last executing test programs: 1m42.925087066s ago: executing program 3 (id=1375): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4000004, @local, 0x6, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="03", 0x1}], 0x1}, 0x2400c041) (fail_nth: 3) 1m42.313657755s ago: executing program 3 (id=1378): bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000009000000010000000200000000000000", @ANYBLOB="00000000000000000000000000000000000010a58c6e1562b77c2bd5bc7fd53d0b3939eeef13c64cb5c67f", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240), 0xc, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) close(r4) socketpair(0x28, 0x800, 0x4, &(0x7f00000000c0)) close(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2d, &(0x7f0000000040), 0x10) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x23, &(0x7f0000000000), 0x8) 1m41.957236763s ago: executing program 3 (id=1380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000c435d19abd0000000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r1}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000021000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x0, 0x0) r4 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0x1000000}}, @ip_tos_u8={{0x14, 0x29, 0x8}}, @ip_pktinfo={{0x9, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000e0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) 1m41.655369468s ago: executing program 3 (id=1385): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x46, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2d, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@generic={0x6, 0x9, 0x4, 0x2, 0x80000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xb699ae7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query, @jmp={0x5, 0x1, 0x0, 0x9, 0x9, 0x8, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x80000001, 0x11, &(0x7f0000000200)=""/17, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000800)=r3) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0xf, 0x1, 0xfffff028}, {0x6, 0x5, 0x4, 0x5}]}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000010e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x40, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000008c0)=r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8982, &(0x7f0000000080)) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000840)) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, @perf_bp={&(0x7f0000000540)}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB="070000e6aea42984090000008f9d94f4d49416d69cb297b97d628255e3f6e109b52d52cb9a2301cfcdc72cd1e727cd8444e4ca64a9e5914275dc8b90a74961bebf9849", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000001640)=@xdp={0x2c, 0xd, r9, 0x11}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000900)="8b", 0x1}], 0x1}, 0x80480c4) 1m41.171871177s ago: executing program 3 (id=1397): socket$kcm(0x10, 0x2, 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000001000)=0x8) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="2b68756765746c62202d706572665f6576456e74202d706572665f6576656e74202b6d656d6f7279202d667265657a6572202d72646d6120b820965dffeae9500df13f087f37a5bf4dfc3263d7b582a2644306af9f139efd43a67a049006792da92fb4eae6afa921bd47d7b9621ee2a86581d23f449009d5"], 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa00f8ffffff00710800"/24], &(0x7f0000000480)='GPL\x00'}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0000000000000000000040fc00", @ANYRES64=r4, @ANYRES64=r3, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB='\x00\a\x00'/15], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) r6 = socket$kcm(0x28, 0x5, 0x0) close(r6) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) socket$kcm(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="7123069bf516a810795ef87b649c0472f8f6d2148dcf195768fc1bd21634595a15634c6644a2a1b31a93af205a1e4d65b950ad49070000000000000000005f3f6c196be3025c91a9eeafe9854fd2135010a088136dd6cdd83ff246d33ebcc112f3979230321f42a7bcb55906d43b6508869b937fbc55c6b6840d07a3d7391fb7baf8a50db707ebe523f6586f", &(0x7f0000000080), 0x101, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r7, &(0x7f0000001b80), 0x0}, 0x20) 1m39.172012877s ago: executing program 3 (id=1407): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x408) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c0000001400", 0x6}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x408) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c0000001400", 0x6}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) 1m23.57492675s ago: executing program 32 (id=1407): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x408) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c0000001400", 0x6}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x408) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c0000001400", 0x6}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) 50.108383264s ago: executing program 4 (id=1640): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x2d) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x23}, 0x4040843) setsockopt$sock_attach_bpf(r5, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) 49.996994183s ago: executing program 1 (id=1641): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) socketpair(0xf, 0x1, 0xd, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x35, &(0x7f0000000040), 0x13) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) 49.91619043s ago: executing program 1 (id=1643): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) 49.765058381s ago: executing program 1 (id=1644): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200cb69ac14"}) 49.585794416s ago: executing program 1 (id=1645): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0x14, 0x0, &(0x7f0000000280)="61dfb0020866c667fc53b926558305608ffc4503", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xefeb, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, 0x0, 0xe}, 0x0) close(r5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x4, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000ae532300"/31], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x2af, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) 49.488046504s ago: executing program 0 (id=1646): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200cb697efb"}) (fail_nth: 9) 49.368066903s ago: executing program 0 (id=1647): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000180)={r1}, 0x5) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r7, r6, 0x4}, 0x10) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) recvmsg(r8, &(0x7f00000002c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/90, 0x5a}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/225, 0xe1}], 0x4, &(0x7f00000025c0)=""/252, 0xfc}, 0x40010000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r10, &(0x7f0000001500), &(0x7f0000000200)=""/194}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1f, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r4, @ANYRES32=r9, @ANYRES32=r5, @ANYBLOB="000000000000000025000100fcffffffb7080000000000047b8af8ff00000000b5080000fcffff7f7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) 49.016284601s ago: executing program 4 (id=1650): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000000)="e5974f3cf1b1c515", 0x8}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @empty}}}], 0x20}, 0x0) (fail_nth: 9) 48.828050717s ago: executing program 0 (id=1651): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xaa56}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r2, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="0765c8723e053852c041b56cf10bd725d808ecb57311b6005ac46ec989bca21bb70b54e4020fb0a03da700b726dc803dcc1b1f83d204059e17a687de2e061891025d0b302474e1c6e8d679974e8ec67738589185a9e00fa8446ad6967e4607dbd32e4784aee5010c3bbe9f35f47c30161a2579fa1d134bbc78741d618c4eb96326138fdeb1f8cb29add7ab3fe59c949948c50029cd4b90835316f2d69f06d42a13423b22081de1bbade12abfd98ff65436ed19cfb876d12eeee1c3054d222efc2ce2a4a11d6b69bf13023c6dac67f0a4b358810857", 0xd5}, {&(0x7f0000000140)="de7e9d56212632f6d8a81512a29ede64d048efc907624f48d5503d90c955421017a478018a7248fe6b8600744c0a0f", 0x2f}, {&(0x7f0000000380)="7a0578a168c5d87e2a5b0f70143380f7ad6f7c7910efd8f1a5e7", 0x1a}, {&(0x7f00000003c0)="24b44325fc21adc0c5801e76a778570e6a1bd51e24e7d9201326135f3c5c695232f02c9dd720ec", 0x27}], 0x4, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1ff}, @timestamp_prespec={0x44, 0x1c, 0x2f, 0x3, 0x7, [{@empty, 0x9}, {@private=0xa010100, 0x38}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0xd0}, 0x4) close(r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xaa56}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r2, 0x58, &(0x7f0000000440)}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="0765c8723e053852c041b56cf10bd725d808ecb57311b6005ac46ec989bca21bb70b54e4020fb0a03da700b726dc803dcc1b1f83d204059e17a687de2e061891025d0b302474e1c6e8d679974e8ec67738589185a9e00fa8446ad6967e4607dbd32e4784aee5010c3bbe9f35f47c30161a2579fa1d134bbc78741d618c4eb96326138fdeb1f8cb29add7ab3fe59c949948c50029cd4b90835316f2d69f06d42a13423b22081de1bbade12abfd98ff65436ed19cfb876d12eeee1c3054d222efc2ce2a4a11d6b69bf13023c6dac67f0a4b358810857", 0xd5}, {&(0x7f0000000140)="de7e9d56212632f6d8a81512a29ede64d048efc907624f48d5503d90c955421017a478018a7248fe6b8600744c0a0f", 0x2f}, {&(0x7f0000000380)="7a0578a168c5d87e2a5b0f70143380f7ad6f7c7910efd8f1a5e7", 0x1a}, {&(0x7f00000003c0)="24b44325fc21adc0c5801e76a778570e6a1bd51e24e7d9201326135f3c5c695232f02c9dd720ec", 0x27}], 0x4, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1ff}, @timestamp_prespec={0x44, 0x1c, 0x2f, 0x3, 0x7, [{@empty, 0x9}, {@private=0xa010100, 0x38}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0xd0}, 0x4) (async) close(r3) (async) 48.643067582s ago: executing program 4 (id=1653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000852000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0x1e, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21) 48.397129251s ago: executing program 0 (id=1655): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x1, @mcast1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="ffa8ddf4", 0x4}], 0x1}, 0x40810) 48.376870353s ago: executing program 4 (id=1656): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)) 48.16267977s ago: executing program 1 (id=1658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x800000}]}, &(0x7f0000000080)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x10}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c000000000095000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[], 0x20) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffff7ffffffff, r6, 0x0) socket$kcm(0x2b, 0x1, 0x0) 48.128096942s ago: executing program 0 (id=1659): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000340)='(\x00\x00\x00\x13\x825@\xa2V\xd5\x9a\xbf\xbb\xfcX\x86\xb2\xa8\xcd\x12\x93\xabe`\xac\x05*BFg}\xa9\xd0\x06\xd30\xacJ(\x11;\xf3O-\x82x\xb6\x04z-\xd5\x04l\f\"\xde\xd3I=\xe0\xdd\x1c\xee\xbf}\x91n\x81\xdb\xd0f\x17\xc4y}\xb8q\xf2\x11\xe0\xb4S\x9b\xaf\xa9\xfeP\x01\xc6\x90:\xff\x945%Q\xc7\x8eN\xd3O\x7f\xaf=\x8aE\xd3h\xbc\x0f\xe1\".\xe5bX/\x15\xe7_\xf7K\xc8Q\x92\xbd\xbc\xc8\xb8\xf9\xbb\xed~\xdb/\xab\x18\x1a6\xc1\x94\x06y,\xf1N\xea\x8c\x8f\x88\xd4\xc6\xe3{\x9e\x9a!\xf65mH\xf1\'\xc6\xdf~O\f9\xb2_\xa7\xb1\x1ba\xaa\x83Si\xea\xf3(\xe4\x11;\x99\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04tgRX\xf5I\xf9P\xc0d\xcf\xf7\xf0\xd0\x80\x9eq7\xc96\xa5\xd8\x9d') 48.080646546s ago: executing program 4 (id=1660): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffffffffe52, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181002e00000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x2004c044) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x48) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4) sendmsg$inet(r2, &(0x7f0000000e40)={&(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1}, 0x4000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000089c21fb905113222e7de5cca42413743db1b1356aa85404fc8bed9e00c2dd40a5e3f004f1154f31439a18d5a65d2600ec806d2bbb5dbb225993f28cfcdd0b1a54d2672ccab33c90d2ee6d4ef1ccc2837619eefa51ee22df047f1c86d8c8eaa522d2048343f3d38e9a61d5285a73129a369eed3eaf3046d8b678ab786d4b860160048c4d6fb1976d407bb83550d4585f24c4df41e7064df1829ccb16c56e176973d8e080a1e3e1f9089eb7050fd0e03a261a3e183f5e0f16496d1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000001f000000000000007e000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000080080000001811b9e9", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f800000085000000820000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000002500060000009500000000000000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r9) r10 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r10, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)={r2}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000004c0)=r6, 0x4) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r13, &(0x7f0000000000)="38d68b62", 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x20, 0x14, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0xac7cb1423da78721, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x1b9d, 0x2, &(0x7f0000000580)=""/2, 0x41000, 0x29, '\x00', 0x0, @fallback=0x1e, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[r13, r3, r1, r1, r1, r3, r1, r4, r3, r3], &(0x7f00000007c0)=[{0x3, 0x3, 0xb, 0xb}], 0x10, 0xd}, 0x94) sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000001000080000000009a7a000036015e2e0d58b909332a743d1be2f25096f0a484957f5b5a03ba475aa04e54988ad6f04ea61e36de8fbc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r15 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r15}, 0x8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r14, &(0x7f0000000680)="174b54faa65feb9672536c567040c91e5816ba7fc3ed19e2f2e1065a4fe96b5bc287238d8aea49ba0336677a49bfb1c2bfd3f50c746339df9e8e63b593462f9fb050407dcbae448ee0a072e80b1a93b71016cb2d2b7741a17b3398fdaa92d3c9752a11194ee84d909ca3664f9fd0b69e25705ae313a7f4f593d90f7116b6dd4ef112f0c306897090c3ebb6cb5c3a3a33eec218882c66c6161cf4ecdf2a53dd9e3464b8204ebdcbffffffff94361f338cd9", &(0x7f0000000540)=""/14, 0x2}, 0x20) 47.53721393s ago: executing program 1 (id=1661): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) socket$kcm(0x2, 0x1, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r1, 0x0, 0x3, 0x3}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000000), 0xff7b) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x240400c0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) 47.53431379s ago: executing program 0 (id=1662): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) 47.220136795s ago: executing program 33 (id=1661): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) socket$kcm(0x2, 0x1, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r1, 0x0, 0x3, 0x3}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000000), 0xff7b) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x240400c0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) 47.019123002s ago: executing program 34 (id=1662): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) 47.011988842s ago: executing program 4 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd75}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) (fail_nth: 9) 46.937432038s ago: executing program 35 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd75}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) (fail_nth: 9) 2.583543453s ago: executing program 2 (id=1916): socket$kcm(0x2, 0x3, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) (fail_nth: 8) 2.142868768s ago: executing program 7 (id=1917): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xfffffffffffffe4e, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) write$cgroup_subtree(r5, &(0x7f00000018c0)=ANY=[], 0x33) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private1}, 0x80, 0x0}, 0x20040800) 2.085166693s ago: executing program 2 (id=1918): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 1.924234026s ago: executing program 5 (id=1919): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000faffffff001800000000000000840000000700000062"], 0x38}, 0x41) syz_open_procfs$namespace(r0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x146) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000380)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000640)="dfa4d98a053510bd8b512f30196ccf12c3d9b42e343fb7bf239e265ecfc5792bface7e5adf4469b4f43d7b6e4f3f604b4198777a561645be6d457459f4148bfce2f883b1067ed3448df917124907b8a48113447b82503cf4523b55718cae4c4ad854ad38dad7bae9a9a49653332cf11ff120fbcbcb2654063c2056862c6dba9966659544211891c42a648d41e8fe46bce00ba73f79521149775792b28541c5c0f409d814deb30846445527a6acc5c50d739b4e291563c73c8b27183356046bc7dc37a3ad6545212a8114b08488ad1b063913d5570ef01dac0d7dbe249bb33b69f3e5", 0xe2}, {&(0x7f0000000740)="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", 0xfd}, {&(0x7f0000000840)="b30d2d2b83d942e6d615c9cc4ff703e58622bb4ace1f918c20d715ab2c1b8cbd65bbebb67dbbbf9fb47b682dc391cb93c90a72fe70ca7ef5ef7e749d7a139180ab3d952cc999a2a061d19abdc4aeb671147f7eb9cabb39f993a33f0d2e01a009291a744467900a14ba1228b63251288066f2f677186e27024c81684ddb47d911a436bcdcc01267cf314bc2a210ee9d3d2df2b5a50eb34bfc06ac97deacf720d30a224c7f5c58240a462569337148d949", 0xb0}], 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x1340}, 0x8040) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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", 0x0}, 0x50) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x4008240b, &(0x7f00000013c0)) socketpair(0x18, 0x5, 0x5, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007"], 0x0}, 0x94) 1.87564747s ago: executing program 7 (id=1920): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x67fe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x50, &(0x7f0000000140)=""/80, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x3, 0x7fffffff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000280)=[{0x3, 0x3, 0x3, 0x7}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) 1.668360886s ago: executing program 6 (id=1922): perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}, 0x107010, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) (async) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)}, 0x40012020) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8993, &(0x7f0000000080)) 1.555644705s ago: executing program 6 (id=1923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00*\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="13"], 0xfe33) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0xfc00) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x14}, 0x108003, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.509253759s ago: executing program 2 (id=1924): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) 1.502489949s ago: executing program 7 (id=1925): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1e, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x101}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0x2d, &(0x7f0000000280)=""/45, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x4, 0x80000000, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x0, 0x10, 0xffff87f2}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0xb, 0x1, 