001, 0x7, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b79da42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4f000093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e63fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5649209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9eb0641fd6d5e80979a3d985089e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469f242119ad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6d"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x1f5c, 0x6}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000640)="18", &(0x7f0000000240)=""/109}, 0x20) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000540), 0x0}, 0x20) 942.685384ms ago: executing program 1 (id=3059): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2000000}, 0x90) 916.544841ms ago: executing program 2 (id=3060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0xfffffffc, 0x10001, 0x8, 0x1, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1000, 0x4, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b0, &(0x7f0000000900)={'vlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0xc3}, 0x0) 906.132079ms ago: executing program 1 (id=3061): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0xcc, &(0x7f00000006c0)=""/204, 0x0, 0x69, '\x00', 0x0, 0x2a}, 0x90) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7040000080000e6840000009500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4c00}, 0x80) 670.620923ms ago: executing program 0 (id=3062): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd02fe02e8fe50a10a150600250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0xf0ffffffffffffff) 670.016731ms ago: executing program 4 (id=3063): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="dd49", 0x2}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="340000000000000084000000070000007f"], 0x38}, 0x3000000) 640.51651ms ago: executing program 0 (id=3064): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="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", 0x157}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$sock_attach_bpf(r0, 0x0, 0x2f, 0x0, 0x28) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)="7f", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084000000000000007f000000768af8717b19f7c365e8c5b181f578a51717c227abb7611581b1735380f95ed60b1380028ddccb7e2a0109caa0995a7dec6d356c143f2e892509026332c32b35e5987ad40047d17d7bcd847d875b9d78c3d87d5f4d37b4274d"], 0x18}, 0x80c4) 560.220635ms ago: executing program 1 (id=3065): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe55a10a000700014002020a600e41b0000900ac00040211007a00160012000a0002000048035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de61fccd40dd6e4edef3d93452a9247c47870ae1d092665c07a81ead0f98a952c795c0e9703920723f9000000008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x4}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414aa00000000ac1414"], 0x30}, 0x0) 470.595855ms ago: executing program 3 (id=3066): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair(0x2b, 0x0, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b904021108021d000000040000a1184c0200e0009bbb54fd0e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dc934e7ce80b2cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730da4683f5aab00dbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 429.481735ms ago: executing program 3 (id=3067): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xe}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00f6001500035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 400.897299ms ago: executing program 0 (id=3068): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r1 = getpid() write$cgroup_pid(r0, &(0x7f00000001c0)=r1, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x2000000000000037, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x2, 0x220108, 0x6, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58}, 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRESOCT=r2], 0xda00) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) 342.5559ms ago: executing program 1 (id=3069): socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@initr0]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000100)="6203280059050000000004", 0xb}], 0x1}, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000008178005dbfa30000007000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103600000000001d400200000000004704000001ed00000f030000000000001d440000000000006b0a02fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea01d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a07f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a126a1bdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0d5d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c2495bb315629ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d00b07862c4fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515dca8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d204c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c30a0ee14afdf1435f6821d158359fefc3d555e840badcb0223bc13282abf31e5480af779b24f011bfdc802e8ca9f6ca38697c901fe115d7ad4e98a2df658c3867acb2f5b372fbbd84c095ead7da0b541364741e0bbaf9bb23147acf0284cb8ee6a535b934126287829a921c52bd78944a519335521b1d8bed758d48f185f122f143e834783e2690535110eb697a8c031c01becf5f2361bc6045fa2d7c569b3f5e5f320dabf519f186e41c058ef8b6afa478b1cce357c15f9f9a698d3d7fe6f92bd6acc54be14909a17980b4ff8fbe4c5961ec7ce2f19183a6cf42c4c64ad60329e89e8bdb285fb590f2c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 77.356801ms ago: executing program 3 (id=3070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x4008}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x71}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 1 (id=3071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000ffffffff0000000000030000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3c}, 0x90) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='snd_soc_dapm_path\x00', r0}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x2, 0x1, 0x3, 0x4, 0x5, 0x30, 0xfffffffffffffff0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socket$kcm(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x26e1, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x9, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a5100", @ANYRES8], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) sendmsg$inet(r4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)=""/4069, 0xfe5}, {0x0}, {0x0}, {0x0}], 0x4}, 0x10000) write$cgroup_subtree(r6, 0x0, 0xfe33) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ute type 10 has an invalid length. [ 123.212982][ T6930] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.231021][ T6930] team0: entered promiscuous mode [ 123.232634][ T6939] netlink: 72 bytes leftover after parsing attributes in process `syz.0.650'. [ 123.236370][ T6930] team_slave_0: entered promiscuous mode [ 123.258333][ T6930] team_slave_1: entered promiscuous mode [ 123.264373][ T6930] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 123.274375][ T6930] bond0: (slave team0): Enslaving as an active interface with an up link [ 123.300216][ T6938] netlink: 'syz.0.650': attribute type 21 has an invalid length. [ 123.321538][ T6938] netlink: 128 bytes leftover after parsing attributes in process `syz.0.650'. [ 123.344327][ T6942] netlink: 'syz.1.652': attribute type 1 has an invalid length. [ 123.367624][ T6938] netlink: 'syz.0.650': attribute type 4 has an invalid length. [ 123.375422][ T6942] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.652'. [ 123.820674][ T5095] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 124.035341][ T6981] @ÿÿÿ: renamed from veth0_vlan (while UP) [ 124.264828][ T6994] validate_nla: 1 callbacks suppressed [ 124.264865][ T6994] netlink: 'syz.0.674': attribute type 4 has an invalid length. [ 124.944554][ T7016] netlink: 'syz.2.682': attribute type 3 has an invalid length. [ 124.973499][ T7016] __nla_validate_parse: 9 callbacks suppressed [ 124.973535][ T7016] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.682'. [ 125.015471][ T7024] @ÿÿÿ: renamed from veth0_vlan (while UP) [ 125.137131][ T7029] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.688'. [ 125.192447][ T7029] openvswitch: netlink: Duplicate key (type 0). [ 125.327207][ T7033] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.691'. [ 125.483328][ T7038] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.693'. [ 125.527531][ T7038] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.693'. [ 125.586330][ T7045] netlink: 'syz.4.695': attribute type 10 has an invalid length. [ 125.622539][ T7045] netlink: 55 bytes leftover after parsing attributes in process `syz.4.695'. [ 125.717441][ T7056] netlink: 'syz.2.699': attribute type 64 has an invalid length. [ 126.733154][ T7098] netlink: 'syz.1.715': attribute type 3 has an invalid length. [ 126.756625][ T7098] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.715'. [ 126.977258][ T7113] netlink: 'syz.3.722': attribute type 7 has an invalid length. [ 127.117898][ T7120] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 127.131247][ T7120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.724'. [ 127.151511][ T7120] bridge0: port 4(dummy0) entered blocking state [ 127.165099][ T7120] bridge0: port 4(dummy0) entered disabled state [ 127.171899][ T7120] dummy0: entered allmulticast mode [ 127.179399][ T7120] dummy0: entered promiscuous mode [ 127.185337][ T7120] bridge0: port 4(dummy0) entered blocking state [ 127.191864][ T7120] bridge0: port 4(dummy0) entered forwarding state [ 127.278285][ T7128] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 127.286247][ T7128] netlink: 55 bytes leftover after parsing attributes in process `syz.2.727'. [ 127.605132][ T7147] netlink: 'syz.0.733': attribute type 21 has an invalid length. [ 127.654083][ T7147] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.661708][ T7151] netlink: 56 bytes leftover after parsing attributes in process `syz.1.737'. [ 127.912952][ T7164] netlink: 'syz.1.742': attribute type 9 has an invalid length. [ 129.215179][ T7203] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 129.217111][ T7202] tun0: tun_chr_ioctl cmd 1074025673 [ 129.509158][ T7212] validate_nla: 1 callbacks suppressed [ 129.509177][ T7212] netlink: 'syz.3.758': attribute type 3 has an invalid length. [ 130.027279][ T7234] __nla_validate_parse: 6 callbacks suppressed [ 130.027337][ T7234] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.767'. [ 130.336943][ T5095] Bluetooth: hci2: unknown advertising packet type: 0x13 [ 130.344722][ T7237] netlink: 'syz.2.768': attribute type 19 has an invalid length. [ 130.421842][ T7237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.768'. [ 130.807601][ T7263] FAULT_INJECTION: forcing a failure. [ 130.807601][ T7263] name failslab, interval 1, probability 0, space 0, times 0 [ 130.865749][ T7266] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.781'. [ 130.868757][ T7263] CPU: 0 PID: 7263 Comm: syz.3.779 Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 130.884991][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 130.895070][ T7263] Call Trace: [ 130.898364][ T7263] [ 130.901304][ T7263] dump_stack_lvl+0x241/0x360 [ 130.906001][ T7263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.911217][ T7263] ? __pfx__printk+0x10/0x10 [ 130.915832][ T7263] ? ref_tracker_alloc+0x332/0x490 [ 130.921063][ T7263] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 130.926774][ T7263] should_fail_ex+0x3b0/0x4e0 [ 130.931586][ T7263] ? skb_clone+0x20c/0x390 [ 130.936122][ T7263] should_failslab+0x9/0x20 [ 130.940643][ T7263] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 130.946037][ T7263] skb_clone+0x20c/0x390 [ 130.950310][ T7263] __netlink_deliver_tap+0x3cc/0x7c0 [ 130.955631][ T7263] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.960854][ T7263] netlink_deliver_tap+0x19d/0x1b0 [ 130.965992][ T7263] netlink_sendskb+0x68/0x140 [ 130.967562][ T7271] netlink: 'syz.0.783': attribute type 10 has an invalid length. [ 130.970674][ T7263] netlink_unicast+0x39d/0x980 [ 130.983239][ T7263] ? __asan_memcpy+0x40/0x70 [ 130.987867][ T7263] ? __pfx_netlink_unicast+0x10/0x10 [ 130.993183][ T7263] netlink_rcv_skb+0x262/0x430 [ 130.994564][ T7271] netlink: 55 bytes leftover after parsing attributes in process `syz.0.783'. [ 130.997952][ T7263] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.997980][ T7263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.998030][ T7263] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.998057][ T7263] netlink_unicast+0x7ea/0x980 [ 130.998091][ T7263] ? __pfx_netlink_unicast+0x10/0x10 [ 130.998112][ T7263] ? __virt_addr_valid+0x183/0x520 [ 130.998141][ T7263] ? __check_object_size+0x49c/0x900 [ 130.998161][ T7263] ? bpf_lsm_netlink_send+0x9/0x10 [ 130.998184][ T7263] netlink_sendmsg+0x8db/0xcb0 [ 130.998225][ T7263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.998252][ T7263] ? __import_iovec+0x536/0x820 [ 131.019963][ T7268] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.782'. [ 131.022955][ T7263] ? aa_sock_msg_perm+0x91/0x160 [ 131.022992][ T7263] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 131.023012][ T7263] ? security_socket_sendmsg+0x87/0xb0 [ 131.023039][ T7263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.036946][ T7271] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 131.038133][ T7263] __sock_sendmsg+0x221/0x270 [ 131.038164][ T7263] ____sys_sendmsg+0x525/0x7d0 [ 131.043660][ T7268] openvswitch: netlink: Key 0 has unexpected len 13 expected 0 [ 131.048527][ T7263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.048575][ T7263] __sys_sendmsg+0x2b0/0x3a0 [ 131.048604][ T7263] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.048625][ T7263] ? vfs_write+0x7c4/0xc90 [ 131.048693][ T7263] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.048716][ T7263] ? do_syscall_64+0x100/0x230 [ 131.048740][ T7263] ? do_syscall_64+0xb6/0x230 [ 131.048763][ T7263] do_syscall_64+0xf3/0x230 [ 131.048784][ T7263] ? clear_bhb_loop+0x35/0x90 [ 131.056195][ T7271] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 131.058790][ T7263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.058826][ T7263] RIP: 0033:0x7f9a89575bd9 [ 131.058845][ T7263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.058859][ T7263] RSP: 002b:00007f9a8a2d8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.058881][ T7263] RAX: ffffffffffffffda RBX: 00007f9a89703f60 RCX: 00007f9a89575bd9 [ 131.058894][ T7263] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 131.058906][ T7263] RBP: 00007f9a8a2d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 131.058923][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.058934][ T7263] R13: 000000000000000b R14: 00007f9a89703f60 R15: 00007ffd4e67e268 [ 131.077272][ T7268] netlink: 'syz.2.782': attribute type 7 has an invalid length. [ 131.077872][ T7263] [ 131.317390][ T7268] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.782'. [ 131.331345][ T7271] team0: Port device virt_wifi0 removed [ 131.549903][ T7285] netlink: 132 bytes leftover after parsing attributes in process `syz.4.789'. [ 131.676378][ T7291] netlink: 'syz.2.791': attribute type 17 has an invalid length. [ 131.944755][ T7310] netlink: 'syz.1.798': attribute type 10 has an invalid length. [ 131.962819][ T7310] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.798'. [ 132.086424][ T7318] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.800'. [ 132.127529][ T7323] netlink: 'syz.1.803': attribute type 10 has an invalid length. [ 132.231684][ T7323] batman_adv: batadv0: Adding interface: team0 [ 132.265010][ T7323] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.331801][ T7323] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 132.424522][ T7337] netlink: 'syz.3.806': attribute type 10 has an invalid length. [ 132.440647][ T7337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.806'. [ 132.461467][ T5095] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 132.482575][ T7337] team0: Device bond0 is up. Set it down before adding it as a team port [ 132.549557][ T7337] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 133.101545][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.109802][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.570774][ T7371] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 133.999336][ T7376] netlink: 'syz.2.817': attribute type 64 has an invalid length. [ 134.149542][ T7376] bridge0: port 3(team0) entered disabled state [ 134.529884][ T5095] Bluetooth: hci2: unknown advertising packet type: 0x13 [ 135.169648][ T7430] __nla_validate_parse: 5 callbacks suppressed [ 135.169669][ T7430] netlink: 188 bytes leftover after parsing attributes in process `syz.0.835'. [ 135.257982][ T7432] validate_nla: 1 callbacks suppressed [ 135.258001][ T7432] netlink: 'syz.2.837': attribute type 12 has an invalid length. [ 135.294826][ T7432] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.837'. [ 135.384949][ T7434] netlink: 'syz.3.838': attribute type 21 has an invalid length. [ 135.539252][ T7450] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.843'. [ 135.768344][ T7451] netlink: 1038 bytes leftover after parsing attributes in process `syz.4.844'. [ 135.782982][ T7453] netlink: 'syz.1.846': attribute type 3 has an invalid length. [ 135.821898][ T7453] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.846'. [ 135.914267][ T7459] netlink: 132 bytes leftover after parsing attributes in process `syz.2.847'. [ 136.267351][ T7484] netlink: 'syz.1.857': attribute type 10 has an invalid length. [ 136.296991][ T7484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.857'. [ 136.344736][ T7484] bridge0: port 4(dummy0) entered blocking state [ 136.370894][ T7484] bridge0: port 4(dummy0) entered disabled state [ 136.391078][ T7484] dummy0: entered allmulticast mode [ 136.427034][ T7484] dummy0: entered promiscuous mode [ 136.459927][ T7484] bridge0: port 4(dummy0) entered blocking state [ 136.466419][ T7484] bridge0: port 4(dummy0) entered forwarding state [ 137.089926][ T7495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.199455][ T7516] netlink: 'syz.4.871': attribute type 1 has an invalid length. [ 137.228483][ T7516] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.871'. [ 137.333008][ T7521] netlink: 56 bytes leftover after parsing attributes in process `syz.2.874'. [ 137.563846][ T7539] netlink: 'syz.1.880': attribute type 10 has an invalid length. [ 137.583428][ T7539] batman_adv: batadv0: Removing interface: team0 [ 137.631170][ T7539] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.672063][ T7539] bond0: (slave team0): Enslaving as an active interface with an up link [ 137.721264][ T7544] netlink: 'syz.1.880': attribute type 10 has an invalid length. [ 137.734924][ T7544] bond0: (slave team0): Releasing backup interface [ 137.766445][ T7544] bridge0: port 5(team0) entered blocking state [ 137.790450][ T7544] bridge0: port 5(team0) entered disabled state [ 137.802798][ T7544] team0: entered allmulticast mode [ 137.821340][ T7544] team_slave_0: entered allmulticast mode [ 137.853267][ T7544] team_slave_1: entered allmulticast mode [ 137.889055][ T7544] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 137.918901][ T7544] team0: entered promiscuous mode [ 137.924331][ T7544] team_slave_0: entered promiscuous mode [ 137.932307][ T7544] team_slave_1: entered promiscuous mode [ 137.955375][ T7544] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 138.024780][ T7556] netlink: 'syz.0.888': attribute type 10 has an invalid length. [ 138.058526][ T7556] hsr_slave_0: left promiscuous mode [ 138.149646][ T7556] hsr_slave_1: left promiscuous mode [ 138.352697][ T7565] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.892'. [ 138.607189][ T4488] Bluetooth: hci3: command 0x0406 tx timeout [ 138.648846][ T7585] netlink: 'syz.3.901': attribute type 10 has an invalid length. [ 138.691009][ T7585] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.729392][ T7585] bond0: (slave team0): Enslaving as an active interface with an up link [ 138.754212][ T7588] netlink: 'syz.3.901': attribute type 10 has an invalid length. [ 138.800081][ T7588] bond0: (slave team0): Releasing backup interface [ 138.888394][ T7588] bridge0: port 3(team0) entered blocking state [ 138.894786][ T7588] bridge0: port 3(team0) entered disabled state [ 138.907925][ T7588] team0: entered allmulticast mode [ 138.925487][ T7588] team_slave_0: entered allmulticast mode [ 138.940360][ T7588] team_slave_1: entered allmulticast mode [ 138.947815][ T7602] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 138.966981][ T7588] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 138.990720][ T7588] team0: entered promiscuous mode [ 138.995923][ T7588] team_slave_0: entered promiscuous mode [ 139.010834][ T7588] team_slave_1: entered promiscuous mode [ 139.025778][ T7588] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 139.039604][ T7594] lo: entered allmulticast mode [ 140.066428][ T7656] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 140.505906][ T7677] __nla_validate_parse: 6 callbacks suppressed [ 140.505926][ T7677] netlink: 36 bytes leftover after parsing attributes in process `syz.3.936'. [ 140.606776][ T7681] validate_nla: 8 callbacks suppressed [ 140.606793][ T7681] netlink: 'syz.4.938': attribute type 10 has an invalid length. [ 140.688323][ T7681] netlink: 'syz.4.938': attribute type 10 has an invalid length. [ 140.720267][ T7681] bond0: (slave team0): Releasing backup interface [ 140.752225][ T7681] team0: left promiscuous mode [ 140.802057][ T7681] team_slave_0: left promiscuous mode [ 140.807808][ T7685] netlink: 'syz.0.940': attribute type 28 has an invalid length. [ 140.823395][ T7681] team_slave_1: left promiscuous mode [ 140.842460][ T7681] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 140.938879][ T7692] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.944'. [ 140.994498][ T7690] netlink: 'syz.1.942': attribute type 10 has an invalid length. [ 141.030674][ T7690] netlink: 44 bytes leftover after parsing attributes in process `syz.1.942'. [ 141.043942][ T7690] bridge_slave_0: left promiscuous mode [ 141.050152][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.422224][ T7714] FAULT_INJECTION: forcing a failure. [ 141.422224][ T7714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.476816][ T7714] CPU: 1 PID: 7714 Comm: syz.3.951 Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 141.486847][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.496925][ T7714] Call Trace: [ 141.500213][ T7714] [ 141.503156][ T7714] dump_stack_lvl+0x241/0x360 [ 141.507863][ T7714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.513076][ T7714] ? __pfx__printk+0x10/0x10 [ 141.517681][ T7714] ? __pfx_lock_release+0x10/0x10 [ 141.522724][ T7714] should_fail_ex+0x3b0/0x4e0 [ 141.527426][ T7714] _copy_from_user+0x2f/0xe0 [ 141.532030][ T7714] copy_msghdr_from_user+0xae/0x680 [ 141.537245][ T7714] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 141.543079][ T7714] __sys_sendmsg+0x23d/0x3a0 [ 141.547690][ T7714] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.552819][ T7714] ? vfs_write+0x7c4/0xc90 [ 141.557289][ T7714] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 141.563463][ T7714] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.569805][ T7714] ? do_syscall_64+0x100/0x230 [ 141.574596][ T7714] ? do_syscall_64+0xb6/0x230 [ 141.579284][ T7714] do_syscall_64+0xf3/0x230 [ 141.583793][ T7714] ? clear_bhb_loop+0x35/0x90 [ 141.588485][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.594392][ T7714] RIP: 0033:0x7f9a89575bd9 [ 141.598818][ T7714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.618427][ T7714] RSP: 002b:00007f9a8a2d8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.626832][ T7714] RAX: ffffffffffffffda RBX: 00007f9a89703f60 RCX: 00007f9a89575bd9 [ 141.634793][ T7714] RDX: 0000000000000000 RSI: 0000000020003a80 RDI: 0000000000000003 [ 141.642752][ T7714] RBP: 00007f9a8a2d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.650716][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.658677][ T7714] R13: 000000000000000b R14: 00007f9a89703f60 R15: 00007ffd4e67e268 [ 141.666649][ T7714] [ 141.822020][ T7733] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.959'. [ 141.983121][ T7737] netlink: 10 bytes leftover after parsing attributes in process `syz.0.960'. [ 142.036661][ T7743] netlink: 'syz.1.962': attribute type 7 has an invalid length. [ 142.044337][ T7743] netlink: 140 bytes leftover after parsing attributes in process `syz.1.962'. [ 142.067273][ T7745] netlink: 'syz.4.964': attribute type 10 has an invalid length. [ 142.098021][ T7745] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.964'. [ 142.200516][ T7752] netlink: 'syz.0.967': attribute type 2 has an invalid length. [ 142.244257][ T7752] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.967'. [ 142.256551][ T7754] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.969'. [ 142.312718][ T7755] netlink: 'syz.0.967': attribute type 2 has an invalid length. [ 142.331327][ T7755] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.967'. [ 142.609460][ T7777] netlink: 'syz.2.977': attribute type 21 has an invalid length. [ 143.061524][ T7799] netlink: 'syz.2.985': attribute type 4 has an invalid length. [ 143.127152][ T7801] team0: Device bond0 is up. Set it down before adding it as a team port [ 143.141447][ T7801] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 145.371203][ T7911] openvswitch: netlink: Duplicate key (type 0). [ 145.554388][ T7918] __nla_validate_parse: 10 callbacks suppressed [ 145.554428][ T7918] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1030'. [ 145.934853][ T7947] netlink: 209848 bytes leftover after parsing attributes in process `syz.1.1041'. [ 145.973142][ T7947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.285497][ T7963] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1046'. [ 146.295324][ T7963] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 146.476021][ T7973] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1050'. [ 146.667393][ T7983] validate_nla: 6 callbacks suppressed [ 146.667426][ T7983] netlink: 'syz.4.1053': attribute type 4 has an invalid length. [ 146.677392][ T7987] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1055'. [ 146.720686][ T7983] netlink: 'syz.4.1053': attribute type 4 has an invalid length. [ 146.741704][ T7983] netlink: 126008 bytes leftover after parsing attributes in process `syz.4.1053'. [ 146.799535][ T7991] netlink: 'syz.2.1057': attribute type 9 has an invalid length. [ 146.811321][ T7991] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1057'. [ 146.951107][ T7998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.165000][ T8014] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1066'. [ 147.328048][ T8021] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1069'. [ 148.230348][ T8069] netlink: 'syz.3.1090': attribute type 10 has an invalid length. [ 148.270785][ T8069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1090'. [ 148.317080][ T8069] bridge0: port 4(dummy0) entered blocking state [ 148.346001][ T8069] bridge0: port 4(dummy0) entered disabled state [ 148.376232][ T8069] dummy0: entered allmulticast mode [ 148.408336][ T8069] dummy0: entered promiscuous mode [ 148.420175][ T8069] bridge0: port 4(dummy0) entered blocking state [ 148.426735][ T8069] bridge0: port 4(dummy0) entered forwarding state [ 148.450990][ T8071] netlink: 'syz.2.1091': attribute type 12 has an invalid length. [ 148.468021][ T8071] netlink: 'syz.2.1091': attribute type 11 has an invalid length. [ 149.681272][ T8102] netlink: 'syz.4.1104': attribute type 9 has an invalid length. [ 149.717070][ T8094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.897286][ T8119] netlink: 'syz.1.1111': attribute type 1 has an invalid length. [ 149.905662][ T8119] netlink: 'syz.1.1111': attribute type 1 has an invalid length. [ 149.928805][ T8121] netlink: 'syz.1.1111': attribute type 21 has an invalid length. [ 149.956090][ T8119] netlink: 'syz.1.1111': attribute type 21 has an invalid length. [ 150.594302][ T8151] __nla_validate_parse: 5 callbacks suppressed [ 150.594340][ T8151] netlink: 196520 bytes leftover after parsing attributes in process `syz.3.1122'. [ 150.657901][ T8151] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1122'. [ 150.699565][ T8166] team0: left allmulticast mode [ 150.722342][ T8166] team_slave_0: left allmulticast mode [ 150.751138][ T8166] team_slave_1: left allmulticast mode [ 150.776810][ T8166] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 150.783907][ T8166] bond0: left allmulticast mode [ 150.858550][ T8166] bond_slave_0: left allmulticast mode [ 150.864095][ T8166] bond_slave_1: left allmulticast mode [ 150.949548][ T8166] macvlan0: left allmulticast mode [ 150.955025][ T8166] team0: left promiscuous mode [ 150.998582][ T8166] team_slave_0: left promiscuous mode [ 151.023944][ T8166] team_slave_1: left promiscuous mode [ 151.043593][ T8166] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 151.097306][ T8166] bond0: left promiscuous mode [ 151.117393][ T8166] bond_slave_0: left promiscuous mode [ 151.135639][ T8166] bond_slave_1: left promiscuous mode [ 151.153244][ T8166] macvlan0: left promiscuous mode [ 151.171972][ T8166] bridge0: port 3(team0) entered disabled state [ 151.186393][ T8166] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.200632][ T8180] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1131'. [ 151.457279][ T8196] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1136'. [ 151.509985][ T8187] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1134'. [ 151.541580][ T8192] hsr_slave_0: left promiscuous mode [ 151.601849][ T8192] hsr_slave_1: left promiscuous mode [ 152.154947][ T8213] validate_nla: 4 callbacks suppressed [ 152.154967][ T8213] netlink: 'syz.4.1146': attribute type 10 has an invalid length. [ 152.190023][ T8212] netlink: 'syz.3.1145': attribute type 29 has an invalid length. [ 152.211204][ T8213] veth1_macvtap: left promiscuous mode [ 152.246190][ T8212] netlink: 'syz.3.1145': attribute type 29 has an invalid length. [ 152.267070][ T8221] netlink: 'syz.0.1147': attribute type 10 has an invalid length. [ 152.286029][ T8220] netlink: 'syz.3.1145': attribute type 29 has an invalid length. [ 152.313826][ T8212] netlink: 'syz.3.1145': attribute type 4 has an invalid length. [ 152.334228][ T8212] netlink: 128104 bytes leftover after parsing attributes in process `syz.3.1145'. [ 152.369228][ T8224] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.1149'. [ 152.380904][ T8224] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 152.750594][ T8228] netlink: 'syz.1.1152': attribute type 4 has an invalid length. [ 152.790157][ T8239] netlink: 'syz.3.1153': attribute type 3 has an invalid length. [ 152.807700][ T8228] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1152'. [ 152.856840][ T8239] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1153'. [ 153.004975][ T8241] netlink: 'syz.0.1155': attribute type 4 has an invalid length. [ 153.288549][ T8248] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1158'. [ 153.650917][ T8265] netlink: 'syz.2.1165': attribute type 29 has an invalid length. [ 155.148749][ T8291] syzkaller0: entered promiscuous mode [ 155.164532][ T8291] syzkaller0: entered allmulticast mode [ 157.502581][ T8308] validate_nla: 3 callbacks suppressed [ 157.502594][ T8308] netlink: 'syz.3.1177': attribute type 10 has an invalid length. [ 157.518203][ T8306] syz.1.1175 (8306) used obsolete PPPIOCDETACH ioctl [ 157.525840][ T8308] __nla_validate_parse: 2 callbacks suppressed [ 157.525854][ T8308] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1177'. [ 157.541634][ T8312] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 157.556618][ T8312] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1178'. [ 158.253170][ T8343] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.1189'. [ 158.348887][ T8351] netlink: 'syz.3.1192': attribute type 10 has an invalid length. [ 158.373916][ T8351] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1192'. [ 158.391940][ T8354] netlink: 'syz.2.1193': attribute type 10 has an invalid length. [ 158.485443][ T8354] bond0: (slave macvlan0): Releasing backup interface [ 158.599099][ T8365] netlink: 'syz.4.1199': attribute type 10 has an invalid length. [ 158.633501][ T8365] gretap0: entered promiscuous mode [ 158.673107][ T8365] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 158.715197][ T8363] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1197'. [ 158.977597][ T8382] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1205'. [ 159.119643][ T8392] netlink: 'syz.4.1207': attribute type 10 has an invalid length. [ 159.176856][ T8392] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1207'. [ 159.365282][ T8412] netlink: 'syz.2.1213': attribute type 2 has an invalid length. [ 159.381081][ T8412] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1213'. [ 159.689481][ T8436] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1221'. [ 159.701534][ T8437] netlink: 'syz.4.1222': attribute type 10 has an invalid length. [ 159.741798][ T8437] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.763061][ T8437] team0: entered promiscuous mode [ 159.781910][ T8437] team_slave_0: entered promiscuous mode [ 159.790460][ T8437] team_slave_1: entered promiscuous mode [ 159.796411][ T8437] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 159.809123][ T8437] bond0: (slave team0): Enslaving as an active interface with an up link [ 160.475896][ T8479] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 160.511152][ T8479] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.1237'. [ 160.591135][ T8481] netlink: 'syz.0.1238': attribute type 274 has an invalid length. [ 161.040779][ T8509] openvswitch: netlink: Duplicate key (type 0). [ 161.487019][ T8522] wg2: entered allmulticast mode [ 162.716895][ T8593] validate_nla: 5 callbacks suppressed [ 162.716934][ T8593] netlink: 'syz.2.1285': attribute type 19 has an invalid length. [ 162.751055][ T8596] __nla_validate_parse: 6 callbacks suppressed [ 162.751071][ T8596] netlink: 134312 bytes leftover after parsing attributes in process `syz.4.1287'. [ 162.781767][ T8589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.868616][ T8596] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 162.891073][ T8600] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1289'. [ 162.928595][ T8596] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 162.929855][ T8599] netlink: 15162 bytes leftover after parsing attributes in process `syz.3.1288'. [ 163.054182][ T8609] netlink: 'syz.2.1290': attribute type 64 has an invalid length. [ 163.271992][ T8616] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1295'. [ 163.315045][ T8618] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1296'. [ 163.589666][ T8628] vlan0: entered promiscuous mode [ 163.598229][ T8629] netlink: 'syz.2.1301': attribute type 4 has an invalid length. [ 163.605790][ T8628] vlan0: entered allmulticast mode [ 163.607462][ T8629] netlink: 'syz.2.1301': attribute type 4 has an invalid length. [ 163.615622][ T8628] @ÿÿÿ: entered allmulticast mode [ 163.624401][ T8629] netlink: 126008 bytes leftover after parsing attributes in process `syz.2.1301'. [ 163.683801][ T8630] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1299'. [ 164.013357][ T8646] netlink: 'syz.2.1308': attribute type 10 has an invalid length. [ 164.044929][ T8646] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1308'. [ 164.067219][ T8651] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1310'. [ 164.255762][ T8658] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1311'. [ 164.337327][ T8663] netlink: 'syz.0.1315': attribute type 29 has an invalid length. [ 164.377724][ T8663] netlink: 'syz.0.1315': attribute type 29 has an invalid length. [ 164.410452][ T8678] netlink: 'syz.0.1315': attribute type 29 has an invalid length. [ 164.444751][ T8663] netlink: 'syz.0.1315': attribute type 29 has an invalid length. [ 164.909441][ T8694] netlink: 'syz.2.1324': attribute type 10 has an invalid length. [ 166.491502][ T8712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.520942][ T8719] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.655628][ T8722] nbd: must specify at least one socket [ 167.493214][ T8756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.675362][ T8775] pim6reg1: entered promiscuous mode [ 167.712023][ T8775] pim6reg1: entered allmulticast mode [ 167.900786][ T8781] validate_nla: 5 callbacks suppressed [ 167.901021][ T8781] netlink: 'syz.0.1356': attribute type 10 has an invalid length. [ 167.963868][ T8781] __nla_validate_parse: 7 callbacks suppressed [ 167.964053][ T8781] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1356'. [ 168.039337][ T8781] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 168.055094][ T8781] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 168.094187][ T8781] team0: Port device virt_wifi0 added [ 168.111176][ T8773] netlink: 'syz.3.1352': attribute type 10 has an invalid length. [ 168.242520][ T8773] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 168.463056][ T8794] netlink: 'syz.0.1360': attribute type 19 has an invalid length. [ 168.495661][ T8800] netlink: 'syz.1.1364': attribute type 7 has an invalid length. [ 168.512279][ T8800] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1364'. [ 168.541798][ T8801] netlink: 'syz.4.1363': attribute type 10 has an invalid length. [ 168.575158][ T8803] netlink: 'syz.3.1365': attribute type 19 has an invalid length. [ 168.972253][ T8826] netlink: 'syz.0.1376': attribute type 10 has an invalid length. [ 168.988194][ T8826] bridge0: port 5(macsec0) entered blocking state [ 168.994882][ T8826] bridge0: port 5(macsec0) entered disabled state [ 169.009782][ T8826] bridge0: port 5(macsec0) entered blocking state [ 169.016394][ T8826] bridge0: port 5(macsec0) entered forwarding state [ 169.065961][ T8828] netlink: 'syz.3.1377': attribute type 5 has an invalid length. [ 169.247117][ T8837] netlink: 'syz.3.1381': attribute type 19 has an invalid length. [ 169.362444][ T8843] FAULT_INJECTION: forcing a failure. [ 169.362444][ T8843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.376694][ T8843] CPU: 1 PID: 8843 Comm: syz.0.1384 Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 169.386789][ T8843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 169.396861][ T8843] Call Trace: [ 169.400176][ T8843] [ 169.403128][ T8843] dump_stack_lvl+0x241/0x360 [ 169.407833][ T8843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.413056][ T8843] ? __pfx__printk+0x10/0x10 [ 169.417671][ T8843] ? __pfx_lock_release+0x10/0x10 [ 169.422727][ T8843] should_fail_ex+0x3b0/0x4e0 [ 169.427442][ T8843] _copy_from_user+0x2f/0xe0 [ 169.432057][ T8843] __sys_bpf+0x1a4/0x810 [ 169.436328][ T8843] ? __pfx___sys_bpf+0x10/0x10 [ 169.441119][ T8843] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 169.447101][ T8843] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.453434][ T8843] ? do_syscall_64+0x100/0x230 [ 169.458200][ T8843] __x64_sys_bpf+0x7c/0x90 [ 169.462610][ T8843] do_syscall_64+0xf3/0x230 [ 169.467103][ T8843] ? clear_bhb_loop+0x35/0x90 [ 169.471774][ T8843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.477654][ T8843] RIP: 0033:0x7f82cfd75bd9 [ 169.482058][ T8843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.501664][ T8843] RSP: 002b:00007f82d0bc8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.510072][ T8843] RAX: ffffffffffffffda RBX: 00007f82cff03f60 RCX: 00007f82cfd75bd9 [ 169.518036][ T8843] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 169.525997][ T8843] RBP: 00007f82d0bc80a0 R08: 0000000000000000 R09: 0000000000000000 [ 169.533956][ T8843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.542005][ T8843] R13: 000000000000000b R14: 00007f82cff03f60 R15: 00007ffd8bfee328 [ 169.549980][ T8843] [ 169.582034][ T8847] netlink: 'syz.3.1385': attribute type 1 has an invalid length. [ 169.627744][ T8847] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1385'. [ 169.794735][ T8848] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1385'. [ 169.843229][ T8861] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1390'. [ 169.993105][ T8870] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1392'. [ 170.038171][ T8868] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1391'. [ 170.321124][ T8893] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1398'. [ 170.398333][ T8895] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1402'. [ 170.464226][ T8895] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 170.501959][ T8895] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 170.919649][ T8910] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 170.971295][ T8910] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 170.992287][ T8910] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 171.037418][ T8910] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 171.315056][ T8922] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1414'. [ 171.469099][ T8924] openvswitch: netlink: Key type 8192 is out of range max 32 [ 172.777165][ T8976] FAULT_INJECTION: forcing a failure. [ 172.777165][ T8976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.815627][ T8976] CPU: 1 PID: 8976 Comm: syz.3.1436 Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 172.825730][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 172.835798][ T8976] Call Trace: [ 172.839091][ T8976] [ 172.842035][ T8976] dump_stack_lvl+0x241/0x360 [ 172.846740][ T8976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.851959][ T8976] ? __pfx__printk+0x10/0x10 [ 172.856578][ T8976] ? __pfx_lock_release+0x10/0x10 [ 172.861628][ T8976] ? trace_call_bpf+0x613/0x8a0 [ 172.866505][ T8976] should_fail_ex+0x3b0/0x4e0 [ 172.871209][ T8976] _copy_from_user+0x2f/0xe0 [ 172.875838][ T8976] __sys_bpf+0x1a4/0x810 [ 172.880106][ T8976] ? __pfx___sys_bpf+0x10/0x10 [ 172.884905][ T8976] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 172.890906][ T8976] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.897255][ T8976] ? do_syscall_64+0x100/0x230 [ 172.902045][ T8976] __x64_sys_bpf+0x7c/0x90 [ 172.906484][ T8976] do_syscall_64+0xf3/0x230 [ 172.911010][ T8976] ? clear_bhb_loop+0x35/0x90 [ 172.915708][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.921619][ T8976] RIP: 0033:0x7f9a89575bd9 [ 172.926040][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.945635][ T8976] RSP: 002b:00007f9a8a2d8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.954068][ T8976] RAX: ffffffffffffffda RBX: 00007f9a89703f60 RCX: 00007f9a89575bd9 [ 172.962027][ T8976] RDX: 0000000000000048 RSI: 0000000020000780 RDI: 000000000000000a [ 172.969986][ T8976] RBP: 00007f9a8a2d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.977948][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.985906][ T8976] R13: 000000000000000b R14: 00007f9a89703f60 R15: 00007ffd4e67e268 [ 172.993878][ T8976] [ 173.430965][ T8989] validate_nla: 10 callbacks suppressed [ 173.430987][ T8989] netlink: 'syz.1.1439': attribute type 11 has an invalid length. [ 173.448370][ T8985] __nla_validate_parse: 2 callbacks suppressed [ 173.448385][ T8985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1438'. [ 173.492273][ T8988] netlink: 'syz.0.1441': attribute type 19 has an invalid length. [ 173.919647][ T9004] netlink: 'syz.3.1447': attribute type 1 has an invalid length. [ 173.976961][ T9004] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1447'. [ 174.061996][ T9010] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1450'. [ 174.837256][ T9026] netlink: 'syz.0.1456': attribute type 19 has an invalid length. [ 175.273712][ T9052] netlink: 'syz.1.1465': attribute type 7 has an invalid length. [ 175.302240][ T9052] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1465'. [ 175.469893][ T9036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.700278][ T9066] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1470'. [ 175.825115][ T9072] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1473'. [ 175.873892][ T5095] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 175.896224][ T9072] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1473'. [ 175.929507][ T9071] netlink: 'syz.4.1472': attribute type 19 has an invalid length. [ 175.953090][ T9074] netlink: 'syz.3.1474': attribute type 10 has an invalid length. [ 175.976699][ T9074] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1474'. [ 176.008880][ T9074] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 176.050802][ T9074] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 176.150610][ T9074] team0: Port device virt_wifi0 removed [ 176.282023][ T9090] can: request_module (can-proto-0) failed. [ 176.298914][ T9093] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 176.321501][ T9093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1480'. [ 176.341403][ T9093] team0: Device bond0 is up. Set it down before adding it as a team port [ 176.359569][ T9093] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 176.385849][ T9094] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1478'. [ 176.542821][ T9098] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 176.726205][ T9108] netlink: 'syz.2.1487': attribute type 19 has an invalid length. [ 176.843162][ T9115] team0: left allmulticast mode [ 176.852042][ T9115] team_slave_0: left allmulticast mode [ 176.876629][ T9115] team_slave_1: left allmulticast mode [ 176.882141][ T9115] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 176.948068][ T9115] team0: left promiscuous mode [ 176.963105][ T9115] team_slave_0: left promiscuous mode [ 176.985840][ T9115] team_slave_1: left promiscuous mode [ 176.991527][ T9115] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 177.024174][ T9115] bridge0: port 1(team0) entered disabled state [ 177.080411][ T9115] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.113476][ T9115] bond0: (slave team0): Enslaving as an active interface with an up link [ 177.135176][ T9121] bond0: (slave team0): Releasing backup interface [ 177.150116][ T9121] bridge0: port 1(team0) entered blocking state [ 177.162734][ T9121] bridge0: port 1(team0) entered disabled state [ 177.163793][ T5095] Bluetooth: hci2: Malformed HCI Event [ 177.177741][ T9121] team0: entered allmulticast mode [ 177.182985][ T9121] team_slave_0: entered allmulticast mode [ 177.190268][ T9121] team_slave_1: entered allmulticast mode [ 177.196032][ T9121] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 177.205875][ T9121] team0: entered promiscuous mode [ 177.211200][ T9121] team_slave_0: entered promiscuous mode [ 177.219145][ T9121] team_slave_1: entered promiscuous mode [ 177.225065][ T9121] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 177.243668][ T9110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.505250][ T9141] can: request_module (can-proto-0) failed. [ 178.613593][ T9200] __nla_validate_parse: 9 callbacks suppressed [ 178.613612][ T9200] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1521'. [ 178.613930][ T9198] validate_nla: 10 callbacks suppressed [ 178.613969][ T9198] netlink: 'syz.3.1519': attribute type 19 has an invalid length. [ 178.900508][ T9219] netlink: 'syz.0.1529': attribute type 19 has an invalid length. [ 179.305453][ T9239] team_slave_0: left promiscuous mode [ 179.352352][ T9239] team_slave_0: left allmulticast mode [ 179.476224][ T9239] team0: Port device team_slave_0 removed [ 179.513147][ T9239] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 179.560206][ T9253] netlink: 'syz.0.1545': attribute type 19 has an invalid length. [ 179.586445][ T9267] netlink: 'syz.1.1549': attribute type 6 has an invalid length. [ 179.598374][ T9259] pim6reg1: entered promiscuous mode [ 179.603704][ T9259] pim6reg1: entered allmulticast mode [ 179.662969][ T9269] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1551'. [ 179.672907][ T9269] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 179.762704][ T9275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1553'. [ 179.805256][ T9271] netlink: 'syz.3.1550': attribute type 12 has an invalid length. [ 179.830264][ T9271] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1550'. [ 179.996007][ T9295] netlink: 'syz.1.1560': attribute type 21 has an invalid length. [ 180.018008][ T9295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1560'. [ 180.030784][ T9295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1560'. [ 180.084921][ T9301] netlink: 'syz.2.1562': attribute type 19 has an invalid length. [ 180.114181][ T9305] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1563'. [ 180.184012][ T9307] netlink: 'syz.1.1565': attribute type 10 has an invalid length. [ 180.198815][ T9307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.215028][ T9307] batadv0: entered promiscuous mode [ 180.223489][ T9307] batadv0: entered allmulticast mode [ 180.230743][ T9307] team0: Port device batadv0 added [ 180.326417][ T81] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 180.335979][ T81] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 180.480100][ T9310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.731223][ T9339] netlink: 'syz.2.1579': attribute type 3 has an invalid length. [ 180.743124][ T9340] netlink: 'syz.3.1576': attribute type 3 has an invalid length. [ 180.766350][ T9339] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1579'. [ 180.810669][ T9340] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.1576'. [ 181.249542][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 181.255729][ T5092] Bluetooth: hci4: command 0x0406 tx timeout [ 181.255770][ T5100] Bluetooth: hci2: command 0x0406 tx timeout [ 181.262874][ T5108] Bluetooth: hci3: command 0x0406 tx timeout [ 181.271633][ T5100] Bluetooth: hci1: command 0x0406 tx timeout [ 181.463120][ T9368] netlink: 134312 bytes leftover after parsing attributes in process `syz.1.1589'. [ 181.476461][ T9368] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 181.487256][ T9368] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 182.555033][ T9440] caif0: entered promiscuous mode [ 182.567165][ T9440] caif0: entered allmulticast mode [ 182.589928][ T9440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.334840][ T9464] team0: left allmulticast mode [ 183.345921][ T9464] team_slave_0: left allmulticast mode [ 183.352250][ T9464] team_slave_1: left allmulticast mode [ 183.358445][ T9464] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 183.375113][ T9464] team0: left promiscuous mode [ 183.381699][ T9464] team_slave_0: left promiscuous mode [ 183.387826][ T9464] team_slave_1: left promiscuous mode [ 183.394097][ T9464] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 183.444233][ T9464] bridge0: port 1(team0) entered disabled state [ 183.459731][ T9464] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.484852][ T9464] bond0: (slave team0): Enslaving as an active interface with an up link [ 183.530164][ T5105] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 183.878424][ T9489] __nla_validate_parse: 10 callbacks suppressed [ 183.878462][ T9489] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.1641'. [ 184.682643][ T9542] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1659'. [ 184.704690][ T9542] team0: default FDB implementation only supports local addresses [ 185.598261][ T9568] validate_nla: 13 callbacks suppressed [ 185.598283][ T9568] netlink: 'syz.2.1671': attribute type 11 has an invalid length. [ 185.805581][ T9580] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 185.826974][ T9580] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1675'. [ 186.034172][ T9590] netlink: 'syz.3.1678': attribute type 3 has an invalid length. [ 186.066116][ T9590] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1678'. [ 186.084403][ T9600] FAULT_INJECTION: forcing a failure. [ 186.084403][ T9600] name failslab, interval 1, probability 0, space 0, times 0 [ 186.130867][ T9600] CPU: 0 PID: 9600 Comm: syz.2.1681 Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 186.140998][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 186.151069][ T9600] Call Trace: [ 186.154359][ T9600] [ 186.157299][ T9600] dump_stack_lvl+0x241/0x360 [ 186.162007][ T9600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.167228][ T9600] ? __pfx__printk+0x10/0x10 [ 186.171840][ T9600] ? __ip_dev_find+0x532/0x610 [ 186.176622][ T9600] ? __ip_dev_find+0xa4/0x610 [ 186.181315][ T9600] ? __pfx___ip_dev_find+0x10/0x10 [ 186.186452][ T9600] should_fail_ex+0x3b0/0x4e0 [ 186.191153][ T9600] ? dst_alloc+0x12b/0x190 [ 186.195587][ T9600] should_failslab+0x9/0x20 [ 186.200105][ T9600] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 186.205500][ T9600] dst_alloc+0x12b/0x190 [ 186.209761][ T9600] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 186.215840][ T9600] ip_route_output_key_hash+0x193/0x2b0 [ 186.221379][ T9600] ? ip_route_output_key_hash+0xdf/0x2b0 [ 186.227015][ T9600] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 186.233074][ T9600] ? __pfx_lock_release+0x10/0x10 [ 186.238088][ T9600] ? ip_cmsg_send+0x9cd/0xa80 [ 186.242762][ T9600] ip_route_output_flow+0x29/0x140 [ 186.247865][ T9600] raw_sendmsg+0x15e6/0x2490 [ 186.252460][ T9600] ? __pfx_raw_sendmsg+0x10/0x10 [ 186.257403][ T9600] ? iovec_from_user+0x61/0x240 [ 186.262243][ T9600] ? __pfx_lock_release+0x10/0x10 [ 186.267258][ T9600] ? inet_sendmsg+0x330/0x390 [ 186.271922][ T9600] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 186.277193][ T9600] ? security_socket_sendmsg+0x87/0xb0 [ 186.282642][ T9600] __sock_sendmsg+0x1a6/0x270 [ 186.287312][ T9600] ____sys_sendmsg+0x525/0x7d0 [ 186.292077][ T9600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.297365][ T9600] __sys_sendmsg+0x2b0/0x3a0 [ 186.301952][ T9600] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.307056][ T9600] ? vfs_write+0x7c4/0xc90 [ 186.311483][ T9600] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 186.317624][ T9600] ? do_syscall_64+0xb6/0x230 [ 186.322293][ T9600] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.328609][ T9600] ? do_syscall_64+0x100/0x230 [ 186.333364][ T9600] ? do_syscall_64+0xb6/0x230 [ 186.338029][ T9600] do_syscall_64+0xf3/0x230 [ 186.342519][ T9600] ? clear_bhb_loop+0x35/0x90 [ 186.347188][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.353069][ T9600] RIP: 0033:0x7f7cd0375bd9 [ 186.357470][ T9600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.377061][ T9600] RSP: 002b:00007f7cd1226048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.385463][ T9600] RAX: ffffffffffffffda RBX: 00007f7cd0503f60 RCX: 00007f7cd0375bd9 [ 186.393423][ T9600] RDX: 0000000000000000 RSI: 0000000020003a80 RDI: 0000000000000003 [ 186.401383][ T9600] RBP: 00007f7cd12260a0 R08: 0000000000000000 R09: 0000000000000000 [ 186.409343][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.417302][ T9600] R13: 000000000000000b R14: 00007f7cd0503f60 R15: 00007ffc82a647f8 [ 186.425272][ T9600] [ 186.666902][ T9613] netlink: 'syz.4.1687': attribute type 3 has an invalid length. [ 186.700541][ T9616] raw_sendmsg: syz.1.1688 forgot to set AF_INET. Fix it! [ 186.961138][ T9622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.234629][ T9639] syzkaller0: entered promiscuous mode [ 187.240916][ T9639] syzkaller0: entered allmulticast mode [ 187.429909][ T9647] netlink: 'syz.4.1699': attribute type 2 has an invalid length. [ 187.442193][ T9647] netlink: 'syz.4.1699': attribute type 8 has an invalid length. [ 187.458818][ T9647] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1699'. [ 189.049283][ T9664] netlink: 'syz.0.1705': attribute type 4 has an invalid length. [ 189.058676][ T9683] netlink: 'syz.4.1711': attribute type 11 has an invalid length. [ 189.076691][ T9683] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1711'. [ 189.145076][ T9686] netlink: 'syz.0.1713': attribute type 10 has an invalid length. [ 189.194641][ T9691] netlink: 'syz.4.1714': attribute type 21 has an invalid length. [ 189.218066][ T9692] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1715'. [ 189.262123][ T9692] openvswitch: netlink: Flow key attr not present in new flow. [ 190.021423][ T9738] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1735'. [ 190.046792][ T9738] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 190.283957][ T9754] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1740'. [ 190.296242][ T9754] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1740'. [ 190.349248][ T9757] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1743'. [ 190.450770][ T9752] netlink: 126008 bytes leftover after parsing attributes in process `syz.0.1741'. [ 190.631976][ T9769] vlan0: entered promiscuous mode [ 190.638657][ T9769] vlan0: entered allmulticast mode [ 190.649007][ T9769] @ÿÿÿ: entered allmulticast mode [ 190.888737][ T9780] validate_nla: 5 callbacks suppressed [ 190.888756][ T9780] netlink: 'syz.2.1750': attribute type 12 has an invalid length. [ 190.923554][ T9780] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.1750'. [ 190.957953][ T9781] netlink: 239 bytes leftover after parsing attributes in process `syz.2.1750'. [ 191.134236][ T9788] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1755'. [ 192.533004][ T9841] netlink: 'syz.3.1772': attribute type 64 has an invalid length. [ 192.775458][ T9849] netlink: 'syz.0.1775': attribute type 10 has an invalid length. [ 192.787654][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.797269][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.811366][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.821382][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.837678][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 192.850289][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.040498][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.223524][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.292158][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.335792][ T9850] chnl_net:caif_netlink_parms(): no params data found [ 194.363248][ T9890] netlink: 'syz.2.1787': attribute type 10 has an invalid length. [ 194.371673][ T9890] __nla_validate_parse: 7 callbacks suppressed [ 194.371688][ T9890] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1787'. [ 194.402863][ T9898] netlink: 'syz.0.1791': attribute type 10 has an invalid length. [ 194.416799][ T9898] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1791'. [ 194.555327][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.563231][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.614441][ T9898] team0: Port device virt_wifi0 removed [ 194.926789][ T5106] Bluetooth: hci2: command tx timeout [ 195.070171][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.387758][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.406348][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.450959][ T9850] bridge_slave_0: entered allmulticast mode [ 195.477730][ T9850] bridge_slave_0: entered promiscuous mode [ 195.517955][ T9922] netlink: 'syz.0.1801': attribute type 10 has an invalid length. [ 195.541226][ T9850] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.587088][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.627056][ T9921] delete_channel: no stack [ 195.698331][ T9850] bridge_slave_1: entered allmulticast mode [ 195.705699][ T9850] bridge_slave_1: entered promiscuous mode [ 195.900090][ T9931] netlink: 'syz.1.1803': attribute type 10 has an invalid length. [ 195.927112][ T9931] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1803'. [ 196.034253][ T9850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.093756][ T9850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.286835][ T9947] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 196.329546][ T9947] hsr_slave_0: left promiscuous mode [ 196.362052][ T9947] hsr_slave_1: left promiscuous mode [ 196.473681][ T9850] team0: Port device team_slave_0 added [ 196.513112][ T9956] IPv6: NLM_F_REPLACE set, but no existing node found! [ 196.548400][ T9850] team0: Port device team_slave_1 added [ 196.716050][ T9970] netlink: 'syz.0.1817': attribute type 3 has an invalid length. [ 196.738941][ T9970] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1817'. [ 197.003343][ T81] bond0 (unregistering): (slave gretap0): Releasing backup interface [ 197.006751][ T5106] Bluetooth: hci2: command tx timeout [ 197.203058][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.217851][ T81] bond_slave_0: left promiscuous mode [ 197.232870][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.244355][ T81] bond_slave_1: left promiscuous mode [ 197.256066][ T81] bond0 (unregistering): (slave team0): Releasing backup interface [ 197.265028][ T81] team0: left promiscuous mode [ 197.272259][ T81] team_slave_0: left promiscuous mode [ 197.278416][ T81] team_slave_1: left promiscuous mode [ 197.283887][ T81] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 197.294963][ T81] bond0 (unregistering): Released all slaves [ 197.306323][ T9965] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1816'. [ 197.333055][ T9978] netlink: 'syz.3.1818': attribute type 10 has an invalid length. [ 197.341085][ T9978] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1818'. [ 197.354141][ T9978] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 197.362603][ T9978] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 197.371129][ T9978] team0: Port device virt_wifi0 added [ 197.386648][ T9984] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1820'. [ 197.535542][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.548405][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.576148][ T9850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.590542][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.597739][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.626273][ T9850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.637667][ T9996] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1821'. [ 197.779825][T10011] netlink: 'syz.1.1827': attribute type 21 has an invalid length. [ 198.113678][ T9850] hsr_slave_0: entered promiscuous mode [ 198.155782][ T9850] hsr_slave_1: entered promiscuous mode [ 198.192657][T10027] netlink: 'syz.3.1832': attribute type 10 has an invalid length. [ 198.237616][T10027] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1832'. [ 198.288706][T10022] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1831'. [ 198.691743][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.736220][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.757818][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.786674][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.907038][ T81] veth1_vlan: left promiscuous mode [ 198.912888][ T81] @ÿÿÿ: left allmulticast mode [ 198.956879][ T81] @ÿÿÿ: left promiscuous mode [ 199.130059][ T5106] Bluetooth: hci2: command tx timeout [ 200.188087][ T81] team0 (unregistering): Port device virt_wifi0 removed [ 200.346717][ T81] team0 (unregistering): Port device team_slave_1 removed [ 200.382119][ T81] team0 (unregistering): Port device team_slave_0 removed [ 200.685161][T10067] netlink: 'syz.3.1843': attribute type 11 has an invalid length. [ 200.726719][T10079] netlink: 'syz.0.1846': attribute type 10 has an invalid length. [ 200.747766][T10079] __nla_validate_parse: 1 callbacks suppressed [ 200.747783][T10079] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1846'. [ 200.774310][T10085] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.1849'. [ 201.111876][T10100] netlink: 'syz.2.1854': attribute type 2 has an invalid length. [ 201.136744][T10100] netlink: 'syz.2.1854': attribute type 8 has an invalid length. [ 201.162911][T10100] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1854'. [ 201.176922][ T5106] Bluetooth: hci2: command tx timeout [ 201.253878][T10111] netlink: 'syz.1.1858': attribute type 10 has an invalid length. [ 201.263518][T10111] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1858'. [ 201.307072][T10102] netlink: 'syz.3.1855': attribute type 13 has an invalid length. [ 201.335158][T10102] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1855'. [ 201.658262][T10125] netlink: 'syz.3.1861': attribute type 10 has an invalid length. [ 201.700425][T10125] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1861'. [ 202.000707][T10144] netlink: 165804 bytes leftover after parsing attributes in process `syz.2.1868'. [ 202.098968][ T9850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.133839][ T9850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.161174][ T9850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.200778][ T9850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.491098][ T9850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.560891][ T9850] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.581998][T10170] netlink: 'syz.3.1877': attribute type 10 has an invalid length. [ 202.596129][T10170] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1877'. [ 202.616829][T10170] macvlan1: entered allmulticast mode [ 202.625264][T10170] veth1_vlan: entered allmulticast mode [ 202.640539][T10170] bridge0: port 5(macvlan1) entered blocking state [ 202.652871][T10170] bridge0: port 5(macvlan1) entered disabled state [ 202.704940][T10170] macvlan1: entered promiscuous mode [ 202.713136][T10170] bridge0: port 5(macvlan1) entered blocking state [ 202.720159][T10170] bridge0: port 5(macvlan1) entered forwarding state [ 202.746969][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.754175][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.806556][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.813731][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.952198][ T9850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.984245][T10189] netlink: 'syz.3.1884': attribute type 3 has an invalid length. [ 202.995709][T10189] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1884'. [ 203.037425][T10191] netlink: 'syz.1.1885': attribute type 6 has an invalid length. [ 203.338653][T10211] netlink: 'syz.2.1889': attribute type 4 has an invalid length. [ 203.367026][T10211] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1889'. [ 203.378660][T10211] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 203.540471][ T9850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.739929][T10229] netlink: 'syz.1.1893': attribute type 10 has an invalid length. [ 203.758042][T10229] macvlan1: entered allmulticast mode [ 203.763785][T10229] veth1_vlan: entered allmulticast mode [ 203.772054][T10229] bridge0: port 1(macvlan1) entered blocking state [ 203.780395][T10229] bridge0: port 1(macvlan1) entered disabled state [ 203.807507][T10229] macvlan1: entered promiscuous mode [ 203.823921][T10229] bridge0: port 1(macvlan1) entered blocking state [ 203.830965][T10229] bridge0: port 1(macvlan1) entered forwarding state [ 203.995692][T10197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.122822][ T9850] veth0_vlan: entered promiscuous mode [ 204.180340][ T9850] veth1_vlan: entered promiscuous mode [ 204.309911][ T9850] veth0_macvtap: entered promiscuous mode [ 204.335407][ T9850] veth1_macvtap: entered promiscuous mode [ 204.400948][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.440775][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.455352][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.469563][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.481964][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.497106][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.511609][ T9850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.534789][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.545638][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.569630][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.583270][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.600184][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.614684][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.632717][ T9850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.643383][ T9850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.658231][ T9850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.711756][ T9850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.738712][ T9850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.754939][ T9850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.766309][ T9850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.955596][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.984166][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.065614][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.073584][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.006081][T10340] __nla_validate_parse: 7 callbacks suppressed [ 206.006117][T10340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1922'. [ 206.056568][T10340] macvlan1: entered allmulticast mode [ 206.084898][T10349] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1924'. [ 206.098160][T10340] veth1_vlan: entered allmulticast mode [ 206.114635][T10340] bridge0: port 3(macvlan1) entered blocking state [ 206.144793][T10340] bridge0: port 3(macvlan1) entered disabled state [ 206.175363][T10340] macvlan1: entered promiscuous mode [ 206.199839][T10340] bridge0: port 3(macvlan1) entered blocking state [ 206.206614][T10340] bridge0: port 3(macvlan1) entered forwarding state [ 206.296180][T10361] validate_nla: 1 callbacks suppressed [ 206.296217][T10361] netlink: 'syz.1.1929': attribute type 21 has an invalid length. [ 207.055823][T10410] netlink: 'syz.1.1944': attribute type 10 has an invalid length. [ 207.089964][T10410] team0: Device vlan0 is up. Set it down before adding it as a team port [ 207.915390][T10432] netlink: 'syz.2.1951': attribute type 10 has an invalid length. [ 207.925468][T10432] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.088546][T10438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1954'. [ 208.202247][T10447] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 208.240727][T10447] veth1_macvtap: left allmulticast mode [ 208.241649][T10451] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1959'. [ 208.256419][T10447] veth1_macvtap: left promiscuous mode [ 208.276276][T10447] bridge0: port 4(macsec0) entered disabled state [ 208.394679][T10458] netlink: 'syz.2.1963': attribute type 10 has an invalid length. [ 208.742378][T10476] netlink: 134312 bytes leftover after parsing attributes in process `syz.2.1970'. [ 208.760782][T10476] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 208.780599][T10481] netlink: 'syz.1.1972': attribute type 10 has an invalid length. [ 208.788577][T10476] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 208.868321][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1973'. [ 208.968374][T10488] netlink: 'syz.4.1974': attribute type 21 has an invalid length. [ 208.984855][T10488] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1974'. [ 209.004080][T10488] netlink: 'syz.4.1974': attribute type 4 has an invalid length. [ 209.015945][T10488] netlink: 'syz.4.1974': attribute type 6 has an invalid length. [ 209.070734][T10488] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1974'. [ 209.114905][T10492] netlink: 'syz.3.1977': attribute type 13 has an invalid length. [ 209.134825][T10492] macvtap0: entered allmulticast mode [ 209.156679][T10492] veth0_macvtap: entered allmulticast mode [ 209.180612][T10492] macvtap0: refused to change device tx_queue_len [ 209.904843][T10537] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1993'. [ 211.230756][T10583] veth1_macvtap: left allmulticast mode [ 211.248490][T10583] veth1_macvtap: left promiscuous mode [ 211.267860][T10583] bridge0: port 5(macsec0) entered disabled state [ 211.540133][T10600] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2012'. [ 211.551498][T10602] netlink: 165800 bytes leftover after parsing attributes in process `syz.3.2013'. [ 211.764329][T10600] @ÿÿÿ: left allmulticast mode [ 211.982672][T10600] veth1_vlan (unregistering): left allmulticast mode [ 212.035026][T10600] bridge0: port 1(macvlan1) entered disabled state [ 212.119836][T10600] macvlan1 (unregistering): left promiscuous mode [ 212.142216][T10600] bridge0: port 1(macvlan1) entered disabled state [ 212.506156][T10613] validate_nla: 8 callbacks suppressed [ 212.506176][T10613] netlink: 'syz.2.2016': attribute type 21 has an invalid length. [ 212.535730][T10619] netlink: 'syz.0.2020': attribute type 21 has an invalid length. [ 212.721087][T10641] netlink: 'syz.3.2029': attribute type 6 has an invalid length. [ 212.761255][T10641] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2029'. [ 213.262749][T10665] netlink: 'syz.1.2039': attribute type 29 has an invalid length. [ 213.279706][T10653] netlink: 'syz.4.2035': attribute type 4 has an invalid length. [ 213.305966][T10665] netlink: 'syz.1.2039': attribute type 29 has an invalid length. [ 213.309361][T10653] netlink: 'syz.4.2035': attribute type 4 has an invalid length. [ 213.361986][T10665] netlink: 'syz.1.2039': attribute type 29 has an invalid length. [ 213.375917][T10653] netlink: 126008 bytes leftover after parsing attributes in process `syz.4.2035'. [ 213.411597][T10665] netlink: 'syz.1.2039': attribute type 29 has an invalid length. [ 213.436612][T10665] netlink: 'syz.1.2039': attribute type 29 has an invalid length. [ 213.581333][T10671] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.2041'. [ 213.606904][T10671] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2041'. [ 214.175797][T10701] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2052'. [ 214.349721][T10710] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2056'. [ 214.583738][T10711] bridge0: port 5(macvlan1) entered disabled state [ 214.590641][T10711] bridge0: port 4(dummy0) entered disabled state [ 214.597246][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.605907][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.745325][T10727] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2061'. [ 214.754973][T10712] bridge0: port 5(macvlan1) entered blocking state [ 214.755091][T10712] bridge0: port 5(macvlan1) entered forwarding state [ 214.755355][T10712] bridge0: port 4(dummy0) entered blocking state [ 214.755485][T10712] bridge0: port 4(dummy0) entered forwarding state [ 214.755697][T10712] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.788912][T10712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.796371][T10712] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.803614][T10712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.836961][T10712] bridge0: entered promiscuous mode [ 214.850106][T10730] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2062'. [ 214.924026][T10712] bridge0: entered allmulticast mode [ 216.916440][T10800] __nla_validate_parse: 2 callbacks suppressed [ 216.916461][T10800] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.2087'. [ 217.202448][T10810] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 217.650803][T10813] validate_nla: 8 callbacks suppressed [ 217.650842][T10813] netlink: 'syz.3.2090': attribute type 2 has an invalid length. [ 217.667370][T10813] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2090'. [ 217.969345][T10827] netlink: 'syz.3.2095': attribute type 28 has an invalid length. [ 218.027525][T10831] netlink: 'syz.0.2097': attribute type 11 has an invalid length. [ 218.289515][T10846] netlink: 'syz.1.2104': attribute type 10 has an invalid length. [ 218.306758][T10846] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2104'. [ 218.565234][T10873] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2112'. [ 218.591038][T10873] openvswitch: netlink: Duplicate key (type 0). [ 218.642689][T10877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2113'. [ 218.809602][T10892] netlink: 'syz.1.2119': attribute type 21 has an invalid length. [ 219.252979][T10902] pim6reg1: entered allmulticast mode [ 219.305021][T10910] pim6reg1: entered promiscuous mode [ 219.349560][T10923] netlink: 'syz.4.2129': attribute type 2 has an invalid length. [ 219.357534][T10923] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2129'. [ 219.609820][T10933] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2134'. [ 219.765416][T10939] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2136'. [ 221.266459][T10998] netlink: 'syz.1.2156': attribute type 64 has an invalid length. [ 221.312514][T10997] netlink: 'syz.4.2158': attribute type 21 has an invalid length. [ 221.340902][T10997] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.682142][T11022] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2166'. [ 221.785276][T11027] netlink: 'syz.1.2167': attribute type 10 has an invalid length. [ 221.821485][T11027] team0: left allmulticast mode [ 221.836598][T11027] team_slave_0: left allmulticast mode [ 221.850491][T11027] team_slave_1: left allmulticast mode [ 221.864861][T11027] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 221.872179][T11027] batadv0: left allmulticast mode [ 221.877431][T11027] team0: left promiscuous mode [ 221.883048][T11027] team_slave_0: left promiscuous mode [ 221.896244][T11027] team_slave_1: left promiscuous mode [ 221.904420][T11027] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 221.911720][T11027] batadv0: left promiscuous mode [ 221.923484][T11027] bridge0: port 5(team0) entered disabled state [ 221.939582][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.962450][T11027] bond0: (slave team0): Enslaving as an active interface with an up link [ 221.971961][T11031] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2168'. [ 222.099427][T11047] netlink: 'syz.2.2174': attribute type 21 has an invalid length. [ 222.132954][T11047] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2174'. [ 222.159477][T11047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2174'. [ 222.978413][T11079] validate_nla: 1 callbacks suppressed [ 222.978434][T11079] netlink: 'syz.4.2186': attribute type 3 has an invalid length. [ 222.998903][T11079] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2186'. [ 223.160502][T11083] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.2187'. [ 223.172321][T11083] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 223.277992][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 223.589224][T11123] netlink: 'syz.1.2199': attribute type 10 has an invalid length. [ 223.707776][T11128] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2202'. [ 223.870679][T11136] netlink: 'syz.1.2205': attribute type 2 has an invalid length. [ 223.887642][T11136] netlink: 'syz.1.2205': attribute type 8 has an invalid length. [ 223.903817][T11136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2205'. [ 224.076182][T11147] sctp: [Deprecated]: syz.4.2210 (pid 11147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.076182][T11147] Use struct sctp_sack_info instead [ 224.406006][T11163] IPv6: NLM_F_REPLACE set, but no existing node found! [ 224.595970][T11176] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.2219'. [ 224.919474][T11189] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2226'. [ 225.287382][T11203] netlink: 'syz.4.2230': attribute type 3 has an invalid length. [ 225.658864][T11215] netlink: 'syz.3.2236': attribute type 6 has an invalid length. [ 225.748911][T11222] netlink: 'syz.2.2241': attribute type 10 has an invalid length. [ 225.998158][T11236] netlink: 'syz.4.2246': attribute type 1 has an invalid length. [ 226.467958][T11256] netlink: 'syz.2.2255': attribute type 10 has an invalid length. [ 227.105464][T11298] netlink: 'syz.4.2271': attribute type 10 has an invalid length. [ 227.142150][T11298] __nla_validate_parse: 9 callbacks suppressed [ 227.142186][T11298] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2271'. [ 227.243203][T11306] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2276'. [ 227.256065][T11306] netlink: 3072 bytes leftover after parsing attributes in process `syz.3.2276'. [ 227.431040][T11298] team0: Port device virt_wifi0 added [ 227.492127][T11303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2275'. [ 227.531128][T11308] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2277'. [ 227.774523][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2279'. [ 227.867609][T11323] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2284'. [ 227.993653][T11326] netlink: 64995 bytes leftover after parsing attributes in process `syz.0.2286'. [ 228.008056][T11331] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2288'. [ 228.034132][T11332] netlink: 64995 bytes leftover after parsing attributes in process `syz.0.2286'. [ 228.214304][T11340] validate_nla: 2 callbacks suppressed [ 228.214341][T11340] netlink: 'syz.2.2291': attribute type 10 has an invalid length. [ 228.357965][T11342] netlink: 'syz.4.2292': attribute type 21 has an invalid length. [ 228.390494][T11342] netlink: 'syz.4.2292': attribute type 1 has an invalid length. [ 228.945266][T11379] netlink: 'syz.0.2305': attribute type 10 has an invalid length. [ 228.973580][T11380] netlink: 'syz.3.2306': attribute type 10 has an invalid length. [ 229.006276][T11380] hsr0: entered promiscuous mode [ 229.017581][T11380] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 229.076739][T11380] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 229.108495][T11380] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 229.143693][T11380] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 229.161759][T11382] netlink: 'syz.1.2307': attribute type 10 has an invalid length. [ 229.753118][T11410] netlink: 'syz.1.2318': attribute type 29 has