last executing test programs: 2m6.506019886s ago: executing program 3 (id=809): openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="56cda53c579bac7cffffffff0001", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000010000000f00"/28], 0x50) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100, 0x8000000}, 0x48) 2m4.832417516s ago: executing program 3 (id=816): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x12000, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000001c0)={0x0, 0x1, [@broadcast]}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300004003000000006000000040000000000000700000000000000000000000b010000000000000001000005fdffffff00000000020000000000000000000000da00"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000280), &(0x7f00000002c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000040), 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 2m4.25839987s ago: executing program 3 (id=820): close(0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2m3.745078603s ago: executing program 2 (id=821): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) syz_clone(0x80000000, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000640)="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") recvmsg(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0f, &(0x7f00000001c0), 0x2}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73772cc9f13a1f848390000005e140602000000e2ed3431000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m1.684124196s ago: executing program 2 (id=825): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {0x0}], 0x2}, 0x4044) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x1000000000006, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x4, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="7747a888cb4d2a582690919fdf74", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'macvlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m1.082158321s ago: executing program 2 (id=829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="1c0000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2m1.06769008s ago: executing program 3 (id=830): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb030018000000000000002400000024000000020000000000000000000900000000000000000000000a02000100"/62], 0x0, 0x3e}, 0x28) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10201, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x6, @perf_bp={&(0x7f00000001c0)}, 0x1d450, 0x4, 0x0, 0x3, 0x0, 0x4, 0x1, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x6) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xff}, 0x14185, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmsg(0xffffffffffffffff, 0x0, 0x40002041) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r8, 0x29, 0x3, 0x0, 0x500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x80a, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r11 = openat$cgroup_ro(r2, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r11, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$inet(r7, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000006c0)}, {&(0x7f00000002c0)='L', 0x1}, {&(0x7f0000000780)="0d678739a227747a35414fed1a849789266bfa72618b7d48d619457bc08db19a16809eda3482350f93c47167380f7956bfbda23a6e69b2164478c25a4693b8fc8c57b3d2", 0x44}, {&(0x7f0000000800)="117e0ec0567a3c10ee12cdc6d58005ae936c9aab8e6bd350a7ab72b60f499d6f7efc1d0c0236147908972b466d18ecb6c3e909a012a8e9c473290c18c83c6732e89217317d0998e0303f08ba742f8afc53b43b8f9d77c2abf4791e873f405b778cdb2194d5ee19826f46776829571ff9db31c7f7b815d50ff95b2d564f7be9a00a199170db45311928a4ef346d1f2074cbc0adc6a7365e4d5617cb29d4e6f9f318b52176058040dc94", 0xa9}, {&(0x7f00000008c0)="da37596b60e37303a32ed7f01a49bfa3d251e3dae84fa2982b7579841d6d868af508d1786ac5e4b38441f6bbc68d9ced1b0b187d1fff03d546df346dd96f3a89cc3e925151fcdde51b27c3114a2f6544d9558108036318465f26ed889c566695cefac49f6c5e4056d5fd2997ea70397e5181f4920051ae15cf364b8aae8e19de1cf2c34f70c2c917e827501bc32f063138d5b11d568c755885712d57b1fce313b825b6612b074169b05f66de78d832e139c17d6100e2a929222014d1cb8d11ecea2b103e18253c90a736fa693a510a2aba4dc9a0584a4b992a9fe356617ec2d7d0ec6dad0f9a74c69991b61be9d744623881e354bf125dab7c642f31b8adc010ea622c8223173580cc30c1bf990a47996354700b9f920948bad30fdddc906d8c1d033d1f373da6e21113699d3fd312f3e8e342c95a3578210a618bd9092e4cb8ea7fe14a00afe4264e2e56a35540ad3308831abe45458fe83b2ca044d8bf5a55243a74315204b06141a633540fd5f98d09493005ee5a79c5ee5f2494915dd2c5fb9a570dd87c123cc7694dcb2889c39b132c8687c1d8fad8903fe60dbefe9d6fe44f1929dfb1d2091082fe840b83d4314d2ecfc7e039c797e3ec7055f0469e07623e6f11cd9b8d3894f670bc7c3e432036879a8e3a36313fc6bcb0020066987743a7048d8a62eb5e421464577f6e978a13381f553f26cbf2d03172e65bf291b892c37e3708faa1fa233e0f23aad734ff5146dab95e44ab0b6fe6b23005107371f1834d4b3c668ac25e8fe208390ae6bc0706a34839c8ad8227422d92422f077f1309570d8907fc1f5868aee1f0d557209fe472f9ff2125e9a78e0bebb64b12886b62ee7ba1b9483317131dbb8e97622da608145d80f59ddbd6ba2a51c1965fee95dbc19acbd20dfd06e41aea212d4aedd01417770ddb52581bfcd6263a63138fdaa67ed7849ebd15005450313d234276c466571d8cf8f7322ffd0b9ada7118a32c11cd3c26218f9d950c835bc52ac4f08957d170627cb15d6fdf801f4a961d6013f9d70b50044d1a6617d774310697d04df4c45a1900ba71cf6f6c155462824fb0ca9a4a5c818f7b523610ebbe8dd4cb790f247f19b223c41b3810dbb1bcc31f2b6184f2df9bd453426a4fec82103b2dbeba24a6968700b46141e54487fbe1b7a975b3b2e2ad8f4613dd5e176986924001f75d1720e7b378838799678fb1e54183cb66961135a2f21a684ea5f5fee576dcdb6d8e0dab02020626f1fa4bfb247f30e4274c9a27d7aeee40586a25d38a48d1d7a41bd043f4175f92bd24186ee6356cb15e1726f202a087719f2c66e8961c12f464c41c1487f942a19929f0977867b13997a9223c5938d963521a70d3ff22ec5c17bc969fe67dfcb9a014b997efbf8ae065a9ed74b879c7bcaba9a90d31318d998198e34bdcdd594c249572cf757c1f661da40bec09cbf4cef378982894cf7e80927b8424187268c38b00315d953609e920f21aa7ebb7ba8bf48d1af4ddfaa6c6efbf2811da9b0ff26d50521a887ed4c348ae0982e542c9c59965b21e86f5f0c8caf3d9aea05f7886c3b909fb3e24047f2f6612c2e2d7b793aa443ec4b136875d85c5dabd4112d9cc9953b5686fd6f92a27a9f4976e6092e92f2a0432b82c86d42c611547a9fef01cd39a9a2c539e5129e52e23cc634c800d74aef9708f8519dfab5d394cdcaa2f935c56787970017e016f067d65479e0c5f5c27c153c41f6fc596189ebf1730f304b413b1d0c294fdaef6e28fa49ced6217a4c2420485bfd4a25872853fcdd4759ee3e60cbc9c0bd70b700536a160dd32a97e61b9b5463ae27684aa9c021f38c9ff68cee9b1cbc0e14bbcb89c14c2ad7feb1e512af54e1e8dda59836fcc045a973baa3f233755f0f37dd140c3762b40b3e7679f56eaebd572991d62aec4f3b5b135daedc8346d37c08a132774682af29688718247", 0x56d}], 0x5}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000010000)='cpu\t&00&\t\x94\xce\xd6\x8b\xea\xceABz$b\x98\xf7\xd3\x10\x89j\x11\x1d\x10Q\xd3\xc0\f\xd3\x99gk\xdc\x9e\xef\xdd\xce\x80\x04\x86Y*\xb5+\vs\x91\x05\xbb\x1a\x13\xbd\\\xcew!7\xe0\xea\xc4Tc\b\xa0\xba|\xb0J\x8e:\x01\xb7\x92') bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m0.899405582s ago: executing program 2 (id=832): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xb79, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m0.711818253s ago: executing program 2 (id=834): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2={0x1f, 0x4, @any, 0x6}, 0x80, &(0x7f00000029c0)}, 0x41) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xf}, 0x101410, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) close(r4) close(r3) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x1f, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e080000070200001d0000007ea60864160af3653c005425198bc3488bc3a0e69ee517d34460bc24eab556a705251d6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m0.292342345s ago: executing program 2 (id=835): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x1d, &(0x7f00000000c0)=r5, 0x4) 2m0.032302337s ago: executing program 32 (id=835): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x1d, &(0x7f00000000c0)=r5, 0x4) 2m0.004559797s ago: executing program 3 (id=837): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {0x0}], 0x2}, 0x4044) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x1000000000006, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x4, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="7747a888cb4d2a582690919fdf74", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'macvlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m59.708846519s ago: executing program 3 (id=840): openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x3}, 0xd321, 0x5, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="56cda53c579bac7cffffffff0001", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000010000000f00"/28], 0x50) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1m59.209911332s ago: executing program 33 (id=840): openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x3}, 0xd321, 0x5, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="56cda53c579bac7cffffffff0001", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000010000000f00"/28], 0x50) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 34.474829961s ago: executing program 5 (id=1134): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x1004, 0x7, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000440)="7af1e983750cf40724f9ee8ae3ed", 0x0, 0x11, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 34.260220272s ago: executing program 5 (id=1136): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x12000, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000001c0)={0x0, 0x1, [@broadcast]}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300004003000000006000000040000000000000700000000000000000000000b010000000000000001000005fdffffff00000000020000000000000000000000da00"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c1812", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000280), &(0x7f00000002c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000040), 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 33.941844724s ago: executing program 5 (id=1137): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000200), 0x4) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x1f, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e080000070200001d0000007ea60864160af3653c005425198bc3488bc3a0e69ee517d34460bc24eab556a705251d6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 32.658162152s ago: executing program 5 (id=1140): r0 = socket$kcm(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108907, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40010061) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0x12, 0x16, 0x800, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000004010000f8ffffffb7020000080000e3b50200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) 32.319989994s ago: executing program 5 (id=1142): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b3000000000085000000d000000095"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 31.195740921s ago: executing program 5 (id=1148): close(0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_devices(r2, 0x0, 0xffdd) 30.250807987s ago: executing program 34 (id=1148): close(0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_devices(r2, 0x0, 0xffdd) 5.602027904s ago: executing program 4 (id=1269): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {0x0}], 0x2}, 0x4044) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324", 0x12}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x1000000000006, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x4, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="7747a888cb4d2a582690919fdf74", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'macvlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.892102829s ago: executing program 0 (id=1274): socket$kcm(0x25, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, 0x0, 0x4000080) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff08", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8931, &(0x7f0000000000)='|\x95\xd9\xbf\a\xc8\\\xc9\x11\xef\xa9\x0e7\xe7') 4.62882773s ago: executing program 6 (id=1275): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0xce24, 0x1, @mcast2, 0x42}, 0x80, 0x0}, 0x0) (fail_nth: 7) 3.813958456s ago: executing program 6 (id=1276): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010400cac9f609000000001006000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008001b0007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d000106b062e585e4a85dc9b1335d1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1) 3.411999988s ago: executing program 6 (id=1277): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x12000, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000001c0)={0x0, 0x1, [@broadcast]}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300004003000000006000000040000000000000700000000000000000000000b010000000000000001000005fdffffff00000000020000000000000000000000da00"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, 0x0, &(0x7f00000002c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000040), 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 3.310021519s ago: executing program 4 (id=1278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0xb, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xa, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffff7ffe, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000010001000f00000001000000", @ANYRES32, @ANYBLOB="3e00000000330858f900dfffffffffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000c00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000040000000400000012000000000000413a8d0800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=r6, 0x13, 0x1, 0x7, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 3.282709779s ago: executing program 0 (id=1279): close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x1f, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e080000070200001d0000007ea60864160af3653c005425198bc3488bc3a0e69ee517d34460bc24eab556a705251d6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.995114591s ago: executing program 4 (id=1281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x4}], 0x10, 0xfffffff6}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) 2.984985181s ago: executing program 6 (id=1282): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) syz_clone(0x80000000, &(0x7f0000000200)="96000d23480099de04fbdb8fa720edd7ee39d77ce54aa76b504a3f1da965f64b4e9e319ca94d0aeead94fcbbb7a858fa1207cb2e11fa1e27b25240", 0x3b, 0x0, &(0x7f0000000180), &(0x7f0000000640)="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") recvmsg(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0f, &(0x7f00000001c0), 0x2}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73772cc9f13a1f848390000005e140602000000e2ed3431000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.974334041s ago: executing program 0 (id=1283): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200acffec14"}) recvmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/122, 0x7a}], 0x1, &(0x7f0000000180)=""/8, 0x8}, 0x40000000) 2.868077002s ago: executing program 1 (id=1284): socket$kcm(0x29, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@datasec={0x3, 0x0, 0x0, 0xf, 0x2, [], "6a18"}, @datasec={0xa, 0x0, 0x0, 0xf, 0x2, [], "5803"}]}, {0x0, [0x5f, 0x30, 0x2e, 0x3e]}}, 0x0, 0x3a, 0x0, 0x1}, 0x28) 2.767894062s ago: executing program 1 (id=1285): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xb0a5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x8, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450", 0x81}], 0x1}, 0xff0f000020000080) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = getpid() sendmsg$unix(r6, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}], 0x20, 0x4050}, 0x4000001) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x541b, &(0x7f0000001cc0)) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) 2.581457854s ago: executing program 4 (id=1286): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {0x0}], 0x2}, 0x4044) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324", 0x12}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x1000000000006, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x4, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="7747a888cb4d2a582690919fdf74", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'macvlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.099850726s ago: executing program 1 (id=1287): r0 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000009d844b31a7cbf7000000000000"], 0x0, 0x1a, 0x0, 0x0, 0x7ff}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0xc2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNSETOFFLOAD(r4, 0x541b, 0x4000000000000000) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r6}, 0x10) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x9, 0x4, 0xa, 0xf, 0x0, 0x100000000, 0x84, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffcc, 0x2, @perf_config_ext={0xff}, 0x2000, 0x91c, 0x10000, 0x4, 0xd84, 0x8, 0x7, 0x0, 0x9, 0x0, 0x5}, r7, 0x5, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200a, 0x0, 0x0, 0x3, 0x3, 0xfffffffd, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg(r9, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0xf2) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000000)=0xff) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000950000b0bc8b0cd00000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.856331528s ago: executing program 0 (id=1288): r0 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x23, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000016000000000000000100000018", @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000031003001a0b000018200000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], &(0x7f0000000c80)='GPL\x00', 0x79, 0x7b, &(0x7f0000000cc0)=""/123, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000dc0), &(0x7f0000000e00)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x2, 0x6}], 0x10, 0x81}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110282, 0xc8}, 0x0, 0x800000000000, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00060000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x0, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) perf_event_open$cgroup(&(0x7f0000000740)={0x1, 0x80, 0x80, 0x9, 0xc, 0xf, 0x0, 0x2, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x200, 