0x2d, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000000000009d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1e000000010000005c0000001e00000027050200", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000028745b7e80c95de32d45fd873ae9654642e5307000000000000000000000000000000000000c04f245e99aa00659d023c03cccb6c07de3c846cd1b3e9bddc700991db7823f34949ebc11788b1ab4f0c022fd31d719f6429992755b146f40c2b9a04b9a0393e90766b0309d626d95ea8159930c9a4a7684f90977814a9af1cbe0eadade1dc1dea58b124b36bcd3f55a1dfe10b7fde49f5e023fd64ece0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r8, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r6], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000740)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000840)=r7, 0x4) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xff, 0x2, 0x3, 0x10, r8, 0x2, '\x00', r9, r10, 0x1, 0x0, 0x1, 0x5}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r0, r1, 0x15, 0x8, r3, @void, @value=r5, @void, @void, r4}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a0000009c0002000000000025000000000000009500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) 1.424522716s ago: executing program 5 (id=1926): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) (fail_nth: 1) 1.410307877s ago: executing program 2 (id=1927): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r9) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r12 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 1.171585186s ago: executing program 6 (id=1928): r0 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x1, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x1c0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, r0, 0x1, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x7, 0x2) 1.134121509s ago: executing program 5 (id=1929): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8e}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f00000000c0)='GPL\x00', 0x10, 0xe6, &(0x7f00000001c0)=""/230, 0x41000, 0x40, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x0, 0x1, 0xff}, 0x10, 0xc793, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1], &(0x7f00000004c0)=[{0x2, 0x2, 0xe, 0x2}, {0x3, 0x5, 0x5, 0x6}]}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r2, r1, 0x3, 0x201c, 0x0, @value=r3}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000003900)={&(0x7f00000025c0)=@in6={0xa, 0x0, 0x7fff, @private0}, 0x80, 0x0}, 0x20000850) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x10, 0x0, 0xb, &(0x7f0000000000)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc004000202080002000300010004000251f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c95300"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xb10) 1.041304677s ago: executing program 6 (id=1930): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="a7107098002ad60309000000236d1853000000000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0xec, &(0x7f0000000280)=""/236, 0x40f00, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xa, 0x469f}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000400)=[0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x5, 0x5, 0x0, 0x3}, {0x0, 0x3, 0x7, 0x3}, {0x7fffffff, 0x41, 0x10, 0x9}, {0x2, 0x1, 0xc, 0xc}], 0x10, 0x5}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xf, &(0x7f0000000a80)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0x2e, 0x1, 0x9, &(0x7f0000000540)=[0x0], 0x1, 0x0, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0}, 0x40) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x4, &(0x7f0000000700)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}], &(0x7f0000000740)='GPL\x00', 0x80000000, 0xb9, &(0x7f0000000780)=""/185, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x2, 0x9, 0x1}, 0x10, 0xf3b5, 0xffffffffffffffff, 0x5, &(0x7f00000008c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x2, 0x4, 0xa, 0x9}, {0x1, 0x4, 0x0, 0x7a62db55df1a6dcf}, {0x4, 0x1, 0xf, 0x8}, {0x3, 0x3, 0x4, 0x8}, {0x3, 0x3, 0xe, 0x7}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@fallback=r3, r0, 0x29, 0x0, 0x0, @void, @value=r4, @void, @void, r2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x20}, 0x18) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r7}, 0x8) 1.040825687s ago: executing program 7 (id=1931): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xc, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x200000000000001, 0x106) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) (async) r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)=r2}, 0x20) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x2f08, 0xe, 0x0, &(0x7f0000000000)="46c33c56e981df5e1559014932a2", 0x0, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r7, 0x4e, 0xfffffffffffffffc}, 0xf) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff80fe}, 0x50) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000020000004404a60007036f001c"], 0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000001840)=ANY=[@ANYBLOB="91107e00000000009500000000000000889227be7598f9"], &(0x7f0000000280)='GPL\x00'}, 0x94) 953.148694ms ago: executing program 5 (id=1932): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x22, 0x2, 0x21) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000001e40)=""/4046, 0xfce}, {&(0x7f00000007c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000580)=""/133, 0x85}], 0x9}, 0x0) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x1}, {0x0}], 0x2}, 0x400c004) close(r4) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r9}, 0x10) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) close(r2) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) 932.575305ms ago: executing program 2 (id=1933): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x67fe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x50, &(0x7f0000000140)=""/80, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x3, 0x7fffffff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000280)=[{0x3, 0x3, 0x3, 0x7}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) 801.256626ms ago: executing program 6 (id=1934): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x1100, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 760.122509ms ago: executing program 2 (id=1935): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="ffffffff00000000ab5397ec0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b2308217f05"], 0xffdd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000f7f2cd710cd766f92a4660176f126f73277a951e07231d99cffa46e2a6d36671592d72e9db6c1fbd9f443e046c38ba64096fed89f3edd0d24d5df38ace82b6e063b972356e268682f464f05d0a5f406eb98b8e630014fb93bc032680ed7cb78b616dc7fb3ba88f10d740c6b87dc061d9cebd6c9e9612ed42268e623c51c68f0b72f044e7f8d6423af8b532e2ec558cd91ff38af88bb224720eafae770f060e3b6424138d14b0510000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) syz_clone(0x40000000, &(0x7f0000000c40)="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", 0x12f, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0x36, 0x0, &(0x7f00000001c0)="ea0080670000ec67078717bd86dd2ffc8fd76bac3e4618f1a7682f60635be41f8749d685f16ab0577aa2391b96068d0e344d48128980", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x2, 0x0, 0x80000005, 0x7}, {0x0, 0x8, 0x10100, 0x8}], 0x10, 0x201}, 0xd3) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="072ca3fcf070d1fff5e58e435fa5d1259a0b7fac15a9c4d36e936ac172944511f6f003fb9e3c657346dceaf93dc175097f325a218d70008a1d08364a"], 0xffdd) 759.929829ms ago: executing program 7 (id=1936): socket$kcm(0x2, 0x3, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x8, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x3, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) 621.10628ms ago: executing program 5 (id=1937): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) (fail_nth: 10) 620.76346ms ago: executing program 6 (id=1938): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7}, 0x2409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x13, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 32.078388ms ago: executing program 7 (id=1939): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b80006990e00000015000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xb7}, {&(0x7f00000000c0)="38e3c9cd0ccb3770cc45b415fd812b54b056e4d738296240115e6f04fa340a7244", 0x21}], 0x2}, 0x0) (fail_nth: 7) 0s ago: executing program 5 (id=1940): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b80006990e00000015000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xb7}, {&(0x7f00000000c0)="38e3c9cd0ccb3770cc45b415fd812b54b056e4d738296240115e6f04fa340a7244", 0x21}], 0x2}, 0x10000000) kernel console output (not intermixed with test programs): ng over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.337901][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.351025][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.358143][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.384257][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.412570][ T2945] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.459834][T10582] hsr_slave_0: entered promiscuous mode [ 280.481032][T10582] hsr_slave_1: entered promiscuous mode [ 280.492314][T10582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.513202][T10582] Cannot create hsr debugfs directory [ 280.723829][T10598] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1491'. [ 280.766815][T10601] cgroup: fork rejected by pids controller in /syz2 [ 281.463518][T10610] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1494'. [ 281.612223][T10612] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1495'. [ 281.637247][T10582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.736578][T10582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.765189][T10582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.886654][T10582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.929995][ T5794] Bluetooth: hci4: command tx timeout [ 282.390147][T10645] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1500'. [ 282.402165][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.588265][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.659439][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.662628][T10648] netlink: 'syz.0.1501': attribute type 2 has an invalid length. [ 282.666718][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.720495][T10648] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1501'. [ 282.740305][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.750470][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.759258][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.768417][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.776149][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.783786][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.831859][T10652] syzkaller0: entered promiscuous mode [ 282.841393][T10652] syzkaller0: entered allmulticast mode [ 282.862698][T10042] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.869884][T10042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.016828][ T5795] Bluetooth: hci4: command tx timeout [ 284.800730][ T2945] hsr_slave_0: left promiscuous mode [ 284.819848][ T5795] Bluetooth: hci1: command tx timeout [ 284.826142][ T2945] hsr_slave_1: left promiscuous mode [ 284.834082][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.844281][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.852948][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.860952][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.869204][ T2945] bridge_slave_1: left allmulticast mode [ 284.875134][ T2945] bridge_slave_1: left promiscuous mode [ 284.881472][ T2945] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.891171][ T2945] bridge_slave_0: left allmulticast mode [ 284.896982][ T2945] bridge_slave_0: left promiscuous mode [ 284.902948][ T2945] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.011576][ T2945] veth1_macvtap: left promiscuous mode [ 285.021076][ T2945] veth0_macvtap: left promiscuous mode [ 285.036794][ T2945] veth1_vlan: left allmulticast mode [ 285.043522][ T2945] veth1_vlan: left promiscuous mode [ 285.331144][ T2945] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 285.565875][ T2945] team0 (unregistering): Port device team_slave_1 removed [ 285.603770][ T2945] team0 (unregistering): Port device C removed [ 285.644315][ T2945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.682767][ T2945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.062582][ T2945] bond0 (unregistering): Released all slaves [ 286.088257][ T5795] Bluetooth: hci4: command tx timeout [ 286.235230][T10686] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1515'. [ 286.554530][T10649] chnl_net:caif_netlink_parms(): no params data found [ 286.608348][T10702] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1509'. [ 286.693971][T10649] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.709374][T10649] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.719193][T10649] bridge_slave_0: entered allmulticast mode [ 286.727056][T10649] bridge_slave_0: entered promiscuous mode [ 286.735928][T10649] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.743368][T10649] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.759012][T10649] bridge_slave_1: entered allmulticast mode [ 286.777058][T10649] bridge_slave_1: entered promiscuous mode [ 286.845351][T10649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.869795][T10649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.888516][ T5795] Bluetooth: hci1: command tx timeout [ 286.951596][T10649] team0: Port device team_slave_0 added [ 286.975372][T10649] team0: Port device team_slave_1 added [ 287.029545][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.042509][T10649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.063009][T10649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.115277][T10649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.177619][T10649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.207779][T10649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.241768][T10649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.321955][ T2945] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.499532][T10649] hsr_slave_0: entered promiscuous mode [ 287.519282][T10649] hsr_slave_1: entered promiscuous mode [ 287.575903][ T2945] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.719035][ T2945] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.839089][ T2945] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.107696][T10738] syzkaller0: entered promiscuous mode [ 288.123906][T10738] syzkaller0: entered allmulticast mode [ 288.167516][ T5795] Bluetooth: hci4: command tx timeout [ 288.224124][T10582] veth0_vlan: entered promiscuous mode [ 288.272118][T10745] FAULT_INJECTION: forcing a failure. [ 288.272118][T10745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.315481][T10745] CPU: 1 PID: 10745 Comm: syz.1.1513 Not tainted 6.6.102-syzkaller #0 [ 288.323704][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.334223][T10745] Call Trace: [ 288.337528][T10745] [ 288.340488][T10745] dump_stack_lvl+0x16c/0x230 [ 288.345212][T10745] ? show_regs_print_info+0x20/0x20 [ 288.350445][T10745] ? load_image+0x3b0/0x3b0 [ 288.354994][T10745] ? __might_fault+0xaa/0x120 [ 288.359711][T10745] should_fail_ex+0x39d/0x4d0 [ 288.364446][T10745] copyin+0x1a/0x90 [ 288.368291][T10745] _copy_from_iter+0x404/0x1290 [ 288.373173][T10745] ? copyin+0x70/0x90 [ 288.377175][T10745] ? copyout_mc+0x70/0x70 [ 288.381514][T10745] ? copyout_mc+0x70/0x70 [ 288.385847][T10745] ? __virt_addr_valid+0x18c/0x540 [ 288.390975][T10745] ? page_copy_sane+0x16a/0x270 [ 288.395835][T10745] copy_page_from_iter+0x7b/0x100 [ 288.400869][T10745] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 288.406690][T10745] unix_stream_sendmsg+0x549/0xba0 [ 288.411819][T10745] ? unix_show_fdinfo+0x270/0x270 [ 288.416931][T10745] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 288.423351][T10745] ? __might_fault+0xaa/0x120 [ 288.428040][T10745] ? aa_sock_msg_perm+0x94/0x150 [ 288.433019][T10745] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 288.438316][T10745] ? security_socket_sendmsg+0x80/0xa0 [ 288.443782][T10745] ? unix_show_fdinfo+0x270/0x270 [ 288.448818][T10745] ____sys_sendmsg+0x5bf/0x950 [ 288.453597][T10745] ? __sys_sendmsg_sock+0x30/0x30 [ 288.458617][T10745] ? __import_iovec+0x3fa/0x860 [ 288.463482][T10745] ? import_iovec+0x73/0xa0 [ 288.467993][T10745] ___sys_sendmsg+0x220/0x290 [ 288.472677][T10745] ? __sys_sendmsg+0x270/0x270 [ 288.477557][T10745] ? __lock_acquire+0x7c80/0x7c80 [ 288.482616][T10745] __se_sys_sendmsg+0x1a5/0x270 [ 288.487470][T10745] ? __x64_sys_sendmsg+0x80/0x80 [ 288.492429][T10745] ? lockdep_hardirqs_on+0x98/0x150 [ 288.497643][T10745] do_syscall_64+0x55/0xb0 [ 288.502056][T10745] ? clear_bhb_loop+0x40/0x90 [ 288.506723][T10745] ? clear_bhb_loop+0x40/0x90 [ 288.511392][T10745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.517379][T10745] RIP: 0033:0x7f8053f8ebe9 [ 288.521807][T10745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.541407][T10745] RSP: 002b:00007f8054e83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.549816][T10745] RAX: ffffffffffffffda RBX: 00007f80541b5fa0 RCX: 00007f8053f8ebe9 [ 288.557812][T10745] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000004 [ 288.565794][T10745] RBP: 00007f8054e83090 R08: 0000000000000000 R09: 0000000000000000 [ 288.573859][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.581828][T10745] R13: 00007f80541b6038 R14: 00007f80541b5fa0 R15: 00007fffe541f738 [ 288.590266][T10745] [ 288.690949][T10582] veth1_vlan: entered promiscuous mode [ 288.966600][ T5795] Bluetooth: hci1: command tx timeout [ 290.865233][T10582] veth0_macvtap: entered promiscuous mode [ 290.983294][T10582] veth1_macvtap: entered promiscuous mode [ 291.048019][ T5795] Bluetooth: hci1: command tx timeout [ 291.051148][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.064793][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.075648][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.088150][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.098376][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.109109][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.128019][T10582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.147746][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.176629][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.195308][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.209128][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.219253][T10582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.230692][T10582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.316939][T10582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.427958][T10582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.476681][T10582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.485445][T10582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.538713][T10582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.180778][T10042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.201273][T10042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.221970][T10649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.239516][T10649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.369751][T10649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.410291][T10649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.451772][T10781] netlink: 'syz.0.1520': attribute type 21 has an invalid length. [ 292.488797][T10781] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1520'. [ 292.532522][T10781] netlink: 'syz.0.1520': attribute type 4 has an invalid length. [ 292.671979][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.714086][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.178165][T10803] syzkaller0: entered promiscuous mode [ 293.184062][T10803] syzkaller0: entered allmulticast mode [ 