an invalid length. [ 229.787263][T11410] netlink: 'syz.1.2318': attribute type 29 has an invalid length. [ 230.143117][T11426] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 230.257371][T11428] netlink: 'syz.4.2322': attribute type 10 has an invalid length. [ 230.519700][T11444] netlink: 'syz.4.2330': attribute type 3 has an invalid length. [ 230.639245][T11449] tun0: tun_chr_ioctl cmd 1074025677 [ 230.652403][T11449] tun0: linktype set to 773 [ 230.664570][T11437] FAULT_INJECTION: forcing a failure. [ 230.664570][T11437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.694310][T11437] CPU: 1 PID: 11437 Comm: syz.2.2329 Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 230.704490][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 230.714558][T11437] Call Trace: [ 230.717854][T11437] [ 230.720790][T11437] dump_stack_lvl+0x241/0x360 [ 230.725461][T11437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.730649][T11437] ? __pfx__printk+0x10/0x10 [ 230.735224][T11437] ? bpf_cgroup_storage_free+0x8f/0xb0 [ 230.740673][T11437] ? __pfx_lock_release+0x10/0x10 [ 230.745681][T11437] ? bpf_test_run+0x840/0x910 [ 230.750353][T11437] should_fail_ex+0x3b0/0x4e0 [ 230.755037][T11437] _copy_to_user+0x2f/0xb0 [ 230.759461][T11437] bpf_test_finish+0x22c/0x8b0 [ 230.764221][T11437] ? __pfx_bpf_test_finish+0x10/0x10 [ 230.769496][T11437] ? convert_skb_to___skb+0x2d3/0x510 [ 230.774854][T11437] bpf_prog_test_run_skb+0xfe5/0x1820 [ 230.780228][T11437] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 230.786022][T11437] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 230.791813][T11437] bpf_prog_test_run+0x33a/0x3b0 [ 230.796752][T11437] __sys_bpf+0x48d/0x810 [ 230.801008][T11437] ? __pfx___sys_bpf+0x10/0x10 [ 230.805764][T11437] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.811733][T11437] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.818053][T11437] ? do_syscall_64+0x100/0x230 [ 230.822805][T11437] __x64_sys_bpf+0x7c/0x90 [ 230.827209][T11437] do_syscall_64+0xf3/0x230 [ 230.831700][T11437] ? clear_bhb_loop+0x35/0x90 [ 230.836361][T11437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.842238][T11437] RIP: 0033:0x7f7cd0375bd9 [ 230.846646][T11437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.866250][T11437] RSP: 002b:00007f7cd1226048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.874658][T11437] RAX: ffffffffffffffda RBX: 00007f7cd0503f60 RCX: 00007f7cd0375bd9 [ 230.882620][T11437] RDX: 0000000000000048 RSI: 0000000020000780 RDI: 000000000000000a [ 230.890578][T11437] RBP: 00007f7cd12260a0 R08: 0000000000000000 R09: 0000000000000000 [ 230.898538][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.906501][T11437] R13: 000000000000000b R14: 00007f7cd0503f60 R15: 00007ffc82a647f8 [ 230.914481][T11437] [ 231.841305][T11502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.396042][T11555] __nla_validate_parse: 18 callbacks suppressed [ 232.396082][T11555] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2370'. [ 232.734130][T11571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2376'. [ 233.061346][T11583] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.2380'. [ 233.571601][T11610] validate_nla: 7 callbacks suppressed [ 233.571621][T11610] netlink: 'syz.2.2390': attribute type 21 has an invalid length. [ 233.880835][T11627] : renamed from bond0 (while UP) [ 234.144444][T11632] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.2397'. [ 234.484977][T11643] netlink: 'syz.1.2402': attribute type 9 has an invalid length. [ 234.504197][T11643] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2402'. [ 234.664397][T11649] netlink: 'syz.2.2405': attribute type 9 has an invalid length. [ 234.676749][T11649] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2405'. [ 234.727987][T11657] netlink: 'syz.1.2407': attribute type 3 has an invalid length. [ 234.762005][T11657] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2407'. [ 234.934817][T11669] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.2412'. [ 235.161456][T11686] netlink: 'syz.2.2421': attribute type 10 has an invalid length. [ 235.175564][T11686] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2421'. [ 235.201468][T11690] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2420'. [ 235.428063][T11705] netlink: 'syz.4.2426': attribute type 10 has an invalid length. [ 235.460206][T11705] hsr_slave_0: left promiscuous mode [ 235.479881][T11705] hsr_slave_1: left promiscuous mode [ 236.571290][T11731] netlink: 'syz.0.2434': attribute type 10 has an invalid length. [ 236.783179][T11745] netlink: 'syz.2.2441': attribute type 2 has an invalid length. [ 236.875230][T11745] netlink: 'syz.2.2441': attribute type 8 has an invalid length. [ 236.910768][T11744] netlink: 'syz.0.2440': attribute type 21 has an invalid length. [ 237.658918][T11777] __nla_validate_parse: 6 callbacks suppressed [ 237.658937][T11777] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2450'. [ 237.696112][T11779] netlink: 202268 bytes leftover after parsing attributes in process `syz.4.2453'. [ 238.008967][T11798] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2459'. [ 238.129898][T11809] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2462'. [ 238.266161][T11815] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.2464'. [ 238.826029][T11816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.047765][T11835] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2470'. [ 239.105636][T11835] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2470'. [ 239.129581][T11842] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2475'. [ 239.523616][T11813] syz.1.2463: vmalloc error: size 72003584, failed to allocated page array size 140632, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 239.612504][T11813] CPU: 0 PID: 11813 Comm: syz.1.2463 Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 239.622714][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 239.632793][T11813] Call Trace: [ 239.636090][T11813] [ 239.639043][T11813] dump_stack_lvl+0x241/0x360 [ 239.643747][T11813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.649087][T11813] ? __pfx__printk+0x10/0x10 [ 239.653719][T11813] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 239.660158][T11813] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 239.666689][T11813] warn_alloc+0x278/0x410 [ 239.671051][T11813] ? __pfx_warn_alloc+0x10/0x10 [ 239.675926][T11813] ? bpf_check+0x253/0x19290 [ 239.680630][T11813] ? __get_vm_area_node+0x23d/0x270 [ 239.685856][T11813] __vmalloc_node_range_noprof+0x69f/0x1460 [ 239.691775][T11813] ? __pfx_lock_acquire+0x10/0x10 [ 239.696838][T11813] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 239.703186][T11813] ? __phys_addr+0xba/0x170 [ 239.707712][T11813] ? __kasan_kmalloc_large+0x8a/0xa0 [ 239.713027][T11813] ? bpf_check+0x253/0x19290 [ 239.717638][T11813] vzalloc_noprof+0x79/0x90 [ 239.722159][T11813] ? bpf_check+0x253/0x19290 [ 239.726766][T11813] bpf_check+0x253/0x19290 [ 239.731219][T11813] ? __pfx_validate_chain+0x10/0x10 [ 239.736439][T11813] ? page_ext_put+0x97/0xc0 [ 239.740970][T11813] ? handle_pte_fault+0x5128/0x7130 [ 239.746196][T11813] ? handle_pte_fault+0x51b3/0x7130 [ 239.751413][T11813] ? __pfx_lock_release+0x10/0x10 [ 239.756452][T11813] ? __page_table_check_ptes_set+0x30f/0x410 [ 239.762455][T11813] ? mark_lock+0x9a/0x350 [ 239.766805][T11813] ? __lock_acquire+0x1346/0x1fd0 [ 239.771851][T11813] ? validate_chain+0x11e/0x5900 [ 239.776822][T11813] ? __pfx_bpf_check+0x10/0x10 [ 239.781601][T11813] ? validate_chain+0x11e/0x5900 [ 239.786562][T11813] ? mark_lock+0x9a/0x350 [ 239.790905][T11813] ? __pfx_validate_chain+0x10/0x10 [ 239.796125][T11813] ? __pfx_lock_release+0x10/0x10 [ 239.801169][T11813] ? __pfx_validate_chain+0x10/0x10 [ 239.806390][T11813] ? count_memcg_event_mm+0x94/0x420 [ 239.811695][T11813] ? __pfx_validate_chain+0x10/0x10 [ 239.816909][T11813] ? count_memcg_event_mm+0x3c2/0x420 [ 239.822302][T11813] ? count_memcg_event_mm+0x94/0x420 [ 239.827606][T11813] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 239.833352][T11813] ? __pfx_lock_release+0x10/0x10 [ 239.838396][T11813] ? mark_lock+0x9a/0x350 [ 239.842747][T11813] ? __lock_acquire+0x1346/0x1fd0 [ 239.847814][T11813] ? __pfx_lock_acquire+0x10/0x10 [ 239.852855][T11813] ? timekeeping_get_ns+0x5c/0x420 [ 239.857983][T11813] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.863987][T11813] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.870341][T11813] ? timekeeping_get_ns+0x5c/0x420 [ 239.875467][T11813] ? seqcount_lockdep_reader_access+0x157/0x220 [ 239.881729][T11813] ? lockdep_hardirqs_on+0x99/0x150 [ 239.886943][T11813] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 239.893205][T11813] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 239.899809][T11813] ? ktime_get_with_offset+0x83/0x150 [ 239.905204][T11813] ? lockdep_hardirqs_on+0x99/0x150 [ 239.910417][T11813] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 239.916682][T11813] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 239.923298][T11813] ? read_tsc+0x9/0x20 [ 239.927377][T11813] ? timekeeping_get_ns+0x2c0/0x420 [ 239.932574][T11813] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 239.937588][T11813] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 239.942785][T11813] ? security_bpf_prog_load+0x87/0xb0 [ 239.948166][T11813] bpf_prog_load+0x1667/0x20f0 [ 239.952932][T11813] ? __pfx_bpf_prog_load+0x10/0x10 [ 239.958031][T11813] ? __pfx___might_resched+0x10/0x10 [ 239.963317][T11813] ? __might_fault+0xc6/0x120 [ 239.967990][T11813] ? bpf_lsm_bpf+0x9/0x10 [ 239.972312][T11813] ? security_bpf+0x87/0xb0 [ 239.976814][T11813] __sys_bpf+0x4ee/0x810 [ 239.981054][T11813] ? __pfx___sys_bpf+0x10/0x10 [ 239.985810][T11813] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.991810][T11813] __x64_sys_bpf+0x7c/0x90 [ 239.996220][T11813] do_syscall_64+0xf3/0x230 [ 240.000715][T11813] ? clear_bhb_loop+0x35/0x90 [ 240.005385][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.011269][T11813] RIP: 0033:0x7f46c0175bd9 [ 240.015673][T11813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.035270][T11813] RSP: 002b:00007f46bfbff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.043679][T11813] RAX: ffffffffffffffda RBX: 00007f46c0303f60 RCX: 00007f46c0175bd9 [ 240.051644][T11813] RDX: 0000000000000090 RSI: 0000000020000440 RDI: 0000000000000005 [ 240.059605][T11813] RBP: 00007f46c01e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 240.067565][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.075522][T11813] R13: 000000000000000b R14: 00007f46c0303f60 R15: 00007ffee7a368d8 [ 240.083493][T11813] [ 240.104215][T11813] Mem-Info: [ 240.108039][T11813] active_anon:19157 inactive_anon:0 isolated_anon:0 [ 240.108039][T11813] active_file:19679 inactive_file:38205 isolated_file:0 [ 240.108039][T11813] unevictable:768 dirty:66 writeback:0 [ 240.108039][T11813] slab_reclaimable:9794 slab_unreclaimable:100966 [ 240.108039][T11813] mapped:20765 shmem:14802 pagetables:759 [ 240.108039][T11813] sec_pagetables:0 bounce:0 [ 240.108039][T11813] kernel_misc_reclaimable:0 [ 240.108039][T11813] free:1364124 free_pcp:647 free_cma:0 [ 240.168631][T11813] Node 0 active_anon:76688kB inactive_anon:0kB active_file:78716kB inactive_file:152752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:54016kB dirty:292kB writeback:0kB shmem:57772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10064kB pagetables:2880kB sec_pagetables:0kB all_unreclaimable? no [ 240.236436][T11813] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 240.329807][T11813] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.376880][T11813] lowmem_reserve[]: 0 2571 2571 0 0 [ 240.392438][T11871] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2482'. [ 240.412762][T11871] validate_nla: 7 callbacks suppressed [ 240.412777][T11871] netlink: 'syz.4.2482': attribute type 2 has an invalid length. [ 240.441491][T11813] Node 0 DMA32 free:1505408kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:66552kB inactive_anon:0kB active_file:78716kB inactive_file:152436kB unevictable:1536kB writepending:292kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:1476kB local_pcp:700kB free_cma:0kB [ 240.487343][T11871] netlink: 'syz.4.2482': attribute type 8 has an invalid length. [ 240.526728][T11813] lowmem_reserve[]: 0 0 0 0 0 [ 240.527411][T11871] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2482'. [ 240.531568][T11813] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 240.624244][T11813] lowmem_reserve[]: 0 0 0 0 0 [ 240.641740][T11813] Node 1 Normal free:3949560kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.680764][T11813] lowmem_reserve[]: 0 0 0 0 0 [ 240.704571][T11813] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.799343][T11813] Node 0 DMA32: 251*4kB (UME) 121*8kB (UM) 596*16kB (UME) 468*32kB (UME) 29*64kB (UME) 6*128kB (UME) 9*256kB (UME) 12*512kB (UME) 8*1024kB (UM) 3*2048kB (M) 357*4096kB (M) = 1514164kB [ 240.950226][T11813] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 241.019960][T11891] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 241.051744][T11813] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 9*16kB (UM) 4*32kB (UM) 7*64kB (UM) 6*128kB (UM) 6*256kB (U) 4*512kB (UM) 2*1024kB (U) 5*2048kB (UM) 960*4096kB (M) = 3949560kB [ 241.070956][T11813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.144183][T11901] netlink: 'syz.4.2493': attribute type 64 has an invalid length. [ 241.153768][T11813] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.206932][T11813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.254149][T11813] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.293100][T11813] 62720 total pagecache pages [ 241.305352][T11813] 0 pages in swap cache [ 241.319179][T11813] Free swap = 124996kB [ 241.326720][T11813] Total swap = 124996kB [ 241.333740][T11813] 2097051 pages RAM [ 241.338910][T11813] 0 pages HighMem/MovableOnly [ 241.343956][T11813] 400871 pages reserved [ 241.356315][T11813] 0 pages cma reserved [ 241.488000][T11920] FAULT_INJECTION: forcing a failure. [ 241.488000][T11920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.537160][T11920] CPU: 0 PID: 11920 Comm: syz.2.2501 Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 241.547359][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 241.557424][T11920] Call Trace: [ 241.560694][T11920] [ 241.563612][T11920] dump_stack_lvl+0x241/0x360 [ 241.568318][T11920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.573516][T11920] ? __pfx__printk+0x10/0x10 [ 241.578104][T11920] ? snprintf+0xda/0x120 [ 241.582347][T11920] should_fail_ex+0x3b0/0x4e0 [ 241.587026][T11920] _copy_to_user+0x2f/0xb0 [ 241.591435][T11920] simple_read_from_buffer+0xca/0x150 [ 241.597416][T11920] proc_fail_nth_read+0x1e9/0x250 [ 241.602437][T11920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.607979][T11920] ? rw_verify_area+0x514/0x6b0 [ 241.612823][T11920] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.618355][T11920] vfs_read+0x204/0xbd0 [ 241.622499][T11920] ? __pfx_lock_release+0x10/0x10 [ 241.627519][T11920] ? __pfx_vfs_read+0x10/0x10 [ 241.632188][T11920] ? __fget_files+0x29/0x470 [ 241.636772][T11920] ? __fget_files+0x3f6/0x470 [ 241.641455][T11920] ksys_read+0x1a0/0x2c0 [ 241.645691][T11920] ? __pfx_ksys_read+0x10/0x10 [ 241.650443][T11920] ? do_syscall_64+0x100/0x230 [ 241.655195][T11920] ? do_syscall_64+0xb6/0x230 [ 241.659863][T11920] do_syscall_64+0xf3/0x230 [ 241.664354][T11920] ? clear_bhb_loop+0x35/0x90 [ 241.669022][T11920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.674912][T11920] RIP: 0033:0x7f7cd03746bc [ 241.679320][T11920] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 241.698930][T11920] RSP: 002b:00007f7cd1226040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.707352][T11920] RAX: ffffffffffffffda RBX: 00007f7cd0503f60 RCX: 00007f7cd03746bc [ 241.715317][T11920] RDX: 000000000000000f RSI: 00007f7cd12260b0 RDI: 0000000000000004 [ 241.723278][T11920] RBP: 00007f7cd12260a0 R08: 0000000000000000 R09: 0000000000000000 [ 241.731328][T11920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.739292][T11920] R13: 000000000000000b R14: 00007f7cd0503f60 R15: 00007ffc82a647f8 [ 241.747271][T11920] [ 242.735591][T11957] team0: Port device team_slave_0 removed [ 242.761432][T11957] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 