0xfffffffffffffffa}, 0x111006, 0x401, 0x9, 0x2, 0x4, 0xfffff800, 0x9, 0x0, 0x7fffffff, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6) r7 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r10, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) write$cgroup_int(r7, &(0x7f0000000040), 0x1) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, &(0x7f0000000140), 0x4) 1.668888479s ago: executing program 6 (id=1289): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, 0x0}, 0x20000810) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffff8}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40012100) recvmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000580)=""/188, 0xbc}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f0000000b00)=""/196, 0xc4}, {&(0x7f0000000740)=""/88, 0x58}], 0x7, &(0x7f0000000980)=""/93, 0x5d}, 0x40000000) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000a40), 0x6e, 0x0}, 0x20) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0xc46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000c4000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'rlimit'}, {0x2b, 'hugetlb'}, {0x2d, 'net'}, {0x2d, 'net_prio'}, {0x2d, 'rdma'}]}, 0x26) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) close(0xffffffffffffffff) 1.284466752s ago: executing program 0 (id=1290): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x12000, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000001c0)={0x0, 0x1, [@broadcast]}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300004003000000006000000040000000000000700000000000000000000000b010000000000000001000005fdffffff00000000020000000000000000000000da00"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, 0x0, &(0x7f00000002c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000040), 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 1.267907432s ago: executing program 4 (id=1291): close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x1f, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c0000001e006bcd9e3fe3dc6e080000070200001d0000007ea60864160af3653c005425198bc3488bc3a0e69ee517d34460bc24eab556a705251d6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.015764963s ago: executing program 1 (id=1292): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xb79, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 863.977745ms ago: executing program 1 (id=1293): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000002300001801000025786c2500000000072020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x9, 0x0, 0x0, 0x40, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x2, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df3"], 0xfdef) setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000)=r0, 0x4) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000048"], 0xfe33) 863.699754ms ago: executing program 4 (id=1294): r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x541b, &(0x7f0000000080)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000140), &(0x7f00000002c0)='%pB \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0xed, 0x3, 0x99, 0x16, 0x0, 0x6, 0x1010, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000340), 0xb}, 0xa0c0, 0x80, 0x9, 0x6, 0x4, 0x8, 0x3, 0x0, 0x0, 0x0, 0x4}, r1, 0x4, r6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x6, 0x1e, 0x0, 0xb00) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) 436.229517ms ago: executing program 35 (id=1294): r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x541b, &(0x7f0000000080)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000140), &(0x7f00000002c0)='%pB \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0xed, 0x3, 0x99, 0x16, 0x0, 0x6, 0x1010, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000340), 0xb}, 0xa0c0, 0x80, 0x9, 0x6, 0x4, 0x8, 0x3, 0x0, 0x0, 0x0, 0x4}, r1, 0x4, r6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x6, 0x1e, 0x0, 0xb00) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) 427.002257ms ago: executing program 0 (id=1296): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xb0a5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x8, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450", 0x81}], 0x1}, 0xff0f000020000080) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = getpid() sendmsg$unix(r6, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}], 0x20, 0x4050}, 0x4000001) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x541b, &(0x7f0000001cc0)) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) 425.866227ms ago: executing program 36 (id=1296): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xb0a5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x8, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450", 0x81}], 0x1}, 0xff0f000020000080) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = getpid() sendmsg$unix(r6, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}], 0x20, 0x4050}, 0x4000001) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x541b, &(0x7f0000001cc0)) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) 396.429317ms ago: executing program 1 (id=1297): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) syz_clone(0x80000000, &(0x7f0000000200)="96000d23480099de04fbdb8fa720edd7ee39d77ce54aa76b504a3f1da965f64b4e9e319ca94d0aeead94fcbbb7a858fa1207cb2e11fa1e27b25240", 0x3b, 0x0, &(0x7f0000000180), &(0x7f0000000640)="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") recvmsg(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0f, &(0x7f00000001c0), 0x2}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73772cc9f13a1f848390000005e140602000000e2ed3431000f000000028000001294", 0x2e}], 0x1}, 0x0) 396.195297ms ago: executing program 6 (id=1298): close(0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 0s ago: executing program 37 (id=1298): close(0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) kernel console output (not intermixed with test programs): oc_hook+0x59/0x310 [ 228.789139][ T7908] ? __kthread_create_on_node+0xf0/0x3e0 [ 228.794819][ T7908] __kmem_cache_alloc_node+0x53/0x260 [ 228.800240][ T7908] ? __kthread_create_on_node+0xf0/0x3e0 [ 228.805900][ T7908] kmalloc_trace+0x2a/0xe0 [ 228.810336][ T7908] ? rxrpc_direct_abort+0x330/0x330 [ 228.815552][ T7908] __kthread_create_on_node+0xf0/0x3e0 [ 228.821048][ T7908] ? kthread_create_on_node+0x120/0x120 [ 228.826674][ T7908] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 228.832684][ T7908] ? rxrpc_direct_abort+0x330/0x330 [ 228.837914][ T7908] ? rxrpc_direct_abort+0x330/0x330 [ 228.843122][ T7908] kthread_create_on_node+0xde/0x120 [ 228.848443][ T7908] ? __local_bh_enable_ip+0x12e/0x1c0 [ 228.853832][ T7908] ? tsk_fork_get_node+0x70/0x70 [ 228.858799][ T7908] ? __local_bh_enable_ip+0x12e/0x1c0 [ 228.864210][ T7908] rxrpc_lookup_local+0xf59/0x1550 [ 228.869343][ T7908] ? rxrpc_local_dont_fragment+0x70/0x70 [ 228.875009][ T7908] ? none_clear+0x10/0x10 [ 228.879438][ T7908] ? rxrpc_client_conn_reap_timeout+0xd0/0xd0 [ 228.885524][ T7908] ? lockdep_hardirqs_on+0x98/0x150 [ 228.890823][ T7908] ? _local_bh_enable+0xa0/0xa0 [ 228.895701][ T7908] rxrpc_sendmsg+0x30a/0x5b0 [ 228.900312][ T7908] ? rxrpc_getsockopt+0x150/0x150 [ 228.905350][ T7908] ____sys_sendmsg+0x5bf/0x950 [ 228.910151][ T7908] ? __sys_sendmsg_sock+0x30/0x30 [ 228.915202][ T7908] ? __import_iovec+0x3fa/0x860 [ 228.920082][ T7908] ? import_iovec+0x73/0xa0 [ 228.924606][ T7908] ___sys_sendmsg+0x220/0x290 [ 228.929306][ T7908] ? __sys_sendmsg+0x270/0x270 [ 228.934113][ T7908] ? __lock_acquire+0x7c80/0x7c80 [ 228.939179][ T7908] __se_sys_sendmsg+0x1a5/0x270 [ 228.944048][ T7908] ? perf_trace_preemptirq_template+0x281/0x340 [ 228.950314][ T7908] ? __x64_sys_sendmsg+0x80/0x80 [ 228.955285][ T7908] ? lockdep_hardirqs_on+0x98/0x150 [ 228.960525][ T7908] do_syscall_64+0x55/0xb0 [ 228.964959][ T7908] ? clear_bhb_loop+0x40/0x90 [ 228.969663][ T7908] ? clear_bhb_loop+0x40/0x90 [ 228.974367][ T7908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.980551][ T7908] RIP: 0033:0x7f9271f8efc9 [ 228.985071][ T7908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.004711][ T7908] RSP: 002b:00007f9272e8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.013153][ T7908] RAX: ffffffffffffffda RBX: 00007f92721e5fa0 RCX: 00007f9271f8efc9 [ 229.021138][ T7908] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 229.029154][ T7908] RBP: 00007f9272e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 229.037252][ T7908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.045255][ T7908] R13: 00007f92721e6038 R14: 00007f92721e5fa0 R15: 00007ffec103d088 [ 229.053261][ T7908] [ 229.211686][ T7911] netlink: 2759 bytes leftover after parsing attributes in process `syz.2.712'. [ 229.718978][ T7915] netlink: 'syz.3.713': attribute type 3 has an invalid length. [ 229.741430][ T7915] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.713'. [ 230.028799][ T7927] netlink: 14 bytes leftover after parsing attributes in process `syz.0.717'. [ 230.164927][ T7929] syzkaller0: entered promiscuous mode [ 230.173173][ T7929] syzkaller0: entered allmulticast mode [ 230.316286][ T7934] netlink: 'syz.1.720': attribute type 21 has an invalid length. [ 230.503711][ T7943] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.723'. [ 230.999696][ T7950] TCP: TCP_TX_DELAY enabled [ 231.011533][ T1325] wlan1: Trigger new scan to find an IBSS to join [ 231.019431][ T11] wlan1: Trigger new scan to find an IBSS to join [ 231.919887][ T62] wlan1: Creating new IBSS network, BSSID 32:16:28:b3:de:37 [ 232.318511][ T7963] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.729'. [ 232.347764][ T7963] netlink: 'syz.0.729': attribute type 2 has an invalid length. [ 232.840329][ T7975] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.733'. [ 234.051475][ T3474] wlan1: Trigger new scan to find an IBSS to join [ 234.977932][ T7944] netlink: 'syz.3.722': attribute type 4 has an invalid length. [ 234.985737][ T7944] netlink: 152 bytes leftover after parsing attributes in process `syz.3.722'. [ 234.995148][ T7944] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 235.017747][ T7976] netlink: 14 bytes leftover after parsing attributes in process `syz.1.732'. [ 235.709108][ T8018] netlink: 'syz.2.748': attribute type 4 has an invalid length. [ 235.726711][ T8018] netlink: 152 bytes leftover after parsing attributes in process `syz.2.748'. [ 235.746902][ T8018] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 235.978625][ T8026] netlink: 14 bytes leftover after parsing attributes in process `syz.3.750'. [ 236.056893][ T8028] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.742'. [ 236.554984][ T8030] syzkaller0: entered promiscuous mode [ 236.562529][ T8030] syzkaller0: entered allmulticast mode [ 237.006813][ T3474] wlan1: Trigger new scan to find an IBSS to join [ 237.106880][ T59] wlan1: Trigger new scan to find an IBSS to join [ 237.725265][ T8051] FAULT_INJECTION: forcing a failure. [ 237.725265][ T8051] name failslab, interval 1, probability 0, space 0, times 0 [ 237.756002][ T8051] CPU: 1 PID: 8051 Comm: syz.2.758 Not tainted syzkaller #0 [ 237.763458][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 237.773552][ T8051] Call Trace: [ 237.776867][ T8051] [ 237.779835][ T8051] dump_stack_lvl+0x16c/0x230 [ 237.784563][ T8051] ? show_regs_print_info+0x20/0x20 [ 237.789805][ T8051] ? load_image+0x3b0/0x3b0 [ 237.794353][ T8051] ? __might_sleep+0xe0/0xe0 [ 237.798992][ T8051] ? __lock_acquire+0x7c80/0x7c80 [ 237.804066][ T8051] should_fail_ex+0x39d/0x4d0 [ 237.808797][ T8051] should_failslab+0x9/0x20 [ 237.813368][ T8051] slab_pre_alloc_hook+0x59/0x310 [ 237.818441][ T8051] ? apparmor_sk_alloc_security+0x77/0x100 [ 237.824305][ T8051] __kmem_cache_alloc_node+0x53/0x260 [ 237.829745][ T8051] ? apparmor_sk_alloc_security+0x77/0x100 [ 237.835594][ T8051] kmalloc_trace+0x2a/0xe0 [ 237.840116][ T8051] apparmor_sk_alloc_security+0x77/0x100 [ 237.845805][ T8051] security_sk_alloc+0x6e/0xa0 [ 237.850619][ T8051] sk_prot_alloc+0x101/0x210 [ 237.855258][ T8051] ? sk_alloc+0x24/0x360 [ 237.859550][ T8051] sk_alloc+0x3a/0x360 [ 237.863664][ T8051] ? bpf_ctx_init+0x163/0x1a0 [ 237.868469][ T8051] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 237.874059][ T8051] bpf_prog_test_run_skb+0x39a/0x11c0 [ 237.879465][ T8051] ? __fget_files+0x28/0x4d0 [ 237.884115][ T8051] ? cpu_online+0x60/0x60 [ 237.888486][ T8051] bpf_prog_test_run+0x321/0x390 [ 237.893469][ T8051] __sys_bpf+0x440/0x800 [ 237.897747][ T8051] ? bpf_link_show_fdinfo+0x350/0x350 [ 237.903235][ T8051] ? lock_chain_count+0x20/0x20 [ 237.908107][ T8051] __x64_sys_bpf+0x7c/0x90 [ 237.912545][ T8051] do_syscall_64+0x55/0xb0 [ 237.916995][ T8051] ? clear_bhb_loop+0x40/0x90 [ 237.921694][ T8051] ? clear_bhb_loop+0x40/0x90 [ 237.926392][ T8051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.932310][ T8051] RIP: 0033:0x7f9271f8efc9 [ 237.936765][ T8051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.956394][ T8051] RSP: 002b:00007f9272e8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.964887][ T8051] RAX: ffffffffffffffda RBX: 00007f92721e5fa0 RCX: 00007f9271f8efc9 [ 237.972972][ T8051] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 237.980977][ T8051] RBP: 00007f9272e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 237.988960][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.996939][ T8051] R13: 00007f92721e6038 R14: 00007f92721e5fa0 R15: 00007ffec103d088 [ 238.004950][ T8051] [ 238.049807][ T3504] wlan1: Trigger new scan to find an IBSS to join [ 238.214020][ T3504] wlan1: Creating new IBSS network, BSSID c2:f2:a2:81:20:d3 [ 238.304438][ T8053] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.759'. [ 239.690809][ T8059] netlink: 'syz.1.762': attribute type 4 has an invalid length. [ 239.706753][ T8059] netlink: 152 bytes leftover after parsing attributes in process `syz.1.762'. [ 239.716177][ T8059] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 239.794113][ T8060] netlink: 14 bytes leftover after parsing attributes in process `syz.3.760'. [ 239.794131][ T8069] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.763'. [ 240.717597][ T8082] netlink: 2147 bytes leftover after parsing attributes in process `syz.3.767'. [ 240.749839][ T8079] netlink: 'syz.3.767': attribute type 28 has an invalid length. [ 240.826806][ T8079] netlink: 'syz.3.767': attribute type 29 has an invalid length. [ 240.901412][ T8079] netlink: 132 bytes leftover after parsing attributes in process `syz.3.767'. [ 241.099459][ T3504] wlan1: Trigger new scan to find an IBSS to join [ 241.366111][ T8092] netlink: 'syz.2.772': attribute type 3 has an invalid length. [ 241.386464][ T8092] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.772'. [ 241.948776][ T8098] syzkaller0: entered promiscuous mode [ 241.966633][ T8098] syzkaller0: entered allmulticast mode [ 241.984281][ T8108] netlink: 14 bytes leftover after parsing attributes in process `syz.1.775'. [ 242.023434][ T8116] netlink: 'syz.0.776': attribute type 4 has an invalid length. [ 242.033152][ T8116] netlink: 152 bytes leftover after parsing attributes in process `syz.0.776'. [ 242.049936][ T8116] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 242.066734][ T3504] wlan1: Trigger new scan to find an IBSS to join [ 243.008384][ T3474] wlan1: Creating new IBSS network, BSSID 32:a1:44:7e:8b:53 [ 243.609092][ T8139] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.786'. [ 244.046762][ T62] wlan1: Creating new IBSS network, BSSID 3a:e2:74:8e:3c:2a [ 244.054249][ T3504] wlan1: Trigger new scan to find an IBSS to join [ 246.301415][ T8126] netlink: 156 bytes leftover after parsing attributes in process `syz.1.781'. [ 246.311350][ T8126] FAULT_INJECTION: forcing a failure. [ 246.311350][ T8126] name failslab, interval 1, probability 0, space 0, times 0 [ 246.313074][ T8130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.325585][ T8126] CPU: 0 PID: 8126 Comm: syz.1.781 Not tainted syzkaller #0 [ 246.339226][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.349340][ T8126] Call Trace: [ 246.352651][ T8126] [ 246.355624][ T8126] dump_stack_lvl+0x16c/0x230 [ 246.360363][ T8126] ? show_regs_print_info+0x20/0x20 [ 246.362475][ T8130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.365594][ T8126] ? load_image+0x3b0/0x3b0 [ 246.377307][ T8126] should_fail_ex+0x39d/0x4d0 [ 246.382043][ T8126] should_failslab+0x9/0x20 [ 246.386587][ T8126] slab_pre_alloc_hook+0x59/0x310 [ 246.391668][ T8126] kmem_cache_alloc+0x5a/0x2e0 [ 246.396501][ T8126] ? skb_clone+0x1eb/0x370 [ 246.400978][ T8126] skb_clone+0x1eb/0x370 [ 246.405285][ T8126] __netlink_deliver_tap+0x41c/0x830 [ 246.410625][ T8126] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.415849][ T8126] netlink_deliver_tap+0x19c/0x1b0 [ 246.420992][ T8126] netlink_dump+0x8df/0xde0 [ 246.425542][ T8126] ? netlink_lookup+0x200/0x200 [ 246.430446][ T8126] ? netlink_autobind+0x300/0x300 [ 246.435494][ T8126] ? netlink_lookup+0x30/0x200 [ 246.440361][ T8126] ? netlink_lookup+0x30/0x200 [ 246.445241][ T8126] __netlink_dump_start+0x5f1/0x810 [ 246.450475][ T8126] rtnetlink_rcv_msg+0xba1/0xf10 [ 246.455449][ T8126] ? neigh_get+0xcf0/0xcf0 [ 246.459897][ T8126] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 246.465035][ T8126] ? rtnetlink_bind+0x80/0x80 [ 246.469733][ T8126] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 246.475742][ T8126] ? __dev_queue_xmit+0x245/0x35a0 [ 246.480886][ T8126] ? lock_chain_count+0x20/0x20 [ 246.485754][ T8126] ? __local_bh_enable_ip+0x12e/0x1c0 [ 246.491141][ T8126] ? lockdep_hardirqs_on+0x98/0x150 [ 246.496354][ T8126] ? __local_bh_enable_ip+0x12e/0x1c0 [ 246.501854][ T8126] ? _local_bh_enable+0xa0/0xa0 [ 246.506729][ T8126] ? __dev_queue_xmit+0x245/0x35a0 [ 246.511865][ T8126] ? __dev_queue_xmit+0x1449/0x35a0 [ 246.517094][ T8126] ? __dev_queue_xmit+0x245/0x35a0 [ 246.522230][ T8126] ? neigh_get+0xcf0/0xcf0 [ 246.526683][ T8126] ? ref_tracker_free+0x634/0x7d0 [ 246.531736][ T8126] ? __copy_skb_header+0xa7/0x550 [ 246.536879][ T8126] netlink_rcv_skb+0x216/0x480 [ 246.541667][ T8126] ? rtnetlink_bind+0x80/0x80 [ 246.546362][ T8126] ? netlink_ack+0x1110/0x1110 [ 246.551170][ T8126] ? __lock_acquire+0x7c80/0x7c80 [ 246.556221][ T8126] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.561446][ T8126] netlink_unicast+0x751/0x8d0 [ 246.566244][ T8126] netlink_sendmsg+0x8c1/0xbe0 [ 246.571132][ T8126] ? netlink_getsockopt+0x580/0x580 [ 246.576353][ T8126] ? aa_sock_msg_perm+0x94/0x150 [ 246.581309][ T8126] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 246.586618][ T8126] ? security_socket_sendmsg+0x80/0xa0 [ 246.592098][ T8126] ? netlink_getsockopt+0x580/0x580 [ 246.597320][ T8126] ____sys_sendmsg+0x5bf/0x950 [ 246.602124][ T8126] ? __asan_memset+0x22/0x40 [ 246.606909][ T8126] ? __sys_sendmsg_sock+0x30/0x30 [ 246.611957][ T8126] ? __import_iovec+0x5f2/0x860 [ 246.616833][ T8126] ? import_iovec+0x73/0xa0 [ 246.621364][ T8126] ___sys_sendmsg+0x220/0x290 [ 246.626075][ T8126] ? __sys_sendmsg+0x270/0x270 [ 246.630966][ T8126] ? __lock_acquire+0x7c80/0x7c80 [ 246.636114][ T8126] __se_sys_sendmsg+0x1a5/0x270 [ 246.640991][ T8126] ? __x64_sys_sendmsg+0x80/0x80 [ 246.645970][ T8126] ? lockdep_hardirqs_on+0x98/0x150 [ 246.651183][ T8126] do_syscall_64+0x55/0xb0 [ 246.655621][ T8126] ? clear_bhb_loop+0x40/0x90 [ 246.660310][ T8126] ? clear_bhb_loop+0x40/0x90 [ 246.665036][ T8126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.670947][ T8126] RIP: 0033:0x7fdfd618efc9 [ 246.675381][ T8126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.695002][ T8126] RSP: 002b:00007fdfd70b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.703440][ T8126] RAX: ffffffffffffffda RBX: 00007fdfd63e5fa0 RCX: 00007fdfd618efc9 [ 246.711450][ T8126] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 246.719453][ T8126] RBP: 00007fdfd70b6090 R08: 0000000000000000 R09: 0000000000000000 [ 246.727443][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.735432][ T8126] R13: 00007fdfd63e6038 R14: 00007fdfd63e5fa0 R15: 00007ffd52680e28 [ 246.743428][ T8126] [ 246.769061][ T8130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.805776][ T8130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.850212][ T8130] bond0: (slave batadv0): Releasing backup interface [ 246.878277][ T8149] netlink: 14 bytes leftover after parsing attributes in process `syz.0.790'. [ 247.016173][ T8158] netlink: 'syz.1.791': attribute type 4 has an invalid length. [ 247.025102][ T1325] wlan1: Trigger new scan to find an IBSS to join [ 247.028915][ T8158] netlink: 152 bytes leftover after parsing attributes in process `syz.1.791'. [ 247.074849][ T8158] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 247.127211][ T8164] netlink: 2759 bytes leftover after parsing attributes in process `syz.2.795'. [ 247.912856][ T8169] FAULT_INJECTION: forcing a failure. [ 247.912856][ T8169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.948282][ T8169] CPU: 0 PID: 8169 Comm: syz.0.793 Not tainted syzkaller #0 [ 247.955641][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.965831][ T8169] Call Trace: [ 247.969138][ T8169] [ 247.972090][ T8169] dump_stack_lvl+0x16c/0x230 [ 247.976809][ T8169] ? show_regs_print_info+0x20/0x20 [ 247.982041][ T8169] ? load_image+0x3b0/0x3b0 [ 247.986565][ T8169] ? __lock_acquire+0x7c80/0x7c80 [ 247.991605][ T8169] ? snprintf+0xdb/0x120 [ 247.995865][ T8169] should_fail_ex+0x39d/0x4d0 [ 248.000570][ T8169] _copy_to_user+0x2f/0xa0 [ 248.005040][ T8169] simple_read_from_buffer+0xe7/0x150 [ 248.010475][ T8169] proc_fail_nth_read+0x1e3/0x250 [ 248.015523][ T8169] ? proc_fault_inject_write+0x340/0x340 [ 248.021180][ T8169] ? fsnotify_perm+0x271/0x5e0 [ 248.025981][ T8169] ? proc_fault_inject_write+0x340/0x340 [ 248.031660][ T8169] vfs_read+0x27e/0x920 [ 248.035856][ T8169] ? kernel_read+0x1e0/0x1e0 [ 248.040474][ T8169] ? __fget_files+0x28/0x4d0 [ 248.045093][ T8169] ? __fget_files+0x44a/0x4d0 [ 248.049826][ T8169] ? __fdget_pos+0x2a3/0x330 [ 248.054437][ T8169] ? ksys_read+0x75/0x250 [ 248.058788][ T8169] ksys_read+0x147/0x250 [ 248.063054][ T8169] ? vfs_write+0x940/0x940 [ 248.067498][ T8169] ? lockdep_hardirqs_on+0x98/0x150 [ 248.072712][ T8169] do_syscall_64+0x55/0xb0 [ 248.077152][ T8169] ? clear_bhb_loop+0x40/0x90 [ 248.081861][ T8169] ? clear_bhb_loop+0x40/0x90 [ 248.086556][ T8169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.092473][ T8169] RIP: 0033:0x7fd00318d9dc [ 248.096904][ T8169] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 248.116528][ T8169] RSP: 002b:00007fd0040ab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.124960][ T8169] RAX: ffffffffffffffda RBX: 00007fd0033e5fa0 RCX: 00007fd00318d9dc [ 248.132968][ T8169] RDX: 000000000000000f RSI: 00007fd0040ab0a0 RDI: 0000000000000007 [ 248.140958][ T8169] RBP: 00007fd0040ab090 R08: 0000000000000000 R09: 0000000000000000 [ 248.148938][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.156924][ T8169] R13: 00007fd0033e6038 R14: 00007fd0033e5fa0 R15: 00007ffca4b74ff8 [ 248.164928][ T8169] [ 248.587291][ T8186] netlink: 14 bytes leftover after parsing attributes in process `syz.2.801'. [ 248.752976][ T8182] syzkaller0: entered promiscuous mode [ 248.759432][ T8182] syzkaller0: entered allmulticast mode [ 250.049479][ T59] wlan1: Creating new IBSS network, BSSID c2:06:8f:43:e5:4d [ 250.783511][ T8201] netlink: 'syz.3.806': attribute type 4 has an invalid length. [ 250.791717][ T8201] netlink: 152 bytes leftover after parsing attributes in process `syz.3.806'. [ 250.801350][ T8201] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 250.817732][ T8203] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 251.029381][ T8217] netlink: 14 bytes leftover after parsing attributes in process `syz.0.812'. [ 251.146267][ T8220] netlink: 2759 bytes leftover after parsing attributes in process `syz.2.810'. [ 252.708066][ T8233] netlink: 'syz.2.817': attribute type 4 has an invalid length. [ 252.716424][ T8233] netlink: 152 bytes leftover after parsing attributes in process `syz.2.817'. [ 252.731998][ T8233] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 252.970222][ T8243] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 253.095188][ T3504] wlan1: Trigger new scan to find an IBSS to join [ 253.753897][ T8246] syzkaller0: entered promiscuous mode [ 253.776308][ T8246] syzkaller0: entered allmulticast mode [ 255.090070][ T3504] wlan1: Trigger new scan to find an IBSS to join [ 255.636354][ T8256] netlink: 14 bytes leftover after parsing attributes in process `syz.2.821'. [ 255.646803][ T8259] netlink: 'syz.0.824': attribute type 10 has an invalid length. [ 255.672040][ T8259] netlink: 55 bytes leftover after parsing attributes in process `syz.0.824'. [ 255.815483][ T8264] netlink: 2759 bytes leftover after parsing attributes in process `syz.2.825'. [ 255.890119][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.896766][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.445102][ T8273] netlink: 'syz.3.830': attribute type 4 has an invalid length. [ 256.467715][ T8273] netlink: 152 bytes leftover after parsing attributes in process `syz.3.830'. [ 256.486841][ T8273] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 256.717416][ T8288] netlink: 14 bytes leftover after parsing attributes in process `syz.1.833'. [ 257.175909][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.281799][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.410739][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.592955][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.644906][ T8299] netlink: 2 bytes leftover after parsing attributes in process `syz.1.839'. [ 257.667221][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.696298][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.727696][ T8299] batadv_slave_1: entered promiscuous mode [ 257.874177][ T8295] syzkaller0: entered promiscuous mode [ 257.896543][ T8295] syzkaller0: entered allmulticast mode [ 257.983553][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.993156][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.006236][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.034986][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.047180][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 258.054824][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.541553][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.561941][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.575032][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.621345][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.629970][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 258.639252][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.018520][ T1325] wlan1: Trigger new scan to find an IBSS to join [ 260.045449][ T8316] netlink: 'syz.1.844': attribute type 4 has an invalid length. [ 260.057080][ T3474] wlan1: Trigger new scan to find an IBSS to join [ 260.072907][ T8316] netlink: 152 bytes leftover after parsing attributes in process `syz.1.844'. [ 260.100390][ T8316] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 260.130413][ T5795] Bluetooth: hci1: command tx timeout [ 260.234186][ T8330] netlink: 14 bytes leftover after parsing attributes in process `syz.0.846'. [ 260.686804][ T5795] Bluetooth: hci3: command tx timeout [ 260.794773][ T8301] chnl_net:caif_netlink_parms(): no params data found [ 260.862134][ T11] bond0: (slave wlan1): Releasing backup interface [ 260.884634][ T8311] chnl_net:caif_netlink_parms(): no params data found [ 261.079465][ T8350] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.847'. [ 261.841177][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.850217][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.864932][ T8311] bridge_slave_0: entered allmulticast mode [ 261.874526][ T8311] bridge_slave_0: entered promiscuous mode [ 261.927639][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.938036][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.945414][ T8311] bridge_slave_1: entered allmulticast mode [ 261.953221][ T8311] bridge_slave_1: entered promiscuous mode [ 261.989803][ T8301] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.997362][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.004695][ T8301] bridge_slave_0: entered allmulticast mode [ 262.012690][ T8301] bridge_slave_0: entered promiscuous mode [ 262.031420][ T11] hsr_slave_0: left promiscuous mode [ 262.040829][ T11] hsr_slave_1: left promiscuous mode [ 262.048039][ T11] bridge_slave_1: left allmulticast mode [ 262.050299][ T2957] wlan1: Trigger new scan to find an IBSS to join [ 262.053796][ T11] bridge_slave_1: left promiscuous mode [ 262.066698][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.081938][ T11] bridge_slave_0: left allmulticast mode [ 262.089094][ T11] bridge_slave_0: left promiscuous mode [ 262.094862][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.133682][ T11] veth1_macvtap: left promiscuous mode [ 262.139851][ T11] veth0_macvtap: left promiscuous mode [ 262.145569][ T11] veth1_vlan: left promiscuous mode [ 262.152781][ T11] veth0_vlan: left promiscuous mode [ 262.207427][ T5795] Bluetooth: hci1: command tx timeout [ 262.766887][ T5795] Bluetooth: hci3: command tx timeout [ 262.767304][ T11] team0 (unregistering): Port device team_slave_1 removed [ 262.822567][ T11] team0 (unregistering): Port device team_slave_0 removed [ 262.864171][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.910774][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.307529][ T11] bond0 (unregistering): Released all slaves [ 263.438139][ T8373] syzkaller0: entered promiscuous mode [ 263.443671][ T8373] syzkaller0: entered allmulticast mode [ 263.476259][ T8301] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.483653][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.491296][ T8301] bridge_slave_1: entered allmulticast mode [ 263.498863][ T8301] bridge_slave_1: entered promiscuous mode [ 263.507948][ T8382] netlink: 'syz.0.853': attribute type 4 has an invalid length. [ 263.515641][ T8382] netlink: 152 bytes leftover after parsing attributes in process `syz.0.853'. [ 263.524992][ T8382] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 263.838789][ T8387] syz.0.854 (8387) used greatest stack depth: 16864 bytes left [ 264.286636][ T5795] Bluetooth: hci1: command tx timeout [ 264.847306][ T5795] Bluetooth: hci3: command tx timeout [ 265.096636][ T1325] wlan1: Trigger new scan to find an IBSS to join [ 265.549503][ T8311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.591883][ T8391] netlink: 14 bytes leftover after parsing attributes in process `syz.0.855'. [ 265.605930][ T8311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.690742][ T8301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.714787][ T8311] team0: Port device team_slave_0 added [ 265.734224][ T8301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.759631][ T8311] team0: Port device team_slave_1 added [ 265.844230][ T8394] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.857'. [ 265.879886][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.897201][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.956690][ T8311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.046793][ T62] wlan1: Trigger new scan to find an IBSS to join [ 266.085302][ T3474] wlan1: Creating new IBSS network, BSSID 66:2f:91:75:69:4b [ 266.123286][ T8301] team0: Port device team_slave_0 added [ 266.374534][ T5795] Bluetooth: hci1: command tx timeout [ 266.377910][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.425454][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.536705][ T8311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.841094][ T8301] team0: Port device team_slave_1 added [ 266.926719][ T5795] Bluetooth: hci3: command tx timeout [ 267.016733][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.038710][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.081601][ T8301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.153224][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.165547][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.199632][ T8301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.251464][ T8311] hsr_slave_0: entered promiscuous mode [ 267.267545][ T8311] hsr_slave_1: entered promiscuous mode [ 267.380767][ T8416] netlink: 'syz.1.860': attribute type 4 has an invalid length. [ 267.397502][ T8416] netlink: 152 bytes leftover after parsing attributes in process `syz.1.860'. [ 267.410840][ T8416] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 267.520618][ T8301] hsr_slave_0: entered promiscuous mode [ 267.528810][ T8301] hsr_slave_1: entered promiscuous mode [ 267.535316][ T8301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.544991][ T8301] Cannot create hsr debugfs directory [ 267.591474][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.650683][ T8427] netlink: 14 bytes leftover after parsing attributes in process `syz.0.862'. [ 267.704911][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.805903][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.901791][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.212455][ T8311] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.379686][ T8311] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.469419][ T8311] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.553161][ T8311] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.586083][ T8301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.630289][ T8301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.823202][ T8301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.855034][ T8301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.907351][ T8451] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.865'. [ 270.032349][ T8311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.063711][ T8473] FAULT_INJECTION: forcing a failure. [ 270.063711][ T8473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.096386][ T8475] netlink: 'syz.1.869': attribute type 4 has an invalid length. [ 270.113285][ T8475] netlink: 152 bytes leftover after parsing attributes in process `syz.1.869'. [ 270.125831][ T8473] CPU: 0 PID: 8473 Comm: syz.0.868 Not tainted syzkaller #0 [ 270.133176][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.143266][ T8473] Call Trace: [ 270.146603][ T8473] [ 270.149574][ T8473] dump_stack_lvl+0x16c/0x230 [ 270.154390][ T8473] ? show_regs_print_info+0x20/0x20 [ 270.159640][ T8473] ? load_image+0x3b0/0x3b0 [ 270.164186][ T8473] ? __might_fault+0xaa/0x120 [ 270.168950][ T8473] ? __lock_acquire+0x7c80/0x7c80 [ 270.174018][ T8473] ? __virt_addr_valid+0x18c/0x540 [ 270.179182][ T8473] should_fail_ex+0x39d/0x4d0 [ 270.179879][ T8475] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 270.183892][ T8473] _copy_from_user+0x2f/0xe0 [ 270.183922][ T8473] bpf_prog_test_run_skb+0x259/0x11c0 [ 270.183944][ T8473] ? __fget_files+0x28/0x4d0 [ 270.214600][ T8473] ? __fget_files+0x44a/0x4d0 [ 270.219367][ T8473] ? cpu_online+0x60/0x60 [ 270.223753][ T8473] bpf_prog_test_run+0x321/0x390 [ 270.228748][ T8473] __sys_bpf+0x440/0x800 [ 270.233135][ T8473] ? bpf_link_show_fdinfo+0x350/0x350 [ 270.238559][ T8473] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 270.244770][ T8473] __x64_sys_bpf+0x7c/0x90 [ 270.249231][ T8473] do_syscall_64+0x55/0xb0 [ 270.253693][ T8473] ? clear_bhb_loop+0x40/0x90 [ 270.258414][ T8473] ? clear_bhb_loop+0x40/0x90 [ 270.263138][ T8473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.269244][ T8473] RIP: 0033:0x7fd00318efc9 [ 270.273690][ T8473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.293342][ T8473] RSP: 002b:00007fd0040ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.301810][ T8473] RAX: ffffffffffffffda RBX: 00007fd0033e5fa0 RCX: 00007fd00318efc9 [ 270.303416][ T8301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.309804][ T8473] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 270.309820][ T8473] RBP: 00007fd0040ab090 R08: 0000000000000000 R09: 0000000000000000 [ 270.309831][ T8473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.309842][ T8473] R13: 00007fd0033e6038 R14: 00007fd0033e5fa0 R15: 00007ffca4b74ff8 [ 270.309871][ T8473] [ 270.592641][ T8301] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.669355][ T8311] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.685539][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.692956][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.749457][ T11] bond0: (slave wlan1): Releasing backup interface [ 270.813857][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.821248][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.849108][ T8485] netlink: 14 bytes leftover after parsing attributes in process `syz.0.870'. [ 270.908383][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.915531][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.043181][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.050627][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.088235][ T62] wlan1: Trigger new scan to find an IBSS to join [ 271.183275][ T11] hsr_slave_0: left promiscuous mode [ 271.221019][ T11] hsr_slave_1: left promiscuous mode [ 271.231957][ T11] bridge_slave_1: left allmulticast mode [ 271.253246][ T11] bridge_slave_1: left promiscuous mode [ 271.274105][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.300081][ T11] bridge_slave_0: left allmulticast mode [ 271.305951][ T11] bridge_slave_0: left promiscuous mode [ 271.318085][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.381748][ T11] veth1_macvtap: left promiscuous mode [ 271.391803][ T11] veth0_macvtap: left promiscuous mode [ 271.407171][ T11] veth1_vlan: left promiscuous mode [ 271.895652][ T8507] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.874'. [ 272.039549][ T49] wlan1: Creating new IBSS network, BSSID e2:40:80:ec:9d:57 [ 272.753731][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.847184][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.362805][ T11] bond0 (unregistering): Released all slaves [ 273.929944][ T8515] netlink: 'syz.1.877': attribute type 4 has an invalid length. [ 273.966943][ T8515] netlink: 152 bytes leftover after parsing attributes in process `syz.1.877'. [ 273.976432][ T8515] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 274.461126][ T8311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.642525][ T8301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.676625][ T8540] netlink: 14 bytes leftover after parsing attributes in process `syz.0.879'. [ 275.164477][ T8558] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.880'. [ 275.518587][ T8311] veth0_vlan: entered promiscuous mode [ 275.586644][ T8311] veth1_vlan: entered promiscuous mode [ 275.780104][ T8566] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.881'. [ 275.802291][ T8301] veth0_vlan: entered promiscuous mode [ 275.872570][ T8311] veth0_macvtap: entered promiscuous mode [ 275.919802][ T8311] veth1_macvtap: entered promiscuous mode [ 275.950398][ T8301] veth1_vlan: entered promiscuous mode [ 276.034335][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.072083][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.097905][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.125173][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.154209][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.227309][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.260444][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.287620][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.324112][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.350993][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.384360][ T8301] veth0_macvtap: entered promiscuous mode [ 276.421256][ T8311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.451491][ T8311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.477645][ T8311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.496714][ T8311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.541101][ T8301] veth1_macvtap: entered promiscuous mode [ 276.755044][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.768338][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.782154][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.794889][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.818247][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.836518][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.859078][ T8301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.900910][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.930986][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.946982][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.967725][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.982492][ T8301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.993432][ T8301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.013276][ T8301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.065206][ T8301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.088574][ T8301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.103816][ T8301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.112972][ T8301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.174852][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.222512][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.323490][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.346922][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.408960][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.446614][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.542805][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.594462][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.432324][ T8610] netlink: 2759 bytes leftover after parsing attributes in process `syz.5.889'. [ 278.653074][ T8608] netlink: 14 bytes leftover after parsing attributes in process `syz.0.887'. [ 279.113363][ T8627] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.892'. [ 279.151779][ T8627] netlink: 2 bytes leftover after parsing attributes in process `syz.4.892'. [ 279.176172][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.203241][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.236969][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.258634][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.279016][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.305203][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.337948][ T8627] batadv_slave_1: entered promiscuous mode [ 279.994071][ T8639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.010041][ T8639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.026855][ T8639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.061752][ T8639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.443327][ T8657] netlink: 'syz.4.899': attribute type 4 has an invalid length. [ 280.469137][ T8657] netlink: 152 bytes leftover after parsing attributes in process `syz.4.899'. [ 280.557546][ T8657] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 281.206860][ T8669] netlink: 14 bytes leftover after parsing attributes in process `syz.4.901'. [ 281.461786][ T8682] netlink: 132 bytes leftover after parsing attributes in process `syz.5.905'. [ 281.506948][ T8679] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.904'. [ 282.676132][ T8704] netlink: 'syz.1.909': attribute type 4 has an invalid length. [ 282.706775][ T8704] netlink: 152 bytes leftover after parsing attributes in process `syz.1.909'. [ 282.747904][ T8704] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 283.774143][ T8728] netlink: 'syz.1.915': attribute type 1 has an invalid length. [ 283.800264][ T8728] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.915'. [ 283.989687][ T8740] netlink: 14 bytes leftover after parsing attributes in process `syz.5.917'. [ 284.413658][ T8754] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.921'. [ 286.053289][ T8766] netlink: 'syz.5.923': attribute type 4 has an invalid length. [ 286.077312][ T8766] netlink: 152 bytes leftover after parsing attributes in process `syz.5.923'. [ 286.150238][ T8766] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 286.476674][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.927'. [ 286.584052][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.839205][ T8793] netlink: 'syz.1.931': attribute type 3 has an invalid length. [ 286.858841][ T8793] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.931'. [ 286.934427][ T8782] bridge_slave_0 (unregistering): left allmulticast mode [ 286.950063][ T8782] bridge_slave_0 (unregistering): left promiscuous mode [ 286.971735][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.328125][ T8803] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.933'. [ 287.556858][ T8800] netlink: 14 bytes leftover after parsing attributes in process `syz.5.932'. [ 288.598080][ T8828] FAULT_INJECTION: forcing a failure. [ 288.598080][ T8828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.643513][ T8828] CPU: 1 PID: 8828 Comm: syz.0.938 Not tainted syzkaller #0 [ 288.650884][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.660990][ T8828] Call Trace: [ 288.664309][ T8828] [ 288.667270][ T8828] dump_stack_lvl+0x16c/0x230 [ 288.672012][ T8828] ? show_regs_print_info+0x20/0x20 [ 288.677259][ T8828] ? load_image+0x3b0/0x3b0 [ 288.681805][ T8828] ? __might_fault+0xaa/0x120 [ 288.686521][ T8828] ? __lock_acquire+0x7c80/0x7c80 [ 288.691611][ T8828] should_fail_ex+0x39d/0x4d0 [ 288.696358][ T8828] _copy_from_user+0x2f/0xe0 [ 288.700994][ T8828] ___sys_sendmsg+0x159/0x290 [ 288.705724][ T8828] ? __sys_sendmsg+0x270/0x270 [ 288.710561][ T8828] ? __lock_acquire+0x7c80/0x7c80 [ 288.715665][ T8828] __se_sys_sendmsg+0x1a5/0x270 [ 288.720568][ T8828] ? perf_trace_preemptirq_template+0x281/0x340 [ 288.726861][ T8828] ? __x64_sys_sendmsg+0x80/0x80 [ 288.731866][ T8828] ? lockdep_hardirqs_on+0x98/0x150 [ 288.737106][ T8828] do_syscall_64+0x55/0xb0 [ 288.741565][ T8828] ? clear_bhb_loop+0x40/0x90 [ 288.746280][ T8828] ? clear_bhb_loop+0x40/0x90 [ 288.751018][ T8828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.756927][ T8828] RIP: 0033:0x7fd00318efc9 [ 288.761360][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.780990][ T8828] RSP: 002b:00007fd0040ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.789425][ T8828] RAX: ffffffffffffffda RBX: 00007fd0033e5fa0 RCX: 00007fd00318efc9 [ 288.797413][ T8828] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 288.805485][ T8828] RBP: 00007fd0040ab090 R08: 0000000000000000 R09: 0000000000000000 [ 288.813481][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.821481][ T8828] R13: 00007fd0033e6038 R14: 00007fd0033e5fa0 R15: 00007ffca4b74ff8 [ 288.829524][ T8828] [ 289.236325][ T8829] netlink: 'syz.4.937': attribute type 4 has an invalid length. [ 289.263786][ T8829] netlink: 152 bytes leftover after parsing attributes in process `syz.4.937'. [ 289.286647][ T8829] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 289.479884][ T8842] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.942'. [ 289.532024][ T8842] netlink: 'syz.1.942': attribute type 3 has an invalid length. [ 289.559940][ T8842] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.942'. [ 289.820994][ T8859] FAULT_INJECTION: forcing a failure. [ 289.820994][ T8859] name failslab, interval 1, probability 0, space 0, times 0 [ 289.866679][ T8859] CPU: 0 PID: 8859 Comm: syz.1.946 Not tainted syzkaller #0 [ 289.874060][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.884172][ T8859] Call Trace: [ 289.887511][ T8859] [ 289.890477][ T8859] dump_stack_lvl+0x16c/0x230 [ 289.895205][ T8859] ? show_regs_print_info+0x20/0x20 [ 289.900450][ T8859] ? load_image+0x3b0/0x3b0 [ 289.905011][ T8859] ? __lock_acquire+0x7c80/0x7c80 [ 289.910077][ T8859] should_fail_ex+0x39d/0x4d0 [ 289.914802][ T8859] should_failslab+0x9/0x20 [ 289.919335][ T8859] slab_pre_alloc_hook+0x59/0x310 [ 289.924382][ T8859] ? iovec_from_user+0x87/0x250 [ 289.929255][ T8859] ? iovec_from_user+0x87/0x250 [ 289.934145][ T8859] __kmem_cache_alloc_node+0x53/0x260 [ 289.939549][ T8859] ? iovec_from_user+0x87/0x250 [ 289.944436][ T8859] __kmalloc+0xa4/0x240 [ 289.948623][ T8859] iovec_from_user+0x87/0x250 [ 289.953324][ T8859] __import_iovec+0x13d/0x860 [ 289.958042][ T8859] import_iovec+0x73/0xa0 [ 289.962417][ T8859] ___sys_sendmsg+0x1e8/0x290 [ 289.967156][ T8859] ? __sys_sendmsg+0x270/0x270 [ 289.971958][ T8859] ? __lock_acquire+0x7c80/0x7c80 [ 289.977018][ T8859] __se_sys_sendmsg+0x1a5/0x270 [ 289.981895][ T8859] ? __x64_sys_sendmsg+0x80/0x80 [ 289.986872][ T8859] ? lockdep_hardirqs_on+0x98/0x150 [ 289.992090][ T8859] do_syscall_64+0x55/0xb0 [ 289.996524][ T8859] ? clear_bhb_loop+0x40/0x90 [ 290.001217][ T8859] ? clear_bhb_loop+0x40/0x90 [ 290.005910][ T8859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.011823][ T8859] RIP: 0033:0x7fdfd618efc9 [ 290.016254][ T8859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.035918][ T8859] RSP: 002b:00007fdfd7095038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.044360][ T8859] RAX: ffffffffffffffda RBX: 00007fdfd63e6090 RCX: 00007fdfd618efc9 [ 290.052361][ T8859] RDX: 00000000000012cd RSI: 0000200000000040 RDI: 0000000000000003 [ 290.060370][ T8859] RBP: 00007fdfd7095090 R08: 0000000000000000 R09: 0000000000000000 [ 290.068359][ T8859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.076346][ T8859] R13: 00007fdfd63e6128 R14: 00007fdfd63e6090 R15: 00007ffd52680e28 [ 290.084349][ T8859] [ 290.175239][ T8866] netlink: 2759 bytes leftover after parsing attributes in process `syz.4.948'. [ 290.246684][ T8868] netlink: 14 bytes leftover after parsing attributes in process `syz.5.944'. [ 291.498720][ T8891] netlink: 'syz.0.952': attribute type 4 has an invalid length. [ 291.523225][ T8891] netlink: 152 bytes leftover after parsing attributes in process `syz.0.952'. [ 291.555183][ T8891] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 292.349412][ T8911] netlink: 14 bytes leftover after parsing attributes in process `syz.1.958'. [ 292.488965][ T8924] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.961'. [ 294.050240][ T3474] wlan1: Trigger new scan to find an IBSS to join [ 294.215539][ T8957] netlink: 'syz.0.967': attribute type 1 has an invalid length. [ 294.231694][ T8957] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.967'. [ 294.595870][ T8965] netlink: 'syz.1.969': attribute type 4 has an invalid length. [ 294.631611][ T8965] netlink: 152 bytes leftover after parsing attributes in process `syz.1.969'. [ 294.700870][ T8965] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 294.775921][ T8964] netlink: 14 bytes leftover after parsing attributes in process `syz.4.970'. [ 295.183759][ T8980] syz.0.972[8980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.183933][ T8980] syz.0.972[8980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.208954][ T8981] FAULT_INJECTION: forcing a failure. [ 295.208954][ T8981] name failslab, interval 1, probability 0, space 0, times 0 [ 295.371561][ T8981] CPU: 0 PID: 8981 Comm: syz.5.971 Not tainted syzkaller #0 [ 295.378946][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.389051][ T8981] Call Trace: [ 295.392366][ T8981] [ 295.395330][ T8981] dump_stack_lvl+0x16c/0x230 [ 295.400086][ T8981] ? show_regs_print_info+0x20/0x20 [ 295.405340][ T8981] ? load_image+0x3b0/0x3b0 [ 295.409896][ T8981] ? __might_sleep+0xe0/0xe0 [ 295.414626][ T8981] ? __lock_acquire+0x7c80/0x7c80 [ 295.419780][ T8981] ? mark_lock+0x94/0x320 [ 295.424179][ T8981] should_fail_ex+0x39d/0x4d0 [ 295.428931][ T8981] should_failslab+0x9/0x20 [ 295.433480][ T8981] slab_pre_alloc_hook+0x59/0x310 [ 295.438553][ T8981] ? __get_vm_area_node+0x125/0x370 [ 295.443790][ T8981] __kmem_cache_alloc_node+0x53/0x260 [ 295.449216][ T8981] ? __get_vm_area_node+0x125/0x370 [ 295.454477][ T8981] kmalloc_node_trace+0x26/0xe0 [ 295.459389][ T8981] __get_vm_area_node+0x125/0x370 [ 295.464463][ T8981] __vmalloc_node_range+0x36e/0x1320 [ 295.469796][ T8981] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 295.475385][ T8981] ? mark_lock+0x94/0x320 [ 295.479786][ T8981] ? __lock_acquire+0x1334/0x7c80 [ 295.484864][ T8981] ? free_vm_area+0x50/0x50 [ 295.489405][ T8981] ? end_current_label_crit_section+0x170/0x170 [ 295.495689][ T8981] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 295.501269][ T8981] __vmalloc+0x7a/0x90 [ 295.505391][ T8981] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 295.510978][ T8981] bpf_prog_alloc_no_stats+0x47/0x440 [ 295.516395][ T8981] ? bpf_prog_alloc+0x2b/0x1b0 [ 295.521210][ T8981] bpf_prog_alloc+0x3d/0x1b0 [ 295.525930][ T8981] bpf_prog_load+0x6b8/0x16d0 [ 295.530774][ T8981] ? map_freeze+0x420/0x420 [ 295.535330][ T8981] ? __might_fault+0xaa/0x120 [ 295.540056][ T8981] ? __lock_acquire+0x7c80/0x7c80 [ 295.545258][ T8981] ? __might_fault+0xaa/0x120 [ 295.549994][ T8981] ? __might_fault+0xc6/0x120 [ 295.554716][ T8981] ? __might_fault+0xaa/0x120 [ 295.559428][ T8981] ? bpf_lsm_bpf+0x9/0x10 [ 295.563797][ T8981] ? security_bpf+0x7e/0xa0 [ 295.568347][ T8981] __sys_bpf+0x55a/0x800 [ 295.572637][ T8981] ? bpf_link_show_fdinfo+0x350/0x350 [ 295.578074][ T8981] ? lock_chain_count+0x20/0x20 [ 295.582993][ T8981] __x64_sys_bpf+0x7c/0x90 [ 295.587541][ T8981] do_syscall_64+0x55/0xb0 [ 295.591999][ T8981] ? clear_bhb_loop+0x40/0x90 [ 295.596722][ T8981] ? clear_bhb_loop+0x40/0x90 [ 295.601441][ T8981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.607371][ T8981] RIP: 0033:0x7fe3c0f8efc9 [ 295.611816][ T8981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.631462][ T8981] RSP: 002b:00007fe3c1e0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.639919][ T8981] RAX: ffffffffffffffda RBX: 00007fe3c11e5fa0 RCX: 00007fe3c0f8efc9 [ 295.647950][ T8981] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005 [ 295.655956][ T8981] RBP: 00007fe3c1e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 295.663981][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.672167][ T8981] R13: 00007fe3c11e6038 R14: 00007fe3c11e5fa0 R15: 00007ffddeda28b8 [ 295.680206][ T8981] [ 295.726202][ T8981] syz.5.971: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 295.795617][ T8986] netlink: 2759 bytes leftover after parsing attributes in process `syz.4.973'. [ 295.853565][ T8981] CPU: 1 PID: 8981 Comm: syz.5.971 Not tainted syzkaller #0 [ 295.860933][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.871050][ T8981] Call Trace: [ 295.874346][ T8981] [ 295.877467][ T8981] dump_stack_lvl+0x16c/0x230 [ 295.882170][ T8981] ? show_regs_print_info+0x20/0x20 [ 295.887420][ T8981] ? load_image+0x3b0/0x3b0 [ 295.891948][ T8981] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 