last executing test programs: 1m17.759234596s ago: executing program 1 (id=613): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d00)=[{0x0}, {0x0}, {&(0x7f0000000cc0)}], 0x3, &(0x7f0000000d40)}, 0x20000001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000003000007000000441505"], 0x30}, 0x7e8166965e22236a) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x991c}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb", 0x3f}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24", 0x139}, {0x0}], 0x4}, 0x0) sendmsg$sock(r0, &(0x7f0000000980)={&(0x7f00000006c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001980)="07f425f607a09e2be9666ca7264d3fdb6a949ef72b67c8619da12ac603c8ab58e1ace41d7f0c4dcf8ed66b2625cea497a0f0c7c12c2189d9cc0b11778118a2cb3dc108e7ce33fd00828c652c5e239b2285b8da7635713ddad26a29e83bf1a842b06e4030bb95a0bb54d35ba3c5c9f682dd6b03f746e5e766282e8b6d539a8a5a175139fd946c2f1d2c26bb05e20eafeac4d8241f43c65effda127efd4a75c65efbc98090fc221d9f97b0712c7da813e44dc3102d98a68c82f4331a3d6fe75caa9155b671958deea5201e1ce8c03ca4230a7aefe109c412f3cbbeaaec481afdfaeea92d8e896c664c773a5f76d71276a470b6c6153dccef4eac9cba93eed1a446750791ade6049219c4684b66e91db6e56af2073dd08ea2ff0667f504179b103b7f2e1352c4a96cd4837830c486beecbcb9a9bfe350a364a66574420258adf35e2d6cb365b96c35adcbc8b2000c8bc694828f8bfdeb46d82959d872332f6827ff4419fc079657eeeff4486d7d40c227ceaa5c91eebdb2118d307f43704bcf05f29b3461564fd55faa83f303fd6609001afab21ae215d006a042cfa1456da65298ab65a4935ad120c5154f348efa0a5e868900ce676d9a2c22c6e47bc6e9f1ebeb2341cd292709d390516e079dab5234c6c7bca24d96060fa3005909c9cfe88b70dd761db02529f3dc0e54441b396285fce65c177e75a223d97d081292dd59c30661216d64f161c97615106b3cd999fcd5e60f441894b2d606e4a24b0c9bce587f2f3d7e4bcccb5cc6e950f033104479c523ef315c07438dd1e016ed719e2357d832f53d1dc04390a19791c62de2f7327ef4bef47161626016d774852fdf5fb1cd88a785939d8a72c18fc68099816e449293e211276e5eb88b901e0f7046ec1a087a8e7911fb0b829f649ba6683fef67a5e363f68e77d8ae2bb6956b851508d53ddb0399e81512d1892da7fb006908c8d85185dcda0498abf22f3f377080a34c0ef4ca3089fc0d5681f522874090df73c9562739130e0e70fcbedddb5b3835ad4c1701ba36b9c5233cc9bb5eecd87fd34f49029661768328ceef8d518f9000c180c666ed13a09341bb8aef34903af03e10c9724f060a7de3bda9304ddb2436438d2b9c81daa58258f724018b0b483ff262fa1e1f880fdfbf2885943c384e0d3e676f517dbbc86d8f040c408cc48315c7c78ff90b7aeaaf913d3d5125b5fe863ea886856cda76f47b257e22da6f4d95451cc08fe456224089782884ca973491aac4c0a635d5d1db323c04c0e3952f32a8d3b23971cab55fb1e714a69dfe15324e941196c8affbad867af368957710dc9d57cc6700852fed3b2b62a0db2a6891080df24d8d7231f387a03b9dbd7832a871f66a86b8ed3c0d9b86013993d30f95d20ffeb87d88e96db8f4efc2da4164384fa8fe32e3cf07c066660b6a01cc932b177eb4ee95f03297483e1d231c4b99ee864a8094cd5aaecdb508a005b61e8126db6151969c7610de0d352bb0cef82d58fc0a4aceea17e0b52558512eca5bf4d3b0cfd917ce44b103bbce7cc9b0769bd30924c486d0f35dec470d0c1ed2691e471b29e9fd5dfcdcb326a74da88efe4efb5c24b8ca9e008d4dfa60c7ca2f763da614745a3edbb1217f0772c919b8dbdbae57ceb3f2033d195eac1352f23282b8870bdbc9ef57310d45004979dbd47ff548b0435306082a125bc35eee789774d7c2aa25fe52fb9e0fa1afcaf1e2395d99ad239cf00375fcd0ea7f18be4a0d03654cb0eb85e397b3f8beadff21a7a2d2c2773bb572f447f56197996e8a5a47f04a39752bab981af8e1d84a930e066b6bd55c03690491c89a88de8a787d55949cefe5fd7b14b11eca68044fab2b274546fdf5ef31898baaab8580dacb13070b062edaa5130b0504a3dd03f1ef14af1ba3dac723f9d16f7945c7d9d1aa5bcd5840775c54cf8bb19a71869fa8d1fd41ae0d595c57e59c38036879c071d0d79b84b235918988c139a44383e5441e6153d578b52f080f9279c6eb91e1a78c07065106e91916c62031adccaba862b853dfb6b697804f9bd4d46941e19f823e9a9e90d30634f137c9c0e07f1e8d804281c9e8e50a1cde6ab5e3a91ddf9819d84fbc796eef4471e34325d946d7032684d8a2e03d360d206325f7ae4d13aaa5c2a5bea5b804110c4d4c3ba442a2e8128cd71fd257cce7914292ac1e4ae61d03ac33ea31d3fcdd69f6b69203fa8d107ec5153acec64460dc6802cd9e5ad8038a50e5befa55dbcf04edea061393193e75ca8eed49703e7e82a446eed50c64436afd5a167caecef246d8e8665fabdd1018eece7719f12ffea7d464580c483e3ca748d6b35f303335bea97b38af144686f59d81a594b10b319bd356ab5185f9a93e954d2caeca4c66fee22761bd78ee4caf2455b77deddaf23eda4df0250bb9f2b66ed72648d5fdb2aa389832d045f50746d0e7299ddece6259aa0267c06ecc18ed480cb040258b1f9039a99195cb9ce60be3f10797541c461225d64663f2a4831779760b2499c541e9e9537c29bb9214f31f9d7a3d9b01b55560535565b69e664601056e94a919760d90958d4b2deb96e8f58e6d47cb801f7a59f92b8ed4e50d283d10233d3313f54c614c998097188603abf78790bdcd168576e231fc752bb2acff25d5de94aab4a92e3c61e7b6e5aed77804c581510ad25b4b69b100e88967899543621409d72d79bb858223754c8ee7d2701cfa5d252367473426e33495215208a58cacc38cb145a7d85b4f2e89eb98534568cf88916f60d051a0a78552bff70af2aef8f4492ec2c98ce761acaa61c3b4b08633a232549746719c9a490567d71e6b6bdcd26f57ea1ae4a7aa435410374f9be229f555942e22b3707c26ac447312e9430e806e330d325684120e9b063c6b582dc1bb1914ddbdbdbcbe0a5b15528ebd2d4d44cff3ed1e2034d484441fa8c8cbed549ec5f8e1c3733eab2ac6056e38b107db370ff203bd7fd37266d80c9101dff161734133587258fae79441be48a86a9d4095cfd964d1b186739e5e3d3e841ff72cab7b3cf73bda5babced4e95b0a6236997e2f73c811de6dac8ef9082d9ed01229596ab3957b8924dcfc79d6decc916a72d52d2911514e47bafc720aebe0f6eefdeb410f558b96ae67b472f3e8f369c1179d7bd8474836b14b84966aaec6820c9f28f2f0032722982fa0e852aa99670fb667d7f1fd137e21b1e1d0fb0458c4001de7030b2b41c6352ca4ed92a6847b4aac755b5376568470e86a735b68c9c96630e973ad0e5a237c8fcb0051751391a002be6dc34c76ef8e02b412a2e53ab75a0b1ca6289def85e1a2a09c3167b5790b12dfbe55328a5409094811d2e8603f485cf87d2217da03e2c516eaf085070c038a26b52a1cabef81b679a835dde523a838414b243ab727173c1205a53f44f3b3a1462189cc8cc925899664bcdee977a9011a9ea9cdc23d6c41919c21453ec20e453d4eb614e11509bcf5827c82d65422283fecb2a0f3824abde6af1f0911b5d482a8a0ea3d92ec7d654c63496becb8eb13216fd624b1f93799d5ec1ffff128971576556cac89a9460d7b2fd0241ab6626ddb8a3e39313a625546022204a9e570c3a99849b2049c1664b68f85e5eced4ad33ee4bc24c7f62cf63a2a6a665a77c25a7a1736769a4185283a2dc306259ac5433513050abe1389d7081beac051a5932d7a73914382963025f6b1d3810398a2016874ec78e5fad130b58c84e4d1a34ec9cb2b8b556e5e15f1601d265bdd35cdbfa33a93e7d968ad8c118efbc39b1370ec083438425aebfb9b8031ae6d0a314752663f034d40ca75504f9bd2f590f153e0110ca1674d95afd31a9d2d22252f23818670a7286ddbfc9efeb4cb25ec7394b7f7195084517af6e91b24eea32909e280fee4972617ed974b3935be54cd225269429537e8021ea5c692dd19becf0352f07f29ebe836ae864286520d9db68528389a059c8f8879f45fc851ee03fa98e35c04b8eed548b203cad7a977784fad04e84e172c045a7942b18ca4d830e96617ea4d6b1b5d99337126118cd75d6d35502c1a26111888dfc46ba8041f438451c27b31859fd209b7c3d412895758fc4e44175dbbea42fd56e23ca311f54dae37d4373c7839e678ebeee1f1b2923aec7e378c2d678709d6676b619eb374357bf61e8c9331d227c83c8d9b38b29863e615442711bc718da24ad4bd6121833334d94d4b5e33247b6a305ac6bd0a23352e29b94937b08c5317ee9176463391b14894acd6021c5308ab69b608efc0633296ddaa29a288b124f03d762eaff614a8cc77246c07ec63fa256f603762b4225780dd498f3e363ecdfe406b7cc403d4e4f1d8ad68244da59012d237da0ee85b00b9cf1a8cfceff580c1c617502e211564313ac12657243bdefe9212179daca4ca59807c8d40b918a507df41ec55e1b1f213d0a22cb7595f4252eb350b6ecb08c929f5146b147a38a36f201c7963986f4445472183fc19e0b239294c1d670e7750c570924e4f72eed428fd13290eb5b8b8d4b1c16d9f3271451c603f747d8973c5db0f239900257454bef861844c0c339cfb8916ac9bfd345687737a8a4ae60655d783a21976ea8893da8021bbe3e465006afce85d84ca9766bcc57aa30541f62dc4b881b40a3a5fadf3a60437399d2e6d63de2f1068a5d5f1ef658dc6c982eba4991f583579a953b08fd5427bd590d64887a35fcf00e65eaba8fbde69308f28c058868fa58175d1f70a08bc52fffc8b84099b4f187194160d6e59115085ec75e38783a404bb8f0c3efca458a5f5b66a73ceac70fbb72ba24e548e21c83f627f67773c083c3253e8e7bc474afe5c5cce03610d521924024f805572eaf423db11bef24a2f6f9b281d3a2b7bdad9c13f3f61b6dc5bdfba6ad08707992325b6e61326ed25dedb93b04bfa25e1cce8789cccf8179d8a541f9ff87e0c81cd730da46430ea40a07368864031ad6ab01e9c3f33b58cabbadf91b0d0017ec962136e761e527ea28815c40bd46ece282719567a777223e24514e5dc6227ea81423cead2011483a80541ccda32773bc323eee84db5207de76ab7699d25bee0ea9bff85f8c5057140ed977f8c3a769a3a71249dc2407055045c92c2d47d7d61c111ab13622e2261b3c5f1a122b8064ae487c1479a94425aacf0acf01f8932ad5ddbbb5a170eea51173baf31f6f8a08ebf0ae5cb1347714025a42c89d8e3fbbaf42258e6b75c88d37c994e08198311466dc31815384042f8b3708794d6061bcd3e937785650a98e132699b99d210d7664886780767d827f68f529534f3f39ee55bec3ab38166f6ee2c099fcf5742679e28fb300c7ce8aa770bc49d8c48397a5bf987172c148ff9261ffa09518084f8fe92f270c8272ef3043f0f27483651f1cf0e9ca4a3ca405281477b45395a3120204b058e481e6ffc9e9955a13f0131baebb64e6dd4eea38da32000e1a2f131003e02a67fe3ebf83001599d716217f3f63c15de776694ef0428d6b967cd2182712465f94a4941cf920191c32d967614a76cd7aa5144323e2e61b3e1695544cf1908f0d8b14b3160968eb1e63c9690a2a19b6c283b75f3d39ff7cfcb25a25bd0ee0477472155723b662323940be21e27f16a58be49058a1bc7c69db72b16a01503c026e4882ef0d9d845522e21c63b2064658810c5db86cf5063fecc84e81ddbafe6", 0xfc0}, {&(0x7f0000000780)="287f33de249cd4eaac08a430385dff919272f2afc9a01514f5023e77d38a6f627d3686c21e642f35f1dd0613e76deb9f4430486cf266a2e31d4a56533b06d29008c9ee506b8fc6939ffa53bc15cc6b4a077b02b003a3f05ea91036d1d67b4966c8d0073cdc0c91c5fdb66329a454628dfa20d931af15235a8483949c19e815362d9a2571d6f21a05e39acc7674b749a84aa0d3c3619be13fa03ddb2bf081026018bfdbaf23706ddcd822f71075082b565dcc1895a308883f00f30a58", 0xbc}, {&(0x7f00000008c0)="0661fa8ed8acb300fe3b01ca4f33675111176bf141bb11dd3c24f643b7e2b1b799ce2756d1bb08d2ff3130875a63b325f9755168b8f8f5eb018c46f4ec90a811913983da06b9fd9a814287f6dc15ae0d3c387b41b3aa22d449a241382a74edab7ebcc64451ba84f85aedbb8c005dbb2fae7c91fd96a9606c9c5416962ddd16abac4241924981445f3821c82e2a55209eec1aba", 0x93}], 0x3, &(0x7f0000000ac0)}, 0x40000) 1m11.413328242s ago: executing program 2 (id=1861): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8008, 0x4000000000fff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x58060c6b}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 1m6.868759225s ago: executing program 1 (id=613): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d00)=[{0x0}, {0x0}, {&(0x7f0000000cc0)}], 0x3, &(0x7f0000000d40)}, 0x20000001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000003000007000000441505"], 0x30}, 0x7e8166965e22236a) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x991c}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb", 0x3f}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x139}, {0x0}], 0x4}, 0x0) sendmsg$sock(r0, &(0x7f0000000980)={&(0x7f00000006c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001980)="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", 0xfc0}, {&(0x7f0000000780)="287f33de249cd4eaac08a430385dff919272f2afc9a01514f5023e77d38a6f627d3686c21e642f35f1dd0613e76deb9f4430486cf266a2e31d4a56533b06d29008c9ee506b8fc6939ffa53bc15cc6b4a077b02b003a3f05ea91036d1d67b4966c8d0073cdc0c91c5fdb66329a454628dfa20d931af15235a8483949c19e815362d9a2571d6f21a05e39acc7674b749a84aa0d3c3619be13fa03ddb2bf081026018bfdbaf23706ddcd822f71075082b565dcc1895a308883f00f30a58", 0xbc}, {&(0x7f00000008c0)="0661fa8ed8acb300fe3b01ca4f33675111176bf141bb11dd3c24f643b7e2b1b799ce2756d1bb08d2ff3130875a63b325f9755168b8f8f5eb018c46f4ec90a811913983da06b9fd9a814287f6dc15ae0d3c387b41b3aa22d449a241382a74edab7ebcc64451ba84f85aedbb8c005dbb2fae7c91fd96a9606c9c5416962ddd16abac4241924981445f3821c82e2a55209eec1aba", 0x93}], 0x3, &(0x7f0000000ac0)}, 0x40000) 1m2.772902588s ago: executing program 2 (id=1861): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8008, 0x4000000000fff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x58060c6b}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 54.059099743s ago: executing program 1 (id=613): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d00)=[{0x0}, {0x0}, {&(0x7f0000000cc0)}], 0x3, &(0x7f0000000d40)}, 0x20000001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000003000007000000441505"], 0x30}, 0x7e8166965e22236a) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x991c}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb", 0x3f}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x139}, {0x0}], 0x4}, 0x0) sendmsg$sock(r0, &(0x7f0000000980)={&(0x7f00000006c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001980)="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", 0xfc0}, {&(0x7f0000000780)="287f33de249cd4eaac08a430385dff919272f2afc9a01514f5023e77d38a6f627d3686c21e642f35f1dd0613e76deb9f4430486cf266a2e31d4a56533b06d29008c9ee506b8fc6939ffa53bc15cc6b4a077b02b003a3f05ea91036d1d67b4966c8d0073cdc0c91c5fdb66329a454628dfa20d931af15235a8483949c19e815362d9a2571d6f21a05e39acc7674b749a84aa0d3c3619be13fa03ddb2bf081026018bfdbaf23706ddcd822f71075082b565dcc1895a308883f00f30a58", 0xbc}, {&(0x7f00000008c0)="0661fa8ed8acb300fe3b01ca4f33675111176bf141bb11dd3c24f643b7e2b1b799ce2756d1bb08d2ff3130875a63b325f9755168b8f8f5eb018c46f4ec90a811913983da06b9fd9a814287f6dc15ae0d3c387b41b3aa22d449a241382a74edab7ebcc64451ba84f85aedbb8c005dbb2fae7c91fd96a9606c9c5416962ddd16abac4241924981445f3821c82e2a55209eec1aba", 0x93}], 0x3, &(0x7f0000000ac0)}, 0x40000) 51.953894331s ago: executing program 2 (id=1861): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8008, 0x4000000000fff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x58060c6b}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 37.118767413s ago: executing program 1 (id=613): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d00)=[{0x0}, {0x0}, {&(0x7f0000000cc0)}], 0x3, &(0x7f0000000d40)}, 0x20000001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000003000007000000441505"], 0x30}, 0x7e8166965e22236a) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x991c}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb", 0x3f}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x139}, {0x0}], 0x4}, 0x0) sendmsg$sock(r0, &(0x7f0000000980)={&(0x7f00000006c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001980)="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", 0xfc0}, {&(0x7f0000000780)="287f33de249cd4eaac08a430385dff919272f2afc9a01514f5023e77d38a6f627d3686c21e642f35f1dd0613e76deb9f4430486cf266a2e31d4a56533b06d29008c9ee506b8fc6939ffa53bc15cc6b4a077b02b003a3f05ea91036d1d67b4966c8d0073cdc0c91c5fdb66329a454628dfa20d931af15235a8483949c19e815362d9a2571d6f21a05e39acc7674b749a84aa0d3c3619be13fa03ddb2bf081026018bfdbaf23706ddcd822f71075082b565dcc1895a308883f00f30a58", 0xbc}, {&(0x7f00000008c0)="0661fa8ed8acb300fe3b01ca4f33675111176bf141bb11dd3c24f643b7e2b1b799ce2756d1bb08d2ff3130875a63b325f9755168b8f8f5eb018c46f4ec90a811913983da06b9fd9a814287f6dc15ae0d3c387b41b3aa22d449a241382a74edab7ebcc64451ba84f85aedbb8c005dbb2fae7c91fd96a9606c9c5416962ddd16abac4241924981445f3821c82e2a55209eec1aba", 0x93}], 0x3, &(0x7f0000000ac0)}, 0x40000) 36.691908451s ago: executing program 2 (id=1861): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8008, 0x4000000000fff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x58060c6b}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 22.570700015s ago: executing program 1 (id=613): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d00)=[{0x0}, {0x0}, {&(0x7f0000000cc0)}], 0x3, &(0x7f0000000d40)}, 0x20000001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000003000007000000441505"], 0x30}, 0x7e8166965e22236a) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x991c}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb", 0x3f}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24", 0x139}, {0x0}], 0x4}, 0x0) sendmsg$sock(r0, &(0x7f0000000980)={&(0x7f00000006c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001980)="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", 0xfc0}, {&(0x7f0000000780)="287f33de249cd4eaac08a430385dff919272f2afc9a01514f5023e77d38a6f627d3686c21e642f35f1dd0613e76deb9f4430486cf266a2e31d4a56533b06d29008c9ee506b8fc6939ffa53bc15cc6b4a077b02b003a3f05ea91036d1d67b4966c8d0073cdc0c91c5fdb66329a454628dfa20d931af15235a8483949c19e815362d9a2571d6f21a05e39acc7674b749a84aa0d3c3619be13fa03ddb2bf081026018bfdbaf23706ddcd822f71075082b565dcc1895a308883f00f30a58", 0xbc}, {&(0x7f00000008c0)="0661fa8ed8acb300fe3b01ca4f33675111176bf141bb11dd3c24f643b7e2b1b799ce2756d1bb08d2ff3130875a63b325f9755168b8f8f5eb018c46f4ec90a811913983da06b9fd9a814287f6dc15ae0d3c387b41b3aa22d449a241382a74edab7ebcc64451ba84f85aedbb8c005dbb2fae7c91fd96a9606c9c5416962ddd16abac4241924981445f3821c82e2a55209eec1aba", 0x93}], 0x3, &(0x7f0000000ac0)}, 0x40000) 21.295662843s ago: executing program 2 (id=1861): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8008, 0x4000000000fff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x58060c6b}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 3.316948804s ago: executing program 0 (id=2306): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411003f00160012000a0003000248035c3b61c1d67f6f94207134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 3.14920164s ago: executing program 0 (id=2307): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x39}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0x20000000}, 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 3.075472113s ago: executing program 0 (id=2308): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001f00)}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 3.064095531s ago: executing program 4 (id=2309): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x98, 0x2e, 0x400, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x19, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') (fail_nth: 17) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth1_to_bond\x00', 0x200}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000004) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) 2.549735922s ago: executing program 0 (id=2311): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x28, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0x23, 0x0, &(0x7f0000001000)="b9ffe4306844268cb89914f008005d7d06f3ce084d3b369d50e3d5854804c6f8244688", 0x0, 0x23, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x17, &(0x7f00000001c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="000085000000a51f000031331000010000000d42000010000000182900"/44, @ANYRES32=0x1, @ANYBLOB="000000000104000085100000faffffff186000000e000000000000000104000085100000feffffff18200000", @ANYRES32=0x1, @ANYBLOB="0000000000800000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x80000000, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0x0, 0x3, 0x7, 0x5}, {0x1, 0x3, 0xc, 0xc}, {0x2, 0x1, 0x8, 0x5}, {0x0, 0x1, 0xe, 