295.184779][ T2945] hsr_slave_0: left promiscuous mode [ 295.190888][ T2945] hsr_slave_1: left promiscuous mode [ 295.197069][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.204552][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.215834][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.223347][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.231696][ T2945] team0: left allmulticast mode [ 295.238504][ T2945] team_slave_0: left allmulticast mode [ 295.244385][ T2945] team_slave_1: left allmulticast mode [ 295.250732][ T2945] team0: left promiscuous mode [ 295.256662][ T2945] team_slave_0: left promiscuous mode [ 295.262356][ T2945] team_slave_1: left promiscuous mode [ 295.268400][ T2945] bridge0: port 3(team0) entered disabled state [ 295.278837][ T2945] bridge_slave_1: left allmulticast mode [ 295.284676][ T2945] bridge_slave_1: left promiscuous mode [ 295.291773][ T2945] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.300251][ T2945] bridge_slave_0: left allmulticast mode [ 295.305991][ T2945] bridge_slave_0: left promiscuous mode [ 295.311877][ T2945] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.335089][ T2945] veth1_macvtap: left promiscuous mode [ 295.341261][ T2945] veth0_macvtap: left promiscuous mode [ 295.347115][ T2945] veth0_vlan: left promiscuous mode [ 295.772288][ T2945] team0 (unregistering): Port device team_slave_1 removed [ 295.813438][ T2945] team0 (unregistering): Port device team_slave_0 removed [ 295.854093][ T2945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.898044][ T2945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.307464][ T2945] bond0 (unregistering): Released all slaves [ 296.433503][T10649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.504909][T10649] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.598581][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.605776][T10065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.643919][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.651263][T10073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.711911][T10838] netlink: 'syz.1.1532': attribute type 21 has an invalid length. [ 296.775336][T10838] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1532'. [ 296.873731][T10838] netlink: 'syz.1.1532': attribute type 4 has an invalid length. [ 297.274868][T10649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.577410][T10858] syzkaller0: entered allmulticast mode [ 298.162174][T10877] netlink: 'syz.0.1538': attribute type 10 has an invalid length. [ 298.192232][T10877] netlink: 'syz.0.1538': attribute type 19 has an invalid length. [ 298.200687][T10877] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.1538'. [ 298.267186][T10649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.901770][T10649] veth0_vlan: entered promiscuous mode [ 299.939774][T10649] veth1_vlan: entered promiscuous mode [ 300.006913][T10649] veth0_macvtap: entered promiscuous mode [ 300.021966][T10649] veth1_macvtap: entered promiscuous mode [ 300.053107][T10905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1554'. [ 300.072243][T10649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.091993][T10649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.116839][T10649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.135808][T10649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.151152][T10649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.162477][T10649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.184600][T10649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.203267][T10905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1554'. [ 300.247613][T10649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.273869][T10649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.296334][T10649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.316153][T10649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.336132][T10649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.354374][T10649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.398514][T10649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.415811][T10913] netlink: 'syz.4.1546': attribute type 21 has an invalid length. [ 300.446561][T10913] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1546'. [ 300.472656][T10913] netlink: 'syz.4.1546': attribute type 4 has an invalid length. [ 300.561339][T10649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.595500][T10649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.625079][T10649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.656272][T10649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.101379][T10933] netlink: 'syz.4.1552': attribute type 21 has an invalid length. [ 301.181369][T10932] netlink: 'syz.0.1551': attribute type 3 has an invalid length. [ 301.227222][T10932] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1551'. [ 301.437347][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.468672][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.669870][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.696569][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.082169][T10955] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1497'. [ 302.371518][T10960] netlink: 'syz.0.1560': attribute type 10 has an invalid length. [ 302.474604][T10960] team0: Port device macvlan1 added [ 302.877926][T10976] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1564'. [ 303.112334][T10977] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1563'. [ 303.122340][T10977] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 303.631606][T10997] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1568'. [ 304.510024][T11010] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1571'. [ 304.585203][T11015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1572'. [ 304.609776][T11006] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1570'. [ 304.890603][T11018] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1573'. [ 305.347214][T11034] netlink: 'syz.0.1579': attribute type 1 has an invalid length. [ 305.363298][T11028] netlink: 'syz.2.1577': attribute type 10 has an invalid length. [ 305.488302][T11034] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1579'. [ 306.173470][T11028] team0: Port device macvlan1 added [ 306.404572][T11045] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1580'. [ 306.772265][T11051] FAULT_INJECTION: forcing a failure. [ 306.772265][T11051] name failslab, interval 1, probability 0, space 0, times 0 [ 306.789156][T11051] CPU: 1 PID: 11051 Comm: syz.0.1581 Not tainted 6.6.102-syzkaller #0 [ 306.797352][T11051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.807431][T11051] Call Trace: [ 306.810727][T11051] [ 306.813684][T11051] dump_stack_lvl+0x16c/0x230 [ 306.818381][T11051] ? sctp_sendmsg+0x155c/0x27e0 [ 306.823259][T11051] ? ___sys_sendmsg+0x220/0x290 [ 306.828130][T11051] ? show_regs_print_info+0x20/0x20 [ 306.833356][T11051] ? load_image+0x3b0/0x3b0 [ 306.837909][T11051] should_fail_ex+0x39d/0x4d0 [ 306.842613][T11051] should_failslab+0x9/0x20 [ 306.847136][T11051] slab_pre_alloc_hook+0x59/0x310 [ 306.852185][T11051] ? sctp_add_bind_addr+0x8c/0x360 [ 306.857316][T11051] __kmem_cache_alloc_node+0x53/0x260 [ 306.862714][T11051] ? sctp_add_bind_addr+0x8c/0x360 [ 306.867846][T11051] kmalloc_trace+0x2a/0xe0 [ 306.872286][T11051] sctp_add_bind_addr+0x8c/0x360 [ 306.877249][T11051] sctp_copy_local_addr_list+0x30c/0x4e0 [ 306.882903][T11051] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 306.888645][T11051] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 306.894738][T11051] ? sctp_v6_is_any+0x64/0x70 [ 306.899435][T11051] ? sctp_copy_one_addr+0x8c/0x350 [ 306.904577][T11051] sctp_bind_addr_copy+0xb3/0x3c0 [ 306.909625][T11051] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 306.915999][T11051] sctp_connect_new_asoc+0x2da/0x690 [ 306.922954][T11051] ? __sctp_connect+0xd20/0xd20 [ 306.927842][T11051] ? __local_bh_enable_ip+0x12e/0x1c0 [ 306.933243][T11051] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 306.938819][T11051] ? security_sctp_bind_connect+0x89/0xb0 [ 306.944573][T11051] sctp_sendmsg+0x155c/0x27e0 [ 306.949287][T11051] ? sctp_getsockopt+0xb60/0xb60 [ 306.954265][T11051] ? aa_sk_perm+0x7fc/0x930 [ 306.958804][T11051] ? aa_af_perm+0x2b0/0x2b0 [ 306.963418][T11051] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 306.969867][T11051] ? sock_rps_record_flow+0x19/0x400 [ 306.975172][T11051] ? inet_send_prepare+0x260/0x260 [ 306.980392][T11051] ? inet_sendmsg+0xe9/0x2f0 [ 306.984999][T11051] ? inet_send_prepare+0x260/0x260 [ 306.990142][T11051] ____sys_sendmsg+0x5bf/0x950 [ 306.994941][T11051] ? __asan_memset+0x22/0x40 [ 306.999557][T11051] ? __sys_sendmsg_sock+0x30/0x30 [ 307.004600][T11051] ? __import_iovec+0x5f2/0x860 [ 307.009479][T11051] ? import_iovec+0x73/0xa0 [ 307.014012][T11051] ___sys_sendmsg+0x220/0x290 [ 307.018709][T11051] ? __sys_sendmsg+0x270/0x270 [ 307.023517][T11051] ? __lock_acquire+0x7c80/0x7c80 [ 307.028596][T11051] __se_sys_sendmsg+0x1a5/0x270 [ 307.033476][T11051] ? __x64_sys_sendmsg+0x80/0x80 [ 307.038463][T11051] ? lockdep_hardirqs_on+0x98/0x150 [ 307.043695][T11051] do_syscall_64+0x55/0xb0 [ 307.048131][T11051] ? clear_bhb_loop+0x40/0x90 [ 307.052821][T11051] ? clear_bhb_loop+0x40/0x90 [ 307.057514][T11051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.063435][T11051] RIP: 0033:0x7f16db38ebe9 [ 307.067875][T11051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.087503][T11051] RSP: 002b:00007f16dc24f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.095950][T11051] RAX: ffffffffffffffda RBX: 00007f16db5b5fa0 RCX: 00007f16db38ebe9 [ 307.103954][T11051] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 307.112181][T11051] RBP: 00007f16dc24f090 R08: 0000000000000000 R09: 0000000000000000 [ 307.120193][T11051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.128193][T11051] R13: 00007f16db5b6038 R14: 00007f16db5b5fa0 R15: 00007ffdf65b0de8 [ 307.136211][T11051] [ 307.298741][T11068] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1582'. [ 307.444084][T11070] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1584'. [ 307.514539][T11074] netlink: 'syz.2.1585': attribute type 1 has an invalid length. [ 307.543830][T11074] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1585'. [ 307.617823][T11079] netlink: 'syz.0.1586': attribute type 4 has an invalid length. [ 308.075656][T11098] FAULT_INJECTION: forcing a failure. [ 308.075656][T11098] name failslab, interval 1, probability 0, space 0, times 0 [ 308.089714][T11098] CPU: 0 PID: 11098 Comm: syz.2.1602 Not tainted 6.6.102-syzkaller #0 [ 308.097900][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.107969][T11098] Call Trace: [ 308.111276][T11098] [ 308.114230][T11098] dump_stack_lvl+0x16c/0x230 [ 308.118935][T11098] ? show_regs_print_info+0x20/0x20 [ 308.124146][T11098] ? load_image+0x3b0/0x3b0 [ 308.128672][T11098] ? __lock_acquire+0x7c80/0x7c80 [ 308.133720][T11098] should_fail_ex+0x39d/0x4d0 [ 308.138505][T11098] should_failslab+0x9/0x20 [ 308.143015][T11098] slab_pre_alloc_hook+0x59/0x310 [ 308.148040][T11098] ? __lock_acquire+0x7c80/0x7c80 [ 308.153066][T11098] kmem_cache_alloc+0x5a/0x2e0 [ 308.157913][T11098] ? security_file_alloc+0x34/0x120 [ 308.163116][T11098] security_file_alloc+0x34/0x120 [ 308.168144][T11098] init_file+0x94/0x1f0 [ 308.172298][T11098] alloc_empty_file+0xb7/0x1d0 [ 308.177078][T11098] alloc_file+0x5c/0x600 [ 308.181323][T11098] alloc_file_pseudo+0x17e/0x200 [ 308.186259][T11098] ? alloc_empty_backing_file+0xe0/0xe0 [ 308.191808][T11098] ? __lock_acquire+0x7c80/0x7c80 [ 308.196825][T11098] ? __local_bh_enable_ip+0x12e/0x1c0 [ 308.202273][T11098] ? _local_bh_enable+0xa0/0xa0 [ 308.207121][T11098] anon_inode_getfile+0xc5/0x1a0 [ 308.212055][T11098] bpf_link_prime+0xa6/0x1d0 [ 308.216638][T11098] bpf_raw_tp_link_attach+0x33c/0x560 [ 308.222004][T11098] ? bpf_insn_prepare_dump+0x840/0x840 [ 308.227471][T11098] bpf_raw_tracepoint_open+0x197/0x210 [ 308.232921][T11098] __sys_bpf+0x364/0x800 [ 308.237156][T11098] ? bpf_link_show_fdinfo+0x350/0x350 [ 308.242528][T11098] ? lock_chain_count+0x20/0x20 [ 308.247389][T11098] __x64_sys_bpf+0x7c/0x90 [ 308.251798][T11098] do_syscall_64+0x55/0xb0 [ 308.256209][T11098] ? clear_bhb_loop+0x40/0x90 [ 308.260887][T11098] ? clear_bhb_loop+0x40/0x90 [ 308.265576][T11098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.271464][T11098] RIP: 0033:0x7f6a3dd8ebe9 [ 308.275876][T11098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.295478][T11098] RSP: 002b:00007f6a3eb7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.303883][T11098] RAX: ffffffffffffffda RBX: 00007f6a3dfb5fa0 RCX: 00007f6a3dd8ebe9 [ 308.311848][T11098] RDX: 0000000000000018 RSI: 0000200000000300 RDI: 0000000000000011 [ 308.319898][T11098] RBP: 00007f6a3eb7d090 R08: 0000000000000000 R09: 0000000000000000 [ 308.327875][T11098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.335953][T11098] R13: 00007f6a3dfb6038 R14: 00007f6a3dfb5fa0 R15: 00007ffde6e6b1a8 [ 308.344048][T11098] [ 308.585888][T11099] netlink: 'syz.4.1594': attribute type 10 has an invalid length. [ 308.618133][T11099] team0: Port device macvlan1 added [ 308.858661][T11110] __nla_validate_parse: 3 callbacks suppressed [ 308.858698][T11110] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1597'. [ 308.938598][T11118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1600'. [ 308.983426][T11121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1603'. [ 309.548614][T11133] netlink: 'syz.1.1608': attribute type 10 has an invalid length. [ 309.674484][T11133] macvlan1: entered promiscuous mode [ 309.704309][T11133] macvlan1: entered allmulticast mode [ 309.717880][T11133] team0: Port device macvlan1 added [ 309.915126][T11143] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1611'. [ 310.131449][T11148] netlink: 'syz.1.1613': attribute type 4 has an invalid length. [ 310.142974][T11148] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1613'. [ 310.172913][T11148] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 310.452319][T11161] netlink: 'syz.1.1618': attribute type 10 has an invalid length. [ 310.460386][T11161] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1618'. [ 310.578292][T11165] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1619'. [ 310.859489][T11170] netlink: 'syz.0.1622': attribute type 10 has an invalid length. [ 311.304178][T11183] netlink: 'syz.2.1625': attribute type 153 has an invalid length. [ 311.341613][T11183] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1625'. [ 311.344795][T11187] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1626'. [ 311.879120][T11207] FAULT_INJECTION: forcing a failure. [ 311.879120][T11207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.916938][T11207] CPU: 1 PID: 11207 Comm: syz.4.1632 Not tainted 6.6.102-syzkaller #0 [ 311.925187][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.935295][T11207] Call Trace: [ 311.938612][T11207] [ 311.941591][T11207] dump_stack_lvl+0x16c/0x230 [ 311.946321][T11207] ? lock_chain_count+0x20/0x20 [ 311.951234][T11207] ? show_regs_print_info+0x20/0x20 [ 311.956481][T11207] ? load_image+0x3b0/0x3b0 [ 311.961153][T11207] ? lockdep_hardirqs_on+0x98/0x150 [ 311.966746][T11207] should_fail_ex+0x39d/0x4d0 [ 311.971582][T11207] _copy_from_iter+0x1d3/0x1290 [ 311.976548][T11207] ? slab_post_alloc_hook+0x8a/0x4d0 [ 311.981879][T11207] ? __virt_addr_valid+0x18c/0x540 [ 311.987030][T11207] ? __lock_acquire+0x7c80/0x7c80 [ 311.992074][T11207] ? rcu_is_watching+0x15/0xb0 [ 311.996862][T11207] ? copyout_mc+0x70/0x70 [ 312.001218][T11207] ? __virt_addr_valid+0x18c/0x540 [ 312.006347][T11207] ? __virt_addr_valid+0x18c/0x540 [ 312.011512][T11207] ? __virt_addr_valid+0x469/0x540 [ 312.016654][T11207] ? __check_object_size+0x506/0xa30 [ 312.021974][T11207] netlink_sendmsg+0x75c/0xbe0 [ 312.026798][T11207] ? netlink_getsockopt+0x580/0x580 [ 312.032031][T11207] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 312.037326][T11207] ? security_socket_sendmsg+0x80/0xa0 [ 312.042814][T11207] ? netlink_getsockopt+0x580/0x580 [ 312.048041][T11207] ____sys_sendmsg+0x5bf/0x950 [ 312.052831][T11207] ? __asan_memset+0x22/0x40 [ 312.057434][T11207] ? __sys_sendmsg_sock+0x30/0x30 [ 312.062464][T11207] ? __import_iovec+0x5f2/0x860 [ 312.067343][T11207] ? import_iovec+0x73/0xa0 [ 312.071869][T11207] ___sys_sendmsg+0x220/0x290 [ 312.076669][T11207] ? __sys_sendmsg+0x270/0x270 [ 312.081490][T11207] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.087796][T11207] __se_sys_sendmsg+0x1a5/0x270 [ 312.092661][T11207] ? __x64_sys_sendmsg+0x80/0x80 [ 312.097645][T11207] ? lockdep_hardirqs_on+0x98/0x150 [ 312.102879][T11207] do_syscall_64+0x55/0xb0 [ 312.107303][T11207] ? clear_bhb_loop+0x40/0x90 [ 312.111987][T11207] ? clear_bhb_loop+0x40/0x90 [ 312.116691][T11207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.122619][T11207] RIP: 0033:0x7fe6df78ebe9 [ 312.127052][T11207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.146685][T11207] RSP: 002b:00007fe6e05e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.155122][T11207] RAX: ffffffffffffffda RBX: 00007fe6df9b5fa0 RCX: 00007fe6df78ebe9 [ 312.163105][T11207] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 312.171115][T11207] RBP: 00007fe6e05e8090 R08: 0000000000000000 R09: 0000000000000000 [ 312.179158][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.187194][T11207] R13: 00007fe6df9b6038 R14: 00007fe6df9b5fa0 R15: 00007ffd446ad168 [ 312.195329][T11207] [ 312.767020][T11220] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 312.780666][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 312.851034][ T5795] Bluetooth: hci4: ISO packet for unknown connection handle 2621 [ 313.074385][T11231] Illegal XDP return value 4294967294 on prog (id 1165) dev N/A, expect packet loss! [ 314.722753][T11289] netlink: 'syz.4.1656': attribute type 1 has an invalid length. [ 314.738925][T11289] __nla_validate_parse: 1 callbacks suppressed [ 314.738941][T11289] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1656'. [ 315.080911][T11302] netlink: 'syz.4.1660': attribute type 10 has an invalid length. [ 315.155659][T11302] hsr_slave_0 (unregistering): left promiscuous mode [ 315.571775][T10073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.710451][T10073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.919149][T10073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.099357][T10073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.451631][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.473164][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.482173][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.496801][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.507886][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 316.515398][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.668236][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.677621][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.686336][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.719853][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.729208][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 316.738980][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.746339][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.760006][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.768979][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.781461][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.791134][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 