242.894882][T11981] __nla_validate_parse: 3 callbacks suppressed [ 242.894903][T11981] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2526'. [ 242.918808][T11984] netlink: 'syz.0.2527': attribute type 10 has an invalid length. [ 242.970128][T11985] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2528'. [ 243.255462][T12004] netlink: 'syz.0.2535': attribute type 10 has an invalid length. [ 243.539046][T12020] netlink: 'syz.0.2540': attribute type 3 has an invalid length. [ 243.554478][T12020] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2540'. [ 243.653744][T12025] netlink: 'syz.0.2542': attribute type 10 has an invalid length. [ 243.719163][T12032] netlink: 'syz.4.2545': attribute type 10 has an invalid length. [ 243.878784][T12042] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2549'. [ 243.897468][T12042] openvswitch: netlink: Key type 8192 is out of range max 32 [ 243.900728][T12044] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.2550'. [ 244.075066][T12052] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2552'. [ 244.114553][T12055] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.2555'. [ 244.134197][T12052] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 244.160844][T12055] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2555'. [ 244.412759][T12079] netlink: 'syz.1.2563': attribute type 29 has an invalid length. [ 244.437571][T12079] netlink: 'syz.1.2563': attribute type 29 has an invalid length. [ 244.661944][T12096] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2573'. [ 245.109381][T12113] FAULT_INJECTION: forcing a failure. [ 245.109381][T12113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.143035][T12113] CPU: 0 PID: 12113 Comm: syz.4.2578 Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 245.153223][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 245.163291][T12113] Call Trace: [ 245.166579][T12113] [ 245.169531][T12113] dump_stack_lvl+0x241/0x360 [ 245.174234][T12113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.179452][T12113] ? __pfx__printk+0x10/0x10 [ 245.184058][T12113] ? bpf_cgroup_storage_free+0x8f/0xb0 [ 245.189543][T12113] ? __pfx_lock_release+0x10/0x10 [ 245.194583][T12113] ? bpf_test_run+0x840/0x910 [ 245.199291][T12113] should_fail_ex+0x3b0/0x4e0 [ 245.204000][T12113] _copy_to_user+0x2f/0xb0 [ 245.208437][T12113] bpf_test_finish+0x593/0x8b0 [ 245.213235][T12113] ? __pfx_bpf_test_finish+0x10/0x10 [ 245.218544][T12113] ? convert_skb_to___skb+0x2d3/0x510 [ 245.223921][T12113] bpf_prog_test_run_skb+0xfe5/0x1820 [ 245.229307][T12113] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 245.235118][T12113] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 245.240925][T12113] bpf_prog_test_run+0x33a/0x3b0 [ 245.245856][T12113] __sys_bpf+0x48d/0x810 [ 245.250096][T12113] ? __pfx___sys_bpf+0x10/0x10 [ 245.254863][T12113] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.260835][T12113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.267154][T12113] ? do_syscall_64+0x100/0x230 [ 245.271914][T12113] __x64_sys_bpf+0x7c/0x90 [ 245.276325][T12113] do_syscall_64+0xf3/0x230 [ 245.280818][T12113] ? clear_bhb_loop+0x35/0x90 [ 245.285487][T12113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.291369][T12113] RIP: 0033:0x7eff49575bd9 [ 245.295773][T12113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.315367][T12113] RSP: 002b:00007eff4a32a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.323771][T12113] RAX: ffffffffffffffda RBX: 00007eff49703f60 RCX: 00007eff49575bd9 [ 245.331733][T12113] RDX: 0000000000000048 RSI: 0000000020000780 RDI: 000000000000000a [ 245.339694][T12113] RBP: 00007eff4a32a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 245.347653][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.355611][T12113] R13: 000000000000000b R14: 00007eff49703f60 R15: 00007ffc7092c358 [ 245.363588][T12113] [ 245.596660][T12157] validate_nla: 6 callbacks suppressed [ 245.596679][T12157] netlink: 'syz.4.2593': attribute type 10 has an invalid length. [ 245.622596][T12157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2593'. [ 245.642419][T12157] team0: Device bond0 is up. Set it down before adding it as a team port [ 245.652131][T12157] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 245.956118][T12170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.998370][T12175] netlink: 'syz.2.2600': attribute type 3 has an invalid length. [ 246.318073][T12188] netlink: 'syz.4.2605': attribute type 2 has an invalid length. [ 246.539843][T12198] netlink: 'syz.1.2610': attribute type 10 has an invalid length. [ 246.557622][T12202] batadv_slave_1: entered promiscuous mode [ 247.059152][T12218] netlink: 'syz.3.2616': attribute type 1 has an invalid length. [ 247.079367][T12223] netlink: 'syz.1.2618': attribute type 19 has an invalid length. [ 247.128990][T12227] netlink: 'syz.2.2619': attribute type 21 has an invalid length. [ 247.183141][T12230] FAULT_INJECTION: forcing a failure. [ 247.183141][T12230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.223335][T12230] CPU: 0 PID: 12230 Comm: syz.3.2620 Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 247.233534][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 247.243609][T12230] Call Trace: [ 247.246900][T12230] [ 247.249838][T12230] dump_stack_lvl+0x241/0x360 [ 247.254539][T12230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.259754][T12230] ? __pfx__printk+0x10/0x10 [ 247.264363][T12230] ? __pfx_lock_release+0x10/0x10 [ 247.269420][T12230] should_fail_ex+0x3b0/0x4e0 [ 247.274112][T12230] _copy_from_user+0x2f/0xe0 [ 247.278704][T12230] copy_msghdr_from_user+0xae/0x680 [ 247.283899][T12230] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 247.289705][T12230] __sys_sendmsg+0x23d/0x3a0 [ 247.294292][T12230] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.299396][T12230] ? vfs_write+0x7c4/0xc90 [ 247.303838][T12230] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.310158][T12230] ? do_syscall_64+0x100/0x230 [ 247.314914][T12230] ? do_syscall_64+0xb6/0x230 [ 247.319584][T12230] do_syscall_64+0xf3/0x230 [ 247.324078][T12230] ? clear_bhb_loop+0x35/0x90 [ 247.328747][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.334716][T12230] RIP: 0033:0x7f9a89575bd9 [ 247.339219][T12230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.358819][T12230] RSP: 002b:00007f9a8a2d8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.367225][T12230] RAX: ffffffffffffffda RBX: 00007f9a89703f60 RCX: 00007f9a89575bd9 [ 247.375187][T12230] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 247.383147][T12230] RBP: 00007f9a8a2d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 247.391105][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.399081][T12230] R13: 000000000000000b R14: 00007f9a89703f60 R15: 00007ffd4e67e268 [ 247.407063][T12230] [ 247.807378][T12253] netlink: 'syz.4.2627': attribute type 10 has an invalid length. [ 247.847838][T12253] bridge_slave_0: left promiscuous mode [ 247.853846][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.874777][T12251] netlink: 'syz.2.2626': attribute type 27 has an invalid length. [ 247.907116][T12251] __nla_validate_parse: 11 callbacks suppressed [ 247.907138][T12251] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2626'. [ 247.926939][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 248.349636][T12282] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2639'. [ 248.361131][T12286] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2638'. [ 248.398959][T12282] openvswitch: netlink: Duplicate key (type 0). [ 248.408682][T12285] netlink: 'syz.4.2641': attribute type 7 has an invalid length. [ 248.451914][T12285] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.2641'. [ 248.484003][T12285] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2641'. [ 248.554691][T12301] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2646'. [ 249.027705][T12322] batman_adv: batadv0: Adding interface: wlan0 [ 249.065048][T12322] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.181546][T12322] batman_adv: batadv0: Interface activated: wlan0 [ 249.422454][T12339] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2660'. [ 249.472552][T12337] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2659'. [ 249.492217][T12344] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2662'. [ 249.713694][T12361] team0: Device vlan0 is up. Set it down before adding it as a team port [ 250.266330][T12390] macvtap0: refused to change device tx_queue_len [ 251.550575][T12433] validate_nla: 11 callbacks suppressed [ 251.550596][T12433] netlink: 'syz.1.2700': attribute type 4 has an invalid length. [ 251.587697][T12431] netlink: 'syz.4.2699': attribute type 28 has an invalid length. [ 251.929027][T12457] netlink: 'syz.3.2709': attribute type 2 has an invalid length. [ 252.159369][T12468] netlink: 'syz.1.2714': attribute type 10 has an invalid length. [ 252.183305][T12470] openvswitch: netlink: Key 0 has unexpected len 13 expected 0 [ 252.408607][T12484] netlink: 'syz.1.2719': attribute type 31 has an invalid length. [ 252.559526][T12494] netlink: 'syz.2.2721': attribute type 6 has an invalid length. [ 252.854284][T12504] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 252.892191][T12508] netlink: 'syz.2.2728': attribute type 10 has an invalid length. [ 252.937664][T12511] netlink: 'syz.1.2729': attribute type 19 has an invalid length. [ 253.249593][T12528] netlink: 'syz.4.2736': attribute type 29 has an invalid length. [ 253.267284][T12528] netlink: 'syz.4.2736': attribute type 29 has an invalid length. [ 253.426122][T12535] __nla_validate_parse: 14 callbacks suppressed [ 253.426142][T12535] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2738'. [ 253.451293][T12541] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2741'. [ 253.501453][T12542] netlink: 184152 bytes leftover after parsing attributes in process `syz.0.2740'. [ 254.150636][T12563] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2751'. [ 254.201316][T12570] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2753'. [ 254.217049][T12563] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2751'. [ 254.246690][T12570] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 254.299129][T12573] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2754'. [ 254.327228][T12574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2755'. [ 254.523840][T12573] syzkaller0: entered promiscuous mode [ 254.529536][T12573] syzkaller0: entered allmulticast mode [ 255.378579][T12611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.242596][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.256687][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.705051][T12643] validate_nla: 7 callbacks suppressed [ 256.705068][T12643] netlink: 'syz.0.2784': attribute type 3 has an invalid length. [ 256.746643][T12643] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2784'. [ 257.491792][T12639] netlink: 'syz.1.2782': attribute type 10 has an invalid length. [ 257.597293][T12645] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2786'. [ 257.732608][T12657] netlink: 'syz.1.2790': attribute type 29 has an invalid length. [ 257.841618][T12657] netlink: 'syz.1.2790': attribute type 29 has an invalid length. [ 258.028258][T12675] netlink: 'syz.1.2798': attribute type 2 has an invalid length. [ 258.365946][T12688] netlink: 'syz.0.2803': attribute type 10 has an invalid length. [ 258.381065][T12690] openvswitch: netlink: Key 0 has unexpected len 13 expected 0 [ 258.387310][T12688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.616160][T12707] netlink: 'syz.4.2809': attribute type 21 has an invalid length. [ 258.630688][T12707] netlink: 'syz.4.2809': attribute type 1 has an invalid length. [ 258.647411][T12707] __nla_validate_parse: 4 callbacks suppressed [ 258.647427][T12707] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2809'. [ 258.697808][T12713] netlink: 'syz.0.2811': attribute type 10 has an invalid length. [ 258.722978][T12707] netlink: 'syz.4.2809': attribute type 9 has an invalid length. [ 258.740686][T12707] netlink: 275 bytes leftover after parsing attributes in process `syz.4.2809'. [ 258.816851][T12720] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2815'. [ 258.826934][T12723] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2813'. [ 259.056204][T12726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.191800][T12756] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2825'. [ 259.237741][T12756] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2825'. [ 259.266980][T12759] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2826'. [ 259.285394][T12756] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2825'. [ 259.318895][T12763] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2827'. [ 259.430481][T12772] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2830'. [ 260.112525][T12826] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.838839][T12895] validate_nla: 5 callbacks suppressed [ 261.838878][T12895] netlink: 'syz.1.2880': attribute type 10 has an invalid length. [ 261.865773][T12899] netlink: 'syz.4.2882': attribute type 3 has an invalid length. [ 261.881828][T12895] bond0: (slave bond_slave_0): Releasing backup interface [ 261.923198][T12898] netlink: 'syz.3.2881': attribute type 10 has an invalid length. [ 262.756050][T12930] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 [ 263.041644][T12937] netlink: 'syz.3.2898': attribute type 4 has an invalid length. [ 263.374519][T12955] netlink: 'syz.2.2905': attribute type 3 has an invalid length. [ 263.470050][T12963] netlink: 'syz.4.2910': attribute type 6 has an invalid length. [ 263.662757][T12972] netlink: 'syz.2.2914': attribute type 2 has an invalid length. [ 263.712929][T12972] __nla_validate_parse: 8 callbacks suppressed [ 263.712947][T12972] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2914'. [ 263.815236][T12978] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2917'. [ 263.859850][T12978] openvswitch: netlink: Key 0 has unexpected len 13 expected 0 [ 263.975395][T12986] netlink: 'syz.4.2921': attribute type 35 has an invalid length. [ 264.142373][T12990] netlink: 'syz.1.2922': attribute type 10 has an invalid length. [ 264.186687][T12990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2922'. [ 264.227126][T12990] team0: Device bond0 is already an upper device of the team interface [ 264.247056][T12990] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 264.551444][T13006] netlink: 'syz.1.2927': attribute type 3 has an invalid length. [ 264.586644][T13006] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2927'. [ 264.899742][T13018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2933'. [ 265.117383][T13023] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2936'. [ 265.626098][T13047] netlink: 126008 bytes leftover after parsing attributes in process `syz.4.2944'. [ 265.863395][T13058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2948'. [ 266.098424][T13067] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2952'. [ 266.184960][T13070] netlink: 15222 bytes leftover after parsing attributes in process `syz.2.2954'. [ 267.261165][T13095] validate_nla: 8 callbacks suppressed [ 267.261194][T13095] netlink: 'syz.0.2961': attribute type 10 has an invalid length. [ 267.320481][T13102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.415616][T13095] bridge0: port 5(macsec0) entered disabled state [ 267.610981][T13118] netlink: 'syz.1.2971': attribute type 7 has an invalid length. [ 267.715014][T13120] netlink: 'syz.3.2972': attribute type 10 has an invalid length. [ 267.760875][T13120] team0: Device vlan0 is up. Set it down before adding it as a team port [ 268.536338][T13157] netlink: 'syz.2.2984': attribute type 13 has an invalid length. [ 268.545000][T13157] macvtap0: entered allmulticast mode [ 268.550483][T13157] veth0_macvtap: entered allmulticast mode [ 268.568675][T13157] macvtap0: refused to change device tx_queue_len [ 268.712781][T13162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.092282][T13179] netlink: 'syz.3.2993': attribute type 3 has an invalid length. [ 269.116147][T13179] __nla_validate_parse: 6 callbacks suppressed [ 269.116165][T13179] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2993'. [ 269.287178][T13190] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2995'. [ 