0x9}, {0x4, 0x4, 0xb, 0x5}, {0x4, 0x1, 0x7, 0x8}, {0x1, 0x2, 0x0, 0xb}], 0x10, 0x2}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000)=r8, 0x8) 2.437274808s ago: executing program 3 (id=2312): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0xfffffffffffffd58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x6}, 0x0, 0x40000000, 0x0, 0x4, 0x58e106dd, 0x0, 0x80, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r0, 0x0) close(0x3) 2.359869058s ago: executing program 4 (id=2313): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r0, 0x0) 2.329586873s ago: executing program 3 (id=2314): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8b, 0x8b, 0x7, [@enum64={0x7, 0x4, 0x0, 0x13, 0x0, 0x0, [{0xa, 0x80000000, 0x1}, {0xf, 0x2, 0x999}, {0x1, 0x0, 0xf0000000}, {0x6, 0x7, 0x7}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x7}, @datasec={0xe, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x8, 0x9}], "0329c9"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0xffffffff}, {0x7, 0x1}, {0x5, 0x2}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e, 0x61]}}, &(0x7f00000002c0)=""/83, 0xab, 0x53, 0x0, 0x0, 0x10000}, 0x28) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%+9llu \x00'}, 0x20) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r4}, &(0x7f0000000700), &(0x7f0000000280)='%-010d \x00'}, 0x7) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000004000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r6, 0x58, &(0x7f0000000180)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0xd, 0x5, 0x2, 0x40, 0xfffffffffffffff0}, @generic={0x4, 0x8, 0x5, 0x9, 0x8}, @generic={0xff, 0x1, 0xc, 0x0, 0x5}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, &(0x7f0000000100), 0x41100, 0x2, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000380)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r2, r3, r4, r5, r6, r7], &(0x7f0000000600)=[{0x4, 0x2, 0x7, 0x2}]}, 0x94) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000480)=""/218, 0xda}, {&(0x7f00000012c0)=""/126, 0x7e}], 0x6}, 0x40000100) (async) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) (async) recvmsg$kcm(r9, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32=r11, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd550000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) (async) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x28, 0x5, 0x0, 0xfffffffd}]}) (async) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x40107446, &(0x7f0000000180)) 2.177290391s ago: executing program 3 (id=2315): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.174809884s ago: executing program 1 (id=613): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet(r0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d00)=[{0x0}, {0x0}, {&(0x7f0000000cc0)}], 0x3, &(0x7f0000000d40)}, 0x20000001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000003000007000000441505"], 0x30}, 0x7e8166965e22236a) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x991c}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb", 0x3f}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24", 0x139}, {0x0}], 0x4}, 0x0) sendmsg$sock(r0, &(0x7f0000000980)={&(0x7f00000006c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000001980)="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", 0xfc0}, {&(0x7f0000000780)="287f33de249cd4eaac08a430385dff919272f2afc9a01514f5023e77d38a6f627d3686c21e642f35f1dd0613e76deb9f4430486cf266a2e31d4a56533b06d29008c9ee506b8fc6939ffa53bc15cc6b4a077b02b003a3f05ea91036d1d67b4966c8d0073cdc0c91c5fdb66329a454628dfa20d931af15235a8483949c19e815362d9a2571d6f21a05e39acc7674b749a84aa0d3c3619be13fa03ddb2bf081026018bfdbaf23706ddcd822f71075082b565dcc1895a308883f00f30a58", 0xbc}, {&(0x7f00000008c0)="0661fa8ed8acb300fe3b01ca4f33675111176bf141bb11dd3c24f643b7e2b1b799ce2756d1bb08d2ff3130875a63b325f9755168b8f8f5eb018c46f4ec90a811913983da06b9fd9a814287f6dc15ae0d3c387b41b3aa22d449a241382a74edab7ebcc64451ba84f85aedbb8c005dbb2fae7c91fd96a9606c9c5416962ddd16abac4241924981445f3821c82e2a55209eec1aba", 0x93}], 0x3, &(0x7f0000000ac0)}, 0x40000) 1.622438809s ago: executing program 2 (id=1861): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8008, 0x4000000000fff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x58060c6b}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 992.727654ms ago: executing program 3 (id=2316): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 989.234077ms ago: executing program 4 (id=2317): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb", 0x3a}], 0x1, 0x0, 0x6b}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c00800094004", 0x39}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 988.50281ms ago: executing program 0 (id=2318): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x68}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 692.534013ms ago: executing program 0 (id=2319): socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000040)="1400000024000b94f01037e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) 692.117372ms ago: executing program 3 (id=2320): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc01, 0x3, 0x2, 0x200000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000040)="1400012c24000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) 535.257922ms ago: executing program 4 (id=2321): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x28}], {0x95, 0x0, 0x2c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (fail_nth: 19) 462.345922ms ago: executing program 3 (id=2322): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00000000fe0500002015000600142603600e1209001000800000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000000), 0xff7b) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x60, &(0x7f0000001100)}, 0x10) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x240400c0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x90) socketpair(0x6, 0x4, 0xa28, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(r4, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = socket$kcm(0xa, 0x1, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r7], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 67.460304ms ago: executing program 4 (id=2323): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007ce8dfe90e4190000900ac00060211000000160012000a0002000c48035c3b61c1d67f01282e8d614230a68015a007a290457f01a70500000000000000910000619322f09f9d5ee4e11b14d6d9730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6d9af7043df903ece981e8df3700"/204, 0xcc}, {&(0x7f0000000080)="340a223e71e773b4b54d3515", 0xc}], 0x2}, 0x40000) 0s ago: executing program 4 (id=2324): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r0, 0x4000, r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000010006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400120038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x8, &(0x7f0000000700)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0c000016400000000000005c00000000003b16"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) r6 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f00000006c0)={&(0x7f0000000100)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)="f5f31292c1ad55343fee817251b39bd7cf2e965616659a97debd6c226780c4e3a38e209251df9aa69294a6f0cbec040583ed8af4c814c869a78a6ea9f3fd14b037409344bd7bbacde45cce358fdc0d2bd8e90e95e4c7f24cfc0800f29a40f6a209898bd821164895be168649c175e0d4963689487b0818923a906b159c9daa71175b6c212f5715a629e403fe94275b5ce940ac42a6ac3aa066c10aacb97c69e7b0893a797c1c18f9e192fe514aeb4926709171e03378f03c9b29f7a0eea91e9230a6168519e1a4f90d3f647caefbb689d9cf6d3d6d53", 0xd6}, {&(0x7f00000003c0)="c1f676af36a6b288a0eb62ce3619297abf335b5fc8ac96cb95d5febbc44bf53df9ffc82b3d7ece6731b63acf953b76a296a91db3ee3bb262122a204e73a223016fa6f06f19d4a6d0e22e5013b9344ebb1f1894995c1c97bdf7c97b9772eb165973cae65276aa3ca4f5224b6415fd0f86c253d4d911865f607586b71c3553f8eac6a7c15ef44ced1e4c1efc0d147bac1d6d", 0x91}, {&(0x7f0000000280)="fb1975f79ff6a7b5fed85f91852e5e01f966f5c438aa635702d1e1b120110ad0df20b698b478337d92f64e04bca7999957756823433bd3858b64063d6e7bf712880099b1ac5087cfec4dcfe2681e986ec6d2d9ba616b7f3a8fdcfd3ef404b25115019df3097f2f", 0x67}, {&(0x7f0000000480)="f619076bd203bac41e6e1bbcf7f4f60b51a237a76dbdf3a9f045581131e4bdadd7ceb6a8f7582101af25330c27314551ee909cd1e5892b0d3e24f9c46fa1cf8028c0ddc98b8169fd6310426b43ccd371b9f0e10b85c71cbf815cf466b3934883ad08d0b285b2fd543c4d00bae219556590777427d0ff582d68043b70778cb415b52acf440a1a22e87b5373074765726a93e76b38f875facb1c1bb4a23461a8ac596a8990d8522cdebc03183148874fa56bf33775fa4a06fee9e34e2c72771f6c786b1fca0408e48f57f62bf835ae3760dbaad3f13675a6824d5132d91f9a77d7600e3d601538092a09", 0xe9}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="200000000000000001000000070000004f9b690f43a9e6885221178eaa000000c0000000040000000000000009000000872b1a12da1c0500f95e16ae5e1a5d63a32ef8ff12ace360e927da5a7a7fd18d4dfcb68e69cc08f3e3a247714097143f9f2181ed18883dbf8ea7bd3de53a7edd5046c88e672459778638f3d6327d7fd896a4bf027be758babb6ece4722475734eaad71fe6c3b2b124e5f9320d123fe75a7654aa38a763c520e7e27959aba76400dc82bb74bd3ecf8f856d44a8e7e9355bb07966b038d5ca81249a19cfe4904b5ed95f76879821e29346fc49bb4cc0000"], 0xe0}, 0x10) kernel console output (not intermixed with test programs): rsing attributes in process `syz.2.1700'. [ 296.485483][T11434] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1701'. [ 296.498133][T11436] netlink: 'syz.2.1702': attribute type 1 has an invalid length. [ 296.983811][T11445] tap0: tun_chr_ioctl cmd 35108 [ 297.008815][T11457] lo: entered allmulticast mode [ 297.027065][T11457] netlink: 'syz.4.1711': attribute type 29 has an invalid length. [ 297.037737][T11457] netlink: 'syz.4.1711': attribute type 29 has an invalid length. [ 297.052566][T11461] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 297.061198][T11461] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1712'. [ 297.072321][T11457] netlink: 'syz.4.1711': attribute type 29 has an invalid length. [ 297.154550][T11457] netlink: 'syz.4.1711': attribute type 29 has an invalid length. [ 297.207206][ T3487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.240248][T11465] netlink: 'syz.3.1713': attribute type 10 has an invalid length. [ 297.457900][ T3487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.836101][ T3487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.076184][ T3487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.195627][ T3487] bridge_slave_1: left allmulticast mode [ 298.201888][ T3487] bridge_slave_1: left promiscuous mode [ 298.207759][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.217596][ T3487] bridge_slave_0: left allmulticast mode [ 298.223706][ T3487] bridge_slave_0: left promiscuous mode [ 298.229372][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.470518][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.538648][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.575581][ T3487] bond0 (unregistering): Released all slaves [ 298.619525][T11475] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 298.804223][T11481] netlink: 'syz.4.1718': attribute type 5 has an invalid length. [ 299.002427][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.027791][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.038565][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.057656][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.075784][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.134700][T11493] FAULT_INJECTION: forcing a failure. [ 299.134700][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.222498][T11495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.257511][T11493] CPU: 0 UID: 0 PID: 11493 Comm: syz.0.1723 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 299.257538][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.257549][T11493] Call Trace: [ 299.257557][T11493] [ 299.257565][T11493] dump_stack_lvl+0x189/0x250 [ 299.257595][T11493] ? __pfx____ratelimit+0x10/0x10 [ 299.257611][T11493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.257633][T11493] ? __pfx__printk+0x10/0x10 [ 299.257650][T11493] ? __might_fault+0xb0/0x130 [ 299.257673][T11493] ? __might_fault+0xb0/0x130 [ 299.257699][T11493] should_fail_ex+0x414/0x560 [ 299.257731][T11493] _copy_from_user+0x2d/0xb0 [ 299.257749][T11493] ___sys_sendmsg+0x158/0x2a0 [ 299.257777][T11493] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.257839][T11493] ? __fget_files+0x2a/0x420 [ 299.257882][T11493] ? __fget_files+0x2a/0x420 [ 299.257897][T11493] ? __fget_files+0x3a0/0x420 [ 299.257935][T11493] __x64_sys_sendmsg+0x19b/0x260 [ 299.257961][T11493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.258002][T11493] ? __pfx_ksys_write+0x10/0x10 [ 299.258015][T11493] ? rcu_is_watching+0x15/0xb0 [ 299.258048][T11493] ? do_syscall_64+0xbe/0x3b0 [ 299.258072][T11493] do_syscall_64+0xfa/0x3b0 [ 299.258085][T11493] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.258099][T11493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.258114][T11493] ? clear_bhb_loop+0x60/0xb0 [ 299.258136][T11493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.258150][T11493] RIP: 0033:0x7f4faff8e929 [ 299.258168][T11493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.258181][T11493] RSP: 002b:00007f4fb0d45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.258198][T11493] RAX: ffffffffffffffda RBX: 00007f4fb01b5fa0 RCX: 00007f4faff8e929 [ 299.258209][T11493] RDX: 0000000004000104 RSI: 0000200000000bc0 RDI: 0000000000000005 [ 299.258219][T11493] RBP: 00007f4fb0d45090 R08: 0000000000000000 R09: 0000000000000000 [ 299.258229][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.258238][T11493] R13: 0000000000000000 R14: 00007f4fb01b5fa0 R15: 00007ffe079da8b8 [ 299.258289][T11493] [ 299.523080][T11497] netlink: 'syz.3.1726': attribute type 10 has an invalid length. [ 299.530945][T11497] __nla_validate_parse: 3 callbacks suppressed [ 299.530959][T11497] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1726'. [ 299.569472][ T3487] hsr_slave_0: left promiscuous mode [ 299.611059][ T3487] hsr_slave_1: left promiscuous mode [ 299.628724][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.668742][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.722319][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.747941][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.819642][ T3487] veth1_macvtap: left promiscuous mode [ 299.825446][ T3487] veth0_macvtap: left promiscuous mode [ 299.832316][ T3487] veth1_vlan: left promiscuous mode [ 299.842736][ T3487] veth0_vlan: left promiscuous mode [ 300.301770][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 300.338337][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 300.673932][T11509] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 300.682669][T11518] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1732'. [ 300.713085][T11520] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1733'. [ 300.974181][T11532] sctp: [Deprecated]: syz.3.1736 (pid 11532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.974181][T11532] Use struct sctp_sack_info instead [ 301.113039][T11487] chnl_net:caif_netlink_parms(): no params data found [ 301.132204][ T5834] Bluetooth: hci0: command tx timeout [ 301.446408][T11487] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.454587][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.461852][T11487] bridge_slave_0: entered allmulticast mode [ 301.470522][T11487] bridge_slave_0: entered promiscuous mode [ 301.481866][T11487] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.489999][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.497662][T11487] bridge_slave_1: entered allmulticast mode [ 301.509522][T11487] bridge_slave_1: entered promiscuous mode [ 301.555829][T11555] netlink: 'syz.0.1745': attribute type 1 has an invalid length. [ 301.573891][T11487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.597719][T11487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.704473][T11487] team0: Port device team_slave_0 added [ 301.714888][T11487] team0: Port device team_slave_1 added [ 301.798548][T11562] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1749'. [ 301.890229][T11487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.908323][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.943774][T11487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.955545][T11565] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1750'. [ 301.969865][T11487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.978472][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.007777][T11487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.049763][T11487] hsr_slave_0: entered promiscuous mode [ 302.056630][T11487] hsr_slave_1: entered promiscuous mode [ 302.063379][T11487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.070954][T11487] Cannot create hsr debugfs directory [ 302.405709][T11580] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1754'. [ 302.486349][T11582] validate_nla: 1 callbacks suppressed [ 302.486366][T11582] netlink: 'syz.3.1757': attribute type 1 has an invalid length. [ 302.681605][T11590] netlink: 'syz.0.1761': attribute type 39 has an invalid length. [ 302.746429][T11593] sctp: [Deprecated]: syz.2.1760 (pid 11593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.746429][T11593] Use struct sctp_sack_info instead [ 302.799948][T11487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.821598][T11487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.843198][T11487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.863376][T11487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 303.011286][T11487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.051028][T11487] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.073526][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.080753][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.105767][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.113034][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.203139][ T5834] Bluetooth: hci0: command tx timeout [ 303.229986][T11487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.321053][T11610] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1769'. [ 