316.802278][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.094712][T11309] chnl_net:caif_netlink_parms(): no params data found [ 317.304181][T11327] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 317.410641][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.418349][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.425539][T11309] bridge_slave_0: entered allmulticast mode [ 317.433481][T11309] bridge_slave_0: entered promiscuous mode [ 317.466044][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 317.514400][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.525547][T11309] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.534441][T11309] bridge_slave_1: entered allmulticast mode [ 317.542200][T11309] bridge_slave_1: entered promiscuous mode [ 317.568474][T11311] chnl_net:caif_netlink_parms(): no params data found [ 317.621413][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.627921][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.704109][T11309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.820729][T11309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.893346][T10073] hsr_slave_0: left promiscuous mode [ 317.904474][T10073] hsr_slave_1: left promiscuous mode [ 317.912608][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.926137][T10073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.936036][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.951741][T10073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.963783][T10073] bridge_slave_1: left allmulticast mode [ 317.975325][T10073] bridge_slave_1: left promiscuous mode [ 317.983241][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.004568][T10073] bridge_slave_0: left allmulticast mode [ 318.011717][T10073] bridge_slave_0: left promiscuous mode [ 318.023530][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.071125][T10073] veth1_macvtap: left promiscuous mode [ 318.084046][T10073] veth1_vlan: left promiscuous mode [ 318.092019][T10073] veth0_vlan: left promiscuous mode [ 318.334622][T10073] team0 (unregistering): Port device macvlan1 removed [ 318.579401][ T5103] Bluetooth: hci0: command tx timeout [ 318.609780][T10073] team0 (unregistering): Port device team_slave_1 removed [ 318.647748][T10073] team0 (unregistering): Port device team_slave_0 removed [ 318.689732][T10073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.732832][T10073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.811203][ T5103] Bluetooth: hci2: command tx timeout [ 318.891685][ T5103] Bluetooth: hci3: command tx timeout [ 319.143181][T10073] bond0 (unregistering): Released all slaves [ 319.268290][T11309] team0: Port device team_slave_0 added [ 319.329077][T11309] team0: Port device team_slave_1 added [ 319.348484][T11311] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.355849][T11311] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.363584][T11311] bridge_slave_0: entered allmulticast mode [ 319.372129][T11311] bridge_slave_0: entered promiscuous mode [ 319.384863][T11311] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.392102][T11311] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.399403][T11311] bridge_slave_1: entered allmulticast mode [ 319.406782][T11311] bridge_slave_1: entered promiscuous mode [ 319.436245][T11313] chnl_net:caif_netlink_parms(): no params data found [ 319.446214][T11309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.453642][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.479713][T11309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.494313][T11309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.501444][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.528507][T11309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.565571][T11311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.623789][T11311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.685867][T11309] hsr_slave_0: entered promiscuous mode [ 319.692697][T11309] hsr_slave_1: entered promiscuous mode [ 319.707261][T11309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.714844][T11309] Cannot create hsr debugfs directory [ 319.742669][T11311] team0: Port device team_slave_0 added [ 319.752507][T11311] team0: Port device team_slave_1 added [ 319.845064][T11311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.852480][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.880595][T11311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.892509][T11313] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.900913][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.908650][T11313] bridge_slave_0: entered allmulticast mode [ 319.915404][T11313] bridge_slave_0: entered promiscuous mode [ 319.928575][T11311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.935548][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.962599][T11311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.973908][T11313] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.981516][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.988856][T11313] bridge_slave_1: entered allmulticast mode [ 319.995595][T11313] bridge_slave_1: entered promiscuous mode [ 320.079269][T11313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.112556][T11313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.138171][T11311] hsr_slave_0: entered promiscuous mode [ 320.144492][T11311] hsr_slave_1: entered promiscuous mode [ 320.151112][T11311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.158832][T11311] Cannot create hsr debugfs directory [ 320.193559][T11313] team0: Port device team_slave_0 added [ 320.221157][T11313] team0: Port device team_slave_1 added [ 320.280366][T11313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.289491][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.315836][T11313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.345472][T10073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.373916][T11313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.381446][T11313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.408004][T11313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.463329][T10073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.576908][T10073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.592857][T11309] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.602465][T11309] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.620970][T11313] hsr_slave_0: entered promiscuous mode [ 320.629946][T11313] hsr_slave_1: entered promiscuous mode [ 320.636224][T11313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.644123][T11313] Cannot create hsr debugfs directory [ 320.650046][ T5103] Bluetooth: hci0: command tx timeout [ 320.655637][T11309] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.665532][T11309] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.708140][T10073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.886638][ T5103] Bluetooth: hci2: command tx timeout [ 320.911251][T11311] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 320.924447][T11311] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 320.967421][T11311] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 320.974993][ T5103] Bluetooth: hci3: command tx timeout [ 320.984791][T11311] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 321.067266][T10073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.130324][T10073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.209205][T11309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.235949][T10073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.249248][T11313] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 321.260906][T11313] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 321.271318][T11313] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 321.283237][T11313] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 321.315577][T10073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.361225][T11309] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.386042][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.393210][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.425418][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.432648][T10065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.794059][T11313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.830787][T11311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.850553][T11313] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.920472][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.927673][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.947802][T11311] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.016087][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.023343][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.041126][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.048307][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.101086][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.108277][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.171149][T11309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.643107][T11309] veth0_vlan: entered promiscuous mode [ 322.722198][T11309] veth1_vlan: entered promiscuous mode [ 322.738974][ T5103] Bluetooth: hci0: command tx timeout [ 322.772982][T11313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.884185][T11311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.966767][ T5103] Bluetooth: hci2: command tx timeout [ 323.058062][ T5103] Bluetooth: hci3: command tx timeout [ 323.111993][T11309] veth0_macvtap: entered promiscuous mode [ 323.130587][T11309] veth1_macvtap: entered promiscuous mode [ 323.235051][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.257923][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.287473][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.306570][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.319730][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.336486][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.355188][T11309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.481842][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.509031][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.523546][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.542488][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.552800][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.565863][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.578145][T11309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.640330][T11309] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.650080][T11309] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.664107][T11309] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.674837][T11309] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.726065][T10073] hsr_slave_1: left promiscuous mode [ 323.733978][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.742307][T10073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.750346][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.757854][T10073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.765468][T10073] bridge_slave_1: left allmulticast mode [ 323.771451][T10073] bridge_slave_1: left promiscuous mode [ 323.778041][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.786676][T10073] bridge_slave_0: left allmulticast mode [ 323.792327][T10073] bridge_slave_0: left promiscuous mode [ 323.798576][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.814654][T10073] hsr_slave_0: left promiscuous mode [ 323.821181][T10073] hsr_slave_1: left promiscuous mode [ 323.827711][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.835139][T10073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.843840][T10073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.853180][T10073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.861524][T10073] team0: left allmulticast mode [ 323.866403][T10073] team_slave_0: left allmulticast mode [ 323.873410][T10073] team_slave_1: left allmulticast mode [ 323.879088][T10073] macvlan1: left allmulticast mode [ 323.884424][T10073] team0: left promiscuous mode [ 323.889495][T10073] team_slave_0: left promiscuous mode [ 323.894970][T10073] team_slave_1: left promiscuous mode [ 323.901602][T10073] macvlan1: left promiscuous mode [ 323.907236][T10073] bridge0: port 3(team0) entered disabled state [ 323.915412][T10073] bridge_slave_1: left allmulticast mode [ 323.921325][T10073] bridge_slave_1: left promiscuous mode [ 323.928013][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.938872][T10073] bridge_slave_0: left allmulticast mode [ 323.944539][T10073] bridge_slave_0: left promiscuous mode [ 323.950355][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.983072][T10073] veth1_macvtap: left promiscuous mode [ 323.988753][T10073] veth0_macvtap: left promiscuous mode [ 323.994325][T10073] veth1_vlan: left promiscuous mode [ 324.001291][T10073] veth0_vlan: left promiscuous mode [ 324.010864][T10073] veth1_macvtap: left promiscuous mode [ 324.016459][T10073] veth0_macvtap: left promiscuous mode [ 324.022263][T10073] veth0_vlan: left promiscuous mode [ 324.313416][T10073] team0 (unregistering): Port device macvlan1 removed [ 324.538928][T10073] team0 (unregistering): Port device team_slave_1 removed [ 324.577907][T10073] team0 (unregistering): Port device team_slave_0 removed [ 324.614611][T10073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.655924][T10073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.807017][ T5103] Bluetooth: hci0: command tx timeout [ 325.056617][ T5103] Bluetooth: hci2: command tx timeout [ 325.064615][T10073] bond0 (unregistering): Released all slaves [ 325.126650][ T5103] Bluetooth: hci3: command tx timeout [ 325.281370][T10073] team0 (unregistering): Port device macvlan1 removed [ 325.529941][T10073] team0 (unregistering): Port device team_slave_1 removed [ 325.577116][T10073] team0 (unregistering): Port device team_slave_0 removed [ 325.615559][T10073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.660794][T10073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.044097][T10073] bond0 (unregistering): Released all slaves [ 326.196002][T11311] veth0_vlan: entered promiscuous mode [ 326.231837][T11313] veth0_vlan: entered promiscuous mode [ 326.232379][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.245912][T11313] veth1_vlan: entered promiscuous mode [ 326.261660][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.283361][T11311] veth1_vlan: entered promiscuous mode [ 326.321583][T10065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.335143][T10065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.398182][T11313] veth0_macvtap: entered promiscuous mode [ 326.419493][T11313] veth1_macvtap: entered promiscuous mode [ 326.437497][T11311] veth0_macvtap: entered promiscuous mode [ 326.453870][T11311] veth1_macvtap: entered promiscuous mode [ 326.512577][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.536123][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.546170][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.558178][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.580211][T11311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.601179][T11398] FAULT_INJECTION: forcing a failure. [ 326.601179][T11398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.614047][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.626108][T11398] CPU: 0 PID: 11398 Comm: syz.5.1663 Not tainted 6.6.102-syzkaller #0 [ 326.630802][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.634277][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.644904][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.654104][T11398] Call Trace: [ 326.654113][T11398] [ 326.654121][T11398] dump_stack_lvl+0x16c/0x230 [ 326.654148][T11398] ? show_regs_print_info+0x20/0x20 [ 326.654165][T11398] ? load_image+0x3b0/0x3b0 [ 326.654189][T11398] ? __lock_acquire+0x7c80/0x7c80 [ 326.654209][T11398] ? snprintf+0xdb/0x120 [ 326.654233][T11398] should_fail_ex+0x39d/0x4d0 [ 326.654260][T11398] _copy_to_user+0x2f/0xa0 [ 326.654280][T11398] simple_read_from_buffer+0xe7/0x150 [ 326.654309][T11398] proc_fail_nth_read+0x1e3/0x250 [ 326.654334][T11398] ? proc_fault_inject_write+0x340/0x340 [ 326.654357][T11398] ? fsnotify_perm+0x271/0x5e0 [ 326.654377][T11398] ? proc_fault_inject_write+0x340/0x340 [ 326.654395][T11398] vfs_read+0x27e/0x920 [ 326.654417][T11398] ? kernel_read+0x1e0/0x1e0 [ 326.654438][T11398] ? __fget_files+0x28/0x4d0 [ 326.743183][T11398] ? __fget_files+0x44a/0x4d0 [ 326.747865][T11398] ? __fdget_pos+0x2a3/0x330 [ 326.752448][T11398] ? ksys_read+0x75/0x250 [ 326.756773][T11398] ksys_read+0x147/0x250 [ 326.761012][T11398] ? vfs_write+0x940/0x940 [ 326.765429][T11398] ? syscall_enter_from_user_mode+0x2e/0x80 [ 326.771321][T11398] do_syscall_64+0x55/0xb0 [ 326.775728][T11398] ? clear_bhb_loop+0x40/0x90 [ 326.780407][T11398] ? clear_bhb_loop+0x40/0x90 [ 326.785069][T11398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.790962][T11398] RIP: 0033:0x7f1aa698d5fc [ 326.795382][T11398] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 326.814993][T11398] RSP: 002b:00007f1aa7857030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.823439][T11398] RAX: ffffffffffffffda RBX: 00007f1aa6bb5fa0 RCX: 00007f1aa698d5fc [ 326.831402][T11398] RDX: 000000000000000f RSI: 00007f1aa78570a0 RDI: 0000000000000007 [ 326.839362][T11398] RBP: 00007f1aa7857090 R08: 0000000000000000 R09: 0000000000000000 [ 326.847323][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.855284][T11398] R13: 00007f1aa6bb6038 R14: 00007f1aa6bb5fa0 R15: 00007ffd6170baf8 [ 326.863266][T11398] [ 326.879512][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.894792][T11311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.929070][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.944071][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.963391][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.978421][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.000304][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.019667][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.034438][T11313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.254731][T11311] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.270341][T11311] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.296541][T11311] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.306796][T11311] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.318719][T11396] netlink: 'syz.2.1676': attribute type 9 has an invalid length. [ 327.330452][T11396] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1676'. [ 327.358305][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.379223][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.396222][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.415831][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.426102][T11313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.447898][T11313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.464500][T11313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.491520][T11313] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.510064][T11313] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.523689][T11313] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.534428][T11313] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.607606][T11403] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1671'. [ 329.217546][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.225861][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.293462][T10042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.307635][T10042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.320998][T11411] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1673'. [ 