269.431734][T13196] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3000'. [ 269.471709][T13196] openvswitch: netlink: Key 0 has unexpected len 13 expected 0 [ 269.751855][T13211] netlink: 'syz.4.3004': attribute type 10 has an invalid length. [ 269.759889][T13211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.784059][T13211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.819149][T13211] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 269.864554][T13213] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.3005'. [ 270.261958][T13236] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3013'. [ 270.274437][T13238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3014'. [ 270.381620][T13245] netlink: 'syz.1.3017': attribute type 10 has an invalid length. [ 270.428950][T13248] netlink: 'syz.3.3016': attribute type 10 has an invalid length. [ 270.472843][T13248] hsr_slave_0: left promiscuous mode [ 270.506618][T13248] hsr_slave_1: left promiscuous mode [ 270.551433][T13257] netlink: 'syz.0.3021': attribute type 1 has an invalid length. [ 270.561467][T13257] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3021'. [ 270.571622][T13255] netlink: 'syz.1.3020': attribute type 10 has an invalid length. [ 270.586526][T13255] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3020'. [ 270.610951][T13255] team0: Port device virt_wifi0 removed [ 271.090199][T13279] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3030'. [ 271.120615][T13279] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3030'. [ 271.404417][T13297] openvswitch: netlink: Duplicate key (type 0). [ 271.643319][T13312] bridge0: port 1(dummy0) entered blocking state [ 271.675052][T13312] bridge0: port 1(dummy0) entered disabled state [ 271.682413][T13312] dummy0: entered allmulticast mode [ 271.685176][T13316] FAULT_INJECTION: forcing a failure. [ 271.685176][T13316] name failslab, interval 1, probability 0, space 0, times 0 [ 271.689542][T13312] dummy0: entered promiscuous mode [ 271.706875][T13316] CPU: 0 PID: 13316 Comm: syz.1.3044 Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 271.712813][T13312] bridge0: port 1(dummy0) entered blocking state [ 271.717025][T13316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 271.717040][T13316] Call Trace: [ 271.717050][T13316] [ 271.717058][T13316] dump_stack_lvl+0x241/0x360 [ 271.717089][T13316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.717111][T13316] ? __pfx__printk+0x10/0x10 [ 271.717135][T13316] ? ref_tracker_alloc+0x332/0x490 [ 271.723555][T13312] bridge0: port 1(dummy0) entered forwarding state [ 271.733465][T13316] should_fail_ex+0x3b0/0x4e0 [ 271.733498][T13316] ? skb_clone+0x20c/0x390 [ 271.774719][T13316] should_failslab+0x9/0x20 [ 271.779219][T13316] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 271.784583][T13316] skb_clone+0x20c/0x390 [ 271.788825][T13316] __netlink_deliver_tap+0x3cc/0x7c0 [ 271.794117][T13316] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.799310][T13316] netlink_deliver_tap+0x19d/0x1b0 [ 271.804413][T13316] netlink_unicast+0x7b8/0x980 [ 271.809177][T13316] ? __pfx_netlink_unicast+0x10/0x10 [ 271.814492][T13316] ? __virt_addr_valid+0x183/0x520 [ 271.819599][T13316] ? __check_object_size+0x49c/0x900 [ 271.824873][T13316] ? bpf_lsm_netlink_send+0x9/0x10 [ 271.829977][T13316] netlink_sendmsg+0x8db/0xcb0 [ 271.834745][T13316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.840025][T13316] ? __import_iovec+0x536/0x820 [ 271.844865][T13316] ? aa_sock_msg_perm+0x91/0x160 [ 271.849886][T13316] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 271.855159][T13316] ? security_socket_sendmsg+0x87/0xb0 [ 271.860609][T13316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.865886][T13316] __sock_sendmsg+0x221/0x270 [ 271.870556][T13316] ____sys_sendmsg+0x525/0x7d0 [ 271.875319][T13316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.880609][T13316] __sys_sendmsg+0x2b0/0x3a0 [ 271.885191][T13316] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.890294][T13316] ? vfs_write+0x7c4/0xc90 [ 271.894733][T13316] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 271.900884][T13316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.907203][T13316] ? do_syscall_64+0x100/0x230 [ 271.911958][T13316] ? do_syscall_64+0xb6/0x230 [ 271.916624][T13316] do_syscall_64+0xf3/0x230 [ 271.921126][T13316] ? clear_bhb_loop+0x35/0x90 [ 271.925801][T13316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.931689][T13316] RIP: 0033:0x7f46c0175bd9 [ 271.936093][T13316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.955693][T13316] RSP: 002b:00007f46bfbff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.964098][T13316] RAX: ffffffffffffffda RBX: 00007f46c0303f60 RCX: 00007f46c0175bd9 [ 271.972061][T13316] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 271.980019][T13316] RBP: 00007f46bfbff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 271.987977][T13316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.995935][T13316] R13: 000000000000000b R14: 00007f46c0303f60 R15: 00007ffee7a368d8 [ 272.003909][T13316] [ 272.426265][T13339] validate_nla: 7 callbacks suppressed [ 272.426284][T13339] netlink: 'syz.4.3053': attribute type 5 has an invalid length. [ 272.706355][T12740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.064909][T12740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.086144][T13370] netlink: 'syz.1.3065': attribute type 7 has an invalid length. [ 273.191916][T12740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.227560][T13372] netlink: 'syz.3.3067': attribute type 7 has an invalid length. [ 273.442763][T12740] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.488091][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.497549][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.505715][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.517178][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.548011][ T5105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.557173][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.569349][T13377] ================================================================== [ 273.577442][T13377] BUG: KASAN: slab-use-after-free in kfree_skb_reason+0x41/0x3b0 [ 273.585174][T13377] Read of size 4 at addr ffff88802a8fa0e4 by task syz-executor/13377 [ 273.593236][T13377] [ 273.595566][T13377] CPU: 1 PID: 13377 Comm: syz-executor Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 273.605888][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 273.615949][T13377] Call Trace: [ 273.619237][T13377] [ 273.622176][T13377] dump_stack_lvl+0x241/0x360 [ 273.626864][T13377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.632071][T13377] ? __pfx__printk+0x10/0x10 [ 273.636653][T13377] ? _printk+0xd5/0x120 [ 273.640801][T13377] ? __virt_addr_valid+0x183/0x520 [ 273.645904][T13377] ? __virt_addr_valid+0x183/0x520 [ 273.651009][T13377] print_report+0x169/0x550 [ 273.655504][T13377] ? __virt_addr_valid+0x183/0x520 [ 273.660606][T13377] ? __virt_addr_valid+0x183/0x520 [ 273.665706][T13377] ? __virt_addr_valid+0x44e/0x520 [ 273.670811][T13377] ? __phys_addr+0xba/0x170 [ 273.675310][T13377] ? kfree_skb_reason+0x41/0x3b0 [ 273.680245][T13377] kasan_report+0x143/0x180 [ 273.684746][T13377] ? kfree_skb_reason+0x41/0x3b0 [ 273.689679][T13377] kasan_check_range+0x282/0x290 [ 273.694628][T13377] kfree_skb_reason+0x41/0x3b0 [ 273.699395][T13377] __hci_req_sync+0x62f/0x950 [ 273.704062][T13377] ? __pfx___hci_req_sync+0x10/0x10 [ 273.709301][T13377] ? __pfx___mutex_lock+0x10/0x10 [ 273.714323][T13377] ? __pfx_autoremove_wake_function+0x10/0x10 [ 273.720387][T13377] ? __pfx_hci_scan_req+0x10/0x10 [ 273.725401][T13377] hci_req_sync+0xa9/0xd0 [ 273.729723][T13377] hci_dev_cmd+0x4c5/0xa50 [ 273.734126][T13377] ? security_capable+0x90/0xb0 [ 273.738970][T13377] ? __pfx_hci_dev_cmd+0x10/0x10 [ 273.743895][T13377] ? hci_sock_ioctl+0x6c4/0xa40 [ 273.748736][T13377] sock_do_ioctl+0x158/0x460 [ 273.753315][T13377] ? __pfx_sock_do_ioctl+0x10/0x10 [ 273.758423][T13377] sock_ioctl+0x629/0x8e0 [ 273.762746][T13377] ? __pfx_sock_ioctl+0x10/0x10 [ 273.767585][T13377] ? __fget_files+0x29/0x470 [ 273.772165][T13377] ? __fget_files+0x3f6/0x470 [ 273.776828][T13377] ? __fget_files+0x29/0x470 [ 273.781410][T13377] ? bpf_lsm_file_ioctl+0x9/0x10 [ 273.786334][T13377] ? security_file_ioctl+0x87/0xb0 [ 273.791433][T13377] ? __pfx_sock_ioctl+0x10/0x10 [ 273.796277][T13377] __se_sys_ioctl+0xfc/0x170 [ 273.800856][T13377] do_syscall_64+0xf3/0x230 [ 273.805345][T13377] ? clear_bhb_loop+0x35/0x90 [ 273.810012][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.815891][T13377] RIP: 0033:0x7f717b3757db [ 273.820295][T13377] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 273.839890][T13377] RSP: 002b:00007fffaae67110 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.848291][T13377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f717b3757db [ 273.856248][T13377] RDX: 00007fffaae67188 RSI: 00000000400448dd RDI: 0000000000000003 [ 273.864204][T13377] RBP: 000055555b40b4a8 R08: 0000000000000000 R09: 0000000000000000 [ 273.872160][T13377] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000003 [ 273.880119][T13377] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 273.888082][T13377] [ 273.891084][T13377] [ 273.893390][T13377] Allocated by task 5105: [ 273.897708][T13377] kasan_save_track+0x3f/0x80 [ 273.902372][T13377] __kasan_slab_alloc+0x66/0x80 [ 273.907207][T13377] kmem_cache_alloc_noprof+0x135/0x2a0 [ 273.912647][T13377] skb_clone+0x20c/0x390 [ 273.916885][T13377] hci_cmd_work+0x29e/0x670 [ 273.921384][T13377] process_scheduled_works+0xa2c/0x1830 [ 273.926913][T13377] worker_thread+0x86d/0xd70 [ 273.931485][T13377] kthread+0x2f0/0x390 [ 273.935540][T13377] ret_from_fork+0x4b/0x80 [ 273.939942][T13377] ret_from_fork_asm+0x1a/0x30 [ 273.944693][T13377] [ 273.946998][T13377] The buggy address belongs to the object at ffff88802a8fa000 [ 273.946998][T13377] which belongs to the cache skbuff_head_cache of size 240 [ 273.961556][T13377] The buggy address is located 228 bytes inside of [ 273.961556][T13377] freed 240-byte region [ffff88802a8fa000, ffff88802a8fa0f0) [ 273.975334][T13377] [ 273.977642][T13377] The buggy address belongs to the physical page: [ 273.984038][T13377] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a8fa [ 273.992781][T13377] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.999873][T13377] page_type: 0xffffefff(slab) [ 274.004532][T13377] raw: 00fff00000000000 ffff888018ae0780 dead000000000122 0000000000000000 [ 274.013096][T13377] raw: 0000000000000000 00000000800c000c 00000001ffffefff 0000000000000000 [ 274.021658][T13377] page dumped because: kasan: bad access detected [ 274.028053][T13377] page_owner tracks the page as allocated [ 274.033831][T13377] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5105, tgid 5105 (kworker/u9:6), ts 273566254299, free_ts 268533110355 [ 274.053175][T13377] post_alloc_hook+0x1f3/0x230 [ 274.057930][T13377] get_page_from_freelist+0x2e2d/0x2ee0 [ 274.063457][T13377] __alloc_pages_noprof+0x256/0x6c0 [ 274.068643][T13377] alloc_slab_page+0x5f/0x120 [ 274.073312][T13377] allocate_slab+0x5a/0x2e0 [ 274.077801][T13377] ___slab_alloc+0xcd1/0x14b0 [ 274.082462][T13377] __slab_alloc+0x58/0xa0 [ 274.086777][T13377] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 274.092219][T13377] skb_clone+0x20c/0x390 [ 274.096446][T13377] hci_cmd_work+0x29e/0x670 [ 274.100942][T13377] process_scheduled_works+0xa2c/0x1830 [ 274.106468][T13377] worker_thread+0x86d/0xd70 [ 274.111051][T13377] kthread+0x2f0/0x390 [ 274.115102][T13377] ret_from_fork+0x4b/0x80 [ 274.119508][T13377] ret_from_fork_asm+0x1a/0x30 [ 274.124260][T13377] page last free pid 13157 tgid 13156 stack trace: [ 274.130740][T13377] free_unref_page+0xd22/0xea0 [ 274.135497][T13377] __put_partials+0xeb/0x130 [ 274.140074][T13377] put_cpu_partial+0x17c/0x250 [ 274.144825][T13377] __slab_free+0x2ea/0x3d0 [ 274.149226][T13377] qlist_free_all+0x9e/0x140 [ 274.153800][T13377] kasan_quarantine_reduce+0x14f/0x170 [ 274.159245][T13377] __kasan_slab_alloc+0x23/0x80 [ 274.164081][T13377] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 274.169871][T13377] sock_alloc_inode+0x28/0xc0 [ 274.174541][T13377] new_inode_pseudo+0x69/0x1e0 [ 274.179291][T13377] __sock_create+0x123/0x920 [ 274.183862][T13377] __sys_socket+0x150/0x3c0 [ 274.188347][T13377] __x64_sys_socket+0x7a/0x90 [ 274.193004][T13377] do_syscall_64+0xf3/0x230 [ 274.197493][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.203372][T13377] [ 274.205678][T13377] Memory state around the buggy address: [ 274.211291][T13377] ffff88802a8f9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 274.219339][T13377] ffff88802a8fa000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.227384][T13377] >ffff88802a8fa080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 274.235424][T13377] ^ [ 274.242597][T13377] ffff88802a8fa100: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 274.250638][T13377] ffff88802a8fa180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.258679][T13377] ================================================================== [ 274.271537][T13377] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 274.278751][T13377] CPU: 0 PID: 13377 Comm: syz-executor Not tainted 6.10.0-rc2-syzkaller-00825-ga5912c37faf7 #0 [ 274.289084][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 274.299146][T13377] Call Trace: [ 274.302430][T13377] [ 274.305360][T13377] dump_stack_lvl+0x241/0x360 [ 274.310053][T13377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.315271][T13377] ? __pfx__printk+0x10/0x10 [ 274.319868][T13377] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.325866][T13377] ? vscnprintf+0x5d/0x90 [ 274.330221][T13377] panic+0x349/0x860 [ 274.334131][T13377] ? check_panic_on_warn+0x21/0xb0 [ 274.339259][T13377] ? __pfx_panic+0x10/0x10 [ 274.343694][T13377] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 274.349688][T13377] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 274.356034][T13377] check_panic_on_warn+0x86/0xb0 [ 274.360989][T13377] ? kfree_skb_reason+0x41/0x3b0 [ 274.365935][T13377] end_report+0x77/0x160 [ 274.370215][T13377] kasan_report+0x154/0x180 [ 274.374732][T13377] ? kfree_skb_reason+0x41/0x3b0 [ 274.379672][T13377] kasan_check_range+0x282/0x290 [ 274.384605][T13377] kfree_skb_reason+0x41/0x3b0 [ 274.389367][T13377] __hci_req_sync+0x62f/0x950 [ 274.394036][T13377] ? __pfx___hci_req_sync+0x10/0x10 [ 274.399240][T13377] ? __pfx___mutex_lock+0x10/0x10 [ 274.404266][T13377] ? __pfx_autoremove_wake_function+0x10/0x10 [ 274.410327][T13377] ? __pfx_hci_scan_req+0x10/0x10 [ 274.415338][T13377] hci_req_sync+0xa9/0xd0 [ 274.419660][T13377] hci_dev_cmd+0x4c5/0xa50 [ 274.424063][T13377] ? security_capable+0x90/0xb0 [ 274.428901][T13377] ? __pfx_hci_dev_cmd+0x10/0x10 [ 274.433826][T13377] ? hci_sock_ioctl+0x6c4/0xa40 [ 274.438666][T13377] sock_do_ioctl+0x158/0x460 [ 274.443247][T13377] ? __pfx_sock_do_ioctl+0x10/0x10 [ 274.448379][T13377] sock_ioctl+0x629/0x8e0 [ 274.452717][T13377] ? __pfx_sock_ioctl+0x10/0x10 [ 274.457565][T13377] ? __fget_files+0x29/0x470 [ 274.462153][T13377] ? __fget_files+0x3f6/0x470 [ 274.466820][T13377] ? __fget_files+0x29/0x470 [ 274.471404][T13377] ? bpf_lsm_file_ioctl+0x9/0x10 [ 274.476329][T13377] ? security_file_ioctl+0x87/0xb0 [ 274.481432][T13377] ? __pfx_sock_ioctl+0x10/0x10 [ 274.486272][T13377] __se_sys_ioctl+0xfc/0x170 [ 274.490855][T13377] do_syscall_64+0xf3/0x230 [ 274.495346][T13377] ? clear_bhb_loop+0x35/0x90 [ 274.500013][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.505894][T13377] RIP: 0033:0x7f717b3757db [ 274.510299][T13377] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 274.529902][T13377] RSP: 002b:00007fffaae67110 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.538305][T13377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f717b3757db [ 274.546262][T13377] RDX: 00007fffaae67188 RSI: 00000000400448dd RDI: 0000000000000003 [ 274.554226][T13377] RBP: 000055555b40b4a8 R08: 0000000000000000 R09: 0000000000000000 [ 274.562365][T13377] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000003 [ 274.570843][T13377] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 274.578811][T13377] [ 274.582048][T13377] Kernel Offset: disabled [ 274.586358][T13377] Rebooting in 86400 seconds..