303.330728][T11615] netlink: 'syz.0.1770': attribute type 1 has an invalid length. [ 303.431627][T11617] netlink: 98920 bytes leftover after parsing attributes in process `syz.3.1771'. [ 303.449130][T11617] netlink: 'syz.3.1771': attribute type 3 has an invalid length. [ 303.457023][T11617] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.1771'. [ 303.715157][T11487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.852101][T11487] veth0_vlan: entered promiscuous mode [ 303.894795][T11487] veth1_vlan: entered promiscuous mode [ 303.972546][T11487] veth0_macvtap: entered promiscuous mode [ 303.998104][T11487] veth1_macvtap: entered promiscuous mode [ 304.063509][T11487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.104479][T11487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.120615][T11487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.173774][T11487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.182679][T11487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.193255][T11487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.534853][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.542720][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.630822][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.647713][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.868612][T11659] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1787'. [ 304.899649][T11657] sctp: [Deprecated]: syz.4.1786 (pid 11657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.899649][T11657] Use struct sctp_sack_info instead [ 305.223413][T11662] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1788'. [ 305.262449][T11668] netlink: 'syz.2.1790': attribute type 4 has an invalid length. [ 305.271531][T11668] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1790'. [ 305.293500][T11668] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 305.345020][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 305.507345][T11679] netlink: 35083 bytes leftover after parsing attributes in process `syz.2.1795'. [ 305.770450][T11689] netlink: 'syz.0.1800': attribute type 10 has an invalid length. [ 305.779682][T11689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1800'. [ 306.163305][T11714] sctp: [Deprecated]: syz.0.1809 (pid 11714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.163305][T11714] Use struct sctp_sack_info instead [ 306.267417][ T1106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.923032][ T1106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.087028][ T1106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.165882][ T1106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.266324][ T1106] bridge_slave_1: left allmulticast mode [ 307.272022][ T1106] bridge_slave_1: left promiscuous mode [ 307.282288][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.291573][ T1106] bridge_slave_0: left allmulticast mode [ 307.297983][ T1106] bridge_slave_0: left promiscuous mode [ 307.304510][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.594557][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.605527][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.615381][ T1106] bond0 (unregistering): Released all slaves [ 307.819743][ T1106] hsr_slave_0: left promiscuous mode [ 307.826029][ T1106] hsr_slave_1: left promiscuous mode [ 307.831759][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.839238][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.888257][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.910033][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.958427][ T1106] veth1_macvtap: left promiscuous mode [ 307.973547][ T1106] veth0_macvtap: left promiscuous mode [ 307.973934][T11727] netlink: 'syz.2.1813': attribute type 3 has an invalid length. [ 308.002919][T11727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1813'. [ 308.008036][ T1106] veth1_vlan: left promiscuous mode [ 308.034793][ T1106] veth0_vlan: left promiscuous mode [ 308.346079][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.356157][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.368703][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.391077][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.409437][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.688616][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 308.726813][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 309.118637][T11747] sctp: [Deprecated]: syz.3.1822 (pid 11747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.118637][T11747] Use struct sctp_sack_info instead [ 309.365288][T11754] netlink: 'syz.0.1825': attribute type 10 has an invalid length. [ 309.692294][T11756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.075874][T11734] chnl_net:caif_netlink_parms(): no params data found [ 310.244830][T11766] netlink: 'syz.2.1828': attribute type 7 has an invalid length. [ 310.410523][T11734] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.423090][T11734] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.430354][T11734] bridge_slave_0: entered allmulticast mode [ 310.450250][T11734] bridge_slave_0: entered promiscuous mode [ 310.469453][T11734] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.481788][T11734] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.482998][ T5835] Bluetooth: hci0: command tx timeout [ 310.490216][T11734] bridge_slave_1: entered allmulticast mode [ 310.508866][T11734] bridge_slave_1: entered promiscuous mode [ 310.588816][T11734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.611463][T11734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.727313][T11734] team0: Port device team_slave_0 added [ 310.757538][T11734] team0: Port device team_slave_1 added [ 310.898973][T11734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.909700][T11734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.947650][T11734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.969330][T11734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.977320][T11734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.004292][T11734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.075211][T11806] netlink: 'syz.2.1841': attribute type 3 has an invalid length. [ 311.099701][T11806] netlink: 17263 bytes leftover after parsing attributes in process `syz.2.1841'. [ 311.118918][T11810] netlink: 'syz.3.1843': attribute type 12 has an invalid length. [ 311.135278][T11810] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1843'. [ 311.161170][T11734] hsr_slave_0: entered promiscuous mode [ 311.178928][T11734] hsr_slave_1: entered promiscuous mode [ 311.193947][T11734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.208441][T11734] Cannot create hsr debugfs directory [ 311.239681][T11814] macvtap0: entered promiscuous mode [ 311.258095][T11810] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.1843'. [ 311.313037][T11810] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1843'. [ 311.373807][T11814] macvtap0: entered allmulticast mode [ 311.381150][T11814] veth0_macvtap: entered allmulticast mode [ 311.532498][T11825] netlink: 'syz.2.1846': attribute type 7 has an invalid length. [ 312.203403][T11734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.218799][T11734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.235332][T11734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.258185][T11734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.327330][T11856] netlink: 35083 bytes leftover after parsing attributes in process `syz.2.1858'. [ 312.388750][T11734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.419220][T11734] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.439035][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.446279][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.465219][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.472421][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.563644][ T5835] Bluetooth: hci0: command tx timeout [ 312.596051][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.721417][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.824985][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.889569][T11865] FAULT_INJECTION: forcing a failure. [ 312.889569][T11865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.908812][T11865] CPU: 0 UID: 0 PID: 11865 Comm: syz.4.1862 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 312.908837][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.908861][T11865] Call Trace: [ 312.908868][T11865] [ 312.908876][T11865] dump_stack_lvl+0x189/0x250 [ 312.908905][T11865] ? __pfx____ratelimit+0x10/0x10 [ 312.908922][T11865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.908946][T11865] ? __pfx__printk+0x10/0x10 [ 312.908965][T11865] ? __might_fault+0xb0/0x130 [ 312.908996][T11865] should_fail_ex+0x414/0x560 [ 312.909022][T11865] _copy_from_user+0x2d/0xb0 [ 312.909041][T11865] csum_and_copy_from_iter_full+0x4a1/0x1eb0 [ 312.909083][T11865] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 312.909109][T11865] ? __alloc_skb+0x142/0x2d0 [ 312.909134][T11865] ? trace_kmalloc+0x1f/0xd0 [ 312.909154][T11865] ip_generic_getfrag+0x12f/0x2b0 [ 312.909175][T11865] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 312.909194][T11865] ? skb_put+0x11b/0x210 [ 312.909215][T11865] __ip6_append_data+0x3027/0x3de0 [ 312.909252][T11865] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 312.909290][T11865] ? __pfx___ip6_append_data+0x10/0x10 [ 312.909311][T11865] ? __pfx_ip6_mtu+0x10/0x10 [ 312.909358][T11865] ip6_append_data+0x1c4/0x380 [ 312.909386][T11865] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 312.909404][T11865] l2tp_ip6_sendmsg+0x1282/0x17c0 [ 312.909441][T11865] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 312.909487][T11865] ? __pfx_aa_sk_perm+0x10/0x10 [ 312.909506][T11865] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 312.909542][T11865] ? inet_sendmsg+0x2f4/0x370 [ 312.909560][T11865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.909587][T11865] __sock_sendmsg+0x19c/0x270 [ 312.909609][T11865] ____sys_sendmsg+0x505/0x830 [ 312.909643][T11865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.909676][T11865] ? import_iovec+0x74/0xa0 [ 312.909699][T11865] ___sys_sendmsg+0x21f/0x2a0 [ 312.909726][T11865] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.909794][T11865] ? __fget_files+0x2a/0x420 [ 312.909814][T11865] ? __fget_files+0x3a0/0x420 [ 312.909845][T11865] __x64_sys_sendmsg+0x19b/0x260 [ 312.909872][T11865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.909905][T11865] ? __pfx_ksys_write+0x10/0x10 [ 312.909922][T11865] ? rcu_is_watching+0x15/0xb0 [ 312.909952][T11865] ? do_syscall_64+0xbe/0x3b0 [ 312.909975][T11865] do_syscall_64+0xfa/0x3b0 [ 312.909991][T11865] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.910007][T11865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.910024][T11865] ? clear_bhb_loop+0x60/0xb0 [ 312.910046][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.910063][T11865] RIP: 0033:0x7f852af8e929 [ 312.910079][T11865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.910094][T11865] RSP: 002b:00007f852be3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.910113][T11865] RAX: ffffffffffffffda RBX: 00007f852b1b5fa0 RCX: 00007f852af8e929 [ 312.910126][T11865] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 312.910137][T11865] RBP: 00007f852be3c090 R08: 0000000000000000 R09: 0000000000000000 [ 312.910148][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.910158][T11865] R13: 0000000000000000 R14: 00007f852b1b5fa0 R15: 00007fff28710f38 [ 312.910189][T11865] [ 313.432660][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.526344][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.535440][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.547203][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.551305][T11734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.563519][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.571933][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.675375][T11734] veth0_vlan: entered promiscuous mode [ 313.856322][T11734] veth1_vlan: entered promiscuous mode [ 313.904487][T11888] netlink: 35083 bytes leftover after parsing attributes in process `syz.0.1870'. [ 313.914302][ T60] bridge_slave_1: left allmulticast mode [ 313.920709][ T60] bridge_slave_1: left promiscuous mode [ 313.928279][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.944371][ T60] bridge_slave_0: left allmulticast mode [ 313.957076][ T60] bridge_slave_0: left promiscuous mode [ 313.973156][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.154735][ T60] team0: Port device geneve1 removed [ 314.306032][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.316555][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.326822][ T60] bond0 (unregistering): Released all slaves [ 314.350166][T11895] netlink: 'syz.4.1872': attribute type 29 has an invalid length. [ 314.501474][T11734] veth0_macvtap: entered promiscuous mode [ 314.599886][T11734] veth1_macvtap: entered promiscuous mode [ 314.645029][ T5834] Bluetooth: hci0: command tx timeout [ 314.660605][T11734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.709464][T11734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.729801][T11734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.751022][T11734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.770391][T11734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.779281][T11734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.808066][T11871] chnl_net:caif_netlink_parms(): no params data found [ 315.030178][T11871] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.039232][T11871] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.046902][T11871] bridge_slave_0: entered allmulticast mode [ 315.056199][T11871] bridge_slave_0: entered promiscuous mode [ 315.067907][T11871] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.078733][T11871] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.086064][T11871] bridge_slave_1: entered allmulticast mode [ 315.096242][T11871] bridge_slave_1: entered promiscuous mode [ 315.110378][ T60] hsr_slave_0: left promiscuous mode [ 315.126990][ T60] hsr_slave_1: left promiscuous mode [ 315.149891][ T60] veth1_macvtap: left promiscuous mode [ 315.155919][ T60] veth0_macvtap: left promiscuous mode [ 315.424331][T11929] netlink: 'syz.0.1882': attribute type 10 has an invalid length. [ 315.598912][ T60] team0 (unregistering): Port device team_slave_1 removed [ 315.606173][ T5834] Bluetooth: hci4: command tx timeout [ 316.034159][T11930] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1881'. [ 316.074612][T11871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.090723][T11871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.122469][T11932] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1883'. [ 316.195850][T11871] team0: Port device team_slave_0 added [ 316.237631][T11871] team0: Port device team_slave_1 added [ 316.312225][T11871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.346902][T11871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.374466][T11871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.407495][T11907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.434797][T11907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.435823][T11871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.451138][T11871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.477690][T11871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.595075][T11871] hsr_slave_0: entered promiscuous mode [ 316.608678][T11871] hsr_slave_1: entered promiscuous mode [ 316.646722][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.667618][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.718285][T11949] netlink: 'syz.3.1889': attribute type 10 has an invalid length. [ 316.733082][ T5834] Bluetooth: hci0: command tx timeout [ 316.749314][T11949] macvlan0: entered promiscuous mode [ 316.756306][T11949] macvlan0: entered allmulticast mode [ 316.766830][T11949] : entered allmulticast mode [ 316.788869][T11949] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 316.895484][T11949] netlink: 'syz.3.1889': attribute type 21 has an invalid length. [ 316.915304][T11949] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1889'. [ 316.943039][T11952] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1890'. [ 317.036612][T11943] syz.0.1884 (11943) used greatest stack depth: 17992 bytes left [ 317.129770][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.140760][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.371772][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.490603][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.660367][T11871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 317.669809][T11871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 317.683262][ T5834] Bluetooth: hci4: command tx timeout [ 317.697879][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.711454][T11871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 317.721102][T11871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 317.759193][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.817343][T11871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.839597][T11871] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.856126][T11907] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.863303][T11907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.891287][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.898471][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.976659][ T60] bridge_slave_1: left allmulticast mode [ 317.982343][ T60] bridge_slave_1: left promiscuous mode [ 317.988760][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.999406][ T60] bridge_slave_0: left allmulticast mode [ 318.005748][ T60] bridge_slave_0: left promiscuous mode [ 318.012200][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.253544][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.264954][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.274927][ T60] bond0 (unregistering): Released all slaves [ 