329.399428][T10073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.415773][T10073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.449710][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.463123][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.674413][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1675'. [ 329.740569][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1675'. [ 329.768976][T11421] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1675'. [ 329.809435][T11426] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1675'. [ 330.516946][T11432] netlink: 'syz.5.1678': attribute type 1 has an invalid length. [ 330.525071][T11432] netlink: 'syz.5.1678': attribute type 4 has an invalid length. [ 330.570948][T11432] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1678'. [ 330.617466][T11436] À: port 1(vlan0) entered blocking state [ 330.627391][T11436] À: port 1(vlan0) entered disabled state [ 330.633567][T11436] vlan0: entered allmulticast mode [ 330.640062][T11436] veth0_vlan: entered allmulticast mode [ 330.647521][T11436] vlan0: entered promiscuous mode [ 330.691573][T11438] team0: Port device team_slave_0 removed [ 330.702324][T11438] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 330.724663][T11436] À: port 1(vlan0) entered blocking state [ 330.730614][T11436] À: port 1(vlan0) entered forwarding state [ 331.227687][T11439] netlink: 'syz.6.1680': attribute type 9 has an invalid length. [ 331.229357][T11443] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.1681'. [ 331.235459][T11439] netlink: 399 bytes leftover after parsing attributes in process `syz.6.1680'. [ 331.353048][T11453] openvswitch: netlink: Flow actions attr not present in new flow. [ 331.375773][T11454] openvswitch: netlink: Flow actions attr not present in new flow. [ 332.895134][T11456] __nla_validate_parse: 2 callbacks suppressed [ 332.895149][T11456] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1684'. [ 333.298070][T11468] netlink: 'syz.5.1686': attribute type 10 has an invalid length. [ 333.434181][T11468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.518628][T11468] team0: Port device bond0 added [ 334.055235][T11478] netlink: 'syz.2.1692': attribute type 1 has an invalid length. [ 334.106868][T11478] netlink: 'syz.2.1692': attribute type 4 has an invalid length. [ 334.164437][T11478] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1692'. [ 334.379036][T11482] team0: Port device team_slave_0 removed [ 334.418809][T11482] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 334.925532][T11500] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1698'. [ 335.128210][T11498] netlink: 'syz.7.1696': attribute type 9 has an invalid length. [ 335.147272][T11498] netlink: 399 bytes leftover after parsing attributes in process `syz.7.1696'. [ 337.535055][T11524] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1714'. [ 337.690681][T11526] netlink: 'syz.7.1707': attribute type 1 has an invalid length. [ 337.706761][T11526] netlink: 'syz.7.1707': attribute type 4 has an invalid length. [ 337.714843][T11526] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1707'. [ 337.901788][T11526] team0: Port device team_slave_0 removed [ 337.919996][T11526] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 338.032159][T11542] tap0: tun_chr_ioctl cmd 1074025677 [ 338.039882][T11542] tap0: linktype set to 804 [ 338.326173][T11556] netlink: 'syz.6.1719': attribute type 1 has an invalid length. [ 338.345802][T11556] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1719'. [ 338.909985][T11573] FAULT_INJECTION: forcing a failure. [ 338.909985][T11573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.970480][T11573] CPU: 0 PID: 11573 Comm: syz.2.1725 Not tainted 6.6.102-syzkaller #0 [ 338.978704][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.988769][T11573] Call Trace: [ 338.992054][T11573] [ 338.994990][T11573] dump_stack_lvl+0x16c/0x230 [ 338.999689][T11573] ? show_regs_print_info+0x20/0x20 [ 339.004903][T11573] ? load_image+0x3b0/0x3b0 [ 339.009434][T11573] ? __might_fault+0xaa/0x120 [ 339.014122][T11573] ? __lock_acquire+0x7c80/0x7c80 [ 339.019157][T11573] should_fail_ex+0x39d/0x4d0 [ 339.023846][T11573] _copy_from_user+0x2f/0xe0 [ 339.028449][T11573] csum_and_copy_from_iter+0x662/0x1450 [ 339.034030][T11573] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 339.039690][T11573] ? __kmem_cache_alloc_node+0x13e/0x260 [ 339.045355][T11573] ? __alloc_skb+0x138/0x2c0 [ 339.049959][T11573] ? rcu_is_watching+0x15/0xb0 [ 339.054738][T11573] ip_generic_getfrag+0x145/0x2d0 [ 339.059778][T11573] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 339.064641][T11573] ? skb_put+0x11b/0x210 [ 339.068904][T11573] __ip_append_data+0x2e01/0x3bd0 [ 339.073972][T11573] ? raw_send_hdrinc+0x1240/0x1240 [ 339.079104][T11573] ? ip_setup_cork+0x860/0x860 [ 339.083889][T11573] ? ip_setup_cork+0x530/0x860 [ 339.088683][T11573] ip_append_data+0x10d/0x180 [ 339.093374][T11573] ? raw_send_hdrinc+0x1240/0x1240 [ 339.098504][T11573] raw_sendmsg+0x1420/0x1950 [ 339.103131][T11573] ? compat_raw_ioctl+0x70/0x70 [ 339.108009][T11573] ? aa_sk_perm+0x7fc/0x930 [ 339.112544][T11573] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 339.119001][T11573] ? sock_rps_record_flow+0x19/0x400 [ 339.124312][T11573] ? inet_send_prepare+0x260/0x260 [ 339.129440][T11573] ? inet_sendmsg+0x7c/0x2f0 [ 339.134083][T11573] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 339.139387][T11573] ? security_socket_sendmsg+0x80/0xa0 [ 339.144866][T11573] ? inet_send_prepare+0x260/0x260 [ 339.149988][T11573] ____sys_sendmsg+0x5bf/0x950 [ 339.154782][T11573] ? __sys_sendmsg_sock+0x30/0x30 [ 339.159902][T11573] ? __import_iovec+0x3fa/0x860 [ 339.164784][T11573] ? import_iovec+0x73/0xa0 [ 339.169302][T11573] ___sys_sendmsg+0x220/0x290 [ 339.173997][T11573] ? __sys_sendmsg+0x270/0x270 [ 339.179270][T11573] ? __lock_acquire+0x7c80/0x7c80 [ 339.184352][T11573] __se_sys_sendmsg+0x1a5/0x270 [ 339.189235][T11573] ? __x64_sys_sendmsg+0x80/0x80 [ 339.194220][T11573] ? lockdep_hardirqs_on+0x98/0x150 [ 339.199467][T11573] do_syscall_64+0x55/0xb0 [ 339.203895][T11573] ? clear_bhb_loop+0x40/0x90 [ 339.208588][T11573] ? clear_bhb_loop+0x40/0x90 [ 339.213275][T11573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.219180][T11573] RIP: 0033:0x7f6a3dd8ebe9 [ 339.223603][T11573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.243273][T11573] RSP: 002b:00007f6a3eb7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.251716][T11573] RAX: ffffffffffffffda RBX: 00007f6a3dfb5fa0 RCX: 00007f6a3dd8ebe9 [ 339.259703][T11573] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 339.267710][T11573] RBP: 00007f6a3eb7d090 R08: 0000000000000000 R09: 0000000000000000 [ 339.275692][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.283672][T11573] R13: 00007f6a3dfb6038 R14: 00007f6a3dfb5fa0 R15: 00007ffde6e6b1a8 [ 339.291757][T11573] [ 339.397835][T11575] netlink: 'syz.6.1726': attribute type 1 has an invalid length. [ 339.453710][T11575] netlink: 'syz.6.1726': attribute type 4 has an invalid length. [ 339.484442][T11575] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1726'. [ 339.845845][T11575] team0: Port device team_slave_0 removed [ 339.858870][T11575] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 339.885649][T11582] netlink: 'syz.5.1728': attribute type 39 has an invalid length. [ 339.903790][T11585] netlink: 'syz.5.1728': attribute type 3 has an invalid length. [ 339.913106][T11585] netlink: 106052 bytes leftover after parsing attributes in process `syz.5.1728'. [ 340.038385][T11586] C: renamed from team_slave_0 [ 340.050552][T11587] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.1728'. [ 340.070758][T11586] netlink: 'syz.5.1728': attribute type 3 has an invalid length. [ 340.085432][T11586] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 340.490402][T11603] FAULT_INJECTION: forcing a failure. [ 340.490402][T11603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.521508][T11603] CPU: 1 PID: 11603 Comm: syz.7.1735 Not tainted 6.6.102-syzkaller #0 [ 340.526136][ T5103] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 340.529693][T11603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.529708][T11603] Call Trace: [ 340.529716][T11603] [ 340.529723][T11603] dump_stack_lvl+0x16c/0x230 [ 340.529750][T11603] ? show_regs_print_info+0x20/0x20 [ 340.529768][T11603] ? load_image+0x3b0/0x3b0 [ 340.529796][T11603] ? __might_fault+0xaa/0x120 [ 340.529814][T11603] ? __lock_acquire+0x7c80/0x7c80 [ 340.529837][T11603] should_fail_ex+0x39d/0x4d0 [ 340.581835][T11603] _copy_from_iter+0x1d3/0x1290 [ 340.586720][T11603] ? __virt_addr_valid+0x18c/0x540 [ 340.591855][T11603] ? __lock_acquire+0x7c80/0x7c80 [ 340.596901][T11603] ? copyout_mc+0x70/0x70 [ 340.601251][T11603] ? __virt_addr_valid+0x18c/0x540 [ 340.606382][T11603] ? __virt_addr_valid+0x18c/0x540 [ 340.611600][T11603] ? __virt_addr_valid+0x469/0x540 [ 340.616743][T11603] ? __check_object_size+0x506/0xa30 [ 340.622053][T11603] netlink_sendmsg+0x75c/0xbe0 [ 340.626841][T11603] ? lockdep_hardirqs_on+0x98/0x150 [ 340.632059][T11603] ? netlink_getsockopt+0x580/0x580 [ 340.637293][T11603] ? netlink_getsockopt+0x580/0x580 [ 340.642514][T11603] ____sys_sendmsg+0x5bf/0x950 [ 340.647309][T11603] ? __asan_memset+0x22/0x40 [ 340.651912][T11603] ? __sys_sendmsg_sock+0x30/0x30 [ 340.657045][T11603] ? __import_iovec+0x5f2/0x860 [ 340.661934][T11603] ? import_iovec+0x73/0xa0 [ 340.666462][T11603] ___sys_sendmsg+0x220/0x290 [ 340.671154][T11603] ? __sys_sendmsg+0x270/0x270 [ 340.675916][T11603] ? __lock_acquire+0x7c80/0x7c80 [ 340.680948][T11603] __se_sys_sendmsg+0x1a5/0x270 [ 340.685790][T11603] ? __x64_sys_sendmsg+0x80/0x80 [ 340.690763][T11603] do_syscall_64+0x55/0xb0 [ 340.695166][T11603] ? clear_bhb_loop+0x40/0x90 [ 340.699824][T11603] ? clear_bhb_loop+0x40/0x90 [ 340.704486][T11603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.710369][T11603] RIP: 0033:0x7fd44ad8ebe9 [ 340.714778][T11603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.734402][T11603] RSP: 002b:00007fd44bbe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.742821][T11603] RAX: ffffffffffffffda RBX: 00007fd44afb5fa0 RCX: 00007fd44ad8ebe9 [ 340.750779][T11603] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 340.758736][T11603] RBP: 00007fd44bbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.766778][T11603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.774851][T11603] R13: 00007fd44afb6038 R14: 00007fd44afb5fa0 R15: 00007ffd5af3a5f8 [ 340.782834][T11603] [ 340.801112][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1737'. [ 341.001932][T11615] netlink: 'syz.6.1738': attribute type 1 has an invalid length. [ 341.006201][T11613] netlink: 144960 bytes leftover after parsing attributes in process `syz.2.1739'. [ 341.040995][T11613] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 341.066728][T11615] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1738'. [ 341.121835][T11619] syz.5.1740: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 341.161269][T11619] CPU: 1 PID: 11619 Comm: syz.5.1740 Not tainted 6.6.102-syzkaller #0 [ 341.169480][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.179548][T11619] Call Trace: [ 341.182830][T11619] [ 341.185773][T11619] dump_stack_lvl+0x16c/0x230 [ 341.190469][T11619] ? show_regs_print_info+0x20/0x20 [ 341.195687][T11619] ? load_image+0x3b0/0x3b0 [ 341.200224][T11619] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 341.206650][T11619] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 341.213165][T11619] warn_alloc+0x210/0x300 [ 341.217521][T11619] ? stack_trace_save+0x9c/0xe0 [ 341.222384][T11619] ? zone_watermark_ok_safe+0x230/0x230 [ 341.227952][T11619] ? kasan_set_track+0x5f/0x70 [ 341.232730][T11619] ? kasan_set_track+0x4e/0x70 [ 341.237500][T11619] ? __kasan_kmalloc+0x8f/0xa0 [ 341.242354][T11619] ? xsk_init_queue+0xb0/0x110 [ 341.247125][T11619] ? xsk_setsockopt+0x4db/0x6f0 [ 341.252094][T11619] ? do_sock_setsockopt+0x175/0x1a0 [ 341.257303][T11619] ? __x64_sys_setsockopt+0x184/0x200 [ 341.262691][T11619] __vmalloc_node_range+0x126/0x1320 [ 341.268022][T11619] ? free_vm_area+0x50/0x50 [ 341.272556][T11619] vmalloc_user+0x74/0x80 [ 341.276898][T11619] ? xskq_create+0xbf/0x170 [ 341.281409][T11619] xskq_create+0xbf/0x170 [ 341.285751][T11619] xsk_init_queue+0xb0/0x110 [ 341.290352][T11619] xsk_setsockopt+0x4db/0x6f0 [ 341.295062][T11619] ? xsk_poll+0x670/0x670 [ 341.299446][T11619] ? __fget_files+0x28/0x4d0 [ 341.304050][T11619] ? aa_sock_opt_perm+0x74/0x100 [ 341.309040][T11619] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 341.314616][T11619] ? security_socket_setsockopt+0x7e/0xa0 [ 341.320342][T11619] ? xsk_poll+0x670/0x670 [ 341.324691][T11619] do_sock_setsockopt+0x175/0x1a0 [ 341.329732][T11619] ? __fdget+0x180/0x210 [ 341.333993][T11619] __x64_sys_setsockopt+0x184/0x200 [ 341.339214][T11619] do_syscall_64+0x55/0xb0 [ 341.343642][T11619] ? clear_bhb_loop+0x40/0x90 [ 341.348333][T11619] ? clear_bhb_loop+0x40/0x90 [ 341.353045][T11619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.358974][T11619] RIP: 0033:0x7f1aa698ebe9 [ 341.363461][T11619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.383098][T11619] RSP: 002b:00007f1aa7836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 341.391535][T11619] RAX: ffffffffffffffda RBX: 00007f1aa6bb6090 RCX: 00007f1aa698ebe9 [ 341.399532][T11619] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 341.407515][T11619] RBP: 00007f1aa6a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 341.415512][T11619] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 341.423507][T11619] R13: 00007f1aa6bb6128 R14: 00007f1aa6bb6090 R15: 00007ffd6170baf8 [ 341.431532][T11619] [ 341.494839][T11619] Mem-Info: [ 341.498213][T11619] active_anon:19425 inactive_anon:0 isolated_anon:0 [ 341.498213][T11619] active_file:15534 inactive_file:39944 isolated_file:0 [ 341.498213][T11619] unevictable:768 dirty:152 writeback:0 [ 341.498213][T11619] slab_reclaimable:10711 slab_unreclaimable:99943 [ 341.498213][T11619] mapped:24129 shmem:1385 pagetables:496 [ 341.498213][T11619] sec_pagetables:0 bounce:0 [ 341.498213][T11619] kernel_misc_reclaimable:0 [ 341.498213][T11619] free:1326792 free_pcp:9614 free_cma:0 [ 341.624004][T11619] Node 0 active_anon:77800kB inactive_anon:0kB active_file:62136kB inactive_file:159580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96516kB dirty:604kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11648kB pagetables:2084kB sec_pagetables:0kB all_unreclaimable? no [ 341.703878][T11619] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 341.748230][T11619] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 341.782356][T11619] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 341.791878][T11619] Node 0 DMA32 free:1391256kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:77848kB inactive_anon:0kB active_file:62136kB inactive_file:158264kB unevictable:1536kB writepending:600kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:21456kB local_pcp:11268kB free_cma:0kB [ 341.830552][T11619] lowmem_reserve[]: 0 0 1 1 1 [ 341.835523][T11619] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 341.903782][T11619] lowmem_reserve[]: 0 0 0 0 0 [ 341.916528][T11619] Node 1 Normal free:3900544kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16200kB local_pcp:6532kB free_cma:0kB [ 341.981249][T11619] lowmem_reserve[]: 0 0 0 0 0 [ 341.990568][T11619] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 342.004617][T11619] Node 0 DMA32: 0*4kB 873*8kB (ME) 675*16kB (M) 657*32kB (UME) 226*64kB (UM) 143*128kB (UME) 66*256kB (UME) 51*512kB (UM) 23*1024kB (UM) 12*2048kB (UM) 300*4096kB (UM) = 1391512kB [ 342.029084][T11619] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 342.044676][T11619] Node 1 Normal: 244*4kB (UE) 60*8kB (UE) 45*16kB (UE) 96*32kB (UE) 26*64kB (UME) 9*128kB (UME) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3900544kB [ 342.071185][T11619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.096757][T11619] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 342.143207][T11619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.159094][T11619] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 342.169489][T11619] 56863 total pagecache pages [ 342.174220][T11619] 0 pages in swap cache [ 342.181762][T11619] Free swap = 124996kB [ 342.195880][T11619] Total swap = 124996kB [ 342.200900][T11619] 2097051 pages RAM [ 342.205104][T11619] 0 pages HighMem/MovableOnly [ 342.210460][T11619] 416138 pages reserved [ 342.214636][T11619] 0 pages cma reserved [ 342.565365][T11651] FAULT_INJECTION: forcing a failure. [ 342.565365][T11651] name failslab, interval 1, probability 0, space 0, times 0 [ 342.594392][T11651] CPU: 0 PID: 11651 Comm: syz.6.1750 Not tainted 6.6.102-syzkaller #0 [ 342.602615][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.612699][T11651] Call Trace: [ 342.615993][T11651] [ 342.618939][T11651] dump_stack_lvl+0x16c/0x230 [ 342.623654][T11651] ? show_regs_print_info+0x20/0x20 [ 342.628881][T11651] ? load_image+0x3b0/0x3b0 [ 342.633449][T11651] should_fail_ex+0x39d/0x4d0 [ 342.638157][T11651] should_failslab+0x9/0x20 [ 342.642683][T11651] slab_pre_alloc_hook+0x59/0x310 [ 342.647734][T11651] kmem_cache_alloc+0x5a/0x2e0 [ 342.652521][T11651] ? __nf_conntrack_alloc+0x99/0x380 [ 342.657845][T11651] __nf_conntrack_alloc+0x99/0x380 [ 342.662994][T11651] init_conntrack+0x156/0xee0 [ 342.667699][T11651] ? early_drop+0x7b0/0x7b0 [ 342.672228][T11651] ? nf_conntrack_find_get+0x600/0x600 [ 342.677713][T11651] ? __siphash_unaligned+0x232/0x3b0 [ 342.683046][T11651] nf_conntrack_in+0xbf1/0x15c0 [ 342.687948][T11651] ? nf_ct_pernet+0x270/0x270 [ 342.692816][T11651] ? ip6t_do_table+0x1d5/0x1500 [ 342.697694][T11651] ? ip6t_alloc_initial_table+0x640/0x640 [ 342.703441][T11651] ? __flow_hash_from_keys+0x45b/0x6e0 [ 342.708954][T11651] ? ipv6_defrag+0x2d6/0x3a0 [ 342.713581][T11651] ? ipv6_conntrack_in+0x20/0x20 [ 342.718638][T11651] nf_hook_slow+0xbd/0x200 [ 342.723080][T11651] __ip6_local_out+0x776/0x880 [ 342.727867][T11651] ? __ip6_local_out+0x614/0x880 [ 342.732818][T11651] ? ip6_dst_hoplimit+0x350/0x350 [ 342.737864][T11651] ? __ip6_local_out+0x880/0x880 [ 342.742994][T11651] ? read_lock_is_recursive+0x20/0x20 [ 342.748385][T11651] ? csum_partial+0x241/0x2c0 [ 342.753086][T11651] ? __skb_checksum+0x800/0x800 [ 342.757961][T11651] ip6_local_out+0x2a/0x130 [ 342.762485][T11651] ? ip6_send_skb+0x10f/0x380 [ 342.767183][T11651] ip6_send_skb+0x1d5/0x380 [ 342.771703][T11651] udp_v6_send_skb+0xbbb/0x1860 [ 342.776591][T11651] udp_v6_push_pending_frames+0x133/0x220 [ 342.782426][T11651] udpv6_sendmsg+0xe29/0x22f0 [ 342.787141][T11651] ? udpv6_sendmsg+0x22f0/0x22f0 [ 342.792147][T11651] ? udp_v6_early_demux+0xf60/0xf60 [ 342.797423][T11651] ? inet_send_prepare+0x5c/0x260 [ 342.802471][T11651] ? inet6_sendmsg+0x5f/0xd0 [ 342.807182][T11651] ? inet6_compat_ioctl+0x380/0x380 [ 342.812419][T11651] ____sys_sendmsg+0x5bf/0x950 [ 342.817219][T11651] ? __asan_memset+0x22/0x40 [ 342.821834][T11651] ? __sys_sendmsg_sock+0x30/0x30 [ 342.826884][T11651] ? __import_iovec+0x3fa/0x860 [ 342.832048][T11651] ? import_iovec+0x73/0xa0 [ 342.836599][T11651] ___sys_sendmsg+0x220/0x290 [ 342.841397][T11651] ? __sys_sendmsg+0x270/0x270 [ 342.846275][T11651] ? __lock_acquire+0x7c80/0x7c80 [ 342.851335][T11651] __se_sys_sendmsg+0x1a5/0x270 [ 342.856204][T11651] ? __x64_sys_sendmsg+0x80/0x80 [ 342.861165][T11651] ? lockdep_hardirqs_on+0x98/0x150 [ 