295.898384][ T8981] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 295.904910][ T8981] warn_alloc+0x210/0x300 [ 295.909279][ T8981] ? __get_vm_area_node+0x125/0x370 [ 295.914492][ T8981] ? zone_watermark_ok_safe+0x230/0x230 [ 295.920062][ T8981] ? rcu_is_watching+0x15/0xb0 [ 295.924856][ T8981] ? __get_vm_area_node+0x356/0x370 [ 295.930099][ T8981] __vmalloc_node_range+0x393/0x1320 [ 295.935416][ T8981] ? mark_lock+0x94/0x320 [ 295.939764][ T8981] ? __lock_acquire+0x1334/0x7c80 [ 295.944819][ T8981] ? free_vm_area+0x50/0x50 [ 295.949346][ T8981] ? end_current_label_crit_section+0x170/0x170 [ 295.955621][ T8981] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 295.961195][ T8981] __vmalloc+0x7a/0x90 [ 295.965292][ T8981] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 295.970853][ T8981] bpf_prog_alloc_no_stats+0x47/0x440 [ 295.976253][ T8981] ? bpf_prog_alloc+0x2b/0x1b0 [ 295.981038][ T8981] bpf_prog_alloc+0x3d/0x1b0 [ 295.985650][ T8981] bpf_prog_load+0x6b8/0x16d0 [ 295.990349][ T8981] ? map_freeze+0x420/0x420 [ 295.994873][ T8981] ? __might_fault+0xaa/0x120 [ 295.999564][ T8981] ? __lock_acquire+0x7c80/0x7c80 [ 296.004604][ T8981] ? __might_fault+0xaa/0x120 [ 296.009312][ T8981] ? __might_fault+0xc6/0x120 [ 296.014003][ T8981] ? __might_fault+0xaa/0x120 [ 296.018692][ T8981] ? bpf_lsm_bpf+0x9/0x10 [ 296.023050][ T8981] ? security_bpf+0x7e/0xa0 [ 296.027568][ T8981] __sys_bpf+0x55a/0x800 [ 296.031832][ T8981] ? bpf_link_show_fdinfo+0x350/0x350 [ 296.037241][ T8981] ? lock_chain_count+0x20/0x20 [ 296.042142][ T8981] __x64_sys_bpf+0x7c/0x90 [ 296.046574][ T8981] do_syscall_64+0x55/0xb0 [ 296.051006][ T8981] ? clear_bhb_loop+0x40/0x90 [ 296.055695][ T8981] ? clear_bhb_loop+0x40/0x90 [ 296.060389][ T8981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.066727][ T8981] RIP: 0033:0x7fe3c0f8efc9 [ 296.071154][ T8981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.090776][ T8981] RSP: 002b:00007fe3c1e0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.099205][ T8981] RAX: ffffffffffffffda RBX: 00007fe3c11e5fa0 RCX: 00007fe3c0f8efc9 [ 296.107211][ T8981] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005 [ 296.115196][ T8981] RBP: 00007fe3c1e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 296.123177][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.131167][ T8981] R13: 00007fe3c11e6038 R14: 00007fe3c11e5fa0 R15: 00007ffddeda28b8 [ 296.139259][ T8981] [ 296.269790][ T8993] dvmrp1: tun_chr_ioctl cmd 99999999 [ 296.284564][ T8981] Mem-Info: [ 296.288177][ T8981] active_anon:52336 inactive_anon:0 isolated_anon:0 [ 296.288177][ T8981] active_file:18918 inactive_file:39960 isolated_file:0 [ 296.288177][ T8981] unevictable:768 dirty:113 writeback:0 [ 296.288177][ T8981] slab_reclaimable:10411 slab_unreclaimable:93236 [ 296.288177][ T8981] mapped:36718 shmem:47966 pagetables:664 [ 296.288177][ T8981] sec_pagetables:0 bounce:0 [ 296.288177][ T8981] kernel_misc_reclaimable:0 [ 296.288177][ T8981] free:1297801 free_pcp:10881 free_cma:0 [ 296.377830][ T8981] Node 0 active_anon:211544kB inactive_anon:0kB active_file:75672kB inactive_file:159640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146872kB dirty:448kB writeback:0kB shmem:192328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11456kB pagetables:2756kB sec_pagetables:0kB all_unreclaimable? no [ 296.487714][ T8981] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 296.570678][ T8991] syzkaller0: entered promiscuous mode [ 296.576236][ T8991] syzkaller0: entered allmulticast mode [ 296.706193][ T8981] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.845467][ T8981] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 296.866548][ T8981] Node 0 DMA32 free:1265228kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:216492kB inactive_anon:0kB active_file:75672kB inactive_file:158340kB unevictable:1536kB writepending:448kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:28036kB local_pcp:15748kB free_cma:0kB [ 297.040855][ T8981] lowmem_reserve[]: 0 0 1 1 1 [ 297.091541][ T8981] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1300kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 297.197346][ T8981] lowmem_reserve[]: 0 0 0 0 0 [ 297.202285][ T8981] Node 1 Normal free:3898448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13984kB local_pcp:7584kB free_cma:0kB [ 297.388342][ T8981] lowmem_reserve[]: 0 0 0 0 0 [ 297.393715][ T8981] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 297.443348][ T8981] Node 0 DMA32: 53*4kB (UM) 663*8kB (UME) 752*16kB (UME) 97*32kB (UME) 25*64kB (UM) 73*128kB (UM) 60*256kB (U) 25*512kB (UM) 15*1024kB (U) 2*2048kB (UE) 293*4096kB (UM) = 1279340kB [ 297.528469][ T8981] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 297.656609][ T8981] Node 1 Normal: 248*4kB (UE) 62*8kB (UE) 44*16kB (UE) 126*32kB (UE) 32*64kB (UME) 4*128kB (UM) 2*256kB (UE) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3898448kB [ 297.723214][ T8981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.781935][ T8981] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.842364][ T8981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.916188][ T8981] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.948434][ T8981] 98779 total pagecache pages [ 297.954132][ T8981] 0 pages in swap cache [ 297.966532][ T8981] Free swap = 124996kB [ 297.970779][ T8981] Total swap = 124996kB [ 297.987838][ T8981] 2097051 pages RAM [ 297.991734][ T8981] 0 pages HighMem/MovableOnly [ 298.008577][ T8981] 416137 pages reserved [ 298.012815][ T8981] 0 pages cma reserved [ 299.006778][ T49] wlan1: Trigger new scan to find an IBSS to join [ 299.953336][ T11] wlan1: Creating new IBSS network, BSSID fa:b1:e0:2e:55:35 [ 301.072431][ T9013] netlink: 14 bytes leftover after parsing attributes in process `syz.4.981'. [ 301.307628][ T9020] netlink: 'syz.0.982': attribute type 4 has an invalid length. [ 301.315687][ T9020] netlink: 152 bytes leftover after parsing attributes in process `syz.0.982'. [ 301.336889][ T9020] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 301.456371][ T9026] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.985'. [ 303.040689][ T9058] syzkaller0: entered promiscuous mode [ 303.066753][ T9058] syzkaller0: entered allmulticast mode [ 303.073672][ T9061] netlink: 14 bytes leftover after parsing attributes in process `syz.4.991'. [ 303.205630][ T9067] FAULT_INJECTION: forcing a failure. [ 303.205630][ T9067] name failslab, interval 1, probability 0, space 0, times 0 [ 303.222087][ T9066] netlink: 'syz.5.994': attribute type 4 has an invalid length. [ 303.238273][ T9066] netlink: 152 bytes leftover after parsing attributes in process `syz.5.994'. [ 303.269625][ T9067] CPU: 0 PID: 9067 Comm: syz.1.993 Not tainted syzkaller #0 [ 303.276978][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.287093][ T9067] Call Trace: [ 303.290423][ T9067] [ 303.293384][ T9067] dump_stack_lvl+0x16c/0x230 [ 303.298116][ T9067] ? show_regs_print_info+0x20/0x20 [ 303.303365][ T9067] ? load_image+0x3b0/0x3b0 [ 303.307902][ T9067] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 303.313947][ T9067] ? lock_chain_count+0x20/0x20 [ 303.318845][ T9067] should_fail_ex+0x39d/0x4d0 [ 303.323576][ T9067] should_failslab+0x9/0x20 [ 303.327441][ T9066] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 303.328106][ T9067] slab_pre_alloc_hook+0x59/0x310 [ 303.328200][ T9067] ? sctp_add_bind_addr+0x8c/0x360 [ 303.354263][ T9067] __kmem_cache_alloc_node+0x53/0x260 [ 303.359696][ T9067] ? sctp_add_bind_addr+0x8c/0x360 [ 303.364857][ T9067] kmalloc_trace+0x2a/0xe0 [ 303.369345][ T9067] sctp_add_bind_addr+0x8c/0x360 [ 303.374331][ T9067] sctp_copy_local_addr_list+0x30c/0x4e0 [ 303.380009][ T9067] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 303.385778][ T9067] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 303.391911][ T9067] ? sctp_copy_one_addr+0x8c/0x350 [ 303.397082][ T9067] sctp_bind_addr_copy+0xb3/0x3c0 [ 303.402163][ T9067] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 303.408536][ T9067] sctp_connect_new_asoc+0x2da/0x690 [ 303.413880][ T9067] ? __sctp_connect+0xd20/0xd20 [ 303.418788][ T9067] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 303.424391][ T9067] ? security_sctp_bind_connect+0x89/0xb0 [ 303.430157][ T9067] sctp_sendmsg+0x155c/0x27e0 [ 303.434904][ T9067] ? sctp_getsockopt+0xb60/0xb60 [ 303.440069][ T9067] ? lock_chain_count+0x20/0x20 [ 303.444984][ T9067] ? sctp_getsockopt+0xb60/0xb60 [ 303.449971][ T9067] ? inet_send_prepare+0x260/0x260 [ 303.455121][ T9067] ____sys_sendmsg+0x5bf/0x950 [ 303.459942][ T9067] ? __asan_memset+0x22/0x40 [ 303.464574][ T9067] ? __sys_sendmsg_sock+0x30/0x30 [ 303.469637][ T9067] ? __import_iovec+0x5f2/0x860 [ 303.474537][ T9067] ? import_iovec+0x73/0xa0 [ 303.479098][ T9067] ___sys_sendmsg+0x220/0x290 [ 303.483823][ T9067] ? __sys_sendmsg+0x270/0x270 [ 303.488655][ T9067] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 303.494704][ T9067] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 303.500900][ T9067] ? lockdep_hardirqs_on+0x98/0x150 [ 303.506151][ T9067] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 303.511661][ T9067] __se_sys_sendmsg+0x1a5/0x270 [ 303.516566][ T9067] ? perf_trace_preemptirq_template+0x281/0x340 [ 303.522860][ T9067] ? __x64_sys_sendmsg+0x80/0x80 [ 303.527886][ T9067] ? lockdep_hardirqs_on+0x98/0x150 [ 303.533130][ T9067] do_syscall_64+0x55/0xb0 [ 303.537601][ T9067] ? clear_bhb_loop+0x40/0x90 [ 303.542326][ T9067] ? clear_bhb_loop+0x40/0x90 [ 303.547067][ T9067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.553006][ T9067] RIP: 0033:0x7fdfd618efc9 [ 303.557474][ T9067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.577129][ T9067] RSP: 002b:00007fdfd70b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.585654][ T9067] RAX: ffffffffffffffda RBX: 00007fdfd63e5fa0 RCX: 00007fdfd618efc9 [ 303.593670][ T9067] RDX: 00000000040080c0 RSI: 00002000000003c0 RDI: 0000000000000005 [ 303.601684][ T9067] RBP: 00007fdfd70b6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.609690][ T9067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 303.617693][ T9067] R13: 00007fdfd63e6038 R14: 00007fdfd63e5fa0 R15: 00007ffd52680e28 [ 303.625718][ T9067] [ 303.864504][ T9074] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.997'. [ 304.049954][ T11] wlan1: Trigger new scan to find an IBSS to join [ 306.645793][ T9092] netlink: 'syz.1.1003': attribute type 4 has an invalid length. [ 306.655171][ T9092] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1003'. [ 306.675596][ T9092] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 306.976024][ T9111] FAULT_INJECTION: forcing a failure. [ 306.976024][ T9111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.002066][ T9111] CPU: 1 PID: 9111 Comm: syz.0.1006 Not tainted syzkaller #0 [ 307.009597][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 307.019751][ T9111] Call Trace: [ 307.023144][ T9111] [ 307.026172][ T9111] dump_stack_lvl+0x16c/0x230 [ 307.031001][ T9111] ? show_regs_print_info+0x20/0x20 [ 307.036316][ T9111] ? load_image+0x3b0/0x3b0 [ 307.040955][ T9111] ? __lock_acquire+0x7c80/0x7c80 [ 307.046135][ T9111] should_fail_ex+0x39d/0x4d0 [ 307.050965][ T9111] strncpy_from_user+0x36/0x2e0 [ 307.055971][ T9111] do_tcp_setsockopt+0x389/0x1c40 [ 307.061159][ T9111] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 307.066740][ T9111] ? __fget_files+0x28/0x4d0 [ 307.071445][ T9111] ? aa_sock_opt_perm+0x74/0x100 [ 307.076500][ T9111] ? sock_common_setsockopt+0x36/0xc0 [ 307.081975][ T9111] ? tcp_setsockopt+0x3d/0xe0 [ 307.086752][ T9111] ? tcp_enable_tx_delay+0x70/0x70 [ 307.090022][ T1325] wlan1: Trigger new scan to find an IBSS to join [ 307.091922][ T9111] ? sock_common_recvmsg+0x1b0/0x1b0 [ 307.103825][ T9111] do_sock_setsockopt+0x175/0x1a0 [ 307.108975][ T9111] ? __fdget+0x180/0x210 [ 307.113365][ T9111] __x64_sys_setsockopt+0x184/0x200 [ 307.118706][ T9111] do_syscall_64+0x55/0xb0 [ 307.123237][ T9111] ? clear_bhb_loop+0x40/0x90 [ 307.128034][ T9111] ? clear_bhb_loop+0x40/0x90 [ 307.132825][ T9111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.138838][ T9111] RIP: 0033:0x7fd00318efc9 [ 307.143358][ T9111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.163073][ T9111] RSP: 002b:00007fd0040ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 307.171615][ T9111] RAX: ffffffffffffffda RBX: 00007fd0033e5fa0 RCX: 00007fd00318efc9 [ 307.179691][ T9111] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000004 [ 307.187760][ T9111] RBP: 00007fd0040ab090 R08: 0000000000000011 R09: 0000000000000000 [ 307.195846][ T9111] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 307.203917][ T9111] R13: 00007fd0033e6038 R14: 00007fd0033e5fa0 R15: 00007ffca4b74ff8 [ 307.212140][ T9111] [ 307.250163][ T9106] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1004'. [ 307.492590][ T9127] netlink: 2759 bytes leftover after parsing attributes in process `syz.4.1009'. [ 308.015603][ T9140] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1012'. [ 308.538608][ T9147] syzkaller0: entered promiscuous mode [ 308.576989][ T9147] syzkaller0: entered allmulticast mode [ 308.602499][ T9149] netlink: 'syz.0.1015': attribute type 4 has an invalid length. [ 308.627628][ T9149] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1015'. [ 308.653989][ T9149] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 308.805906][ T9156] FAULT_INJECTION: forcing a failure. [ 308.805906][ T9156] name failslab, interval 1, probability 0, space 0, times 0 [ 308.886740][ T9156] CPU: 0 PID: 9156 Comm: syz.5.1017 Not tainted syzkaller #0 [ 308.894243][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.904372][ T9156] Call Trace: [ 308.907712][ T9156] [ 308.910702][ T9156] dump_stack_lvl+0x16c/0x230 [ 308.915475][ T9156] ? show_regs_print_info+0x20/0x20 [ 308.920794][ T9156] ? load_image+0x3b0/0x3b0 [ 308.925383][ T9156] ? __might_sleep+0xe0/0xe0 [ 308.930050][ T9156] ? __lock_acquire+0x7c80/0x7c80 [ 308.935169][ T9156] should_fail_ex+0x39d/0x4d0 [ 308.939945][ T9156] should_failslab+0x9/0x20 [ 308.944531][ T9156] slab_pre_alloc_hook+0x59/0x310 [ 308.949656][ T9156] kmem_cache_alloc+0x5a/0x2e0 [ 308.954491][ T9156] ? sk_prot_alloc+0x57/0x210 [ 308.959252][ T9156] sk_prot_alloc+0x57/0x210 [ 308.963817][ T9156] ? sk_alloc+0x24/0x360 [ 308.968160][ T9156] sk_alloc+0x3a/0x360 [ 308.972322][ T9156] inet_create+0x7a0/0xfe0 [ 308.976812][ T9156] ? inet_create+0x9c/0xfe0 [ 308.981404][ T9156] __sock_create+0x4a6/0x940 [ 308.986113][ T9156] __sys_socketpair+0x236/0x550 [ 308.991076][ T9156] __x64_sys_socketpair+0x9b/0xb0 [ 308.996189][ T9156] do_syscall_64+0x55/0xb0 [ 309.000680][ T9156] ? clear_bhb_loop+0x40/0x90 [ 309.005416][ T9156] ? clear_bhb_loop+0x40/0x90 [ 309.010179][ T9156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.016131][ T9156] RIP: 0033:0x7fe3c0f8efc9 [ 309.020582][ T9156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.040219][ T9156] RSP: 002b:00007fe3c1e0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 309.048673][ T9156] RAX: ffffffffffffffda RBX: 00007fe3c11e5fa0 RCX: 00007fe3c0f8efc9 [ 309.056686][ T9156] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000002 [ 309.064694][ T9156] RBP: 00007fe3c1e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 309.072692][ T9156] R10: 0000200000002c40 R11: 0000000000000246 R12: 0000000000000002 [ 309.080694][ T9156] R13: 00007fe3c11e6038 R14: 00007fe3c11e5fa0 R15: 00007ffddeda28b8 [ 309.088766][ T9156] [ 309.948259][ T9180] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.1024'. [ 311.012625][ T49] wlan1: Trigger new scan to find an IBSS to join [ 311.149158][ T9183] netlink: 'syz.0.1025': attribute type 1 has an invalid length. [ 311.166653][ T9183] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.1025'. [ 313.195963][ T9168] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1020'. [ 313.637926][ T9195] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 313.646105][ T9195] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1029'. [ 313.676759][ T9195] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 314.047245][ T11] wlan1: Trigger new scan to find an IBSS to join [ 314.449655][ T9212] netlink: 'syz.4.1032': attribute type 1 has an invalid length. [ 314.496078][ T9212] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.1032'. [ 314.905826][ T9225] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.1035'. [ 314.956993][ T9229] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1034'. [ 315.440480][ T9246] syzkaller0: entered promiscuous mode [ 315.446136][ T9246] syzkaller0: entered allmulticast mode [ 317.007009][ T59] wlan1: Creating new IBSS network, BSSID ee:a6:36:6c:3f:85 [ 317.334823][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.341590][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.573241][ T9271] netlink: 'syz.5.1042': attribute type 4 has an invalid length. [ 318.581319][ T9271] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1042'. [ 318.590552][ T9271] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 318.970154][ T9294] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1047'. [ 319.068420][ T9298] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.1050'. [ 320.360976][ T9324] netlink: 'syz.5.1055': attribute type 4 has an invalid length. [ 320.391560][ T9324] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1055'. [ 320.432437][ T9324] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 321.005666][ T9336] syzkaller0: entered promiscuous mode [ 321.017058][ T9336] syzkaller0: entered allmulticast mode [ 322.167973][ T9359] netlink: 2759 bytes leftover after parsing attributes in process `syz.1.1064'. [ 323.165971][ T9361] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1065'. [ 323.196389][ T9361] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 323.230104][ T9361] openvswitch: netlink: Message has 1 unknown bytes. [ 324.640827][ T9345] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1059'. [ 324.650197][ T9345] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1059'. [ 324.661460][ T9354] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1061'. [ 325.023139][ T9374] netlink: 'syz.5.1067': attribute type 4 has an invalid length. [ 325.046681][ T9374] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1067'. [ 325.066930][ T9374] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 325.465058][ T9389] netlink: 'syz.5.1073': attribute type 1 has an invalid length. [ 325.487964][ T9389] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.1073'. [ 325.520129][ T9391] netlink: 4091 bytes leftover after parsing attributes in process `syz.4.1074'. [ 325.629940][ T9395] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1075'. [ 325.727335][ T9395] netlink: 126596 bytes leftover after parsing attributes in process `syz.1.1075'. [ 326.154296][ T9401] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1077'. [ 326.397701][ T9414] syzkaller0: entered promiscuous mode [ 326.405129][ T9414] syzkaller0: entered allmulticast mode [ 329.542812][ T9423] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.1079'. [ 329.593632][ T9435] netlink: 'syz.1.1081': attribute type 4 has an invalid length. [ 329.604254][ T9435] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 330.001882][ T9455] __nla_validate_parse: 1 callbacks suppressed [ 330.001902][ T9455] netlink: 4091 bytes leftover after parsing attributes in process `syz.1.1087'. [ 330.439997][ T9466] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1088'. [ 330.975229][ T9479] syzkaller0: entered promiscuous mode [ 331.031137][ T9479] syzkaller0: entered allmulticast mode [ 331.067996][ T9482] netlink: 'syz.4.1092': attribute type 4 has an invalid length. [ 331.081802][ T9482] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1092'. [ 331.095018][ T9482] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 334.073866][ T9499] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1094'. [ 334.348718][ T9523] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.1101'. [ 334.549136][ T9533] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1102'. [ 334.600403][ T9534] netlink: 'syz.1.1103': attribute type 4 has an invalid length. [ 334.629266][ T9534] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1103'. [ 334.655936][ T9534] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 336.216101][ T9573] syzkaller0: entered promiscuous mode [ 336.248940][ T9573] syzkaller0: entered allmulticast mode [ 339.798345][ T9586] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1114'. [ 339.810859][ T9594] netlink: 'syz.1.1116': attribute type 4 has an invalid length. [ 339.818945][ T9594] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1116'. [ 339.836623][ T9594] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 340.100699][ T9606] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1120'. [ 340.566235][ T9624] netlink: 'syz.5.1124': attribute type 11 has an invalid length. [ 341.306574][ T9641] syzkaller0: entered promiscuous mode [ 341.322577][ T9641] syzkaller0: entered allmulticast mode [ 341.335297][ T9638] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1126'. [ 344.571650][ T9662] netlink: 'syz.0.1129': attribute type 4 has an invalid length. [ 344.579875][ T9662] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1129'. [ 344.589095][ T9662] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 344.960891][ T9704] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1139'. [ 346.040846][ T9717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1146'. [ 346.056636][ T9717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1146'. [ 346.076711][ T9716] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1146'. [ 346.089874][ T9716] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1146'. [ 346.772512][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.934117][ T9727] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 346.988559][ T9727] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1149'. [ 347.016586][ T9727] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 347.091279][ T59] wlan1: Trigger new scan to find an IBSS to join [ 347.150876][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.361952][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.438932][ T9735] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1151'. [ 347.538518][ T62] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.769604][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.790243][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.802973][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.819868][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.830056][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 347.837726][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.894273][ T9738] chnl_net:caif_netlink_parms(): no params data found [ 349.099073][ T9764] netlink: 'syz.4.1160': attribute type 4 has an invalid length. [ 349.119149][ T9764] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1160'. [ 349.136774][ T9764] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 349.342886][ T9768] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1163'. [ 349.441187][ T9765] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1162'. [ 349.598604][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.606001][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.638627][ T9738] bridge_slave_0: entered allmulticast mode [ 349.654672][ T9738] bridge_slave_0: entered promiscuous mode [ 349.723300][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.740259][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.751324][ T9738] bridge_slave_1: entered allmulticast mode [ 349.766685][ T9738] bridge_slave_1: entered promiscuous mode [ 349.887073][ T5795] Bluetooth: hci3: command tx timeout [ 350.698537][ T9785] netlink: 'syz.0.1168': attribute type 10 has an invalid length. [ 350.977774][ T9785] bond0: (slave wlan1): Releasing backup interface [ 351.059163][ T9785] team0: Port device wlan1 added [ 351.090079][ T9786] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1168'. [ 351.249019][ T9738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.270596][ T9794] netlink: 'syz.4.1171': attribute type 4 has an invalid length. [ 351.297958][ T9794] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1171'. [ 351.319594][ T9794] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 351.354364][ T9738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.636209][ T9738] team0: Port device team_slave_0 added [ 351.731860][ T9738] team0: Port device team_slave_1 added [ 351.752858][ T9807] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1175'. [ 351.966845][ T5795] Bluetooth: hci3: command tx timeout [ 352.701885][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.716562][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.774735][ T9738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.865407][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.905481][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.961118][ T9738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.015328][ T62] hsr_slave_0: left promiscuous mode [ 353.036635][ T62] hsr_slave_1: left promiscuous mode [ 353.048181][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.055701][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.086706][ T49] wlan1: Trigger new scan to find an IBSS to join [ 353.128960][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.146986][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.174395][ T62] bridge_slave_1: left allmulticast mode [ 353.180477][ T62] bridge_slave_1: left promiscuous mode [ 353.188261][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.217663][ T62] bridge_slave_0: left allmulticast mode [ 353.223784][ T62] bridge_slave_0: left promiscuous mode [ 353.251780][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.330108][ T62] veth1_macvtap: left promiscuous mode [ 353.335763][ T62] veth0_macvtap: left promiscuous mode [ 353.344542][ T62] veth1_vlan: left promiscuous mode [ 353.350320][ T62] veth0_vlan: left promiscuous mode [ 354.053629][ T5795] Bluetooth: hci3: command tx timeout [ 354.751578][ T62] team0 (unregistering): Port device team_slave_1 removed [ 354.826721][ T62] team0 (unregistering): Port device team_slave_0 removed [ 354.902265][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.977694][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.664079][ T62] bond0 (unregistering): Released all slaves [ 355.801967][ T9828] netlink: 'syz.0.1183': attribute type 7 has an invalid length. [ 355.817337][ T9830] netlink: 'syz.1.1182': attribute type 4 has an invalid length. [ 355.825150][ T9830] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1182'. [ 355.856673][ T9830] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 355.907002][ T9839] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1186'. [ 356.126696][ T5795] Bluetooth: hci3: command tx timeout [ 356.163985][ T9738] hsr_slave_0: entered promiscuous mode [ 356.212060][ T9738] hsr_slave_1: entered promiscuous mode [ 357.390415][ T9738] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.431190][ T9738] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.456839][ T9738] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 357.485209][ T9862] FAULT_INJECTION: forcing a failure. [ 357.485209][ T9862] name failslab, interval 1, probability 0, space 0, times 0 [ 357.499566][ T9862] CPU: 0 PID: 9862 Comm: syz.1.1193 Not tainted syzkaller #0 [ 357.507006][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.517102][ T9862] Call Trace: [ 357.520596][ T9862] [ 357.523571][ T9862] dump_stack_lvl+0x16c/0x230 [ 357.528315][ T9862] ? show_regs_print_info+0x20/0x20 [ 357.533561][ T9862] ? load_image+0x3b0/0x3b0 [ 357.538122][ T9862] ? __might_sleep+0xe0/0xe0 [ 357.542763][ T9862] ? __lock_acquire+0x7c80/0x7c80 [ 357.547838][ T9862] should_fail_ex+0x39d/0x4d0 [ 357.552565][ T9862] should_failslab+0x9/0x20 [ 357.557118][ T9862] slab_pre_alloc_hook+0x59/0x310 [ 357.562195][ T9862] kmem_cache_alloc+0x5a/0x2e0 [ 357.567000][ T9862] ? ptlock_alloc+0x20/0x70 [ 357.571520][ T9862] ptlock_alloc+0x20/0x70 [ 357.575882][ T9862] pte_alloc_one+0xce/0x540 [ 357.580402][ T9862] ? pfn_modify_allowed+0x560/0x560 [ 357.585625][ T9862] ? hugepage_vma_check+0x488/0x5a0 [ 357.590856][ T9862] handle_mm_fault+0x2e8e/0x4920 [ 357.595823][ T9862] ? handle_mm_fault+0xd1/0x4920 [ 357.600811][ T9862] ? numa_migrate_prep+0x350/0x350 [ 357.605967][ T9862] ? lock_mm_and_find_vma+0x9c/0x300 [ 357.611293][ T9862] do_user_addr_fault+0x738/0x12e0 [ 357.616457][ T9862] exc_page_fault+0x67/0x110 [ 357.621112][ T9862] asm_exc_page_fault+0x26/0x30 [ 357.626000][ T9862] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 357.631935][ T9862] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 357.651569][ T9862] RSP: 0018:ffffc90003617a10 EFLAGS: 00050216 [ 357.657658][ T9862] RAX: ffffffff841f1701 RBX: 0000000000000020 RCX: 0000000000000020 [ 357.665651][ T9862] RDX: 0000000000000001 RSI: 000000110c230000 RDI: ffff88805d2c4bc0 [ 357.673747][ T9862] RBP: ffffc90003617bb0 R08: ffff88805d2c4bdf R09: 1ffff1100ba5897b [ 357.681751][ T9862] R10: dffffc0000000000 R11: ffffed100ba5897c R12: 000000110c230020 [ 357.689734][ T9862] R13: ffff88805d2c4bc0 R14: ffff88805d2c4bc0 R15: 000000110c230000 [ 357.697741][ T9862] ? _copy_from_user+0x41/0xe0 [ 357.702532][ T9862] _copy_from_user+0x8b/0xe0 [ 357.707141][ T9862] ioctl_standard_iw_point+0x58e/0xca0 [ 357.712641][ T9862] ? cfg80211_wext_giwap+0x120/0x120 [ 357.718033][ T9862] ? iw_handler_get_iwstats+0x110/0x110 [ 357.723595][ T9862] ? wext_ioctl_dispatch+0x115/0x5f0 [ 357.728985][ T9862] ? mutex_lock_nested+0x20/0x20 [ 357.733948][ T9862] ? cfg80211_wext_giwap+0x120/0x120 [ 357.739259][ T9862] ioctl_standard_call+0xb7/0x2b0 [ 357.744333][ T9862] ? cfg80211_wext_giwap+0x120/0x120 [ 357.749638][ T9862] wext_ioctl_dispatch+0x1cb/0x5f0 [ 357.754775][ T9862] ? wext_ioctl_dispatch+0x5f0/0x5f0 [ 357.760078][ T9862] ? iw_handler_get_private+0x1f0/0x1f0 [ 357.765645][ T9862] ? wext_handle_ioctl+0x1c0/0x1c0 [ 357.770777][ T9862] ? __might_fault+0xaa/0x120 [ 357.775465][ T9862] ? __might_fault+0xc6/0x120 [ 357.780171][ T9862] ? __might_fault+0xaa/0x120 [ 357.784865][ T9862] wext_handle_ioctl+0x108/0x1c0 [ 357.789820][ T9862] ? call_commit_handler+0xf0/0xf0 [ 357.794985][ T9862] sock_ioctl+0x160/0x7a0 [ 357.799369][ T9862] ? sock_poll+0x3d0/0x3d0 [ 357.803834][ T9862] ? bpf_lsm_file_ioctl+0x9/0x10 [ 357.808785][ T9862] ? security_file_ioctl+0x80/0xa0 [ 357.813976][ T9862] ? sock_poll+0x3d0/0x3d0 [ 357.818430][ T9862] __se_sys_ioctl+0xfd/0x170 [ 357.823043][ T9862] do_syscall_64+0x55/0xb0 [ 357.827471][ T9862] ? clear_bhb_loop+0x40/0x90 [ 357.832160][ T9862] ? clear_bhb_loop+0x40/0x90 [ 357.836858][ T9862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.842789][ T9862] RIP: 0033:0x7fdfd618efc9 [ 357.847219][ T9862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.866850][ T9862] RSP: 002b:00007fdfd70b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.875280][ T9862] RAX: ffffffffffffffda RBX: 00007fdfd63e5fa0 RCX: 00007fdfd618efc9 [ 357.883264][ T9862] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000005 [ 357.891271][ T9862] RBP: 00007fdfd70b6090 R08: 0000000000000000 R09: 0000000000000000 [ 357.899260][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.907263][ T9862] R13: 00007fdfd63e6038 R14: 00007fdfd63e5fa0 R15: 00007ffd52680e28 [ 357.915286][ T9862] [ 357.943080][ T9862] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 357.955140][ T9738] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 358.058095][ T49] wlan1: Trigger new scan to find an IBSS to join [ 358.327874][ T9738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.386274][ T9738] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.411893][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.419137][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.452550][ T9879] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1196'. [ 358.492854][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.500153][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.094461][ T49] wlan1: Creating new IBSS network, BSSID b2:a0:15:77:7d:2c [ 359.192139][ T9738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.840949][ T9738] veth0_vlan: entered promiscuous mode [ 359.869606][ T9738] veth1_vlan: entered promiscuous mode [ 359.960801][ T9738] veth0_macvtap: entered promiscuous mode [ 360.001807][ T9738] veth1_macvtap: entered promiscuous mode [ 360.046047][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.067627][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.086494][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.106949][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.133127][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.152081][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.176493][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.197092][ T9738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.216606][ T9738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.238483][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.263509][ T9911] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1206'. [ 360.293414][ T9738] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.318949][ T9738] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.339142][ T9738] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.356617][ T9738] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.471985][ T9915] FAULT_INJECTION: forcing a failure. [ 360.471985][ T9915] name failslab, interval 1, probability 0, space 0, times 0 [ 360.526887][ T9915] CPU: 0 PID: 9915 Comm: syz.0.1207 Not tainted syzkaller #0 [ 360.534347][ T9915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.544448][ T9915] Call Trace: [ 360.547904][ T9915] [ 360.550867][ T9915] dump_stack_lvl+0x16c/0x230 [ 360.555597][ T9915] ? show_regs_print_info+0x20/0x20 [ 360.560848][ T9915] ? load_image+0x3b0/0x3b0 [ 360.565413][ T9915] should_fail_ex+0x39d/0x4d0 [ 360.570152][ T9915] should_failslab+0x9/0x20 [ 360.574692][ T9915] slab_pre_alloc_hook+0x59/0x310 [ 360.579762][ T9915] kmem_cache_alloc+0x5a/0x2e0 [ 360.584552][ T9915] ? __nf_conntrack_alloc+0x99/0x380 [ 360.589864][ T9915] __nf_conntrack_alloc+0x99/0x380 [ 360.595006][ T9915] init_conntrack+0x156/0xee0 [ 360.599705][ T9915] ? early_drop+0x7b0/0x7b0 [ 360.604278][ T9915] ? nf_conntrack_find_get+0x600/0x600 [ 360.609790][ T9915] ? __local_bh_enable_ip+0x12e/0x1c0 [ 360.615198][ T9915] ? __siphash_unaligned+0x232/0x3b0 [ 360.620533][ T9915] nf_conntrack_in+0xbf1/0x15c0 [ 360.625448][ T9915] ? nf_ct_pernet+0x270/0x270 [ 360.630176][ T9915] ? ipt_do_table+0x2b2/0x15f0 [ 360.634983][ T9915] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 360.640471][ T9915] ? ipv4_conntrack_local+0x123/0x200 [ 360.645873][ T9915] ? ipv4_conntrack_in+0x20/0x20 [ 360.650926][ T9915] nf_hook_slow+0xbd/0x200 [ 360.655408][ T9915] nf_hook+0x215/0x370 [ 360.659596][ T9915] ? nf_hook+0x9e/0x370 [ 360.663778][ T9915] ? __ip_local_out+0x5f0/0x5f0 [ 360.668655][ T9915] ? nf_hook+0x370/0x370 [ 360.672945][ T9915] ? ip_fast_csum+0x1ee/0x2b0 [ 360.677686][ T9915] __ip_local_out+0x4db/0x5f0 [ 360.682397][ T9915] ? nf_hook+0x370/0x370 [ 360.686703][ T9915] ip_send_skb+0x4c/0x1d0 [ 360.691089][ T9915] udp_send_skb+0xa37/0x13a0 [ 360.695751][ T9915] udp_sendmsg+0x1ae0/0x2380 [ 360.700458][ T9915] ? release_sock+0x2f/0x1c0 [ 360.705093][ T9915] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 360.710001][ T9915] ? udp_cmsg_send+0x350/0x350 [ 360.714886][ T9915] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 360.720899][ T9915] ? lock_chain_count+0x20/0x20 [ 360.725773][ T9915] ? inet_sendmsg+0x14b/0x2f0 [ 360.730480][ T9915] ? __local_bh_enable_ip+0x12e/0x1c0 [ 360.735877][ T9915] ? _local_bh_enable+0xa0/0xa0 [ 360.740764][ T9915] ? inet_sendmsg+0x14b/0x2f0 [ 360.745465][ T9915] ? inet_sendmsg+0x14b/0x2f0 [ 360.750256][ T9915] ? inet_send_prepare+0x260/0x260 [ 360.755394][ T9915] ____sys_sendmsg+0x5bf/0x950 [ 360.760199][ T9915] ? __sys_sendmsg_sock+0x30/0x30 [ 360.765253][ T9915] ? __import_iovec+0x3fa/0x860 [ 360.770162][ T9915] ? import_iovec+0x73/0xa0 [ 360.774696][ T9915] ___sys_sendmsg+0x220/0x290 [ 360.779406][ T9915] ? __sys_sendmsg+0x270/0x270 [ 360.784222][ T9915] ? __lock_acquire+0x7c80/0x7c80 [ 360.789293][ T9915] __se_sys_sendmsg+0x1a5/0x270 [ 360.794172][ T9915] ? __x64_sys_sendmsg+0x80/0x80 [ 360.799158][ T9915] ? lockdep_hardirqs_on+0x98/0x150 [ 360.804382][ T9915] do_syscall_64+0x55/0xb0 [ 360.808828][ T9915] ? clear_bhb_loop+0x40/0x90 [ 360.813524][ T9915] ? clear_bhb_loop+0x40/0x90 [ 360.818226][ T9915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.824144][ T9915] RIP: 0033:0x7fd00318efc9 [ 360.828579][ T9915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.848219][ T9915] RSP: 002b:00007fd0040ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.856661][ T9915] RAX: ffffffffffffffda RBX: 00007fd0033e5fa0 RCX: 00007fd00318efc9 [ 360.864653][ T9915] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000003 [ 360.872677][ T9915] RBP: 00007fd0040ab090 R08: 0000000000000000 R09: 0000000000000000 [ 360.880669][ T9915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.888659][ T9915] R13: 00007fd0033e6038 R14: 00007fd0033e5fa0 R15: 00007ffca4b74ff8 [ 360.896670][ T9915] [ 360.919745][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.927904][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.942831][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.976475][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.578472][ T9925] netlink: 105120 bytes leftover after parsing attributes in process `syz.6.1211'. [ 361.606923][ T9925] netlink: 'syz.6.1211': attribute type 2 has an invalid length. [ 361.622370][ T9927] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1210'. [ 362.056822][ T62] wlan1: Trigger new scan to find an IBSS to join [ 362.383331][ T9947] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1218'. [ 363.160556][ T9955] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1221'. [ 363.228034][ T9958] netlink: 'syz.0.1222': attribute type 10 has an invalid length. [ 363.279709][ T9958] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.317379][ T9958] bond0: (slave team0): Enslaving as an active interface with an up link [ 363.435341][ T9962] FAULT_INJECTION: forcing a failure. [ 363.435341][ T9962] name failslab, interval 1, probability 0, space 0, times 0 [ 363.466735][ T9962] CPU: 1 PID: 9962 Comm: syz.6.1225 Not tainted syzkaller #0 [ 363.474204][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.484325][ T9962] Call Trace: [ 363.487657][ T9962] [ 363.490642][ T9962] dump_stack_lvl+0x16c/0x230 [ 363.495396][ T9962] ? show_regs_print_info+0x20/0x20 [ 363.500657][ T9962] ? load_image+0x3b0/0x3b0 [ 363.505317][ T9962] ? __lock_acquire+0x7c80/0x7c80 [ 363.510410][ T9962] should_fail_ex+0x39d/0x4d0 [ 363.515159][ T9962] should_failslab+0x9/0x20 [ 363.519737][ T9962] slab_pre_alloc_hook+0x59/0x310 [ 363.524829][ T9962] ? sk_prot_alloc+0xe7/0x210 [ 363.529566][ T9962] ? sk_prot_alloc+0xe7/0x210 [ 363.534299][ T9962] __kmem_cache_alloc_node+0x53/0x260 [ 363.539744][ T9962] ? sk_prot_alloc+0xe7/0x210 [ 363.544481][ T9962] __kmalloc+0xa4/0x240 [ 363.548796][ T9962] sk_prot_alloc+0xe7/0x210 [ 363.553351][ T9962] ? sk_alloc+0x24/0x360 [ 363.557668][ T9962] sk_alloc+0x3a/0x360 [ 363.561794][ T9962] ? bpf_ctx_init+0x163/0x1a0 [ 363.566519][ T9962] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 363.572132][ T9962] bpf_prog_test_run_skb+0x39a/0x11c0 [ 363.577554][ T9962] ? __fget_files+0x28/0x4d0 [ 363.582216][ T9962] ? cpu_online+0x60/0x60 [ 363.586617][ T9962] bpf_prog_test_run+0x321/0x390 [ 363.591590][ T9962] __sys_bpf+0x440/0x800 [ 363.595863][ T9962] ? bpf_link_show_fdinfo+0x350/0x350 [ 363.601290][ T9962] ? lock_chain_count+0x20/0x20 [ 363.606223][ T9962] __x64_sys_bpf+0x7c/0x90 [ 363.610755][ T9962] do_syscall_64+0x55/0xb0 [ 363.615203][ T9962] ? clear_bhb_loop+0x40/0x90 [ 363.619932][ T9962] ? clear_bhb_loop+0x40/0x90 [ 363.624634][ T9962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.630566][ T9962] RIP: 0033:0x7f9098f8efc9 [ 363.635040][ T9962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.654671][ T9962] RSP: 002b:00007f9099d50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.663123][ T9962] RAX: ffffffffffffffda RBX: 00007f90991e5fa0 RCX: 00007f9098f8efc9 [ 363.671120][ T9962] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 363.679125][ T9962] RBP: 00007f9099d50090 R08: 0000000000000000 R09: 0000000000000000 [ 363.687111][ T9962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.695095][ T9962] R13: 00007f90991e6038 R14: 00007f90991e5fa0 R15: 00007ffff7d24128 [ 363.703116][ T9962] [ 364.750840][ T9988] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1231'. [ 365.111455][ T49] wlan1: Trigger new scan to find an IBSS to join [ 365.758138][ T9997] syzkaller0: entered promiscuous mode [ 365.763698][ T9997] syzkaller0: entered allmulticast mode [ 366.372809][T10003] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1238'. [ 366.413218][T10003] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1238'. [ 367.153229][T10020] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1243'. [ 368.046648][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 369.533145][T10060] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1255'. [ 370.145926][T10063] FAULT_INJECTION: forcing a failure. [ 370.145926][T10063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.176635][T10063] CPU: 0 PID: 10063 Comm: syz.1.1257 Not tainted syzkaller #0 [ 370.184167][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.194288][T10063] Call Trace: [ 370.197618][T10063] [ 370.200572][T10063] dump_stack_lvl+0x16c/0x230 [ 370.205290][T10063] ? show_regs_print_info+0x20/0x20 [ 370.210535][T10063] ? load_image+0x3b0/0x3b0 [ 370.215104][T10063] ? __might_fault+0xaa/0x120 [ 370.219827][T10063] ? __lock_acquire+0x7c80/0x7c80 [ 370.224970][T10063] should_fail_ex+0x39d/0x4d0 [ 370.229673][T10063] _copy_to_user+0x2f/0xa0 [ 370.234116][T10063] bpf_test_finish+0x24b/0x620 [ 370.238901][T10063] ? convert_skb_to___skb+0x420/0x420 [ 370.244292][T10063] ? _copy_from_user+0xa5/0xe0 [ 370.249073][T10063] ? bpf_test_init+0x134/0x150 [ 370.253905][T10063] bpf_prog_test_run_xdp+0x7fa/0xfa0 [ 370.259220][T10063] ? dev_put+0x80/0x80 [ 370.263310][T10063] ? dev_put+0x80/0x80 [ 370.267393][T10063] bpf_prog_test_run+0x321/0x390 [ 370.272365][T10063] __sys_bpf+0x440/0x800 [ 370.276712][T10063] ? bpf_link_show_fdinfo+0x350/0x350 [ 370.282100][T10063] ? lock_chain_count+0x20/0x20 [ 370.286986][T10063] __x64_sys_bpf+0x7c/0x90 [ 370.291436][T10063] do_syscall_64+0x55/0xb0 [ 370.295877][T10063] ? clear_bhb_loop+0x40/0x90 [ 370.300592][T10063] ? clear_bhb_loop+0x40/0x90 [ 370.305297][T10063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.311215][T10063] RIP: 0033:0x7fdfd618efc9 [ 370.315647][T10063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.335275][T10063] RSP: 002b:00007fdfd70b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.343708][T10063] RAX: ffffffffffffffda RBX: 00007fdfd63e5fa0 RCX: 00007fdfd618efc9 [ 370.351697][T10063] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 370.359677][T10063] RBP: 00007fdfd70b6090 R08: 0000000000000000 R09: 0000000000000000 [ 370.367657][T10063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.375645][T10063] R13: 00007fdfd63e6038 R14: 00007fdfd63e5fa0 R15: 00007ffd52680e28 [ 370.383656][T10063] [ 370.862750][T10072] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1258'. [ 371.107362][T10072] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.1258'. [ 371.133575][T10068] delete_channel: no stack [ 371.665674][T10089] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1266'. [ 372.935512][T10120] FAULT_INJECTION: forcing a failure. [ 372.935512][T10120] name failslab, interval 1, probability 0, space 0, times 0 [ 373.023769][T10120] CPU: 0 PID: 10120 Comm: syz.6.1275 Not tainted syzkaller #0 [ 373.031308][T10120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.041494][T10120] Call Trace: [ 373.044819][T10120] [ 373.047780][T10120] dump_stack_lvl+0x16c/0x230 [ 373.052509][T10120] ? trace_event_raw_event_lock+0x230/0x230 [ 373.058452][T10120] ? show_regs_print_info+0x20/0x20 [ 373.063696][T10120] ? load_image+0x3b0/0x3b0 [ 373.068260][T10120] should_fail_ex+0x39d/0x4d0 [ 373.073084][T10120] should_failslab+0x9/0x20 [ 373.077650][T10120] slab_pre_alloc_hook+0x59/0x310 [ 373.082831][T10120] kmem_cache_alloc+0x5a/0x2e0 [ 373.087641][T10120] ? __nf_conntrack_alloc+0x99/0x380 [ 373.093001][T10120] __nf_conntrack_alloc+0x99/0x380 [ 373.098187][T10120] init_conntrack+0x156/0xee0 [ 373.102919][T10120] ? early_drop+0x7b0/0x7b0 [ 373.107489][T10120] ? nf_conntrack_find_get+0x600/0x600 [ 373.113000][T10120] ? __siphash_unaligned+0x232/0x3b0 [ 373.118348][T10120] nf_conntrack_in+0xbf1/0x15c0 [ 373.123273][T10120] ? nf_ct_pernet+0x270/0x270 [ 373.127996][T10120] ? ip6t_do_table+0x1d5/0x1500 [ 373.132895][T10120] ? ip6t_alloc_initial_table+0x640/0x640 [ 373.138680][T10120] ? ipv6_defrag+0x2d6/0x3a0 [ 373.143313][T10120] ? ipv6_conntrack_in+0x20/0x20 [ 373.148296][T10120] nf_hook_slow+0xbd/0x200 [ 373.152760][T10120] __ip6_local_out+0x776/0x880 [ 373.157568][T10120] ? __ip6_local_out+0x614/0x880 [ 373.162550][T10120] ? ip6_dst_hoplimit+0x350/0x350 [ 373.167622][T10120] ? ip6_setup_cork+0xa2f/0xfe0 [ 373.172539][T10120] ? __ip6_local_out+0x880/0x880 [ 373.177518][T10120] ? read_lock_is_recursive+0x20/0x20 [ 373.182943][T10120] ? ip6_make_skb+0x3f7/0x4c0 [ 373.187662][T10120] ip6_local_out+0x2a/0x130 [ 373.192208][T10120] ? ip6_send_skb+0x10f/0x380 [ 373.196982][T10120] ip6_send_skb+0x1d5/0x380 [ 373.201544][T10120] udp_v6_send_skb+0xbbb/0x1860 [ 373.206460][T10120] udpv6_sendmsg+0x1bb8/0x22f0 [ 373.211257][T10120] ? inet_send_prepare+0x1b3/0x260 [ 373.216409][T10120] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 373.221327][T10120] ? udp_v6_early_demux+0xf60/0xf60 [ 373.226572][T10120] ? perf_trace_preemptirq_template+0xa4/0x340 [ 373.232777][T10120] ? lock_chain_count+0x20/0x20 [ 373.237659][T10120] ? _local_bh_enable+0xa0/0xa0 [ 373.242530][T10120] ? inet_send_prepare+0x1b3/0x260 [ 373.247655][T10120] ? inet_send_prepare+0x1b3/0x260 [ 373.252780][T10120] ? inet6_sendmsg+0x5f/0xd0 [ 373.257385][T10120] ? inet6_compat_ioctl+0x380/0x380 [ 373.262597][T10120] ____sys_sendmsg+0x5bf/0x950 [ 373.267385][T10120] ? __asan_memset+0x22/0x40 [ 373.271993][T10120] ? __sys_sendmsg_sock+0x30/0x30 [ 373.277068][T10120] ? __import_iovec+0x3fa/0x860 [ 373.281949][T10120] ? import_iovec+0x73/0xa0 [ 373.286477][T10120] ___sys_sendmsg+0x220/0x290 [ 373.291184][T10120] ? __sys_sendmsg+0x270/0x270 [ 373.296180][T10120] ? __lock_acquire+0x7c80/0x7c80 [ 373.301247][T10120] __se_sys_sendmsg+0x1a5/0x270 [ 373.306121][T10120] ? __x64_sys_sendmsg+0x80/0x80 [ 373.311104][T10120] ? lockdep_hardirqs_on+0x98/0x150 [ 373.316321][T10120] do_syscall_64+0x55/0xb0 [ 373.320754][T10120] ? clear_bhb_loop+0x40/0x90 [ 373.325469][T10120] ? clear_bhb_loop+0x40/0x90 [ 373.330164][T10120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.336069][T10120] RIP: 0033:0x7f9098f8efc9 [ 373.340509][T10120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.360129][T10120] RSP: 002b:00007f9099d50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.368560][T10120] RAX: ffffffffffffffda RBX: 00007f90991e5fa0 RCX: 00007f9098f8efc9 [ 373.376567][T10120] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 373.384548][T10120] RBP: 00007f9099d50090 R08: 0000000000000000 R09: 0000000000000000 [ 373.392529][T10120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.400514][T10120] R13: 00007f90991e6038 R14: 00007f90991e5fa0 R15: 00007ffff7d24128 [ 373.408520][T10120] [ 374.563375][T10139] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1281'. [ 374.611304][T10139] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 374.629390][T10139] openvswitch: netlink: Message has 1 unknown bytes. [ 374.787077][T10146] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1282'. [ 374.854855][T10144] netlink: 'syz.1.1285': attribute type 13 has an invalid length. [ 374.869077][T10144] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1285'. [ 375.012716][T10144] erspan0: refused to change device tx_queue_len [ 375.030116][T10144] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 376.530058][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.702259][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.838713][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.969464][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.300515][T10164] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1297'. [ 377.705780][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.725911][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.740393][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.756747][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.764563][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 377.776880][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.998003][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.022233][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.046777][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.055846][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.067012][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 378.074466][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.188130][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.198424][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.206349][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.215607][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.230444][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 378.238254][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.610813][T10166] chnl_net:caif_netlink_parms(): no params data found [ 378.776684][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.783171][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.878674][ T11] hsr_slave_0: left promiscuous mode [ 378.885778][ T11] hsr_slave_1: left promiscuous mode [ 378.896015][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.906214][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.920751][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.931112][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.942826][ T11] bridge_slave_1: left allmulticast mode [ 378.950043][ T11] bridge_slave_1: left promiscuous mode [ 378.955884][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.024663][ T11] veth1_macvtap: left promiscuous mode [ 379.032284][ T11] veth0_macvtap: left promiscuous mode [ 379.042955][ T11] veth1_vlan: left promiscuous mode [ 379.049781][ T11] veth0_vlan: left promiscuous mode [ 379.770294][ T11] team0 (unregistering): Port device team_slave_1 removed [ 379.808914][ T5795] Bluetooth: hci1: command tx timeout [ 379.825793][ T11] team0 (unregistering): Port device team_slave_0 removed [ 379.865967][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.911329][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.133102][ T5795] Bluetooth: hci2: command tx timeout [ 380.288794][ T5795] Bluetooth: hci3: command tx timeout [ 380.326722][ T11] bond0 (unregistering): Released all slaves [ 380.465364][T10166] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.472655][T10166] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.480050][T10166] bridge_slave_0: entered allmulticast mode [ 380.487663][T10166] bridge_slave_0: entered promiscuous mode [ 380.504122][T10166] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.512261][T10166] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.519947][T10166] bridge_slave_1: entered allmulticast mode [ 380.527509][T10166] bridge_slave_1: entered promiscuous mode [ 380.593464][T10166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.612393][T10166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.642983][T10168] chnl_net:caif_netlink_parms(): no params data found [ 380.698899][T10166] team0: Port device team_slave_0 added [ 380.713857][T10166] team0: Port device team_slave_1 added [ 380.830358][T10166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.837555][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.873499][T10166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.900636][T10166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.907956][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.934134][T10166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.978205][T10168] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.985548][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.992971][T10168] bridge_slave_0: entered allmulticast mode [ 381.000243][T10168] bridge_slave_0: entered promiscuous mode [ 381.014298][T10170] chnl_net:caif_netlink_parms(): no params data found [ 381.039360][T10168] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.048090][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.055313][T10168] bridge_slave_1: entered allmulticast mode [ 381.062655][T10168] bridge_slave_1: entered promiscuous mode [ 381.133690][T10166] hsr_slave_0: entered promiscuous mode [ 381.140469][T10166] hsr_slave_1: entered promiscuous mode [ 381.147694][T10166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.155274][T10166] Cannot create hsr debugfs directory [ 381.185112][T10168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.227657][T10168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.302424][T10168] team0: Port device team_slave_0 added [ 381.316403][T10168] team0: Port device team_slave_1 added [ 381.372236][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.379778][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.388320][T10170] bridge_slave_0: entered allmulticast mode [ 381.395319][T10170] bridge_slave_0: entered promiscuous mode [ 381.414834][T10168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.421926][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.448568][T10168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.461766][T10168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.468848][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.495435][T10168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.510763][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.518063][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.525288][T10170] bridge_slave_1: entered allmulticast mode [ 381.532774][T10170] bridge_slave_1: entered