318.484081][T11871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.525327][ T60] hsr_slave_0: left promiscuous mode [ 318.531112][ T60] hsr_slave_1: left promiscuous mode [ 318.537273][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.545027][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.554492][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.561884][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.576935][ T60] veth1_macvtap: left promiscuous mode [ 318.582450][ T60] veth0_macvtap: left promiscuous mode [ 318.588333][ T60] veth1_vlan: left promiscuous mode [ 318.593654][ T60] veth0_vlan: left promiscuous mode [ 319.157649][ T60] team0 (unregistering): Port device team_slave_1 removed [ 319.205533][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.215114][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.215924][ T60] team0 (unregistering): Port device team_slave_0 removed [ 319.230091][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.247491][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.261904][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.587893][T11973] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1894'. [ 319.597662][T11981] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1896'. [ 319.715111][T11871] veth0_vlan: entered promiscuous mode [ 319.763159][ T5834] Bluetooth: hci4: command tx timeout [ 319.801945][T11871] veth1_vlan: entered promiscuous mode [ 320.002342][T11871] veth0_macvtap: entered promiscuous mode [ 320.023062][T11871] veth1_macvtap: entered promiscuous mode [ 320.044258][T11871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.056604][T11871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.078929][T11871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.098217][T11871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.115420][T11871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.132548][T11871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.370503][T11982] chnl_net:caif_netlink_parms(): no params data found [ 320.526690][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.540351][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.565084][T11982] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.572248][T11982] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.583353][T11982] bridge_slave_0: entered allmulticast mode [ 320.592246][T11982] bridge_slave_0: entered promiscuous mode [ 320.611567][T11982] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.620958][T11982] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.628884][T11982] bridge_slave_1: entered allmulticast mode [ 320.636676][T11982] bridge_slave_1: entered promiscuous mode [ 320.677714][T12020] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1907'. [ 320.680356][T11982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.709242][T11982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.764235][T11982] team0: Port device team_slave_0 added [ 320.771867][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.774983][T11982] team0: Port device team_slave_1 added [ 320.787621][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.835205][T11982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.854066][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.883153][T11982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.927556][T11982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.937973][T11982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.967488][T11982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.121171][T11982] hsr_slave_0: entered promiscuous mode [ 321.128213][T11982] hsr_slave_1: entered promiscuous mode [ 321.143937][T11982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.158876][T11982] Cannot create hsr debugfs directory [ 321.283381][ T5834] Bluetooth: hci0: command tx timeout [ 321.334912][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.468830][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.601564][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.717156][T12040] netlink: 35083 bytes leftover after parsing attributes in process `syz.4.1915'. [ 321.977663][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.227629][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.237136][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.250039][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.268567][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.278773][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.469207][ T60] bridge_slave_1: left allmulticast mode [ 322.483495][ T60] bridge_slave_1: left promiscuous mode [ 322.500139][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.519560][ T60] bridge_slave_0: left allmulticast mode [ 322.537317][ T60] bridge_slave_0: left promiscuous mode [ 322.553188][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.828380][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.839325][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.850806][ T60] bond0 (unregistering): Released all slaves [ 322.881020][T12064] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 322.888464][T12065] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 322.907220][T12067] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1924'. [ 323.131350][T12075] netlink: 'syz.4.1927': attribute type 29 has an invalid length. [ 323.148715][T12075] netlink: 'syz.4.1927': attribute type 29 has an invalid length. [ 323.176166][T12075] netlink: 'syz.4.1927': attribute type 29 has an invalid length. [ 323.219782][T12075] netlink: 'syz.4.1927': attribute type 29 has an invalid length. [ 323.333824][T12080] FAULT_INJECTION: forcing a failure. [ 323.333824][T12080] name failslab, interval 1, probability 0, space 0, times 0 [ 323.367756][ T5834] Bluetooth: hci0: command tx timeout [ 323.367884][T12080] CPU: 0 UID: 0 PID: 12080 Comm: syz.3.1929 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 323.367906][T12080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.367917][T12080] Call Trace: [ 323.367925][T12080] [ 323.367932][T12080] dump_stack_lvl+0x189/0x250 [ 323.367962][T12080] ? __pfx____ratelimit+0x10/0x10 [ 323.367980][T12080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.368004][T12080] ? __pfx__printk+0x10/0x10 [ 323.368029][T12080] ? __pfx___might_resched+0x10/0x10 [ 323.368053][T12080] ? fs_reclaim_acquire+0x7d/0x100 [ 323.368080][T12080] should_fail_ex+0x414/0x560 [ 323.368108][T12080] should_failslab+0xa8/0x100 [ 323.368131][T12080] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 323.368150][T12080] ? __d_alloc+0x31/0x6f0 [ 323.368178][T12080] __d_alloc+0x31/0x6f0 [ 323.368200][T12080] ? __lock_acquire+0xab9/0xd20 [ 323.368225][T12080] d_alloc_parallel+0xe0/0x14e0 [ 323.368265][T12080] ? __d_lookup+0x66/0x780 [ 323.368285][T12080] ? __pfx_d_alloc_parallel+0x10/0x10 [ 323.368327][T12080] path_openat+0xa3b/0x3830 [ 323.368342][T12080] ? arch_stack_walk+0xfc/0x150 [ 323.368393][T12080] ? __pfx_path_openat+0x10/0x10 [ 323.368407][T12080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.368447][T12080] do_filp_open+0x34a/0x410 [ 323.368461][T12080] ? __lock_acquire+0xab9/0xd20 [ 323.368484][T12080] ? __pfx_do_filp_open+0x10/0x10 [ 323.368512][T12080] ? __pfx_kfree_link+0x10/0x10 [ 323.368542][T12080] ? _raw_spin_unlock+0x28/0x50 [ 323.368582][T12080] ? alloc_fd+0x64c/0x6c0 [ 323.368614][T12080] do_sys_openat2+0x121/0x1c0 [ 323.368641][T12080] ? __pfx_do_sys_openat2+0x10/0x10 [ 323.368661][T12080] ? irqentry_exit+0x74/0x90 [ 323.368697][T12080] __x64_sys_openat+0x138/0x170 [ 323.368727][T12080] do_syscall_64+0xfa/0x3b0 [ 323.368746][T12080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.368762][T12080] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.368779][T12080] ? clear_bhb_loop+0x60/0xb0 [ 323.368800][T12080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.368816][T12080] RIP: 0033:0x7f5773b8d290 [ 323.368832][T12080] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 323.368846][T12080] RSP: 002b:00007f5774a35f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 323.368865][T12080] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5773b8d290 [ 323.368877][T12080] RDX: 0000000000000002 RSI: 00007f5774a35fa0 RDI: 00000000ffffff9c [ 323.368888][T12080] RBP: 00007f5774a35fa0 R08: 0000000000000000 R09: 0000000000000000 [ 323.368899][T12080] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 323.368909][T12080] R13: 0000000000000000 R14: 00007f5773db5fa0 R15: 00007ffd08d5c328 [ 323.368938][T12080] [ 323.661711][T11982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.704802][T11982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.731619][T11982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.869335][T11982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.886445][ T60] hsr_slave_0: left promiscuous mode [ 323.892670][ T60] hsr_slave_1: left promiscuous mode [ 323.898760][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.906473][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.918675][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.927067][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.951168][ T60] veth1_macvtap: left promiscuous mode [ 323.956998][ T60] veth0_macvtap: left promiscuous mode [ 323.962836][ T60] veth1_vlan: left promiscuous mode [ 323.968487][ T60] veth0_vlan: left promiscuous mode [ 324.326492][ T5834] Bluetooth: hci4: command tx timeout [ 324.457797][ T60] team0 (unregistering): Port device team_slave_1 removed [ 324.495778][ T60] team0 (unregistering): Port device team_slave_0 removed [ 324.865330][T12113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1940'. [ 324.899539][T12054] chnl_net:caif_netlink_parms(): no params data found [ 325.218256][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.225626][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.234078][T12054] bridge_slave_0: entered allmulticast mode [ 325.242611][T12054] bridge_slave_0: entered promiscuous mode [ 325.255148][T12054] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.263184][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.270414][T12054] bridge_slave_1: entered allmulticast mode [ 325.280123][T12054] bridge_slave_1: entered promiscuous mode [ 325.355088][T12054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.388673][T11982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.414688][T12054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.477982][T12137] netlink: 'syz.0.1946': attribute type 12 has an invalid length. [ 325.491549][T12137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1946'. [ 325.683393][ T5834] Bluetooth: hci0: command tx timeout [ 326.092306][T12054] team0: Port device team_slave_0 added [ 326.106768][T12054] team0: Port device team_slave_1 added [ 326.149033][T12054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.159019][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.187390][T12054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.216256][T11982] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.229497][T12054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.261482][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.300550][T12054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.402999][ T5834] Bluetooth: hci4: command tx timeout [ 326.420946][T11910] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.428193][T11910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.726930][T11910] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.734143][T11910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.768641][T12054] hsr_slave_0: entered promiscuous mode [ 326.785646][T12054] hsr_slave_1: entered promiscuous mode [ 327.004396][T12168] netlink: 'syz.3.1957': attribute type 10 has an invalid length. [ 327.766295][ T5834] Bluetooth: hci0: command tx timeout [ 327.790353][T11982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.900845][T12054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.938659][T12054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.966245][T12054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.984357][T12054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.220804][T11982] veth0_vlan: entered promiscuous mode [ 328.310705][T11982] veth1_vlan: entered promiscuous mode [ 328.486109][ T5834] Bluetooth: hci4: command tx timeout [ 328.520717][T11982] veth0_macvtap: entered promiscuous mode [ 328.547172][T12217] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1971'. [ 328.576531][T11982] veth1_macvtap: entered promiscuous mode [ 328.636756][T11982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.677874][T11982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.691340][T11982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.700727][T11982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.727887][T11982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.739239][T11982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.792394][T12054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.840132][T12232] FAULT_INJECTION: forcing a failure. [ 328.840132][T12232] name failslab, interval 1, probability 0, space 0, times 0 [ 328.860082][T12232] CPU: 1 UID: 0 PID: 12232 Comm: syz.3.1978 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 328.860112][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.860122][T12232] Call Trace: [ 328.860132][T12232] [ 328.860141][T12232] dump_stack_lvl+0x189/0x250 [ 328.860174][T12232] ? __pfx____ratelimit+0x10/0x10 [ 328.860196][T12232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.860225][T12232] ? __pfx__printk+0x10/0x10 [ 328.860266][T12232] ? __pfx___might_resched+0x10/0x10 [ 328.860315][T12232] should_fail_ex+0x414/0x560 [ 328.860357][T12232] should_failslab+0xa8/0x100 [ 328.860386][T12232] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 328.860410][T12232] ? __alloc_skb+0x112/0x2d0 [ 328.860447][T12232] __alloc_skb+0x112/0x2d0 [ 328.860484][T12232] netlink_sendmsg+0x5c6/0xb30 [ 328.860536][T12232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.860570][T12232] ? aa_sock_msg_perm+0x94/0x160 [ 328.860603][T12232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.860628][T12232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.860656][T12232] __sock_sendmsg+0x219/0x270 [ 328.860688][T12232] ____sys_sendmsg+0x505/0x830 [ 328.860730][T12232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.860783][T12232] ? import_iovec+0x74/0xa0 [ 328.860817][T12232] ___sys_sendmsg+0x21f/0x2a0 [ 328.860850][T12232] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.860931][T12232] ? __fget_files+0x2a/0x420 [ 328.860991][T12232] ? __fget_files+0x2a/0x420 [ 328.861012][T12232] ? __fget_files+0x3a0/0x420 [ 328.861065][T12232] __x64_sys_sendmsg+0x19b/0x260 [ 328.861087][T12232] ? perf_trace_run_bpf_submit+0x100/0x170 [ 328.861119][T12232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.861173][T12232] ? __pfx_ksys_write+0x10/0x10 [ 328.861189][T12232] ? rcu_is_watching+0x15/0xb0 [ 328.861233][T12232] ? do_syscall_64+0xbe/0x3b0 [ 328.861265][T12232] do_syscall_64+0xfa/0x3b0 [ 328.861289][T12232] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.861309][T12232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.861328][T12232] ? clear_bhb_loop+0x60/0xb0 [ 328.861358][T12232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.861376][T12232] RIP: 0033:0x7f5773b8e929 [ 328.861395][T12232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.861410][T12232] RSP: 002b:00007f5774a36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.861430][T12232] RAX: ffffffffffffffda RBX: 00007f5773db5fa0 RCX: 00007f5773b8e929 [ 328.861443][T12232] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 328.861454][T12232] RBP: 00007f5774a36090 R08: 0000000000000000 R09: 0000000000000000 [ 328.861465][T12232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.861476][T12232] R13: 0000000000000000 R14: 00007f5773db5fa0 R15: 00007ffd08d5c328 [ 328.861534][T12232] [ 329.179910][T12230] sctp: [Deprecated]: syz.4.1976 (pid 12230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.179910][T12230] Use struct sctp_sack_info instead [ 329.244404][T12054] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.265555][T12234] netlink: 'syz.0.1979': attribute type 10 has an invalid length. [ 329.303919][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.311146][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.379663][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.391420][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.408094][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.415340][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.438698][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.447913][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.460196][T12238] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1981'. [ 330.167722][ T1164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.228945][T12252] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1985'. [ 330.370678][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.544235][T12054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.563657][ T5834] Bluetooth: hci4: command tx timeout [ 330.584642][ T1164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.638531][T12054] veth0_vlan: entered promiscuous mode [ 330.649971][T12054] veth1_vlan: entered promiscuous mode [ 330.678600][T12054] veth0_macvtap: entered promiscuous mode [ 330.687599][T12054] veth1_macvtap: entered promiscuous mode [ 330.705909][T12054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.719822][T12054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.735543][T12054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.745359][T12054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.754503][T12054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.763508][T12054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.822088][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.837540][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.860778][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.869068][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.908961][ T1164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.172679][ T1164] bridge_slave_1: left allmulticast mode [ 331.180609][ T1164] bridge_slave_1: left promiscuous mode [ 331.186936][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.196342][ T1164] bridge_slave_0: left allmulticast mode [ 331.201987][ T1164] bridge_slave_0: left promiscuous mode [ 331.208274][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.453972][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.464793][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.476308][ T1164] bond0 (unregistering): Released all slaves [ 331.708429][ T1164] hsr_slave_0: left promiscuous mode [ 331.714610][ T1164] hsr_slave_1: left promiscuous mode [ 331.720327][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.727824][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.736025][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.743513][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.761212][ T1164] veth1_macvtap: left promiscuous mode [ 331.767025][ T1164] veth0_macvtap: left promiscuous mode [ 331.772607][ T1164] veth1_vlan: left promiscuous mode [ 331.778341][ T1164] veth0_vlan: left promiscuous mode [ 332.371801][T12263] netlink: 'syz.4.1988': attribute type 33 has an invalid length. [ 332.457319][T12263] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1988'. [ 333.253665][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.262501][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.271639][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.285488][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.295209][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.511840][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 333.560416][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 333.631129][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.642471][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.651043][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.661236][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.676327][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.944625][T12263] mac80211_hwsim hwsim11 : renamed from wlan1 [ 333.952359][T12263] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 334.154452][T12277] netlink: 'syz.3.1992': attribute type 5 has an invalid length. [ 334.342390][T12282] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 334.350245][T12282] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 334.696387][T12296] netlink: 'syz.4.1997': attribute type 6 has an invalid length. [ 334.704401][T12296] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1997'. [ 334.763229][T12269] chnl_net:caif_netlink_parms(): no params data found [ 334.812248][T12272] chnl_net:caif_netlink_parms(): no params data found [ 334.936138][ T1164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.001430][T12305] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 335.019713][T12305] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2000'. [ 335.137901][ T1164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.170341][T12308] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2001'. [ 335.189067][T12314] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2003'. [ 335.278193][T12318] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2004'. [ 335.326124][ T1164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.366747][ T5834] Bluetooth: hci0: command tx timeout [ 335.441842][T12269] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.453398][T12269] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.460696][T12269] bridge_slave_0: entered allmulticast mode [ 335.471753][T12269] bridge_slave_0: entered promiscuous mode [ 335.488588][T12318] hsr_slave_0: left promiscuous mode [ 335.499414][T12318] hsr_slave_1: left promiscuous mode [ 335.582902][T12324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2005'. [ 335.729349][ T1164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.763282][ T5834] Bluetooth: hci4: command tx timeout [ 335.771326][T12269] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.779749][T12269] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.788379][T12269] bridge_slave_1: entered allmulticast mode [ 335.802591][T12269] bridge_slave_1: entered promiscuous mode [ 335.819876][T12320] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2005'. [ 335.837027][T12272] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.878138][T12272] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.899635][T12272] bridge_slave_0: entered allmulticast mode [ 335.911526][T12272] bridge_slave_0: entered promiscuous mode [ 335.967658][T12325] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2005'. [ 336.055157][T12272] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.062559][T12272] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.078144][T12272] bridge_slave_1: entered allmulticast mode [ 336.095258][T12272] bridge_slave_1: entered promiscuous mode [ 336.124800][T12339] netlink: 'syz.0.2010': attribute type 2 has an invalid length. [ 336.138123][T12339] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2010'. [ 336.152737][T12269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.274424][T12269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.522394][T12272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.537701][T12272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.606113][T12269] team0: Port device team_slave_0 added [ 336.668922][T12354] netlink: 'syz.3.2015': attribute type 7 has an invalid length. [ 337.443570][ T5834] Bluetooth: hci0: command tx timeout [ 337.671020][T12269] team0: Port device team_slave_1 added [ 337.847507][ T5834] Bluetooth: hci4: command tx timeout [ 337.919908][T12272] team0: Port device team_slave_0 added [ 338.001816][T12272] team0: Port device team_slave_1 added [ 338.025227][T12269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.058556][T12269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.122921][T12269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.165700][T12269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.178136][T12269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.206481][T12269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.258151][T12272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.265643][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.326675][T12272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.361711][ T1164] bridge_slave_1: left allmulticast mode [ 338.368485][ T1164] bridge_slave_1: left promiscuous mode [ 338.380656][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.391217][ T1164] bridge_slave_0: left allmulticast mode [ 338.397315][ T1164] bridge_slave_0: left promiscuous mode [ 338.404143][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.095546][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.116037][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.132967][ T1164] bond0 (unregistering): Released all slaves [ 339.163199][T12272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.170492][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.197890][T12272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.221057][T12372] netlink: 3273 bytes leftover after parsing attributes in process `syz.4.2022'. [ 339.523135][ T5834] Bluetooth: hci0: command tx timeout [ 339.925560][ T5834] Bluetooth: hci4: command tx timeout [ 340.335939][T12272] hsr_slave_0: entered promiscuous mode [ 340.344419][T12272] hsr_slave_1: entered promiscuous mode [ 340.350769][T12272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.360881][T12272] Cannot create hsr debugfs directory [ 340.381063][T12269] hsr_slave_0: entered promiscuous mode [ 340.388541][T12269] hsr_slave_1: entered promiscuous mode [ 340.399910][T12269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.407670][T12269] Cannot create hsr debugfs directory [ 341.006362][ T1164] hsr_slave_0: left promiscuous mode [ 341.012524][ T1164] hsr_slave_1: left promiscuous mode [ 341.020320][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.028205][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.037247][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.046002][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.082662][ T1164] veth1_macvtap: left promiscuous mode [ 341.089106][ T1164] veth0_macvtap: left promiscuous mode [ 341.096921][ T1164] veth1_vlan: left promiscuous mode [ 341.102453][ T1164] veth0_vlan: left promiscuous mode [ 341.606037][ T5834] Bluetooth: hci0: command tx timeout [ 341.642942][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 341.688599][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 342.003371][ T5834] Bluetooth: hci4: command tx timeout [ 342.281515][T12430] netlink: 'syz.3.2041': attribute type 10 has an invalid length. [ 342.390989][T12418] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2037'. [ 342.587388][T12430] veth0_macvtap (unregistering): left allmulticast mode [ 342.745114][T12436] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2042'. [ 342.951138][T12443] syz.3.2045: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 342.980678][T12443] CPU: 0 UID: 0 PID: 12443 Comm: syz.3.2045 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 342.980709][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.980723][T12443] Call Trace: [ 342.980731][T12443] [ 342.980740][T12443] dump_stack_lvl+0x189/0x250 [ 342.980778][T12443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.980806][T12443] ? __pfx__printk+0x10/0x10 [ 342.980827][T12443] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 342.980849][T12443] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 342.980872][T12443] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 342.980896][T12443] warn_alloc+0x214/0x310 [ 342.980920][T12443] ? stack_depot_save_flags+0x429/0x900 [ 342.980951][T12443] ? __pfx_warn_alloc+0x10/0x10 [ 342.980977][T12443] ? kasan_save_track+0x4f/0x80 [ 342.980997][T12443] ? xskq_create+0x56/0x170 [ 342.981013][T12443] ? xsk_init_queue+0xb0/0x110 [ 342.981038][T12443] ? xsk_setsockopt+0x4de/0x710 [ 342.981060][T12443] ? do_sock_setsockopt+0x25a/0x3e0 [ 342.981082][T12443] ? __x64_sys_setsockopt+0x18b/0x220 [ 342.981103][T12443] ? do_syscall_64+0xfa/0x3b0 [ 342.981121][T12443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.981149][T12443] __vmalloc_node_range_noprof+0x125/0x12f0 [ 342.981207][T12443] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.981235][T12443] ? __kasan_kmalloc+0x93/0xb0 [ 342.981259][T12443] vmalloc_user_noprof+0xad/0xf0 [ 342.981283][T12443] ? xskq_create+0xbf/0x170 [ 342.981301][T12443] xskq_create+0xbf/0x170 [ 342.981323][T12443] xsk_init_queue+0xb0/0x110 [ 342.981352][T12443] xsk_setsockopt+0x4de/0x710 [ 342.981385][T12443] ? __pfx_xsk_setsockopt+0x10/0x10 [ 342.981419][T12443] ? aa_sock_opt_perm+0x74/0x110 [ 342.981446][T12443] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 342.981471][T12443] ? __pfx_xsk_setsockopt+0x10/0x10 [ 342.981504][T12443] do_sock_setsockopt+0x25a/0x3e0 [ 342.981532][T12443] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 342.981561][T12443] ? __fget_files+0x2a/0x420 [ 342.981594][T12443] __x64_sys_setsockopt+0x18b/0x220 [ 342.981626][T12443] do_syscall_64+0xfa/0x3b0 [ 342.981643][T12443] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.981660][T12443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.981677][T12443] ? clear_bhb_loop+0x60/0xb0 [ 342.981700][T12443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.981716][T12443] RIP: 0033:0x7f5773b8e929 [ 342.981732][T12443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.981748][T12443] RSP: 002b:00007f5774a36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 342.981769][T12443] RAX: ffffffffffffffda RBX: 00007f5773db5fa0 RCX: 00007f5773b8e929 [ 342.981783][T12443] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 342.981796][T12443] RBP: 00007f5773c10b39 R08: 0000000000000004 R09: 0000000000000000 [ 342.981807][T12443] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 342.981820][T12443] R13: 0000000000000000 R14: 00007f5773db5fa0 R15: 00007ffd08d5c328 [ 342.981851][T12443] [ 342.981955][T12443] Mem-Info: [ 343.156679][T12450] netlink: 'syz.0.2047': attribute type 27 has an invalid length. [ 343.158958][T12443] active_anon:25581 inactive_anon:0 isolated_anon:0 [ 343.158958][T12443] active_file:18038 inactive_file:39967 isolated_file:0 [ 343.158958][T12443] unevictable:768 dirty:153 writeback:0 [ 343.158958][T12443] slab_reclaimable:10676 slab_unreclaimable:94396 [ 343.158958][T12443] mapped:29794 shmem:17690 pagetables:1062 [ 343.158958][T12443] sec_pagetables:0 bounce:0 [ 343.158958][T12443] kernel_misc_reclaimable:0 [ 343.158958][T12443] free:1283296 free_pcp:28659 free_cma:0 [ 343.167782][T12450] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2047'. [ 343.168555][T12443] Node 0 active_anon:102324kB inactive_anon:0kB active_file:72152kB inactive_file:159668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119176kB dirty:608kB writeback:0kB shmem:69224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11284kB pagetables:4104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.168612][T12443] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.424468][T12443] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.454704][T12443] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 343.460609][T12443] Node 0 DMA32 free:1213988kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102276kB inactive_anon:0kB active_file:72152kB inactive_file:157840kB unevictable:1536kB writepending:604kB present:3129332kB managed:2560960kB mlocked:0kB bounce:0kB free_pcp:97500kB local_pcp:45272kB free_cma:0kB [ 343.493475][T12443] lowmem_reserve[]: 0 0 1 1 1 [ 343.498357][T12443] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 343.542579][T12443] lowmem_reserve[]: 0 0 0 0 0 [ 343.558331][T12443] Node 1 Normal free:3903820kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16960kB local_pcp:9504kB free_cma:0kB [ 343.592276][T12443] lowmem_reserve[]: 0 0 0 0 0 [ 343.600868][T12443] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 343.617525][T12443] Node 0 DMA32: 3*4kB (UME) 1*8kB (M) 9*16kB (UME) 2*32kB (E) 8*64kB (UME) 94*128kB (UE) 232*256kB (UE) 162*512kB (UE) 70*1024kB (UE) 30*2048kB (UME) 226*4096kB (UM) = 1213924kB [ 343.636716][T12443] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 343.650802][T12443] Node 1 Normal: 199*4kB (UM) 50*8kB (UME) 44*16kB (UME) 147*32kB (UME) 46*64kB (UME) 12*128kB (UME) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3903820kB [ 343.670706][T12443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.686260][T12443] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 343.703105][T12443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.712691][T12443] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 343.723884][T12443] 75692 total pagecache pages [ 343.728603][T12443] 0 pages in swap cache [ 343.734287][T12443] Free swap = 124996kB [ 343.738855][T12443] Total swap = 124996kB [ 343.743125][T12443] 2097051 pages RAM [ 343.747144][T12443] 0 pages HighMem/MovableOnly [ 343.754284][T12443] 424705 pages reserved [ 343.759351][T12443] 0 pages cma reserved [ 343.840024][T12269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.885186][T12461] netlink: 'syz.4.2051': attribute type 10 has an invalid length. [ 343.893373][T12461] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2051'. [ 343.903288][T12269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.950825][T12269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.980310][T12269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.998192][T12463] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2052'. [ 344.251070][T12269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.357190][T12269] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.369446][T12272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 344.404575][T12272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 344.438785][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.446028][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.460464][T12272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 344.476572][T12483] netlink: 'syz.0.2059': attribute type 29 has an invalid length. [ 344.498543][T11907] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.505750][T11907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.526291][T12272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 344.805316][T12272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.866147][T12272] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.918024][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.925300][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.980621][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.987879][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.167509][T12513] netlink: 'syz.3.2064': attribute type 10 has an invalid length. [ 345.178637][T12513] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2064'. [ 345.217661][T12269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.234547][T12515] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2065'. [ 345.330947][T12269] veth0_vlan: entered promiscuous mode [ 345.379173][T12269] veth1_vlan: entered promiscuous mode [ 345.486250][T12269] veth0_macvtap: entered promiscuous mode [ 345.539325][T12269] veth1_macvtap: entered promiscuous mode [ 345.547227][T12531] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2070'. [ 345.600950][T12269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.629545][T12269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.679797][T12269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.691120][T12269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.701570][T12269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.711947][T12269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.751902][T12272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.855368][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.865834][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.888660][T12272] veth0_vlan: entered promiscuous mode [ 345.918166][T12272] veth1_vlan: entered promiscuous mode [ 345.922716][T11910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.931672][T11910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.983779][T12272] veth0_macvtap: entered promiscuous mode [ 346.011458][T12272] veth1_macvtap: entered promiscuous mode [ 346.069503][T12272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.085062][T12272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.102525][T12272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.112763][T12272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.126572][T12272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.135355][T12272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.244887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.260073][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.301160][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.310963][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.634792][T12553] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 346.856606][T12556] delete_channel: no stack [ 346.868060][T12564] sctp: [Deprecated]: syz.0.2083 (pid 12564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.868060][T12564] Use struct sctp_sack_info instead [ 346.950857][T11907] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.480454][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.489125][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.498791][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.508221][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.522407][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.528971][T11907] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.761917][T12566] chnl_net:caif_netlink_parms(): no params data found [ 348.027259][T11907] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.128234][T12566] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.159706][T12566] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.170280][T12566] bridge_slave_0: entered allmulticast mode [ 348.181905][T12566] bridge_slave_0: entered promiscuous mode [ 348.208241][T11907] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.234002][T12566] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.250842][T12566] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.252110][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.265339][T12566] bridge_slave_1: entered allmulticast mode [ 348.272601][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.282018][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.292327][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.306084][T12566] bridge_slave_1: entered promiscuous mode [ 348.312371][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.424648][T12566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.470162][T12566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.579611][T12566] team0: Port device team_slave_0 added [ 348.611491][T12566] team0: Port device team_slave_1 added [ 348.742498][T12605] netlink: 'syz.4.2095': attribute type 10 has an invalid length. [ 348.926412][T12566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.983115][T12566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.146128][T12566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.182106][T12611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.273384][T12566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.293732][T12566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.351822][T12566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.369589][T11907] bridge_slave_1: left allmulticast mode [ 349.376884][T11907] bridge_slave_1: left promiscuous mode [ 349.382672][T11907] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.401899][T11907] bridge_slave_0: left allmulticast mode [ 349.497638][T11907] bridge_slave_0: left promiscuous mode [ 349.523385][T11907] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.615011][ T5835] Bluetooth: hci0: command tx timeout [ 350.405631][ T5835] Bluetooth: hci4: command tx timeout [ 350.795113][T12632] sctp: [Deprecated]: syz.0.2101 (pid 12632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.795113][T12632] Use struct sctp_sack_info instead [ 350.863510][T11907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.900098][T11907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.919177][T11907] bond0 (unregistering): Released all slaves [ 351.084934][T12566] hsr_slave_0: entered promiscuous mode [ 351.113386][T12566] hsr_slave_1: entered promiscuous mode [ 351.181015][T12643] @ÿ: renamed from bond_slave_0 (while UP) [ 351.406781][T12650] netlink: 'syz.4.2107': attribute type 10 has an invalid length. [ 351.415347][T12650] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2107'. [ 351.552189][T11907] hsr_slave_0: left promiscuous mode [ 351.603541][T11907] hsr_slave_1: left promiscuous mode [ 351.611875][T11907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.632979][T11907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.642366][T11907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.667402][T11907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.684780][ T5835] Bluetooth: hci0: command tx timeout [ 351.765360][T11907] veth1_macvtap: left promiscuous mode [ 351.770987][T11907] veth0_macvtap: left promiscuous mode [ 351.802047][T11907] veth1_vlan: left promiscuous mode [ 351.808348][T11907] veth0_vlan: left promiscuous mode [ 352.483625][ T5835] Bluetooth: hci4: command tx timeout [ 353.048819][T11907] team0 (unregistering): Port device team_slave_1 removed [ 353.088928][T11907] team0 (unregistering): Port device team_slave_0 removed [ 353.571666][T12677] netlink: 'syz.3.2119': attribute type 29 has an invalid length. [ 353.580767][T12687] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 353.619897][T12592] chnl_net:caif_netlink_parms(): no params data found [ 353.763230][ T5835] Bluetooth: hci0: command tx timeout [ 354.202222][T12712] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2131'. [ 354.252320][T12592] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.260659][T12592] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.267975][T12592] bridge_slave_0: entered allmulticast mode [ 354.275969][T12592] bridge_slave_0: entered promiscuous mode [ 354.287357][T12592] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.295932][T12592] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.303340][T12592] bridge_slave_1: entered allmulticast mode [ 354.311359][T12592] bridge_slave_1: entered promiscuous mode [ 354.432918][T12592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.449060][T12592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.554521][T12592] team0: Port device team_slave_0 added [ 354.563692][ T5835] Bluetooth: hci4: command tx timeout [ 354.625780][T11907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.669911][T12592] team0: Port device team_slave_1 added [ 354.841658][T11907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.883694][T12592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.894336][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.936900][T12592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.004589][T11907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.030356][T12592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.037538][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.063738][T12592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.166924][T11907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.188842][T12566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.247046][T12741] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2142'. [ 355.264637][T12566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.316440][T12592] hsr_slave_0: entered promiscuous mode [ 355.337491][T12592] hsr_slave_1: entered promiscuous mode [ 355.348030][T12592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.357400][T12592] Cannot create hsr debugfs directory [ 355.373891][T12566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.462017][T12749] netlink: 'syz.3.2146': attribute type 2 has an invalid length. [ 355.470528][T12749] netlink: 'syz.3.2146': attribute type 1 has an invalid length. [ 355.483188][T12749] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2146'. [ 355.497451][T12749] block nbd5: not configured, cannot reconfigure [ 355.518107][T12566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.843064][ T5835] Bluetooth: hci0: command tx timeout [ 355.870699][T12765] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2149'. [ 356.090833][T11907] bridge_slave_1: left allmulticast mode [ 356.108400][T11907] bridge_slave_1: left promiscuous mode [ 356.116469][T11907] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.131891][T11907] bridge_slave_0: left allmulticast mode [ 356.140416][T11907] bridge_slave_0: left promiscuous mode [ 356.147202][T11907] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.655885][ T5835] Bluetooth: hci4: command tx timeout [ 356.677868][T11907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.688969][T11907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.699161][T11907] bond0 (unregistering): Released all slaves [ 356.714208][T12782] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2156'. [ 356.950634][T12566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.156214][T11907] hsr_slave_0: left promiscuous mode [ 357.172406][T11907] hsr_slave_1: left promiscuous mode [ 357.185997][T11907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.196177][T12801] netlink: 'syz.4.2163': attribute type 7 has an invalid length. [ 357.210344][T11907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.223196][T11907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.249490][T11907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.278458][T11907] veth1_macvtap: left promiscuous mode [ 357.285102][T11907] veth0_macvtap: left promiscuous mode [ 357.290781][T11907] veth1_vlan: left promiscuous mode [ 357.296387][T11907] veth0_vlan: left promiscuous mode [ 357.378287][T12806] FAULT_INJECTION: forcing a failure. [ 357.378287][T12806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.395211][T12806] CPU: 1 UID: 0 PID: 12806 Comm: syz.3.2166 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 357.395236][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.395247][T12806] Call Trace: [ 357.395254][T12806] [ 357.395260][T12806] dump_stack_lvl+0x189/0x250 [ 357.395291][T12806] ? __pfx____ratelimit+0x10/0x10 [ 357.395308][T12806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.395331][T12806] ? __pfx__printk+0x10/0x10 [ 357.395361][T12806] should_fail_ex+0x414/0x560 [ 357.395389][T12806] _copy_to_user+0x31/0xb0 [ 357.395409][T12806] simple_read_from_buffer+0xe1/0x170 [ 357.395445][T12806] proc_fail_nth_read+0x1df/0x250 [ 357.395471][T12806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.395496][T12806] ? rw_verify_area+0x258/0x650 [ 357.395514][T12806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.395536][T12806] vfs_read+0x200/0x980 [ 357.395559][T12806] ? __pfx___mutex_lock+0x10/0x10 [ 357.395577][T12806] ? __pfx_vfs_read+0x10/0x10 [ 357.395595][T12806] ? __fget_files+0x2a/0x420 [ 357.395621][T12806] ? __fget_files+0x3a0/0x420 [ 357.395641][T12806] ? __fget_files+0x2a/0x420 [ 357.395668][T12806] ksys_read+0x145/0x250 [ 357.395686][T12806] ? __pfx_ksys_read+0x10/0x10 [ 357.395700][T12806] ? rcu_is_watching+0x15/0xb0 [ 357.395729][T12806] ? do_syscall_64+0xbe/0x3b0 [ 357.395751][T12806] do_syscall_64+0xfa/0x3b0 [ 357.395767][T12806] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.395783][T12806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.395804][T12806] ? clear_bhb_loop+0x60/0xb0 [ 357.395825][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.395843][T12806] RIP: 0033:0x7f5773b8d33c [ 357.395860][T12806] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 357.395875][T12806] RSP: 002b:00007f5774a36030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.395893][T12806] RAX: ffffffffffffffda RBX: 00007f5773db5fa0 RCX: 00007f5773b8d33c [ 357.395905][T12806] RDX: 000000000000000f RSI: 00007f5774a360a0 RDI: 0000000000000004 [ 357.395916][T12806] RBP: 00007f5774a36090 R08: 0000000000000000 R09: 0000000000000000 [ 357.395927][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.395936][T12806] R13: 0000000000000000 R14: 00007f5773db5fa0 R15: 00007ffd08d5c328 [ 357.395967][T12806] [ 357.951491][T11907] team0 (unregistering): Port device team_slave_1 removed [ 357.989265][T11907] team0 (unregistering): Port device team_slave_0 removed [ 358.339582][T12809] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2167'. [ 358.372474][T12566] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.438281][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.445475][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.484303][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.491483][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.760372][T12592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.818835][T12592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.868995][T12592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.938147][T12592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 359.306584][T12592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.367514][T12592] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.408357][T12847] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2180'. [ 359.451163][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.458386][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.493773][T11910] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.500987][T11910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.680106][T12566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.814576][T12566] veth0_vlan: entered promiscuous mode [ 359.831738][T12566] veth1_vlan: entered promiscuous mode [ 359.906301][T12566] veth0_macvtap: entered promiscuous mode [ 359.917799][T12566] veth1_macvtap: entered promiscuous mode [ 359.961747][T12566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.014232][T12566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.051631][T12566] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.080411][T12566] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.103082][T12566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.111829][T12566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.300237][T12592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.314476][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.336713][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.394641][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.402627][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.496770][T12592] veth0_vlan: entered promiscuous mode [ 360.571443][T12592] veth1_vlan: entered promiscuous mode [ 360.607901][T12885] netlink: 'syz.4.2191': attribute type 29 has an invalid length. [ 360.655282][T12885] netlink: 'syz.4.2191': attribute type 29 has an invalid length. [ 360.720643][T12885] netlink: 'syz.4.2191': attribute type 29 has an invalid length. [ 360.942684][T12592] veth0_macvtap: entered promiscuous mode [ 360.982329][T12592] veth1_macvtap: entered promiscuous mode [ 361.005674][T12891] netlink: 'syz.4.2194': attribute type 3 has an invalid length. [ 361.018072][T12891] netlink: 'syz.4.2194': attribute type 2 has an invalid length. [ 361.058613][T12592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.063008][T12891] netlink: 126660 bytes leftover after parsing attributes in process `syz.4.2194'. [ 361.099734][T12592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.130260][T12592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.142127][T12891] netlink: 'syz.4.2194': attribute type 4 has an invalid length. [ 361.156288][T12592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.166403][T12891] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2194'. [ 361.172390][T12592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.184469][T12592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.201432][T12891] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 361.332643][T12904] netlink: 35083 bytes leftover after parsing attributes in process `syz.3.2198'. [ 361.408615][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.418323][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.459082][T12909] sctp: [Deprecated]: syz.0.2199 (pid 12909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.459082][T12909] Use struct sctp_sack_info instead [ 361.536551][ T1164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.596252][T12911] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2201'. [ 361.659843][T11907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.670886][T11907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.901185][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.198473][ T1164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.261356][ T1164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.375565][ T1164] bridge_slave_1: left allmulticast mode [ 362.381223][ T1164] bridge_slave_1: left promiscuous mode [ 362.394692][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.410106][ T1164] bridge_slave_0: left allmulticast mode [ 362.416402][ T1164] bridge_slave_0: left promiscuous mode [ 362.422161][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.737806][T12917] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2202'. [ 362.830313][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.843543][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.855745][ T1164] bond0 (unregistering): Released all slaves [ 362.988219][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.997076][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.005867][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.015819][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.024859][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.163978][ T1164] hsr_slave_0: left promiscuous mode [ 363.169840][ T1164] hsr_slave_1: left promiscuous