342.866380][T11651] do_syscall_64+0x55/0xb0 [ 342.870816][T11651] ? clear_bhb_loop+0x40/0x90 [ 342.875511][T11651] ? clear_bhb_loop+0x40/0x90 [ 342.880191][T11651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.886095][T11651] RIP: 0033:0x7f1db218ebe9 [ 342.890514][T11651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.910212][T11651] RSP: 002b:00007f1db3000038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.918621][T11651] RAX: ffffffffffffffda RBX: 00007f1db23b5fa0 RCX: 00007f1db218ebe9 [ 342.926591][T11651] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 342.934556][T11651] RBP: 00007f1db3000090 R08: 0000000000000000 R09: 0000000000000000 [ 342.942516][T11651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.950495][T11651] R13: 00007f1db23b6038 R14: 00007f1db23b5fa0 R15: 00007ffebaa8c858 [ 342.958470][T11651] [ 343.685989][T11689] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.1763'. [ 343.878928][T11694] FAULT_INJECTION: forcing a failure. [ 343.878928][T11694] name failslab, interval 1, probability 0, space 0, times 0 [ 343.896375][T11694] CPU: 0 PID: 11694 Comm: syz.6.1764 Not tainted 6.6.102-syzkaller #0 [ 343.904619][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.914722][T11694] Call Trace: [ 343.918049][T11694] [ 343.921016][T11694] dump_stack_lvl+0x16c/0x230 [ 343.925746][T11694] ? show_regs_print_info+0x20/0x20 [ 343.931166][T11694] ? load_image+0x3b0/0x3b0 [ 343.935770][T11694] should_fail_ex+0x39d/0x4d0 [ 343.940518][T11694] should_failslab+0x9/0x20 [ 343.945064][T11694] slab_pre_alloc_hook+0x59/0x310 [ 343.950168][T11694] kmem_cache_alloc+0x5a/0x2e0 [ 343.955060][T11694] ? dst_alloc+0x105/0x170 [ 343.959532][T11694] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 343.965215][T11694] dst_alloc+0x105/0x170 [ 343.969530][T11694] ip6_rt_cache_alloc+0x39f/0x9c0 [ 343.974647][T11694] ? rt6_find_cached_rt+0x270/0x270 [ 343.979903][T11694] ? rt6_find_cached_rt+0x21d/0x270 [ 343.985192][T11694] ? ip6_pol_route+0x166/0x1160 [ 343.990101][T11694] ip6_pol_route+0xf3a/0x1160 [ 343.994838][T11694] ? ip6_pol_route+0x166/0x1160 [ 343.999754][T11694] ? trace_fib6_table_lookup+0x1c0/0x1c0 [ 344.005457][T11694] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 344.011628][T11694] fib6_rule_lookup+0x2fd/0x510 [ 344.016531][T11694] ? skb_header_pointer+0x120/0x120 [ 344.021793][T11694] ? fib6_lookup+0x2c0/0x2c0 [ 344.026541][T11694] ? perf_trace_lock+0x2ed/0x380 [ 344.031528][T11694] ? read_lock_is_recursive+0x20/0x20 [ 344.037000][T11694] ip6_route_output_flags+0x364/0x5d0 [ 344.042408][T11694] ? ip6_route_output_flags+0x2e/0x5d0 [ 344.047929][T11694] ip6_dst_lookup_tail+0x199/0x14a0 [ 344.053198][T11694] ? txopt_get+0x7b/0x3e0 [ 344.057574][T11694] ? __lock_acquire+0x7c80/0x7c80 [ 344.062655][T11694] ? ip6_dst_lookup+0x60/0x60 [ 344.067380][T11694] ? txopt_get+0x7b/0x3e0 [ 344.071741][T11694] ? txopt_get+0x7b/0x3e0 [ 344.076115][T11694] ? txopt_get+0x336/0x3e0 [ 344.080594][T11694] ? fl6_sock_lookup+0xd0/0xd0 [ 344.085417][T11694] ip6_dst_lookup_flow+0x48/0xe0 [ 344.090413][T11694] rawv6_sendmsg+0xd07/0x17f0 [ 344.095180][T11694] ? __might_sleep+0xe0/0xe0 [ 344.099828][T11694] ? compat_rawv6_ioctl+0x70/0x70 [ 344.104944][T11694] ? aa_sk_perm+0x7fc/0x930 [ 344.109524][T11694] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 344.116022][T11694] ? inet_send_prepare+0x260/0x260 [ 344.121185][T11694] ? inet_sendmsg+0x7c/0x2f0 [ 344.125809][T11694] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 344.131144][T11694] ? security_socket_sendmsg+0x80/0xa0 [ 344.136657][T11694] ? inet_send_prepare+0x260/0x260 [ 344.141818][T11694] ____sys_sendmsg+0x5bf/0x950 [ 344.146743][T11694] ? __asan_memset+0x22/0x40 [ 344.151383][T11694] ? __sys_sendmsg_sock+0x30/0x30 [ 344.156440][T11694] ? __import_iovec+0x3fa/0x860 [ 344.161374][T11694] ? import_iovec+0x73/0xa0 [ 344.165990][T11694] ___sys_sendmsg+0x220/0x290 [ 344.170724][T11694] ? __sys_sendmsg+0x270/0x270 [ 344.175608][T11694] ? __lock_acquire+0x7c80/0x7c80 [ 344.180772][T11694] __se_sys_sendmsg+0x1a5/0x270 [ 344.185679][T11694] ? __x64_sys_sendmsg+0x80/0x80 [ 344.190727][T11694] ? lockdep_hardirqs_on+0x98/0x150 [ 344.195996][T11694] do_syscall_64+0x55/0xb0 [ 344.200457][T11694] ? clear_bhb_loop+0x40/0x90 [ 344.205172][T11694] ? clear_bhb_loop+0x40/0x90 [ 344.209893][T11694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.215814][T11694] RIP: 0033:0x7f1db218ebe9 [ 344.220341][T11694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.240065][T11694] RSP: 002b:00007f1db3000038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.248542][T11694] RAX: ffffffffffffffda RBX: 00007f1db23b5fa0 RCX: 00007f1db218ebe9 [ 344.256557][T11694] RDX: 0000000020000810 RSI: 0000200000000100 RDI: 0000000000000003 [ 344.264554][T11694] RBP: 00007f1db3000090 R08: 0000000000000000 R09: 0000000000000000 [ 344.272548][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.280557][T11694] R13: 00007f1db23b6038 R14: 00007f1db23b5fa0 R15: 00007ffebaa8c858 [ 344.288668][T11694] [ 344.631052][T11706] netlink: 'syz.5.1768': attribute type 51 has an invalid length. [ 344.988564][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1771'. [ 346.527513][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1771'. [ 347.069070][T11742] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1779'. [ 347.084341][T11742] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1779'. [ 347.652722][T11761] netlink: 'syz.6.1786': attribute type 9 has an invalid length. [ 347.683113][T11761] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1786'. [ 348.549842][T11796] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1802'. [ 348.565514][T11796] netlink: 6332 bytes leftover after parsing attributes in process `syz.6.1802'. [ 348.577921][T11795] netlink: 'syz.5.1803': attribute type 10 has an invalid length. [ 348.591204][T11795] netlink: 'syz.5.1803': attribute type 19 has an invalid length. [ 348.605826][T11795] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1803'. [ 348.946851][T11807] netlink: 'syz.6.1806': attribute type 21 has an invalid length. [ 348.954745][T11807] netlink: 'syz.6.1806': attribute type 30 has an invalid length. [ 349.160282][T11813] netlink: 'syz.5.1809': attribute type 3 has an invalid length. [ 349.173485][T11813] netlink: 28575 bytes leftover after parsing attributes in process `syz.5.1809'. [ 349.431359][T11818] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1812'. [ 350.271987][T11849] netlink: 'syz.7.1822': attribute type 10 has an invalid length. [ 350.326496][T11849] netlink: 'syz.7.1822': attribute type 19 has an invalid length. [ 350.355108][T11849] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1822'. [ 350.702226][T11852] netlink: 'syz.5.1823': attribute type 10 has an invalid length. [ 350.795987][T11852] geneve0: entered promiscuous mode [ 350.823902][T11852] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 350.869218][T11855] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1824'. [ 350.979484][T11849] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1822'. [ 351.009898][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.070753][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.087742][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.102684][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.113508][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.126060][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.142052][T11849] batadv_slave_1: entered promiscuous mode [ 351.281192][T11863] FAULT_INJECTION: forcing a failure. [ 351.281192][T11863] name failslab, interval 1, probability 0, space 0, times 0 [ 351.310871][T11863] CPU: 0 PID: 11863 Comm: syz.6.1826 Not tainted 6.6.102-syzkaller #0 [ 351.319090][T11863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.329173][T11863] Call Trace: [ 351.332468][T11863] [ 351.335412][T11863] dump_stack_lvl+0x16c/0x230 [ 351.340120][T11863] ? show_regs_print_info+0x20/0x20 [ 351.345341][T11863] ? load_image+0x3b0/0x3b0 [ 351.349867][T11863] ? __might_sleep+0xe0/0xe0 [ 351.354471][T11863] ? __lock_acquire+0x7c80/0x7c80 [ 351.359505][T11863] ? do_syscall_64+0x55/0xb0 [ 351.364155][T11863] should_fail_ex+0x39d/0x4d0 [ 351.368861][T11863] should_failslab+0x9/0x20 [ 351.373383][T11863] slab_pre_alloc_hook+0x59/0x310 [ 351.378436][T11863] kmem_cache_alloc+0x5a/0x2e0 [ 351.383210][T11863] ? getname_kernel+0x5a/0x2f0 [ 351.388086][T11863] getname_kernel+0x5a/0x2f0 [ 351.392696][T11863] kern_path+0x1d/0x50 [ 351.396798][T11863] create_local_trace_uprobe+0xa6/0x6a0 [ 351.402380][T11863] ? bpf_get_uprobe_info+0x520/0x520 [ 351.407697][T11863] ? __might_fault+0xaa/0x120 [ 351.412438][T11863] ? _copy_from_user+0xa5/0xe0 [ 351.417228][T11863] perf_uprobe_init+0xf3/0x190 [ 351.422017][T11863] perf_uprobe_event_init+0xe6/0x180 [ 351.427329][T11863] perf_try_init_event+0x12b/0x3c0 [ 351.432466][T11863] perf_event_alloc+0xfa4/0x21b0 [ 351.437416][T11863] ? perf_event_alloc+0xc06/0x21b0 [ 351.442552][T11863] ? find_lively_task_by_vpid+0x19/0x290 [ 351.448210][T11863] __se_sys_perf_event_open+0x70e/0x1c20 [ 351.453873][T11863] ? mutex_unlock+0x10/0x10 [ 351.458406][T11863] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 351.464070][T11863] ? lock_chain_count+0x20/0x20 [ 351.468946][T11863] ? lockdep_hardirqs_on+0x98/0x150 [ 351.474158][T11863] ? __x64_sys_perf_event_open+0x20/0xc0 [ 351.479808][T11863] do_syscall_64+0x55/0xb0 [ 351.484231][T11863] ? clear_bhb_loop+0x40/0x90 [ 351.488917][T11863] ? clear_bhb_loop+0x40/0x90 [ 351.493611][T11863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.499543][T11863] RIP: 0033:0x7f1db218ebe9 [ 351.503966][T11863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.523686][T11863] RSP: 002b:00007f1db3000038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 351.532118][T11863] RAX: ffffffffffffffda RBX: 00007f1db23b5fa0 RCX: 00007f1db218ebe9 [ 351.540099][T11863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 351.548076][T11863] RBP: 00007f1db3000090 R08: 0000000000000000 R09: 0000000000000000 [ 351.556234][T11863] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 351.564212][T11863] R13: 00007f1db23b6038 R14: 00007f1db23b5fa0 R15: 00007ffebaa8c858 [ 351.572226][T11863] [ 352.076222][T11883] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1833'. [ 352.091440][T11883] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 352.261770][T11890] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1835'. [ 352.320139][T11893] netlink: 'syz.6.1837': attribute type 7 has an invalid length. [ 352.345281][T11893] netlink: 'syz.6.1837': attribute type 5 has an invalid length. [ 352.379019][T11893] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1837'. [ 352.691752][T11908] netlink: 'syz.5.1839': attribute type 21 has an invalid length. [ 352.713109][T11908] netlink: 'syz.5.1839': attribute type 30 has an invalid length. [ 352.992512][T11925] netlink: 'syz.5.1843': attribute type 29 has an invalid length. [ 353.025933][T11925] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1843'. [ 353.054062][T11925] netlink: 'syz.5.1843': attribute type 29 has an invalid length. [ 353.072874][T11925] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1843'. [ 353.535833][T11942] netlink: 'syz.5.1846': attribute type 4 has an invalid length. [ 353.893799][T11957] FAULT_INJECTION: forcing a failure. [ 353.893799][T11957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.907716][T11957] CPU: 1 PID: 11957 Comm: syz.5.1849 Not tainted 6.6.102-syzkaller #0 [ 353.915893][T11957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.926051][T11957] Call Trace: [ 353.929346][T11957] [ 353.932288][T11957] dump_stack_lvl+0x16c/0x230 [ 353.936977][T11957] ? ring_buffer_lock_reserve+0xb60/0xed0 [ 353.942717][T11957] ? show_regs_print_info+0x20/0x20 [ 353.948025][T11957] ? load_image+0x3b0/0x3b0 [ 353.952564][T11957] ? mark_lock+0x94/0x320 [ 353.956913][T11957] ? __lock_acquire+0x1260/0x7c80 [ 353.961950][T11957] should_fail_ex+0x39d/0x4d0 [ 353.966643][T11957] strncpy_from_user+0x36/0x2e0 [ 353.971502][T11957] strncpy_from_user_nofault+0x71/0x140 [ 353.977041][T11957] bpf_bprintf_prepare+0xb9b/0x1400 [ 353.982231][T11957] ? verify_lock_unused+0x140/0x140 [ 353.987513][T11957] ? bpf_bprintf_cleanup+0xc0/0xc0 [ 353.992613][T11957] ? __lock_acquire+0x1334/0x7c80 [ 353.997628][T11957] ? bpf_trace_printk+0xc2/0x190 [ 354.002563][T11957] bpf_trace_printk+0xdc/0x190 [ 354.007335][T11957] ? bpf_probe_write_user+0xe0/0xe0 [ 354.012547][T11957] bpf_prog_7c77c7e0f6645ad8+0x3d/0x3f [ 354.018016][T11957] bpf_trace_run2+0x1d1/0x3c0 [ 354.023207][T11957] ? release_sock+0x2f/0x1c0 [ 354.027797][T11957] ? bpf_trace_run2+0xde/0x3c0 [ 354.032552][T11957] ? bpf_trace_run1+0x3b0/0x3b0 [ 354.037392][T11957] ? __bpf_trace_contention_begin+0xce/0x130 [ 354.043374][T11957] __bpf_trace_contention_begin+0xdd/0x130 [ 354.049175][T11957] ? __bpf_trace_lock+0x140/0x140 [ 354.054193][T11957] ? __might_sleep+0xe0/0xe0 [ 354.058774][T11957] ? read_lock_is_recursive+0x20/0x20 [ 354.064132][T11957] ? perf_trace_preemptirq_template+0xa4/0x340 [ 354.070286][T11957] trace_contention_begin+0xc5/0xe0 [ 354.075481][T11957] __mutex_lock+0x13a/0xcc0 [ 354.079979][T11957] ? __fget_files+0x28/0x4d0 [ 354.084570][T11957] ? __lock_acquire+0x7c80/0x7c80 [ 354.089593][T11957] ? __local_bh_enable_ip+0x12e/0x1c0 [ 354.094952][T11957] ? __fdget_pos+0x2a3/0x330 [ 354.099533][T11957] ? _local_bh_enable+0xa0/0xa0 [ 354.104368][T11957] ? mutex_lock_nested+0x20/0x20 [ 354.109388][T11957] ? __fget_files+0x28/0x4d0 [ 354.114001][T11957] ? __fget_files+0x44a/0x4d0 [ 354.118769][T11957] __fdget_pos+0x2a3/0x330 [ 354.123183][T11957] ? ksys_read+0x75/0x250 [ 354.127517][T11957] ksys_read+0x7c/0x250 [ 354.131665][T11957] ? lock_chain_count+0x20/0x20 [ 354.136596][T11957] ? vfs_write+0x940/0x940 [ 354.141008][T11957] ? lockdep_hardirqs_on+0x98/0x150 [ 354.146199][T11957] do_syscall_64+0x55/0xb0 [ 354.150614][T11957] ? clear_bhb_loop+0x40/0x90 [ 354.155280][T11957] ? clear_bhb_loop+0x40/0x90 [ 354.160053][T11957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.166023][T11957] RIP: 0033:0x7f1aa698d5fc [ 354.170449][T11957] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 354.190045][T11957] RSP: 002b:00007f1aa7857030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.198451][T11957] RAX: ffffffffffffffda RBX: 00007f1aa6bb5fa0 RCX: 00007f1aa698d5fc [ 354.206414][T11957] RDX: 000000000000000f RSI: 00007f1aa78570a0 RDI: 0000000000000004 [ 354.214395][T11957] RBP: 00007f1aa7857090 R08: 0000000000000000 R09: 0000000000000000 [ 354.222453][T11957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.230424][T11957] R13: 00007f1aa6bb6038 R14: 00007f1aa6bb5fa0 R15: 00007ffd6170baf8 [ 354.238405][T11957] [ 354.445181][T11963] __nla_validate_parse: 2 callbacks suppressed [ 354.445196][T11963] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1850'. [ 355.073472][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1855'. [ 355.133475][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1855'. [ 355.145633][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1855'. [ 355.219259][T11989] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1856'. [ 355.333867][T11996] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1857'. [ 355.901692][T12021] FAULT_INJECTION: forcing a failure. [ 355.901692][T12021] name failslab, interval 1, probability 0, space 0, times 0 [ 355.931990][T12021] CPU: 0 PID: 12021 Comm: syz.2.1867 Not tainted 6.6.102-syzkaller #0 [ 355.940304][T12021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.950379][T12021] Call Trace: [ 355.953672][T12021] [ 355.956610][T12021] dump_stack_lvl+0x16c/0x230 [ 355.961353][T12021] ? show_regs_print_info+0x20/0x20 [ 355.966571][T12021] ? load_image+0x3b0/0x3b0 [ 355.971100][T12021] ? __might_sleep+0xe0/0xe0 [ 355.975757][T12021] ? __lock_acquire+0x7c80/0x7c80 [ 355.980804][T12021] should_fail_ex+0x39d/0x4d0 [ 355.985512][T12021] should_failslab+0x9/0x20 [ 355.990029][T12021] slab_pre_alloc_hook+0x59/0x310 [ 355.995090][T12021] kmem_cache_alloc_node+0x60/0x330 [ 356.000306][T12021] ? perf_event_alloc+0x15a/0x21b0 [ 356.005442][T12021] perf_event_alloc+0x15a/0x21b0 [ 356.010401][T12021] ? _raw_spin_unlock+0x28/0x40 [ 356.015273][T12021] ? alloc_fd+0x58f/0x630 [ 356.019622][T12021] ? find_lively_task_by_vpid+0x19/0x290 [ 356.025285][T12021] ? find_lively_task_by_vpid+0x19/0x290 [ 356.030931][T12021] __se_sys_perf_event_open+0x70e/0x1c20 [ 356.036573][T12021] ? mutex_unlock+0x10/0x10 [ 356.041083][T12021] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 356.046713][T12021] ? lock_chain_count+0x20/0x20 [ 356.051584][T12021] ? lockdep_hardirqs_on+0x98/0x150 [ 356.056776][T12021] ? __x64_sys_perf_event_open+0x20/0xc0 [ 356.062402][T12021] do_syscall_64+0x55/0xb0 [ 356.066809][T12021] ? clear_bhb_loop+0x40/0x90 [ 356.071471][T12021] ? clear_bhb_loop+0x40/0x90 [ 356.076135][T12021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.082032][T12021] RIP: 0033:0x7f6a3dd8ebe9 [ 356.086534][T12021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.106135][T12021] RSP: 002b:00007f6a3eb7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 356.114543][T12021] RAX: ffffffffffffffda RBX: 00007f6a3dfb5fa0 RCX: 00007f6a3dd8ebe9 [ 356.122506][T12021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 356.130493][T12021] RBP: 00007f6a3eb7d090 R08: 0000000000000000 R09: 0000000000000000 [ 356.138487][T12021] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 356.146562][T12021] R13: 00007f6a3dfb6038 R14: 00007f6a3dfb5fa0 R15: 00007ffde6e6b1a8 [ 356.154627][T12021] [ 356.237782][T12028] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1870'. [ 356.401268][T12034] Dead loop on virtual device ip6_vti0, fix it urgently! [ 356.412380][T12035] pim6reg1: entered promiscuous mode [ 356.418548][T12035] pim6reg1: entered allmulticast mode [ 356.862209][T12048] net veth1_virt_wifi ªªªªª»: renamed from virt_wifi0 [ 357.101566][T12050] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.1879'. [ 357.327425][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.357187][T12054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.387315][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.414089][T12054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.463835][T12056] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1882'. [ 357.680913][T12064] validate_nla: 2 callbacks suppressed [ 357.680990][T12064] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 357.687899][T12065] delete_channel: no stack [ 357.804412][T12071] IPv6: NLM_F_CREATE should be specified when creating new route [ 357.872839][T12075] netlink: 'syz.6.1889': attribute type 3 has an invalid length. [ 357.884149][T12075] netlink: 'syz.6.1889': attribute type 238 has an invalid length. [ 357.925446][T12078] IPv6: NLM_F_CREATE should be specified when creating new route [ 357.967664][T12078] FAULT_INJECTION: forcing a failure. [ 357.967664][T12078] name failslab, interval 1, probability 0, space 0, times 0 [ 358.009251][T12078] CPU: 0 PID: 12078 Comm: syz.2.1891 Not tainted 6.6.102-syzkaller #0 [ 358.017461][T12078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.027530][T12078] Call Trace: [ 358.030811][T12078] [ 358.033741][T12078] dump_stack_lvl+0x16c/0x230 [ 358.038428][T12078] ? show_regs_print_info+0x20/0x20 [ 358.043617][T12078] ? load_image+0x3b0/0x3b0 [ 358.048120][T12078] ? vprintk_emit+0x521/0x600 [ 358.052800][T12078] should_fail_ex+0x39d/0x4d0 [ 358.057479][T12078] should_failslab+0x9/0x20 [ 358.062060][T12078] slab_pre_alloc_hook+0x59/0x310 [ 358.067090][T12078] ? _printk+0xd0/0x110 [ 