promiscuous mode [ 381.571824][ T3474] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.654998][T10170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.683221][ T3474] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.716331][T10170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.767458][T10168] hsr_slave_0: entered promiscuous mode [ 381.774085][T10168] hsr_slave_1: entered promiscuous mode [ 381.781047][T10168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.788733][T10168] Cannot create hsr debugfs directory [ 381.812492][T10170] team0: Port device team_slave_0 added [ 381.825198][T10170] team0: Port device team_slave_1 added [ 381.844054][ T3474] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.890990][ T5795] Bluetooth: hci1: command tx timeout [ 381.960309][ T3474] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.977741][T10170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.984732][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.015370][T10170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.028777][T10170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.035760][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.062980][T10170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.207266][ T5795] Bluetooth: hci2: command tx timeout [ 382.212837][T10170] hsr_slave_0: entered promiscuous mode [ 382.219472][T10170] hsr_slave_1: entered promiscuous mode [ 382.225631][T10170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.233745][T10170] Cannot create hsr debugfs directory [ 382.350542][ T3474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.366585][ T5795] Bluetooth: hci3: command tx timeout [ 382.388218][T10166] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 382.426179][T10166] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 382.437636][T10166] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 382.462005][ T3474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.497539][T10166] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 382.526286][ T3474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.607347][ T3474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.674547][T10168] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 382.684583][T10168] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 382.696364][T10168] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 382.739598][T10168] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 382.978609][T10170] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 383.057264][T10170] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 383.073372][T10170] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 383.101604][T10170] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 383.242996][T10166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.327123][T10168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.345824][T10166] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.394133][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.401352][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.431647][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.438866][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.507341][T10168] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.576074][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.583392][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.602435][T10170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.619963][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.627201][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.704766][T10170] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.774196][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.781447][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.869108][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.876300][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.974861][ T5795] Bluetooth: hci1: command tx timeout [ 384.209167][ T3474] [ 384.211559][ T3474] ====================================================== [ 384.218695][ T3474] WARNING: possible circular locking dependency detected [ 384.225747][ T3474] syzkaller #0 Not tainted [ 384.230207][ T3474] ------------------------------------------------------ [ 384.237258][ T3474] kworker/u4:8/3474 is trying to acquire lock: [ 384.243433][ T3474] ffff8880769b8d00 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 384.253065][ T3474] [ 384.253065][ T3474] but task is already holding lock: [ 384.260451][ T3474] ffff888021f70768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 384.270856][ T3474] [ 384.270856][ T3474] which lock already depends on the new lock. [ 384.270856][ T3474] [ 384.281288][ T3474] [ 384.281288][ T3474] the existing dependency chain (in reverse order) is: [ 384.290325][ T3474] [ 384.290325][ T3474] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 384.298075][ T3474] __mutex_lock+0x129/0xcc0 [ 384.303119][ T3474] ieee80211_open+0x144/0x200 [ 384.308338][ T3474] __dev_open+0x2bc/0x430 [ 384.313219][ T3474] dev_open+0xab/0x170 [ 384.317854][ T3474] team_add_slave+0xae7/0x2660 [ 384.323163][ T3474] do_setlink+0xe14/0x3fb0 [ 384.328113][ T3474] rtnl_newlink+0x175b/0x2020 [ 384.333420][ T3474] rtnetlink_rcv_msg+0x7c7/0xf10 [ 384.338890][ T3474] netlink_rcv_skb+0x216/0x480 [ 384.344216][ T3474] netlink_unicast+0x751/0x8d0 [ 384.349512][ T3474] netlink_sendmsg+0x8c1/0xbe0 [ 384.354835][ T3474] ____sys_sendmsg+0x5bf/0x950 [ 384.360168][ T3474] ___sys_sendmsg+0x220/0x290 [ 384.365382][ T3474] __se_sys_sendmsg+0x1a5/0x270 [ 384.370793][ T3474] do_syscall_64+0x55/0xb0 [ 384.375757][ T3474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.382275][ T3474] [ 384.382275][ T3474] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 384.390473][ T3474] __lock_acquire+0x2ddb/0x7c80 [ 384.395863][ T3474] lock_acquire+0x197/0x410 [ 384.400908][ T3474] __mutex_lock+0x129/0xcc0 [ 384.406059][ T3474] team_del_slave+0x32/0x1c0 [ 384.411180][ T3474] team_device_event+0x28d/0xa20 [ 384.416655][ T3474] notifier_call_chain+0x197/0x390 [ 384.422385][ T3474] unregister_netdevice_many_notify+0xf36/0x1810 [ 384.429250][ T3474] unregister_netdevice_queue+0x324/0x360 [ 384.435679][ T3474] _cfg80211_unregister_wdev+0x16b/0x580 [ 384.441958][ T3474] ieee80211_remove_interfaces+0x496/0x680 [ 384.448303][ T3474] ieee80211_unregister_hw+0x5d/0x2a0 [ 384.454214][ T3474] mac80211_hwsim_del_radio+0x274/0x450 [ 384.460289][ T3474] hwsim_exit_net+0x585/0x640 [ 384.465587][ T3474] cleanup_net+0x6f4/0xb90 [ 384.470539][ T3474] process_scheduled_works+0xa45/0x15b0 [ 384.476619][ T3474] worker_thread+0xa55/0xfc0 [ 384.481762][ T3474] kthread+0x2fa/0x390 [ 384.486373][ T3474] ret_from_fork+0x48/0x80 [ 384.491330][ T3474] ret_from_fork_asm+0x11/0x20 [ 384.496636][ T3474] [ 384.496636][ T3474] other info that might help us debug this: [ 384.496636][ T3474] [ 384.506874][ T3474] Possible unsafe locking scenario: [ 384.506874][ T3474] [ 384.514329][ T3474] CPU0 CPU1 [ 384.519700][ T3474] ---- ---- [ 384.525067][ T3474] lock(&rdev->wiphy.mtx); [ 384.529674][ T3474] lock(team->team_lock_key#3); [ 384.537144][ T3474] lock(&rdev->wiphy.mtx); [ 384.544195][ T3474] lock(team->team_lock_key#3); [ 384.549153][ T3474] [ 384.549153][ T3474] *** DEADLOCK *** [ 384.549153][ T3474] [ 384.557390][ T3474] 5 locks held by kworker/u4:8/3474: [ 384.562691][ T3474] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 384.573673][ T3474] #1: ffffc9000ccf7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 384.584232][ T3474] #2: ffffffff8dfaee10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 384.593990][ T3474] #3: ffffffff8dfbbc48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 384.603876][ T3474] #4: ffff888021f70768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 384.614707][ T3474] [ 384.614707][ T3474] stack backtrace: [ 384.620607][ T3474] CPU: 0 PID: 3474 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 384.628160][ T3474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.638237][ T3474] Workqueue: netns cleanup_net [ 384.643034][ T3474] Call Trace: [ 384.646329][ T3474] [ 384.649283][ T3474] dump_stack_lvl+0x16c/0x230 [ 384.654323][ T3474] ? load_image+0x3b0/0x3b0 [ 384.658849][ T3474] ? show_regs_print_info+0x20/0x20 [ 384.664077][ T3474] ? print_circular_bug+0x12b/0x1a0 [ 384.669304][ T3474] check_noncircular+0x2bd/0x3c0 [ 384.674277][ T3474] ? print_deadlock_bug+0x5d0/0x5d0 [ 384.679523][ T3474] ? lockdep_lock+0xe0/0x220 [ 384.684140][ T3474] ? __lock_acquire+0x1334/0x7c80 [ 384.689187][ T3474] ? _find_first_zero_bit+0xd3/0x100 [ 384.694500][ T3474] __lock_acquire+0x2ddb/0x7c80 [ 384.699383][ T3474] ? verify_lock_unused+0x140/0x140 [ 384.704597][ T3474] ? verify_lock_unused+0x140/0x140 [ 384.709813][ T3474] lock_acquire+0x197/0x410 [ 384.714326][ T3474] ? team_del_slave+0x32/0x1c0 [ 384.719103][ T3474] ? __might_sleep+0xe0/0xe0 [ 384.723708][ T3474] ? read_lock_is_recursive+0x20/0x20 [ 384.729092][ T3474] __mutex_lock+0x129/0xcc0 [ 384.733616][ T3474] ? team_del_slave+0x32/0x1c0 [ 384.738395][ T3474] ? __lock_acquire+0x7c80/0x7c80 [ 384.743422][ T3474] ? rcu_is_watching+0x15/0xb0 [ 384.748193][ T3474] ? trace_contention_end+0x39/0xe0 [ 384.753404][ T3474] ? __mutex_lock+0x304/0xcc0 [ 384.758119][ T3474] ? team_del_slave+0x32/0x1c0 [ 384.763063][ T3474] ? mutex_lock_nested+0x20/0x20 [ 384.768020][ T3474] ? bond_netdev_event+0xe1/0xef0 [ 384.773053][ T3474] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 384.778706][ T3474] ? bond_ipsec_offload_ok+0x410/0x410 [ 384.784173][ T3474] team_del_slave+0x32/0x1c0 [ 384.788773][ T3474] team_device_event+0x28d/0xa20 [ 384.793733][ T3474] notifier_call_chain+0x197/0x390 [ 384.799042][ T3474] unregister_netdevice_many_notify+0xf36/0x1810 [ 384.805413][ T3474] ? lock_chain_count+0x20/0x20 [ 384.810292][ T3474] ? unregister_netdevice_many+0x20/0x20 [ 384.815947][ T3474] ? kernfs_remove_by_name_ns+0x117/0x150 [ 384.821685][ T3474] ? __lock_acquire+0x7c80/0x7c80 [ 384.826725][ T3474] unregister_netdevice_queue+0x324/0x360 [ 384.832460][ T3474] ? list_netdevice+0x730/0x730 [ 384.837329][ T3474] ? kernfs_remove_by_name_ns+0x117/0x150 [ 384.843074][ T3474] _cfg80211_unregister_wdev+0x16b/0x580 [ 384.848750][ T3474] ieee80211_remove_interfaces+0x496/0x680 [ 384.854924][ T3474] ? ieee80211_do_stop+0x1db0/0x1db0 [ 384.860241][ T3474] ? rcu_is_watching+0x15/0xb0 [ 384.865024][ T3474] ieee80211_unregister_hw+0x5d/0x2a0 [ 384.870421][ T3474] mac80211_hwsim_del_radio+0x274/0x450 [ 384.875982][ T3474] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 384.881540][ T3474] hwsim_exit_net+0x585/0x640 [ 384.886232][ T3474] ? hwsim_init_net+0x90/0x90 [ 384.890921][ T3474] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 384.896736][ T3474] cleanup_net+0x6f4/0xb90 [ 384.901253][ T3474] ? ops_free_list+0x3b0/0x3b0 [ 384.906029][ T3474] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.911235][ T3474] ? process_scheduled_works+0x957/0x15b0 [ 384.917036][ T3474] ? process_scheduled_works+0x957/0x15b0 [ 384.922855][ T3474] process_scheduled_works+0xa45/0x15b0 [ 384.928425][ T3474] ? assign_work+0x400/0x400 [ 384.933027][ T3474] ? assign_work+0x39e/0x400 [ 384.937628][ T3474] worker_thread+0xa55/0xfc0 [ 384.942239][ T3474] kthread+0x2fa/0x390 [ 384.946334][ T3474] ? pr_cont_work+0x560/0x560 [ 384.951023][ T3474] ? kthread_blkcg+0xd0/0xd0 [ 384.955638][ T3474] ret_from_fork+0x48/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 384.960069][ T3474] ? kthread_blkcg+0xd0/0xd0 [ 384.964666][ T3474] ret_from_fork_asm+0x11/0x20 [ 384.969450][ T3474] [ 384.978393][ T5795] Bluetooth: hci2: command tx timeout [ 384.983893][ T5795] Bluetooth: hci3: command tx timeout [ 384.984897][ T3474] team0: Port device wlan1 removed [ 385.021409][T10166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.729009][ T3474] hsr_slave_0: left promiscuous mode [ 385.749539][ T3474] hsr_slave_1: left promiscuous mode [ 385.765493][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.773574][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.784027][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.812219][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.825577][ T3474] bridge_slave_1: left allmulticast mode [ 385.831371][ T3474] bridge_slave_1: left promiscuous mode [ 385.838132][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.854036][ T3474] bridge_slave_0: left allmulticast mode [ 385.860866][ T3474] bridge_slave_0: left promiscuous mode [ 385.866660][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.882879][ T3474] hsr_slave_0: left promiscuous mode [ 385.889205][ T3474] hsr_slave_1: left promiscuous mode [ 385.895067][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.902991][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.910909][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.918514][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.926241][ T3474] bridge_slave_1: left allmulticast mode [ 385.932068][ T3474] bridge_slave_1: left promiscuous mode [ 385.937932][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.946242][ T3474] bridge_slave_0: left allmulticast mode [ 385.951994][ T3474] bridge_slave_0: left promiscuous mode [ 385.957831][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.971311][ T3474] veth1_macvtap: left promiscuous mode [ 385.977534][ T3474] veth0_macvtap: left promiscuous mode [ 385.983066][ T3474] veth1_vlan: left promiscuous mode [ 385.988552][ T3474] veth0_vlan: left promiscuous mode [ 385.995353][ T3474] veth1_macvtap: left promiscuous mode [ 386.000992][ T3474] veth0_macvtap: left promiscuous mode [ 386.278775][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 386.309940][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 386.322576][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.339099][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.434911][ T3474] bond0 (unregistering): Released all slaves [ 386.631284][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 386.663783][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 386.690499][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.718934][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.907039][ T3474] bond0 (unregistering): (slave team0): Releasing backup interface [ 386.931013][ T3474] bond0 (unregistering): Released all slaves [ 389.120429][ T3474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.181831][ T3474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.232824][ T3474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.272515][ T3474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.203027][ T3474] hsr_slave_0: left promiscuous mode [ 390.209497][ T3474] hsr_slave_1: left promiscuous mode [ 390.215304][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.225655][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.233659][ T3474] bridge_slave_1: left allmulticast mode [ 390.239389][ T3474] bridge_slave_1: left promiscuous mode [ 390.245193][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.254075][ T3474] bridge_slave_0: left allmulticast mode [ 390.260009][ T3474] bridge_slave_0: left promiscuous mode [ 390.265798][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.278006][ T3474] hsr_slave_0: left promiscuous mode [ 390.283816][ T3474] hsr_slave_1: left promiscuous mode [ 390.290135][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.297846][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.305483][ T3474] bridge_slave_1: left allmulticast mode [ 390.311940][ T3474] bridge_slave_1: left promiscuous mode [ 390.317754][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.326340][ T3474] bridge_slave_0: left allmulticast mode [ 390.332275][ T3474] bridge_slave_0: left promiscuous mode [ 390.338361][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.350666][ T3474] hsr_slave_0: left promiscuous mode [ 390.357208][ T3474] hsr_slave_1: left promiscuous mode [ 390.362990][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.370973][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.378758][ T3474] bridge_slave_1: left allmulticast mode [ 390.384402][ T3474] bridge_slave_1: left promiscuous mode [ 390.391068][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.399934][ T3474] bridge_slave_0: left allmulticast mode [ 390.405587][ T3474] bridge_slave_0: left promiscuous mode [ 390.411539][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.425685][ T3474] hsr_slave_0: left promiscuous mode [ 390.432057][ T3474] hsr_slave_1: left promiscuous mode [ 390.438064][ T3474] bridge_slave_1: left allmulticast mode [ 390.443811][ T3474] bridge_slave_1: left promiscuous mode [ 390.449880][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.458448][ T3474] bridge_slave_0: left allmulticast mode [ 390.464094][ T3474] bridge_slave_0: left promiscuous mode [ 390.469911][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.484158][ T3474] veth1_macvtap: left promiscuous mode [ 390.490203][ T3474] veth0_macvtap: left promiscuous mode [ 390.495745][ T3474] veth1_vlan: left promiscuous mode [ 390.778658][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 390.806176][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 390.835952][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.851342][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.927805][ T3474] bond0 (unregistering): Released all slaves [ 391.082835][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 391.109236][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 391.135968][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.165733][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.235963][ T3474] bond0 (unregistering): Released all slaves [ 391.427312][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 391.452252][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 391.481873][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.516179][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.608227][ T3474] bond0 (unregistering): Released all slaves [ 391.951545][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.980960][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.031080][ T3474] bond0 (unregistering): Released all slaves