mode [ 363.175688][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.184647][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.197361][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.205780][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.275221][ T1164] veth1_macvtap: left promiscuous mode [ 363.280825][ T1164] veth0_macvtap: left promiscuous mode [ 363.313165][ T1164] veth1_vlan: left promiscuous mode [ 363.330953][T12924] netlink: 'syz.4.2204': attribute type 10 has an invalid length. [ 363.342200][ T1164] veth0_vlan: left promiscuous mode [ 363.666388][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.686319][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.700793][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.721625][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.732915][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.082553][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 364.127332][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 364.486565][T12924] geneve0: entered promiscuous mode [ 364.503193][T12924] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 364.776083][T12957] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 364.816443][T12919] chnl_net:caif_netlink_parms(): no params data found [ 364.910376][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2215'. [ 364.963540][T12960] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2215'. [ 365.046419][ T5835] Bluetooth: hci0: command tx timeout [ 365.470216][T12919] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.478018][T12919] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.485904][T12919] bridge_slave_0: entered allmulticast mode [ 365.494137][T12919] bridge_slave_0: entered promiscuous mode [ 365.503238][T12939] chnl_net:caif_netlink_parms(): no params data found [ 365.541335][T12919] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.549808][T12919] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.563770][T12919] bridge_slave_1: entered allmulticast mode [ 365.571600][T12919] bridge_slave_1: entered promiscuous mode [ 365.639400][ T1164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.698028][T12919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.766512][ T1164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.777501][ T5835] Bluetooth: hci4: command tx timeout [ 365.793245][T12919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.869770][ T1164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.885517][T12939] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.907013][T12939] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.915082][T12939] bridge_slave_0: entered allmulticast mode [ 365.931349][T12939] bridge_slave_0: entered promiscuous mode [ 365.956087][T12919] team0: Port device team_slave_0 added [ 365.977672][ T1164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.000092][T12939] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.007758][T12939] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.016227][T12939] bridge_slave_1: entered allmulticast mode [ 366.025835][T12939] bridge_slave_1: entered promiscuous mode [ 366.066627][T12919] team0: Port device team_slave_1 added [ 367.160173][T13023] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2231'. [ 367.372855][ T5835] Bluetooth: hci0: command tx timeout [ 367.847489][T13027] netlink: 'syz.4.2233': attribute type 4 has an invalid length. [ 368.246975][ T5835] Bluetooth: hci4: command tx timeout [ 371.326579][ T5835] Bluetooth: hci0: command tx timeout [ 371.332080][ T5835] Bluetooth: hci4: command tx timeout [ 371.608575][T12939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.589382][T12919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.596524][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.624317][T12919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.645496][T12939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.673279][T13039] netlink: 'syz.0.2237': attribute type 29 has an invalid length. [ 372.682452][T12919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.689793][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.716490][T12919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.760645][T13040] netlink: 'syz.0.2237': attribute type 29 has an invalid length. [ 372.769614][T13041] netlink: 'syz.0.2237': attribute type 29 has an invalid length. [ 372.795605][T13042] netlink: 'syz.0.2237': attribute type 29 has an invalid length. [ 372.832444][T12939] team0: Port device team_slave_0 added [ 372.868022][T12939] team0: Port device team_slave_1 added [ 373.129224][T13057] netlink: 'syz.0.2243': attribute type 6 has an invalid length. [ 373.135470][T12939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.144366][T13057] netlink: 'syz.0.2243': attribute type 7 has an invalid length. [ 373.152459][T13057] netlink: 13182 bytes leftover after parsing attributes in process `syz.0.2243'. [ 373.155176][T12939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.197236][T12939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.221322][T12919] hsr_slave_0: entered promiscuous mode [ 373.231121][T12919] hsr_slave_1: entered promiscuous mode [ 373.272615][T12939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.282182][T12939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.313160][T12939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.363057][ T5835] Bluetooth: hci0: command tx timeout [ 373.368654][ T5834] Bluetooth: hci4: command tx timeout [ 373.394926][ T1164] bridge_slave_1: left allmulticast mode [ 373.409441][ T1164] bridge_slave_1: left promiscuous mode [ 373.418046][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.469251][ T1164] bridge_slave_0: left allmulticast mode [ 373.479801][ T1164] bridge_slave_0: left promiscuous mode [ 373.489626][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.498981][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.518959][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.540844][ T1164] bond0 (unregistering): Released all slaves [ 374.754284][T12939] hsr_slave_0: entered promiscuous mode [ 374.761639][T12939] hsr_slave_1: entered promiscuous mode [ 374.773215][T12939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.780911][T12939] Cannot create hsr debugfs directory [ 375.348266][T13100] netlink: 'syz.4.2258': attribute type 29 has an invalid length. [ 375.510394][T13100] netlink: 'syz.4.2258': attribute type 29 has an invalid length. [ 375.609430][ T1164] hsr_slave_0: left promiscuous mode [ 375.622076][ T1164] hsr_slave_1: left promiscuous mode [ 375.630548][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.640574][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.686465][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.703021][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.739265][ T1164] veth1_macvtap: left promiscuous mode [ 375.749416][ T1164] veth0_macvtap: left promiscuous mode [ 375.755839][ T1164] veth1_vlan: left promiscuous mode [ 375.761743][ T1164] veth0_vlan: left promiscuous mode [ 376.452061][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 376.514752][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 377.101082][T13127] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 377.586172][T13147] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2277'. [ 377.624211][T12919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.644345][T13149] netlink: 'syz.3.2278': attribute type 39 has an invalid length. [ 377.716374][T12919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.727232][T13151] netlink: 'syz.4.2279': attribute type 1 has an invalid length. [ 377.754717][T12919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.774782][T12919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.064777][T12919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.102155][T12919] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.188744][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.196008][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.199986][T13176] netlink: 'syz.0.2287': attribute type 5 has an invalid length. [ 378.216158][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.223424][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.430274][T12939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 378.486520][T12939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 378.531136][T12939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 378.567902][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.583179][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.612075][T12939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 378.660873][T13187] netlink: 'syz.3.2291': attribute type 7 has an invalid length. [ 378.775767][T13185] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2290'. [ 379.046840][T12939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.118301][T12939] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.186054][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.193285][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.212148][T13211] FAULT_INJECTION: forcing a failure. [ 379.212148][T13211] name failslab, interval 1, probability 0, space 0, times 0 [ 379.224680][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.226628][T13211] CPU: 1 UID: 0 PID: 13211 Comm: syz.3.2297 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 379.226653][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.226663][T13211] Call Trace: [ 379.226671][T13211] [ 379.226679][T13211] dump_stack_lvl+0x189/0x250 [ 379.226709][T13211] ? __pfx____ratelimit+0x10/0x10 [ 379.226727][T13211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.226751][T13211] ? __pfx__printk+0x10/0x10 [ 379.226776][T13211] ? __pfx___might_resched+0x10/0x10 [ 379.226799][T13211] ? fs_reclaim_acquire+0x7d/0x100 [ 379.226831][T13211] should_fail_ex+0x414/0x560 [ 379.226859][T13211] should_failslab+0xa8/0x100 [ 379.226881][T13211] __kmalloc_cache_noprof+0x70/0x3d0 [ 379.226899][T13211] ? ip_setup_cork+0x299/0x9a0 [ 379.226914][T13211] ? ipv4_mtu+0x4b2/0x5c0 [ 379.226940][T13211] ip_setup_cork+0x299/0x9a0 [ 379.226963][T13211] ip_make_skb+0x130/0x3f0 [ 379.226982][T13211] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 379.226999][T13211] ? __pfx_ip_make_skb+0x10/0x10 [ 379.227034][T13211] udp_sendmsg+0x191e/0x2300 [ 379.227071][T13211] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 379.227088][T13211] ? __pfx_udp_sendmsg+0x10/0x10 [ 379.227109][T13211] ? perf_trace_preemptirq_template+0xa3/0x340 [ 379.227130][T13211] ? __local_bh_enable_ip+0xce/0x1c0 [ 379.227175][T13211] ? __local_bh_enable_ip+0x12d/0x1c0 [ 379.227205][T13211] ? inet_sendmsg+0x14f/0x370 [ 379.227225][T13211] ? inet_sendmsg+0x29c/0x370 [ 379.227246][T13211] __sock_sendmsg+0x19c/0x270 [ 379.227268][T13211] ____sys_sendmsg+0x505/0x830 [ 379.227295][T13211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.227326][T13211] ? import_iovec+0x74/0xa0 [ 379.227348][T13211] ___sys_sendmsg+0x21f/0x2a0 [ 379.227373][T13211] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.227430][T13211] ? __fget_files+0x2a/0x420 [ 379.227449][T13211] ? __fget_files+0x3a0/0x420 [ 379.227480][T13211] __x64_sys_sendmsg+0x19b/0x260 [ 379.227504][T13211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.227536][T13211] ? __pfx_ksys_write+0x10/0x10 [ 379.227551][T13211] ? rcu_is_watching+0x15/0xb0 [ 379.227580][T13211] ? do_syscall_64+0xbe/0x3b0 [ 379.227600][T13211] do_syscall_64+0xfa/0x3b0 [ 379.227616][T13211] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.227636][T13211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.227653][T13211] ? clear_bhb_loop+0x60/0xb0 [ 379.227674][T13211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.227690][T13211] RIP: 0033:0x7f5773b8e929 [ 379.227705][T13211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.227720][T13211] RSP: 002b:00007f5774a36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.227739][T13211] RAX: ffffffffffffffda RBX: 00007f5773db5fa0 RCX: 00007f5773b8e929 [ 379.227751][T13211] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005 [ 379.227761][T13211] RBP: 00007f5774a36090 R08: 0000000000000000 R09: 0000000000000000 [ 379.227772][T13211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.227782][T13211] R13: 0000000000000000 R14: 00007f5773db5fa0 R15: 00007ffd08d5c328 [ 379.227814][T13211] [ 379.511652][T13213] sctp: [Deprecated]: syz.4.2296 (pid 13213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.511652][T13213] Use struct sctp_sack_info instead [ 379.512407][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.647503][T12919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.766375][T12919] veth0_vlan: entered promiscuous mode [ 379.801700][T12919] veth1_vlan: entered promiscuous mode [ 379.895537][T12919] veth0_macvtap: entered promiscuous mode [ 379.917780][T12919] veth1_macvtap: entered promiscuous mode [ 379.970460][T12919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.011800][T12919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.060369][T12919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.084633][T12919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.105099][T12919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.117923][T12919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.210941][T12939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.277467][T13226] netlink: 'syz.4.2301': attribute type 12 has an invalid length. [ 380.299267][T13226] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2301'. [ 380.378209][T13230] netlink: 'syz.4.2301': attribute type 12 has an invalid length. [ 380.387803][T13228] netlink: 'syz.0.2302': attribute type 10 has an invalid length. [ 380.398976][T13228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2302'. [ 380.406971][T13230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2301'. [ 380.427204][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.459434][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.557447][T12939] veth0_vlan: entered promiscuous mode [ 380.567407][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.573384][T12939] veth1_vlan: entered promiscuous mode [ 380.592820][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.669439][T12939] veth0_macvtap: entered promiscuous mode [ 380.707372][T12939] veth1_macvtap: entered promiscuous mode [ 380.742192][T13239] netlink: 'syz.0.2306': attribute type 4 has an invalid length. [ 380.758910][T13235] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2304'. [ 380.820688][T12939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.936216][T12939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.988178][T12939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.009123][T12939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.019320][T12939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.041422][T12939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.055919][T13246] netlink: 'syz.0.2308': attribute type 29 has an invalid length. [ 381.065212][T13249] netlink: 'syz.0.2308': attribute type 29 has an invalid length. [ 381.090090][T13248] FAULT_INJECTION: forcing a failure. [ 381.090090][T13248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.108279][T13248] CPU: 1 UID: 0 PID: 13248 Comm: syz.4.2309 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 381.108305][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.108316][T13248] Call Trace: [ 381.108323][T13248] [ 381.108331][T13248] dump_stack_lvl+0x189/0x250 [ 381.108362][T13248] ? __pfx____ratelimit+0x10/0x10 [ 381.108379][T13248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.108404][T13248] ? __pfx__printk+0x10/0x10 [ 381.108443][T13248] should_fail_ex+0x414/0x560 [ 381.108472][T13248] strncpy_from_user+0x36/0x290 [ 381.108500][T13248] getname_flags+0xf3/0x540 [ 381.108528][T13248] do_sys_openat2+0xbc/0x1c0 [ 381.108555][T13248] ? __pfx_do_sys_openat2+0x10/0x10 [ 381.108582][T13248] ? __x64_sys_openat+0x122/0x170 [ 381.108613][T13248] __x64_sys_openat+0x138/0x170 [ 381.108641][T13248] do_syscall_64+0xfa/0x3b0 [ 381.108661][T13248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.108678][T13248] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.108694][T13248] ? clear_bhb_loop+0x60/0xb0 [ 381.108715][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.108732][T13248] RIP: 0033:0x7f852af8d290 [ 381.108748][T13248] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 381.108763][T13248] RSP: 002b:00007f852be3bf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 381.108782][T13248] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f852af8d290 [ 381.108795][T13248] RDX: 0000000000000000 RSI: 00007f852be3bfa0 RDI: 00000000ffffff9c [ 381.108806][T13248] RBP: 00007f852be3bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 381.108817][T13248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 381.108828][T13248] R13: 0000000000000000 R14: 00007f852b1b5fa0 R15: 00007fff28710f38 [ 381.108856][T13248] [ 381.337602][T13246] netlink: 'syz.0.2308': attribute type 29 has an invalid length. [ 381.368733][T13249] netlink: 'syz.0.2308': attribute type 29 has an invalid length. [ 381.575968][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.585573][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.636257][T13257] sctp: [Deprecated]: syz.0.2311 (pid 13257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.636257][T13257] Use struct sctp_sack_info instead [ 381.702693][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.719193][T13260] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2314'. [ 381.728832][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.896369][ T1164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.539533][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.548757][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.557152][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.566176][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.577127][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.596915][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.700231][ T1164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.773332][ T1164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.793969][T13268] chnl_net:caif_netlink_parms(): no params data found [ 382.900687][T13268] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.909278][T13268] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.917369][T13268] bridge_slave_0: entered allmulticast mode [ 382.924449][T13268] bridge_slave_0: entered promiscuous mode [ 382.940480][T13268] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.948390][T13268] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.956473][T13268] bridge_slave_1: entered allmulticast mode [ 382.965434][T13268] bridge_slave_1: entered promiscuous mode [ 383.025800][T13279] FAULT_INJECTION: forcing a failure. [ 383.025800][T13279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.040467][T13279] CPU: 1 UID: 0 PID: 13279 Comm: syz.3.2316 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 383.040492][T13279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.040502][T13279] Call Trace: [ 383.040509][T13279] [ 383.040517][T13279] dump_stack_lvl+0x189/0x250 [ 383.040555][T13279] ? __pfx____ratelimit+0x10/0x10 [ 383.040572][T13279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.040596][T13279] ? __pfx__printk+0x10/0x10 [ 383.040616][T13279] ? __might_fault+0xb0/0x130 [ 383.040645][T13279] should_fail_ex+0x414/0x560 [ 383.040673][T13279] _copy_from_user+0x2d/0xb0 [ 383.040692][T13279] __sys_bpf+0x1ed/0x860 [ 383.040717][T13279] ? __pfx___sys_bpf+0x10/0x10 [ 383.040753][T13279] ? ksys_write+0x22a/0x250 [ 383.040774][T13279] ? __pfx_ksys_write+0x10/0x10 [ 383.040789][T13279] ? rcu_is_watching+0x15/0xb0 [ 383.040820][T13279] __x64_sys_bpf+0x7c/0x90 [ 383.040840][T13279] do_syscall_64+0xfa/0x3b0 [ 383.040856][T13279] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.040872][T13279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.040889][T13279] ? clear_bhb_loop+0x60/0xb0 [ 383.040909][T13279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.040925][T13279] RIP: 0033:0x7f5773b8e929 [ 383.040939][T13279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.040953][T13279] RSP: 002b:00007f5774a36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.040970][T13279] RAX: ffffffffffffffda RBX: 00007f5773db5fa0 RCX: 00007f5773b8e929 [ 383.040982][T13279] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 383.040993][T13279] RBP: 00007f5774a36090 R08: 0000000000000000 R09: 0000000000000000 [ 383.041003][T13279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.041014][T13279] R13: 0000000000000000 R14: 00007f5773db5fa0 R15: 00007ffd08d5c328 [ 383.041041][T13279] [ 383.385909][ T1164] bridge_slave_1: left allmulticast mode [ 383.391639][ T1164] bridge_slave_1: left promiscuous mode [ 383.397767][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.434661][ T1164] bridge_slave_0: left allmulticast mode [ 383.440361][ T1164] bridge_slave_0: left promiscuous mode [ 383.448689][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.506615][T13288] FAULT_INJECTION: forcing a failure. [ 383.506615][T13288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.538419][T13290] netlink: 'syz.3.2322': attribute type 16 has an invalid length. [ 383.549032][T13290] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2322'. [ 383.558522][T13288] CPU: 0 UID: 0 PID: 13288 Comm: syz.4.2321 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 383.558546][T13288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.558555][T13288] Call Trace: [ 383.558561][T13288] [ 383.558568][T13288] dump_stack_lvl+0x189/0x250 [ 383.558597][T13288] ? __pfx____ratelimit+0x10/0x10 [ 383.558614][T13288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.558636][T13288] ? __pfx__printk+0x10/0x10 [ 383.558653][T13288] ? __might_fault+0xb0/0x130 [ 383.558683][T13288] should_fail_ex+0x414/0x560 [ 383.558711][T13288] _copy_from_user+0x2d/0xb0 [ 383.558732][T13288] csum_and_copy_from_iter_full+0x4a1/0x1eb0 [ 383.558776][T13288] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 383.558804][T13288] ? __alloc_skb+0x142/0x2d0 [ 383.558829][T13288] ? trace_kmalloc+0x1f/0xd0 [ 383.558850][T13288] ip_generic_getfrag+0x12f/0x2b0 [ 383.558871][T13288] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 383.558892][T13288] ? skb_put+0x11b/0x210 [ 383.558916][T13288] __ip6_append_data+0x3027/0x3de0 [ 383.558961][T13288] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 383.559000][T13288] ? __pfx___ip6_append_data+0x10/0x10 [ 383.559026][T13288] ? __pfx_ip6_mtu+0x10/0x10 [ 383.559059][T13288] ip6_append_data+0x1c4/0x380 [ 383.559088][T13288] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 383.559109][T13288] l2tp_ip6_sendmsg+0x1282/0x17c0 [ 383.559146][T13288] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 383.559190][T13288] ? __pfx_aa_sk_perm+0x10/0x10 [ 383.559209][T13288] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 383.559245][T13288] ? inet_sendmsg+0x2f4/0x370 [ 383.559262][T13288] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.559288][T13288] __sock_sendmsg+0x19c/0x270 [ 383.559316][T13288] ____sys_sendmsg+0x505/0x830 [ 383.559345][T13288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.559378][T13288] ? import_iovec+0x74/0xa0 [ 383.559401][T13288] ___sys_sendmsg+0x21f/0x2a0 [ 383.559426][T13288] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.559485][T13288] ? __fget_files+0x2a/0x420 [ 383.559505][T13288] ? __fget_files+0x3a0/0x420 [ 383.559537][T13288] __x64_sys_sendmsg+0x19b/0x260 [ 383.559563][T13288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.559595][T13288] ? __pfx_ksys_write+0x10/0x10 [ 383.559611][T13288] ? rcu_is_watching+0x15/0xb0 [ 383.559641][T13288] ? do_syscall_64+0xbe/0x3b0 [ 383.559664][T13288] do_syscall_64+0xfa/0x3b0 [ 383.559680][T13288] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.559697][T13288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.559714][T13288] ? clear_bhb_loop+0x60/0xb0 [ 383.559735][T13288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.559752][T13288] RIP: 0033:0x7f852af8e929 [ 383.559768][T13288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.559783][T13288] RSP: 002b:00007f852be3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.559801][T13288] RAX: ffffffffffffffda RBX: 00007f852b1b5fa0 RCX: 00007f852af8e929 [ 383.559813][T13288] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 383.559824][T13288] RBP: 00007f852be3c090 R08: 0000000000000000 R09: 0000000000000000 [ 383.559833][T13288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.559843][T13288] R13: 0000000000000000 R14: 00007f852b1b5fa0 R15: 00007fff28710f38 [ 383.559873][T13288] [ 383.951583][T13293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2323'. [ 384.065500][T13295] netlink: 'syz.4.2324': attribute type 46 has an invalid length. [ 384.075361][T13295] ------------[ cut here ]------------ [ 384.080881][T13295] verifier bug: expected array map for tail call(1) [ 384.090951][T13295] WARNING: CPU: 1 PID: 13295 at kernel/bpf/verifier.c:11084 record_func_key+0x2d6/0x490 [ 384.092298][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 384.101488][T13295] Modules linked in: [ 384.110353][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.112075][T13295] CPU: 1 UID: 0 PID: 13295 Comm: syz.4.2324 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 384.131399][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.141590][T13295] RIP: 0010:record_func_key+0x2d6/0x490 [ 384.147193][T13295] Code: 09 cc e8 9d 65 e3 ff 80 3d 87 16 ae 0d 01 74 ba e8 8f 65 e3 ff c6 05 79 16 ae 0d 01 90 48 c7 c7 40 e4 91 8b e8 8b 08 a7 ff 90 <0f> 0b 90 90 eb 9f e8 6f 65 e3 ff eb 05 e8 68 65 e3 ff 48 8b 5c 24 [ 384.166907][T13295] RSP: 0018:ffffc9000562ec70 EFLAGS: 00010246 [ 384.173030][T13295] RAX: 6278fe485dd3d500 RBX: dffffc0000000000 RCX: 0000000000080000 [ 384.181016][T13295] RDX: ffffc9000cd29000 RSI: 0000000000004f24 RDI: 0000000000004f25 [ 384.189965][T13295] RBP: 0000000000000016 R08: ffffc9000562e987 R09: 1ffff92000ac5d30 [ 384.198590][T13295] R10: dffffc0000000000 R11: fffff52000ac5d31 R12: ffff88805b9a8800 [ 384.206634][T13295] R13: ffff888028f18000 R14: ffff888057278000 R15: 1ffff1100ae4f006 [ 384.214657][T13295] FS: 00007f852be3c6c0(0000) GS:ffff888125d4d000(0000) knlGS:0000000000000000 [ 384.223679][T13295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.230275][T13295] CR2: 00007f88a33f6d00 CR3: 000000007e52e000 CR4: 00000000003526f0 [ 384.238300][T13295] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 384.246741][T13295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 384.254915][T13295] Call Trace: [ 384.258210][T13295] [ 384.261163][T13295] check_helper_call+0x2fcc/0x6a90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 384.266363][T13295] ? __pfx_check_helper_call+0x10/0x10 [ 384.271871][T13295] ? tnum_const+0xd/0x20 [ 384.276181][T13295] ? __mark_reg_known+0x79/0x240 [ 384.281155][T13295] do_check+0x95ec/0xe080 [ 384.285551][T13295] ? unwind_get_return_address+0x4d/0x90 [ 384.292145][T13295] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.298931][T13295] ? bpf_prog_load+0x1318/0x1930 [ 384.303957][T13295] ? __x64_sys_bpf+0x7c/0x90 [ 384.308571][T13295] ? do_syscall_64+0xfa/0x3b0 [ 384.313403][T13295] ? __pfx_do_check+0x10/0x10 [ 384.318131][T13295] ? __asan_memset+0x22/0x50 [ 384.323344][T13295] ? init_func_state+0x1ddf/0x2d20 [ 384.328511][T13295] do_check_common+0x188f/0x23f0 [ 384.334015][T13295] bpf_check+0x10252/0x1a5d0 [ 384.338632][T13295] ? __perf_event_task_sched_in+0xec/0x17e0 [ 384.344639][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.350219][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.355842][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.361426][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.367071][T13295] ? __lock_acquire+0xab9/0xd20 [ 384.371972][T13295] ? is_bpf_text_address+0x26/0x2b0 [ 384.377258][T13295] ? is_bpf_text_address+0x292/0x2b0 [ 384.382572][T13295] ? is_bpf_text_address+0x26/0x2b0 [ 384.387829][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.394465][T13295] ? unwind_get_return_address+0x4d/0x90 [ 384.400150][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.401775][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.406432][T13295] ? __pfx_bpf_check+0x10/0x10 [ 384.417598][T13295] ? __lock_acquire+0xab9/0xd20 [ 384.422485][T13295] ? perf_trace_contention_end+0x9e/0x2f0 [ 384.428313][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.433945][T13295] ? __lock_acquire+0xab9/0xd20 [ 384.438844][T13295] ? ktime_get_with_offset+0x8c/0x2a0 [ 384.444300][T13295] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 384.450563][T13295] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.455832][T13295] ? ktime_get_with_offset+0x8c/0x2a0 [ 384.461237][T13295] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 384.467559][T13295] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 384.474241][T13295] ? bpf_obj_name_cpy+0x194/0x1e0 [ 384.479288][T13295] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 384.484948][T13295] ? security_bpf_prog_load+0x7f/0x310 [ 384.490459][T13295] bpf_prog_load+0x1318/0x1930 [ 384.496243][T13295] ? __pfx_bpf_prog_load+0x10/0x10 [ 384.501419][T13295] ? bpf_lsm_bpf+0x9/0x20 [ 384.506493][T13295] ? security_bpf+0x7e/0x300 [ 384.511123][T13295] __sys_bpf+0x5f1/0x860 [ 384.515463][T13295] ? __pfx___sys_bpf+0x10/0x10 [ 384.520279][T13295] ? rcu_is_watching+0x15/0xb0 [ 384.525145][T13295] __x64_sys_bpf+0x7c/0x90 [ 384.529609][T13295] do_syscall_64+0xfa/0x3b0 [ 384.534187][T13295] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.539409][T13295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.545548][T13295] ? clear_bhb_loop+0x60/0xb0 [ 384.550246][T13295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.553744][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.556213][T13295] RIP: 0033:0x7f852af8e929 [ 384.566585][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.567481][T13295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.596164][T13295] RSP: 002b:00007f852be3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.605308][T13295] RAX: ffffffffffffffda RBX: 00007f852b1b5fa0 RCX: 00007f852af8e929 [ 384.613338][T13295] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 384.621303][T13295] RBP: 00007f852b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 384.629348][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.637369][T13295] R13: 0000000000000000 R14: 00007f852b1b5fa0 R15: 00007fff28710f38 [ 384.645423][T13295] [ 384.646163][ T5834] Bluetooth: hci0: command tx timeout [ 384.648453][T13295] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 384.648467][T13295] CPU: 1 UID: 0 PID: 13295 Comm: syz.4.2324 Not tainted 6.16.0-rc3-syzkaller-g1f24c0d81990 #0 PREEMPT(full) [ 384.648489][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.648501][T13295] Call Trace: [ 384.648510][T13295] [ 384.648519][T13295] dump_stack_lvl+0x99/0x250 [ 384.648552][T13295] ? __asan_memcpy+0x40/0x70 [ 384.648579][T13295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.648607][T13295] ? __pfx__printk+0x10/0x10 [ 384.648644][T13295] panic+0x2db/0x790 [ 384.648677][T13295] ? __pfx_panic+0x10/0x10 [ 384.648727][T13295] __warn+0x31b/0x4b0 [ 384.648751][T13295] ? record_func_key+0x2d6/0x490 [ 384.648779][T13295] ? record_func_key+0x2d6/0x490 [ 384.648805][T13295] report_bug+0x2be/0x4f0 [ 384.648822][T13295] ? record_func_key+0x2d6/0x490 [ 384.648848][T13295] ? record_func_key+0x2d6/0x490 [ 384.648873][T13295] ? record_func_key+0x2d8/0x490 [ 384.648897][T13295] handle_bug+0x84/0x160 [ 384.648920][T13295] exc_invalid_op+0x1a/0x50 [ 384.648942][T13295] asm_exc_invalid_op+0x1a/0x20 [ 384.648960][T13295] RIP: 0010:record_func_key+0x2d6/0x490 [ 384.648986][T13295] Code: 09 cc e8 9d 65 e3 ff 80 3d 87 16 ae 0d 01 74 ba e8 8f 65 e3 ff c6 05 79 16 ae 0d 01 90 48 c7 c7 40 e4 91 8b e8 8b 08 a7 ff 90 <0f> 0b 90 90 eb 9f e8 6f 65 e3 ff eb 05 e8 68 65 e3 ff 48 8b 5c 24 [ 384.649001][T13295] RSP: 0018:ffffc9000562ec70 EFLAGS: 00010246 [ 384.649019][T13295] RAX: 6278fe485dd3d500 RBX: dffffc0000000000 RCX: 0000000000080000 [ 384.649033][T13295] RDX: ffffc9000cd29000 RSI: 0000000000004f24 RDI: 0000000000004f25 [ 384.649046][T13295] RBP: 0000000000000016 R08: ffffc9000562e987 R09: 1ffff92000ac5d30 [ 384.649060][T13295] R10: dffffc0000000000 R11: fffff52000ac5d31 R12: ffff88805b9a8800 [ 384.649074][T13295] R13: ffff888028f18000 R14: ffff888057278000 R15: 1ffff1100ae4f006 [ 384.649116][T13295] check_helper_call+0x2fcc/0x6a90 [ 384.649178][T13295] ? __pfx_check_helper_call+0x10/0x10 [ 384.649224][T13295] ? tnum_const+0xd/0x20 [ 384.649244][T13295] ? __mark_reg_known+0x79/0x240 [ 384.649274][T13295] do_check+0x95ec/0xe080 [ 384.649296][T13295] ? unwind_get_return_address+0x4d/0x90 [ 384.649323][T13295] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.649388][T13295] ? bpf_prog_load+0x1318/0x1930 [ 384.649410][T13295] ? __x64_sys_bpf+0x7c/0x90 [ 384.649429][T13295] ? do_syscall_64+0xfa/0x3b0 [ 384.649479][T13295] ? __pfx_do_check+0x10/0x10 [ 384.649521][T13295] ? __asan_memset+0x22/0x50 [ 384.649548][T13295] ? init_func_state+0x1ddf/0x2d20 [ 384.649585][T13295] do_check_common+0x188f/0x23f0 [ 384.649630][T13295] bpf_check+0x10252/0x1a5d0 [ 384.649650][T13295] ? __perf_event_task_sched_in+0xec/0x17e0 [ 384.649677][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.649704][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.649736][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.649768][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.649807][T13295] ? __lock_acquire+0xab9/0xd20 [ 384.649855][T13295] ? is_bpf_text_address+0x26/0x2b0 [ 384.649887][T13295] ? is_bpf_text_address+0x292/0x2b0 [ 384.649912][T13295] ? is_bpf_text_address+0x26/0x2b0 [ 384.649947][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.649973][T13295] ? unwind_get_return_address+0x4d/0x90 [ 384.650008][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.650034][T13295] ? __pfx_bpf_check+0x10/0x10 [ 384.650065][T13295] ? __lock_acquire+0xab9/0xd20 [ 384.650092][T13295] ? perf_trace_contention_end+0x9e/0x2f0 [ 384.650130][T13295] ? perf_trace_lock_acquire+0xf5/0x410 [ 384.650177][T13295] ? __lock_acquire+0xab9/0xd20 [ 384.650214][T13295] ? ktime_get_with_offset+0x8c/0x2a0 [ 384.650244][T13295] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 384.650266][T13295] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.650285][T13295] ? ktime_get_with_offset+0x8c/0x2a0 [ 384.650304][T13295] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 384.650325][T13295] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 384.650363][T13295] ? bpf_obj_name_cpy+0x194/0x1e0 [ 384.650380][T13295] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 384.650397][T13295] ? security_bpf_prog_load+0x7f/0x310 [ 384.650426][T13295] bpf_prog_load+0x1318/0x1930 [ 384.650467][T13295] ? __pfx_bpf_prog_load+0x10/0x10 [ 384.650519][T13295] ? bpf_lsm_bpf+0x9/0x20 [ 384.650536][T13295] ? security_bpf+0x7e/0x300 [ 384.650562][T13295] __sys_bpf+0x5f1/0x860 [ 384.650590][T13295] ? __pfx___sys_bpf+0x10/0x10 [ 384.650637][T13295] ? rcu_is_watching+0x15/0xb0 [ 384.650674][T13295] __x64_sys_bpf+0x7c/0x90 [ 384.650698][T13295] do_syscall_64+0xfa/0x3b0 [ 384.650716][T13295] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.650734][T13295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.650753][T13295] ? clear_bhb_loop+0x60/0xb0 [ 384.650777][T13295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.650795][T13295] RIP: 0033:0x7f852af8e929 [ 384.650812][T13295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.650828][T13295] RSP: 002b:00007f852be3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.650846][T13295] RAX: ffffffffffffffda RBX: 00007f852b1b5fa0 RCX: 00007f852af8e929 [ 384.650860][T13295] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 384.650872][T13295] RBP: 00007f852b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 384.650885][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.650896][T13295] R13: 0000000000000000 R14: 00007f852b1b5fa0 R15: 00007fff28710f38 [ 384.650929][T13295] [ 384.654029][T13295] Kernel Offset: disabled