358.071242][T12078] ? fib6_new_table+0x95/0x290 [ 358.075996][T12078] __kmem_cache_alloc_node+0x53/0x260 [ 358.081365][T12078] ? fib6_new_table+0x95/0x290 [ 358.086205][T12078] kmalloc_trace+0x2a/0xe0 [ 358.090635][T12078] fib6_new_table+0x95/0x290 [ 358.095247][T12078] ip6_route_info_create+0x42a/0x1200 [ 358.100618][T12078] ? nla_memcpy+0x59/0xb0 [ 358.104950][T12078] ? nla_find+0x12a/0x150 [ 358.109277][T12078] inet6_rtm_newroute+0x4e6/0x1b40 [ 358.114475][T12078] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 358.120372][T12078] ? rcu_is_watching+0x15/0xb0 [ 358.125130][T12078] ? trace_contention_end+0x39/0xe0 [ 358.130368][T12078] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 358.136250][T12078] rtnetlink_rcv_msg+0x7c7/0xf10 [ 358.141187][T12078] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 358.146292][T12078] ? rtnetlink_bind+0x80/0x80 [ 358.150963][T12078] ? perf_tp_event+0x12d7/0x13a0 [ 358.155893][T12078] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 358.161699][T12078] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 358.167669][T12078] ? __dev_queue_xmit+0x245/0x35a0 [ 358.172806][T12078] ? __dev_queue_xmit+0x245/0x35a0 [ 358.177905][T12078] ? __dev_queue_xmit+0x1449/0x35a0 [ 358.183193][T12078] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 358.188915][T12078] ? perf_trace_lock+0x2ed/0x380 [ 358.193851][T12078] ? __copy_skb_header+0xa7/0x550 [ 358.198874][T12078] netlink_rcv_skb+0x216/0x480 [ 358.203636][T12078] ? rtnetlink_bind+0x80/0x80 [ 358.208332][T12078] ? netlink_ack+0x1110/0x1110 [ 358.213105][T12078] ? __lock_acquire+0x7c80/0x7c80 [ 358.218142][T12078] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.223334][T12078] netlink_unicast+0x751/0x8d0 [ 358.228100][T12078] netlink_sendmsg+0x8c1/0xbe0 [ 358.232870][T12078] ? netlink_getsockopt+0x580/0x580 [ 358.238063][T12078] ? aa_sock_msg_perm+0x94/0x150 [ 358.242994][T12078] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 358.248291][T12078] ? security_socket_sendmsg+0x80/0xa0 [ 358.253844][T12078] ? netlink_getsockopt+0x580/0x580 [ 358.259062][T12078] ____sys_sendmsg+0x5bf/0x950 [ 358.263837][T12078] ? __asan_memset+0x22/0x40 [ 358.268428][T12078] ? __sys_sendmsg_sock+0x30/0x30 [ 358.273445][T12078] ? __import_iovec+0x3fa/0x860 [ 358.278307][T12078] ? import_iovec+0x73/0xa0 [ 358.282807][T12078] ___sys_sendmsg+0x220/0x290 [ 358.287483][T12078] ? __sys_sendmsg+0x270/0x270 [ 358.292294][T12078] ? __lock_acquire+0x7c80/0x7c80 [ 358.297333][T12078] __se_sys_sendmsg+0x1a5/0x270 [ 358.302185][T12078] ? __x64_sys_sendmsg+0x80/0x80 [ 358.307143][T12078] ? lockdep_hardirqs_on+0x98/0x150 [ 358.312343][T12078] do_syscall_64+0x55/0xb0 [ 358.316751][T12078] ? clear_bhb_loop+0x40/0x90 [ 358.321504][T12078] ? clear_bhb_loop+0x40/0x90 [ 358.326179][T12078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.332075][T12078] RIP: 0033:0x7f6a3dd8ebe9 [ 358.336487][T12078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.356184][T12078] RSP: 002b:00007f6a3eb7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.364594][T12078] RAX: ffffffffffffffda RBX: 00007f6a3dfb5fa0 RCX: 00007f6a3dd8ebe9 [ 358.372580][T12078] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 358.380543][T12078] RBP: 00007f6a3eb7d090 R08: 0000000000000000 R09: 0000000000000000 [ 358.388512][T12078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.396489][T12078] R13: 00007f6a3dfb6038 R14: 00007f6a3dfb5fa0 R15: 00007ffde6e6b1a8 [ 358.404575][T12078] [ 358.425678][T12074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.454260][T12074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.469512][T12074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.494093][T12074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.583303][T12088] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.641311][T12092] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1894'. [ 359.003372][T12109] netlink: 'syz.2.1901': attribute type 9 has an invalid length. [ 359.346304][T12124] FAULT_INJECTION: forcing a failure. [ 359.346304][T12124] name failslab, interval 1, probability 0, space 0, times 0 [ 359.367038][T12124] CPU: 1 PID: 12124 Comm: syz.6.1908 Not tainted 6.6.102-syzkaller #0 [ 359.375241][T12124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.385292][T12124] Call Trace: [ 359.388567][T12124] [ 359.391494][T12124] dump_stack_lvl+0x16c/0x230 [ 359.396207][T12124] ? show_regs_print_info+0x20/0x20 [ 359.401424][T12124] ? load_image+0x3b0/0x3b0 [ 359.405950][T12124] ? __might_sleep+0xe0/0xe0 [ 359.410552][T12124] ? __lock_acquire+0x7c80/0x7c80 [ 359.415583][T12124] should_fail_ex+0x39d/0x4d0 [ 359.420267][T12124] should_failslab+0x9/0x20 [ 359.424765][T12124] slab_pre_alloc_hook+0x59/0x310 [ 359.429798][T12124] kmem_cache_alloc+0x5a/0x2e0 [ 359.434595][T12124] ? skb_clone+0x1eb/0x370 [ 359.439169][T12124] skb_clone+0x1eb/0x370 [ 359.443424][T12124] ? pfkey_broadcast_one+0x7d/0x340 [ 359.448736][T12124] pfkey_broadcast_one+0x9b/0x340 [ 359.453869][T12124] ? pfkey_broadcast+0x39c/0x3e0 [ 359.458852][T12124] pfkey_broadcast+0x3a9/0x3e0 [ 359.463638][T12124] ? pfkey_broadcast+0x48/0x3e0 [ 359.468497][T12124] pfkey_sendmsg+0xdf8/0x1050 [ 359.473209][T12124] ? pfkey_release+0x320/0x320 [ 359.478006][T12124] ? aa_sock_msg_perm+0x94/0x150 [ 359.482941][T12124] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 359.488232][T12124] ? security_socket_sendmsg+0x80/0xa0 [ 359.493695][T12124] ? pfkey_release+0x320/0x320 [ 359.498454][T12124] ____sys_sendmsg+0x5bf/0x950 [ 359.503395][T12124] ? __asan_memset+0x22/0x40 [ 359.507982][T12124] ? __sys_sendmsg_sock+0x30/0x30 [ 359.513003][T12124] ? __import_iovec+0x5f2/0x860 [ 359.517885][T12124] ? import_iovec+0x73/0xa0 [ 359.522401][T12124] ___sys_sendmsg+0x220/0x290 [ 359.527082][T12124] ? __sys_sendmsg+0x270/0x270 [ 359.531871][T12124] ? __lock_acquire+0x7c80/0x7c80 [ 359.536932][T12124] __se_sys_sendmsg+0x1a5/0x270 [ 359.541796][T12124] ? __x64_sys_sendmsg+0x80/0x80 [ 359.546757][T12124] ? lockdep_hardirqs_on+0x98/0x150 [ 359.551968][T12124] do_syscall_64+0x55/0xb0 [ 359.556390][T12124] ? clear_bhb_loop+0x40/0x90 [ 359.561080][T12124] ? clear_bhb_loop+0x40/0x90 [ 359.565756][T12124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.571668][T12124] RIP: 0033:0x7f1db218ebe9 [ 359.576081][T12124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.595685][T12124] RSP: 002b:00007f1db3000038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.604134][T12124] RAX: ffffffffffffffda RBX: 00007f1db23b5fa0 RCX: 00007f1db218ebe9 [ 359.612099][T12124] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 359.620067][T12124] RBP: 00007f1db3000090 R08: 0000000000000000 R09: 0000000000000000 [ 359.628032][T12124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 359.636000][T12124] R13: 00007f1db23b6038 R14: 00007f1db23b5fa0 R15: 00007ffebaa8c858 [ 359.644038][T12124] [ 359.689035][T12126] netlink: 'syz.7.1909': attribute type 23 has an invalid length. [ 359.900638][T12135] __nla_validate_parse: 2 callbacks suppressed [ 359.900658][T12135] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1913'. [ 359.934180][T12135] openvswitch: netlink: Flow actions attr not present in new flow. [ 359.994189][T12138] FAULT_INJECTION: forcing a failure. [ 359.994189][T12138] name failslab, interval 1, probability 0, space 0, times 0 [ 360.043550][T12138] CPU: 0 PID: 12138 Comm: syz.7.1914 Not tainted 6.6.102-syzkaller #0 [ 360.051763][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.061848][T12138] Call Trace: [ 360.065149][T12138] [ 360.068093][T12138] dump_stack_lvl+0x16c/0x230 [ 360.072834][T12138] ? show_regs_print_info+0x20/0x20 [ 360.075365][T12137] can: request_module (can-proto-0) failed. [ 360.078131][T12138] ? load_image+0x3b0/0x3b0 [ 360.078165][T12138] ? __lock_acquire+0x7c80/0x7c80 [ 360.078189][T12138] should_fail_ex+0x39d/0x4d0 [ 360.078215][T12138] should_failslab+0x9/0x20 [ 360.078235][T12138] slab_pre_alloc_hook+0x59/0x310 [ 360.078255][T12138] ? __lock_acquire+0x7c80/0x7c80 [ 360.078276][T12138] kmem_cache_alloc+0x5a/0x2e0 [ 360.117818][T12138] ? security_file_alloc+0x34/0x120 [ 360.123037][T12138] security_file_alloc+0x34/0x120 [ 360.128071][T12138] init_file+0x94/0x1f0 [ 360.132228][T12138] alloc_empty_file+0xb7/0x1d0 [ 360.136994][T12138] alloc_file+0x5c/0x600 [ 360.141238][T12138] alloc_file_pseudo+0x17e/0x200 [ 360.146175][T12138] ? alloc_empty_backing_file+0xe0/0xe0 [ 360.151809][T12138] ? _raw_spin_unlock+0x28/0x40 [ 360.156663][T12138] ? alloc_fd+0x58f/0x630 [ 360.161001][T12138] sock_alloc_file+0xb7/0x280 [ 360.165700][T12138] __sys_socket+0x13d/0x1a0 [ 360.170332][T12138] __x64_sys_socket+0x7a/0x90 [ 360.175034][T12138] do_syscall_64+0x55/0xb0 [ 360.179468][T12138] ? clear_bhb_loop+0x40/0x90 [ 360.184237][T12138] ? clear_bhb_loop+0x40/0x90 [ 360.189001][T12138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.194911][T12138] RIP: 0033:0x7fd44ad8ebe9 [ 360.199323][T12138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.218953][T12138] RSP: 002b:00007fd44bbe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 360.227363][T12138] RAX: ffffffffffffffda RBX: 00007fd44afb5fa0 RCX: 00007fd44ad8ebe9 [ 360.235354][T12138] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 360.243414][T12138] RBP: 00007fd44bbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.251380][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.259345][T12138] R13: 00007fd44afb6038 R14: 00007fd44afb5fa0 R15: 00007ffd5af3a5f8 [ 360.267326][T12138] [ 360.469116][T12144] FAULT_INJECTION: forcing a failure. [ 360.469116][T12144] name failslab, interval 1, probability 0, space 0, times 0 [ 360.482426][T12144] CPU: 1 PID: 12144 Comm: syz.2.1916 Not tainted 6.6.102-syzkaller #0 [ 360.490603][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.500663][T12144] Call Trace: [ 360.503946][T12144] [ 360.506881][T12144] dump_stack_lvl+0x16c/0x230 [ 360.511581][T12144] ? show_regs_print_info+0x20/0x20 [ 360.516790][T12144] ? load_image+0x3b0/0x3b0 [ 360.521307][T12144] ? __might_sleep+0xe0/0xe0 [ 360.525904][T12144] ? __lock_acquire+0x7c80/0x7c80 [ 360.530930][T12144] ? rcu_is_watching+0x15/0xb0 [ 360.535705][T12144] should_fail_ex+0x39d/0x4d0 [ 360.540407][T12144] should_failslab+0x9/0x20 [ 360.544923][T12144] slab_pre_alloc_hook+0x59/0x310 [ 360.549959][T12144] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 360.555854][T12144] __kmem_cache_alloc_node+0x53/0x260 [ 360.561220][T12144] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 360.567107][T12144] kmalloc_trace+0x2a/0xe0 [ 360.571518][T12144] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 360.577231][T12144] sctp_association_new+0x15d3/0x25c0 [ 360.582607][T12144] sctp_connect_new_asoc+0x2bf/0x690 [ 360.587888][T12144] ? __sctp_connect+0xd20/0xd20 [ 360.592725][T12144] ? __local_bh_enable_ip+0x12e/0x1c0 [ 360.598087][T12144] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 360.603627][T12144] ? security_sctp_bind_connect+0x89/0xb0 [ 360.609338][T12144] sctp_sendmsg+0x155c/0x27e0 [ 360.614017][T12144] ? sctp_getsockopt+0xb60/0xb60 [ 360.618948][T12144] ? aa_sk_perm+0x7fc/0x930 [ 360.623443][T12144] ? aa_af_perm+0x2b0/0x2b0 [ 360.628024][T12144] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 360.634444][T12144] ? sock_rps_record_flow+0x19/0x400 [ 360.639718][T12144] ? inet_send_prepare+0x260/0x260 [ 360.644815][T12144] ? inet_sendmsg+0xe9/0x2f0 [ 360.649480][T12144] ? inet_send_prepare+0x260/0x260 [ 360.654575][T12144] ____sys_sendmsg+0x5bf/0x950 [ 360.659339][T12144] ? __asan_memset+0x22/0x40 [ 360.663916][T12144] ? __sys_sendmsg_sock+0x30/0x30 [ 360.668928][T12144] ? __import_iovec+0x5f2/0x860 [ 360.673785][T12144] ? import_iovec+0x73/0xa0 [ 360.678279][T12144] ___sys_sendmsg+0x220/0x290 [ 360.682960][T12144] ? __sys_sendmsg+0x270/0x270 [ 360.687753][T12144] ? __lock_acquire+0x7c80/0x7c80 [ 360.692787][T12144] __se_sys_sendmsg+0x1a5/0x270 [ 360.697630][T12144] ? __x64_sys_sendmsg+0x80/0x80 [ 360.702567][T12144] ? lockdep_hardirqs_on+0x98/0x150 [ 360.707769][T12144] do_syscall_64+0x55/0xb0 [ 360.712182][T12144] ? clear_bhb_loop+0x40/0x90 [ 360.716848][T12144] ? clear_bhb_loop+0x40/0x90 [ 360.721517][T12144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.727500][T12144] RIP: 0033:0x7f6a3dd8ebe9 [ 360.731912][T12144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.751510][T12144] RSP: 002b:00007f6a3eb7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.759913][T12144] RAX: ffffffffffffffda RBX: 00007f6a3dfb5fa0 RCX: 00007f6a3dd8ebe9 [ 360.767873][T12144] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000048 [ 360.775832][T12144] RBP: 00007f6a3eb7d090 R08: 0000000000000000 R09: 0000000000000000 [ 360.783793][T12144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.791769][T12144] R13: 00007f6a3dfb6038 R14: 00007f6a3dfb5fa0 R15: 00007ffde6e6b1a8 [ 360.799743][T12144] [ 361.008228][T12146] netlink: 'syz.7.1917': attribute type 21 has an invalid length. [ 361.019983][T12146] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1917'. [ 361.081785][T12148] bridge_slave_1: left allmulticast mode [ 361.099448][T12148] bridge_slave_1: left promiscuous mode [ 361.124118][T12148] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.155076][T12148] bridge_slave_0: left allmulticast mode [ 361.171220][T12148] bridge_slave_0: left promiscuous mode [ 361.227053][T12148] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.384241][T12155] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1920'. [ 361.401441][T12162] netlink: 'syz.6.1922': attribute type 1 has an invalid length. [ 361.559021][ T5103] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 361.633072][T12172] FAULT_INJECTION: forcing a failure. [ 361.633072][T12172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.649292][T12172] CPU: 0 PID: 12172 Comm: syz.5.1926 Not tainted 6.6.102-syzkaller #0 [ 361.657483][T12172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.667555][T12172] Call Trace: [ 361.670849][T12172] [ 361.673791][T12172] dump_stack_lvl+0x16c/0x230 [ 361.678489][T12172] ? show_regs_print_info+0x20/0x20 [ 361.683705][T12172] ? load_image+0x3b0/0x3b0 [ 361.688240][T12172] ? __might_fault+0xaa/0x120 [ 361.692933][T12172] ? __lock_acquire+0x7c80/0x7c80 [ 361.697990][T12172] should_fail_ex+0x39d/0x4d0 [ 361.702691][T12172] _copy_from_user+0x2f/0xe0 [ 361.707385][T12172] __sys_bpf+0x1e9/0x800 [ 361.711639][T12172] ? bpf_link_show_fdinfo+0x350/0x350 [ 361.717049][T12172] ? lock_chain_count+0x20/0x20 [ 361.721926][T12172] __x64_sys_bpf+0x7c/0x90 [ 361.726369][T12172] do_syscall_64+0x55/0xb0 [ 361.730798][T12172] ? clear_bhb_loop+0x40/0x90 [ 361.735491][T12172] ? clear_bhb_loop+0x40/0x90 [ 361.740180][T12172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.746074][T12172] RIP: 0033:0x7f1aa698ebe9 [ 361.750481][T12172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.770172][T12172] RSP: 002b:00007f1aa7857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.778588][T12172] RAX: ffffffffffffffda RBX: 00007f1aa6bb5fa0 RCX: 00007f1aa698ebe9 [ 361.786551][T12172] RDX: 0000000000000050 RSI: 0000200000004440 RDI: e4ffffff00000000 [ 361.794511][T12172] RBP: 00007f1aa7857090 R08: 0000000000000000 R09: 0000000000000000 [ 361.802470][T12172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.810435][T12172] R13: 00007f1aa6bb6038 R14: 00007f1aa6bb5fa0 R15: 00007ffd6170baf8 [ 361.818409][T12172] [ 361.922544][T12181] netlink: 'syz.5.1929': attribute type 2 has an invalid length. [ 361.991499][T12183] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.1930'. [ 362.147864][T12192] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1933'. [ 362.196900][T12190] netlink: 'syz.5.1932': attribute type 29 has an invalid length. [ 362.229129][T12190] netlink: 'syz.5.1932': attribute type 29 has an invalid length. [ 362.301400][T12189] delete_channel: no stack [ 362.435257][T12204] FAULT_INJECTION: forcing a failure. [ 362.435257][T12204] name failslab, interval 1, probability 0, space 0, times 0 [ 362.448246][T12204] CPU: 1 PID: 12204 Comm: syz.5.1937 Not tainted 6.6.102-syzkaller #0 [ 362.456422][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.466491][T12204] Call Trace: [ 362.469787][T12204] [ 362.472734][T12204] dump_stack_lvl+0x16c/0x230 [ 362.477440][T12204] ? show_regs_print_info+0x20/0x20 [ 362.482673][T12204] ? load_image+0x3b0/0x3b0 [ 362.487197][T12204] ? mark_lock+0x94/0x320 [ 362.491556][T12204] ? mark_lock+0x94/0x320 [ 362.495913][T12204] should_fail_ex+0x39d/0x4d0 [ 362.500624][T12204] should_failslab+0x9/0x20 [ 362.505152][T12204] slab_pre_alloc_hook+0x59/0x310 [ 362.510293][T12204] kmem_cache_alloc_node+0x60/0x330 [ 362.515516][T12204] ? __alloc_skb+0x108/0x2c0 [ 362.520135][T12204] __alloc_skb+0x108/0x2c0 [ 362.524583][T12204] alloc_skb_with_frags+0xca/0x7c0 [ 362.529983][T12204] ? mark_lock+0x94/0x320 [ 362.534341][T12204] ? __lock_acquire+0x1260/0x7c80 [ 362.539393][T12204] sock_alloc_send_pskb+0x857/0x990 [ 362.544643][T12204] ? sock_kzfree_s+0x50/0x50 [ 362.549257][T12204] ? verify_lock_unused+0x140/0x140 [ 362.554489][T12204] ? perf_trace_lock+0xf7/0x380 [ 362.559356][T12204] __ip6_append_data+0x29e0/0x3c40 [ 362.564485][T12204] ? __in6_dev_get+0xd0/0xd0 [ 362.569072][T12204] ? ip6_mtu+0x7d/0x3f0 [ 362.573221][T12204] ? ip6_setup_cork+0xfe0/0xfe0 [ 362.578067][T12204] ip6_append_data+0x1b0/0x350 [ 362.582824][T12204] ? __in6_dev_get+0xd0/0xd0 [ 362.587408][T12204] icmp6_send+0x122b/0x1990 [ 362.591901][T12204] ? icmp6_send+0x1e1/0x1990 [ 362.596501][T12204] ? icmpv6_push_pending_frames+0x400/0x400 [ 362.602384][T12204] ? __ip6_local_out+0x614/0x880 [ 362.607344][T12204] ? __lock_acquire+0x7c80/0x7c80 [ 362.612372][T12204] ? __ip6_local_out+0x844/0x880 [ 362.617299][T12204] ? ip6_dst_hoplimit+0x350/0x350 [ 362.622315][T12204] ip6_pkt_drop+0x4e5/0x640 [ 362.626814][T12204] ip6_pkt_discard_out+0xf2/0x110 [ 362.631829][T12204] ? ip6_send_skb+0x10f/0x380 [ 362.636504][T12204] ip6_send_skb+0x1d5/0x380 [ 362.641009][T12204] udp_v6_send_skb+0xbbb/0x1860 [ 362.645867][T12204] udp_v6_push_pending_frames+0x133/0x220 [ 362.651586][T12204] udpv6_sendmsg+0xe29/0x22f0 [ 362.656293][T12204] ? udpv6_sendmsg+0x22f0/0x22f0 [ 362.661239][T12204] ? udp_v6_early_demux+0xf60/0xf60 [ 362.666446][T12204] ? perf_event_output_forward+0x2f7/0x3a0 [ 362.672262][T12204] ? inet_send_prepare+0x5c/0x260 [ 362.677276][T12204] ? inet6_sendmsg+0x5f/0xd0 [ 362.681858][T12204] ? inet6_compat_ioctl+0x380/0x380 [ 362.687046][T12204] ____sys_sendmsg+0x5bf/0x950 [ 362.691807][T12204] ? __asan_memset+0x22/0x40 [ 362.696386][T12204] ? __sys_sendmsg_sock+0x30/0x30 [ 362.701402][T12204] ? __import_iovec+0x5f2/0x860 [ 362.706252][T12204] ? import_iovec+0x73/0xa0 [ 362.710750][T12204] ___sys_sendmsg+0x220/0x290 [ 362.715420][T12204] ? __sys_sendmsg+0x270/0x270 [ 362.720192][T12204] ? __lock_acquire+0x7c80/0x7c80 [ 362.725226][T12204] __se_sys_sendmsg+0x1a5/0x270 [ 362.730114][T12204] ? perf_trace_preemptirq_template+0x281/0x340 [ 362.736354][T12204] ? __x64_sys_sendmsg+0x80/0x80 [ 362.741297][T12204] ? lockdep_hardirqs_on+0x98/0x150 [ 362.746492][T12204] do_syscall_64+0x55/0xb0 [ 362.750898][T12204] ? clear_bhb_loop+0x40/0x90 [ 362.755558][T12204] ? clear_bhb_loop+0x40/0x90 [ 362.760226][T12204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.766112][T12204] RIP: 0033:0x7f1aa698ebe9 [ 362.770515][T12204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.790109][T12204] RSP: 002b:00007f1aa7857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.798511][T12204] RAX: ffffffffffffffda RBX: 00007f1aa6bb5fa0 RCX: 00007f1aa698ebe9 [ 362.806476][T12204] RDX: 0000000020000081 RSI: 0000200000000240 RDI: 0000000000000004 [ 362.814439][T12204] RBP: 00007f1aa7857090 R08: 0000000000000000 R09: 0000000000000000 [ 362.822413][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.830393][T12204] R13: 00007f1aa6bb6038 R14: 00007f1aa6bb5fa0 R15: 00007ffd6170baf8 [ 362.838380][T12204] [ 362.872337][T12207] netlink: 154544 bytes leftover after parsing attributes in process `syz.2.1935'. [ 363.084207][T12210] FAULT_INJECTION: forcing a failure. [ 363.084207][T12210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.084911][T12210] [ 363.084916][T12210] ====================================================== [ 363.084922][T12210] WARNING: possible circular locking dependency detected [ 363.084942][T12210] 6.6.102-syzkaller #0 Not tainted [ 363.084949][T12210] ------------------------------------------------------ [ 363.084954][T12210] syz.7.1939/12210 is trying to acquire lock: [ 363.084962][T12210] ffffffff8cd23e20 (console_owner){-...}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 363.085002][T12210] [ 363.085002][T12210] but task is already holding lock: [ 363.085006][T12210] ffff8880b8e3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 363.085042][T12210] [ 363.085042][T12210] which lock already depends on the new lock. [ 363.085042][T12210] [ 363.085047][T12210] [ 363.085047][T12210] the existing dependency chain (in reverse order) is: [ 363.085051][T12210] [ 363.085051][T12210] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 363.085071][T12210] _raw_spin_lock_nested+0x32/0x50 [ 363.085091][T12210] raw_spin_rq_lock_nested+0x2a/0x140 [ 363.085109][T12210] task_fork_fair+0x62/0x1f0 [ 363.085122][T12210] sched_cgroup_fork+0x333/0x3c0 [ 363.085134][T12210] copy_process+0x21e4/0x3d70 [ 363.085147][T12210] kernel_clone+0x21b/0x840 [ 363.085160][T12210] user_mode_thread+0xde/0x130 [ 363.085173][T12210] rest_init+0x27/0x300 [ 363.085184][T12210] arch_call_rest_init+0xe/0x10 [ 363.085204][T12210] start_kernel+0x459/0x4e0 [ 363.085220][T12210] x86_64_start_reservations+0x2a/0x30 [ 363.085238][T12210] copy_bootdata+0x0/0xe0 [ 363.085252][T12210] secondary_startup_64_no_verify+0x179/0x17b [ 363.085271][T12210] [ 363.085271][T12210] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 363.085290][T12210] _raw_spin_lock_irqsave+0xa8/0xf0 [ 363.085308][T12210] try_to_wake_up+0x60/0x1140 [ 363.085326][T12210] kick_pool+0x320/0x420 [ 363.085339][T12210] create_worker+0x5c0/0x7b0 [ 363.085352][T12210] workqueue_init+0x306/0x670 [ 363.085369][T12210] kernel_init_freeable+0x3a0/0x570 [ 363.085387][T12210] kernel_init+0x1d/0x1c0 [ 363.085398][T12210] ret_from_fork+0x48/0x80 [ 363.085413][T12210] ret_from_fork_asm+0x11/0x20 [ 363.085429][T12210] [ 363.085429][T12210] -> #3 (&pool->lock){-.-.}-{2:2}: [ 363.085448][T12210] _raw_spin_lock+0x2e/0x40 [ 363.085465][T12210] __queue_work+0x69f/0x1020 [ 363.085476][T12210] queue_work_on+0x121/0x1e0 [ 363.085488][T12210] rpm_suspend+0x10bc/0x1a90 [ 363.085502][T12210] __pm_runtime_idle+0x12f/0x1a0 [ 363.085514][T12210] __device_attach+0x33f/0x400 [ 363.085528][T12210] bus_probe_device+0x180/0x260 [ 363.085541][T12210] device_add+0x85b/0xc20 [ 363.085557][T12210] serial_base_port_add+0x2f2/0x420 [ 363.085571][T12210] serial_core_register_port+0x36d/0x2320 [ 363.085597][T12210] serial8250_register_8250_port+0x15ec/0x1f10 [ 363.085613][T12210] serial_pnp_probe+0x549/0x730 [ 363.085627][T12210] pnp_device_probe+0x305/0x4b0 [ 363.085643][T12210] really_probe+0x25b/0xb40 [ 363.085657][T12210] __driver_probe_device+0x18c/0x330 [ 363.085671][T12210] driver_probe_device+0x4f/0x420 [ 363.085686][T12210] __driver_attach+0x44e/0x6f0 [ 363.085699][T12210] bus_for_each_dev+0x22d/0x2a0 [ 363.085710][T12210] bus_add_driver+0x340/0x640 [ 363.085722][T12210] driver_register+0x23a/0x310 [ 363.085736][T12210] serial8250_init+0x9a/0x170 [ 363.085755][T12210] do_one_initcall+0x1fd/0x750 [ 363.085771][T12210] do_initcall_level+0x137/0x1f0 [ 363.085788][T12210] do_initcalls+0x69/0xd0 [ 363.085805][T12210] kernel_init_freeable+0x3d2/0x570 [ 363.085829][T12210] kernel_init+0x1d/0x1c0 [ 363.085840][T12210] ret_from_fork+0x48/0x80 [ 363.085854][T12210] ret_from_fork_asm+0x11/0x20 [ 363.085870][T12210] [ 363.085870][T12210] -> #2 (&dev->power.lock){-...}-{2:2}: [ 363.085890][T12210] _raw_spin_lock_irqsave+0xa8/0xf0 [ 363.085909][T12210] __pm_runtime_resume+0x10f/0x170 [ 363.085922][T12210] __uart_start+0x171/0x3e0 [ 363.085940][T12210] uart_write+0x449/0x5d0 [ 363.085958][T12210] n_tty_write+0xd27/0x11d0 [ 363.085975][T12210] file_tty_write+0x54b/0x980 [ 363.085989][T12210] vfs_write+0x43b/0x940 [ 363.086006][T12210] ksys_write+0x147/0x250 [ 363.086021][T12210] do_syscall_64+0x55/0xb0 [ 363.086035][T12210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.086055][T12210] [ 363.086055][T12210] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 363.086074][T12210] _raw_spin_lock_irqsave+0xa8/0xf0 [ 363.086092][T12210] serial8250_console_write+0x16d/0x17a0 [ 363.086109][T12210] console_flush_all+0x6cd/0xd00 [ 363.086124][T12210] console_unlock+0xae/0x340 [ 363.086138][T12210] vprintk_emit+0x477/0x600 [ 363.086152][T12210] _printk+0xd0/0x110 [ 363.086170][T12210] register_console+0x91b/0xe60 [ 363.086185][T12210] univ8250_console_init+0x45/0x50 [ 363.086202][T12210] console_init+0x17b/0x5e0 [ 363.086219][T12210] start_kernel+0x2c0/0x4e0 [ 363.086236][T12210] x86_64_start_reservations+0x2a/0x30 [ 363.086253][T12210] copy_bootdata+0x0/0xe0 [ 363.086268][T12210] secondary_startup_64_no_verify+0x179/0x17b [ 363.086285][T12210] [ 363.086285][T12210] -> #0 (console_owner){-...}-{0:0}: [ 363.086305][T12210] __lock_acquire+0x2ddb/0x7c80 [ 363.086319][T12210] lock_acquire+0x197/0x410 [ 363.086332][T12210] console_flush_all+0x693/0xd00 [ 363.086347][T12210] console_unlock+0xae/0x340 [ 363.086360][T12210] vprintk_emit+0x477/0x600 [ 363.086374][T12210] _printk+0xd0/0x110 [ 363.086392][T12210] should_fail_ex+0x37e/0x4d0 [ 363.086407][T12210] strncpy_from_user+0x36/0x2e0 [ 363.086423][T12210] strncpy_from_user_nofault+0x71/0x140 [ 363.086440][T12210] bpf_probe_read_compat_str+0xe1/0x170 [ 363.086458][T12210] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 363.086476][T12210] bpf_trace_run4+0x1f9/0x420 [ 363.086488][T12210] __bpf_trace_sched_switch+0x17b/0x1e0 [ 363.086504][T12210] __traceiter_sched_switch+0x93/0xc0 [ 363.086517][T12210] __schedule+0x2197/0x44d0 [ 363.086532][T12210] schedule+0xbd/0x170 [ 363.086545][T12210] schedule_preempt_disabled+0x13/0x20 [ 363.086561][T12210] __mutex_lock+0x6b7/0xcc0 [ 363.086576][T12210] rtnetlink_rcv_msg+0x76f/0xf10 [ 363.086594][T12210] netlink_rcv_skb+0x216/0x480 [ 363.086610][T12210] netlink_unicast+0x751/0x8d0 [ 363.086623][T12210] netlink_sendmsg+0x8c1/0xbe0 [ 363.086638][T12210] ____sys_sendmsg+0x5bf/0x950 [ 363.086655][T12210] ___sys_sendmsg+0x220/0x290 [ 363.086671][T12210] __se_sys_sendmsg+0x1a5/0x270 [ 363.086686][T12210] do_syscall_64+0x55/0xb0 [ 363.086700][T12210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.086717][T12210] [ 363.086717][T12210] other info that might help us debug this: [ 363.086717][T12210] [ 363.086722][T12210] Chain exists of: [ 363.086722][T12210] console_owner --> &p->pi_lock --> &rq->__lock [ 363.086722][T12210] [ 363.086743][T12210] Possible unsafe locking scenario: [ 363.086743][T12210] [ 363.086747][T12210] CPU0 CPU1 [ 363.086751][T12210] ---- ---- [ 363.086755][T12210] lock(&rq->__lock); [ 363.086763][T12210] lock(&p->pi_lock); [ 363.086772][T12210] lock(&rq->__lock); [ 363.086782][T12210] lock(console_owner); [ 363.086791][T12210] [ 363.086791][T12210] *** DEADLOCK *** [ 363.086791][T12210] [ 363.086794][T12210] 5 locks held by syz.7.1939/12210: [ 363.086802][T12210] #0: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x76f/0xf10 [ 363.086848][T12210] #1: ffff8880b8e3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 363.086888][T12210] #2: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 363.086921][T12210] #3: ffffffff8cd23f00 (console_lock){+.+.}-{0:0}, at: _printk+0xd0/0x110 [ 363.086959][T12210] #4: ffffffff8cc0b710 (console_srcu){....}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 363.086994][T12210] [ 363.086994][T12210] stack backtrace: [ 363.086999][T12210] CPU: 0 PID: 12210 Comm: syz.7.1939 Not tainted 6.6.102-syzkaller #0 [ 363.087014][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.087023][T12210] Call Trace: [ 363.087028][T12210] [ 363.087037][T12210] dump_stack_lvl+0x16c/0x230 [ 363.087056][T12210] ? load_image+0x3b0/0x3b0 [ 363.087080][T12210] ? show_regs_print_info+0x20/0x20 [ 363.087116][T12210] ? print_circular_bug+0x12b/0x1a0 [ 363.087141][T12210] check_noncircular+0x2bd/0x3c0 [ 363.087170][T12210] ? print_deadlock_bug+0x5d0/0x5d0 [ 363.087186][T12210] ? lockdep_lock+0xe0/0x220 [ 363.087230][T12210] __lock_acquire+0x2ddb/0x7c80 [ 363.087298][T12210] ? verify_lock_unused+0x140/0x140 [ 363.087360][T12210] lock_acquire+0x197/0x410 [ 363.087377][T12210] ? console_flush_all+0x10f/0xd00 [ 363.087410][T12210] ? __lock_acquire+0x7c80/0x7c80 [ 363.087425][T12210] ? do_raw_spin_lock+0x121/0x2c0 [ 363.087445][T12210] ? read_lock_is_recursive+0x20/0x20 [ 363.087464][T12210] ? __rwlock_init+0x150/0x150 [ 363.087490][T12210] ? do_raw_spin_unlock+0x121/0x230 [ 363.087516][T12210] console_flush_all+0x693/0xd00 [ 363.087533][T12210] ? console_flush_all+0x10f/0xd00 [ 363.087576][T12210] ? console_flush_all+0x10f/0xd00 [ 363.087618][T12210] ? is_console_locked+0x20/0x20 [ 363.087661][T12210] console_unlock+0xae/0x340 [ 363.087685][T12210] ? other_cpu_in_panic+0xf0/0xf0 [ 363.087707][T12210] ? __lock_acquire+0x1260/0x7c80 [ 363.087741][T12210] vprintk_emit+0x477/0x600 [ 363.087766][T12210] ? printk_sprint+0x460/0x460 [ 363.087814][T12210] _printk+0xd0/0x110 [ 363.087856][T12210] ? load_image+0x3b0/0x3b0 [ 363.087880][T12210] ? trace_call_bpf+0x5ba/0x690 [ 363.087899][T12210] ? trace_call_bpf+0xc3/0x690 [ 363.087934][T12210] should_fail_ex+0x37e/0x4d0 [ 363.087963][T12210] strncpy_from_user+0x36/0x2e0 [ 363.087976][T12210] ? bpf_trace_run4+0xfd/0x420 [ 363.088000][T12210] strncpy_from_user_nofault+0x71/0x140 [ 363.088028][T12210] bpf_probe_read_compat_str+0xe1/0x170 [ 363.088058][T12210] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 363.088079][T12210] bpf_trace_run4+0x1f9/0x420 [ 363.088095][T12210] ? bpf_trace_run4+0xfd/0x420 [ 363.088108][T12210] ? trace_event_raw_event_lock+0x230/0x230 [ 363.088132][T12210] ? bpf_trace_run3+0x400/0x400 [ 363.088160][T12210] ? __bpf_trace_sched_switch+0x160/0x1e0 [ 363.088189][T12210] __bpf_trace_sched_switch+0x17b/0x1e0 [ 363.088214][T12210] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 363.088236][T12210] ? __lock_acquire+0x7c20/0x7c80 [ 363.088255][T12210] ? local_clock+0x20/0x20 [ 363.088293][T12210] ? tracing_record_taskinfo_sched_switch+0x7d/0x360 [ 363.088316][T12210] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 363.088336][T12210] __traceiter_sched_switch+0x93/0xc0 [ 363.088361][T12210] __schedule+0x2197/0x44d0 [ 363.088396][T12210] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 363.088436][T12210] ? asan.module_dtor+0x20/0x20 [ 363.088459][T12210] ? __mutex_lock+0x6b2/0xcc0 [ 363.088481][T12210] ? __mutex_trylock_common+0x84/0x250 [ 363.088509][T12210] ? trace_raw_output_contention_end+0xd0/0xd0 [ 363.088544][T12210] schedule+0xbd/0x170 [ 363.088564][T12210] schedule_preempt_disabled+0x13/0x20 [ 363.088580][T12210] __mutex_lock+0x6b7/0xcc0 [ 363.088601][T12210] ? __mutex_lock+0x4e8/0xcc0 [ 363.088629][T12210] ? rtnetlink_rcv_msg+0x76f/0xf10 [ 363.088654][T12210] ? mutex_lock_nested+0x20/0x20 [ 363.088704][T12210] rtnetlink_rcv_msg+0x76f/0xf10 [ 363.088730][T12210] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 363.088760][T12210] ? rtnetlink_bind+0x80/0x80 [ 363.088784][T12210] ? trace_call_bpf+0xc3/0x690 [ 363.088830][T12210] ? trace_call_bpf+0xc3/0x690 [ 363.088854][T12210] ? __lock_acquire+0x7c80/0x7c80 [ 363.088869][T12210] ? __local_bh_enable_ip+0x12e/0x1c0 [ 363.088901][T12210] ? trace_call_bpf+0xc3/0x690 [ 363.088921][T12210] ? trace_call_bpf+0xc3/0x690 [ 363.088943][T12210] ? trace_call_bpf+0x5ba/0x690 [ 363.088966][T12210] ? trace_call_bpf+0xc3/0x690 [ 363.088987][T12210] ? __dev_queue_xmit+0x1449/0x35a0 [ 363.089010][T12210] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 363.089053][T12210] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 363.089080][T12210] ? perf_trace_lock+0x2ed/0x380 [ 363.089102][T12210] ? __copy_skb_header+0xa7/0x550 [ 363.089139][T12210] netlink_rcv_skb+0x216/0x480 [ 363.089160][T12210] ? rtnetlink_bind+0x80/0x80 [ 363.089184][T12210] ? netlink_ack+0x1110/0x1110 [ 363.089225][T12210] ? __lock_acquire+0x7c80/0x7c80 [ 363.089256][T12210] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.089285][T12210] netlink_unicast+0x751/0x8d0 [ 363.089324][T12210] netlink_sendmsg+0x8c1/0xbe0 [ 363.089356][T12210] ? netlink_getsockopt+0x580/0x580 [ 363.089379][T12210] ? aa_sock_msg_perm+0x94/0x150 [ 363.089402][T12210] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 363.089419][T12210] ? security_socket_sendmsg+0x80/0xa0 [ 363.089437][T12210] ? netlink_getsockopt+0x580/0x580 [ 363.089456][T12210] ____sys_sendmsg+0x5bf/0x950 [ 363.089490][T12210] ? __asan_memset+0x22/0x40 [ 363.089510][T12210] ? __sys_sendmsg_sock+0x30/0x30 [ 363.089528][T12210] ? __import_iovec+0x3fa/0x860 [ 363.089567][T12210] ? import_iovec+0x73/0xa0 [ 363.089595][T12210] ___sys_sendmsg+0x220/0x290 [ 363.089622][T12210] ? __sys_sendmsg+0x270/0x270 [ 363.089680][T12210] ? __lock_acquire+0x7c80/0x7c80 [ 363.089743][T12210] __se_sys_sendmsg+0x1a5/0x270 [ 363.089769][T12210] ? __x64_sys_sendmsg+0x80/0x80 [ 363.089820][T12210] ? lockdep_hardirqs_on+0x98/0x150 [ 363.089854][T12210] do_syscall_64+0x55/0xb0 [ 363.089870][T12210] ? clear_bhb_loop+0x40/0x90 [ 363.089884][T12210] ? clear_bhb_loop+0x40/0x90 [ 363.089903][T12210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.089924][T12210] RIP: 0033:0x7fd44ad8ebe9 [ 363.089940][T12210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.089953][T12210] RSP: 002b:00007fd44bbe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.089969][T12210] RAX: ffffffffffffffda RBX: 00007fd44afb5fa0 RCX: 00007fd44ad8ebe9 [ 363.089980][T12210] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 363.089990][T12210] RBP: 00007fd44bbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 363.090000][T12210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.090009][T12210] R13: 00007fd44afb6038 R14: 00007fd44afb5fa0 R15: 00007ffd5af3a5f8 [ 363.090048][T12210] [ 364.497704][T12210] CPU: 0 PID: 12210 Comm: syz.7.1939 Not tainted 6.6.102-syzkaller #0 [ 364.505859][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.515922][T12210] Call Trace: [ 364.519213][T12210] [ 364.522150][T12210] dump_stack_lvl+0x16c/0x230 [ 364.526822][T12210] ? show_regs_print_info+0x20/0x20 [ 364.532032][T12210] ? load_image+0x3b0/0x3b0 [ 364.536529][T12210] ? trace_call_bpf+0x5ba/0x690 [ 364.541367][T12210] ? trace_call_bpf+0xc3/0x690 [ 364.546139][T12210] should_fail_ex+0x39d/0x4d0 [ 364.550811][T12210] strncpy_from_user+0x36/0x2e0 [ 364.555647][T12210] ? bpf_trace_run4+0xfd/0x420 [ 364.560396][T12210] strncpy_from_user_nofault+0x71/0x140 [ 364.565929][T12210] bpf_probe_read_compat_str+0xe1/0x170 [ 364.571465][T12210] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 364.576927][T12210] bpf_trace_run4+0x1f9/0x420 [ 364.581586][T12210] ? bpf_trace_run4+0xfd/0x420 [ 364.586329][T12210] ? trace_event_raw_event_lock+0x230/0x230 [ 364.592209][T12210] ? bpf_trace_run3+0x400/0x400 [ 364.597045][T12210] ? __bpf_trace_sched_switch+0x160/0x1e0 [ 364.602773][T12210] __bpf_trace_sched_switch+0x17b/0x1e0 [ 364.608397][T12210] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 364.614737][T12210] ? __lock_acquire+0x7c20/0x7c80 [ 364.619772][T12210] ? local_clock+0x20/0x20 [ 364.624198][T12210] ? tracing_record_taskinfo_sched_switch+0x7d/0x360 [ 364.631056][T12210] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 364.637391][T12210] __traceiter_sched_switch+0x93/0xc0 [ 364.642779][T12210] __schedule+0x2197/0x44d0 [ 364.647290][T12210] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 364.653371][T12210] ? asan.module_dtor+0x20/0x20 [ 364.658221][T12210] ? __mutex_lock+0x6b2/0xcc0 [ 364.662890][T12210] ? __mutex_trylock_common+0x84/0x250 [ 364.668430][T12210] ? trace_raw_output_contention_end+0xd0/0xd0 [ 364.674585][T12210] schedule+0xbd/0x170 [ 364.678658][T12210] schedule_preempt_disabled+0x13/0x20 [ 364.684182][T12210] __mutex_lock+0x6b7/0xcc0 [ 364.688728][T12210] ? __mutex_lock+0x4e8/0xcc0 [ 364.693438][T12210] ? rtnetlink_rcv_msg+0x76f/0xf10 [ 364.698557][T12210] ? mutex_lock_nested+0x20/0x20 [ 364.703518][T12210] rtnetlink_rcv_msg+0x76f/0xf10 [ 364.708468][T12210] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 364.713621][T12210] ? rtnetlink_bind+0x80/0x80 [ 364.718296][T12210] ? trace_call_bpf+0xc3/0x690 [ 364.723070][T12210] ? trace_call_bpf+0xc3/0x690 [ 364.727829][T12210] ? __lock_acquire+0x7c80/0x7c80 [ 364.732843][T12210] ? __local_bh_enable_ip+0x12e/0x1c0 [ 364.738211][T12210] ? trace_call_bpf+0xc3/0x690 [ 364.742978][T12210] ? trace_call_bpf+0xc3/0x690 [ 364.747733][T12210] ? trace_call_bpf+0x5ba/0x690 [ 364.752595][T12210] ? trace_call_bpf+0xc3/0x690 [ 364.757364][T12210] ? __dev_queue_xmit+0x1449/0x35a0 [ 364.762578][T12210] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 364.768644][T12210] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 364.774474][T12210] ? perf_trace_lock+0x2ed/0x380 [ 364.779431][T12210] ? __copy_skb_header+0xa7/0x550 [ 364.784468][T12210] netlink_rcv_skb+0x216/0x480 [ 364.789223][T12210] ? rtnetlink_bind+0x80/0x80 [ 364.793893][T12210] ? netlink_ack+0x1110/0x1110 [ 364.798665][T12210] ? __lock_acquire+0x7c80/0x7c80 [ 364.803679][T12210] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.808865][T12210] netlink_unicast+0x751/0x8d0 [ 364.813618][T12210] netlink_sendmsg+0x8c1/0xbe0 [ 364.818375][T12210] ? netlink_getsockopt+0x580/0x580 [ 364.823565][T12210] ? aa_sock_msg_perm+0x94/0x150 [ 364.828486][T12210] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 364.833752][T12210] ? security_socket_sendmsg+0x80/0xa0 [ 364.839192][T12210] ? netlink_getsockopt+0x580/0x580 [ 364.844374][T12210] ____sys_sendmsg+0x5bf/0x950 [ 364.849129][T12210] ? __asan_memset+0x22/0x40 [ 364.853699][T12210] ? __sys_sendmsg_sock+0x30/0x30 [ 364.858704][T12210] ? __import_iovec+0x3fa/0x860 [ 364.863551][T12210] ? import_iovec+0x73/0xa0 [ 364.868051][T12210] ___sys_sendmsg+0x220/0x290 [ 364.872718][T12210] ? __sys_sendmsg+0x270/0x270 [ 364.877518][T12210] ? __lock_acquire+0x7c80/0x7c80 [ 364.882556][T12210] __se_sys_sendmsg+0x1a5/0x270 [ 364.887395][T12210] ? __x64_sys_sendmsg+0x80/0x80 [ 364.892337][T12210] ? lockdep_hardirqs_on+0x98/0x150 [ 364.897523][T12210] do_syscall_64+0x55/0xb0 [ 364.901926][T12210] ? clear_bhb_loop+0x40/0x90 [ 364.906583][T12210] ? clear_bhb_loop+0x40/0x90 [ 364.911241][T12210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.917132][T12210] RIP: 0033:0x7fd44ad8ebe9 [ 364.921618][T12210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.941260][T12210] RSP: 002b:00007fd44bbe6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.949713][T12210] RAX: ffffffffffffffda RBX: 00007fd44afb5fa0 RCX: 00007fd44ad8ebe9 [ 364.957686][T12210] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 364.965675][T12210] RBP: 00007fd44bbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 364.973666][T12210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.981635][T12210] R13: 00007fd44afb6038 R14: 00007fd44afb5fa0 R15: 00007ffd5af3a5f8 [ 364.989653][T12210] [ 365.076054][T12212] IPv6: NLM_F_CREATE should be specified when creating new route