last executing test programs: 6.241301103s ago: executing program 1 (id=929): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000015c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x2, 0x12) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x80, 0x0, 0x0, 0x0, 0x81320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000bf5face0000000000950074"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x21) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./cgroup/../file0\x00', 0x0, 0x18, r3}, 0x18) socket$kcm(0x10, 0x2, 0x0) r6 = getpid() r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2003}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095", @ANYRES8=r5], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 6.160725831s ago: executing program 0 (id=931): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800f8ffffff24bf0000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xa000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffee6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0xffffffffffffff00}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x118aa0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) close(r4) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x8902, &(0x7f00000002c0)={r8}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x8903, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x1, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) 5.917762861s ago: executing program 2 (id=932): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='tlb_flush\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000046c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0, 0x4100}, 0x10000) 5.686617747s ago: executing program 0 (id=934): r0 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="67010000000000006b113c00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fec, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x2}, 0x401, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, &(0x7f0000000100)=r1, 0x4) 5.625407923s ago: executing program 2 (id=935): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xead3086ce9776e26}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x9, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 5.624813219s ago: executing program 1 (id=936): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 5.530581808s ago: executing program 0 (id=937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 5.455663585s ago: executing program 3 (id=938): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x2142) 5.440891724s ago: executing program 1 (id=939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 5.304117302s ago: executing program 3 (id=940): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5a8}], 0x10}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000008fada7ee0000000000950074"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000100), &(0x7f0000000180)=r0}, 0x20) close(r0) 5.303040211s ago: executing program 2 (id=941): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_open_procfs$namespace(0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d40)=""/212, 0xd4}, {&(0x7f0000000800)=""/257, 0x101}, {&(0x7f0000000e40)=""/4059, 0xfdb}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000380)=""/188, 0xbc}, {0x0}, {&(0x7f0000002f40)=""/4100, 0x1004}, {&(0x7f0000004680)=""/4094, 0xffe}, {&(0x7f0000000680)=""/109, 0x6d}, {&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000180)=""/38, 0x26}], 0xe}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 5.302506658s ago: executing program 1 (id=942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000070000000100010008000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000008000f745e8e821867c0000000000000000"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r7, r6}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.710974698s ago: executing program 3 (id=944): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800f8ffffff24bf0000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xa000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffee6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0xffffffffffffff00}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x118aa0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) close(r4) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x8902, &(0x7f00000002c0)={r8}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x8903, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x1, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) 4.264841497s ago: executing program 1 (id=946): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0xcd, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000040000b05d25a806c8c6394f90324fc60100002000a00020005", 0x1d}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3", 0x12}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.090224275s ago: executing program 4 (id=947): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f00000014c0)=""/4085, 0xff5}, {&(0x7f0000000e00)=""/118, 0x76}, {&(0x7f00000024c0)=""/4103, 0x1007}, {&(0x7f0000001280)=""/191, 0xbf}], 0x6}, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2be", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 3.118575268s ago: executing program 4 (id=948): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003680)=""/4113, 0x1011}], 0x1, 0x0, 0x2000}, 0x10000) 2.223003301s ago: executing program 2 (id=949): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 2.177050674s ago: executing program 1 (id=950): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000024738c6daf5d6e7a1014a727757cf64900000000000200000d000000000300bddc8c158259a5b1f15487078c637927bb9c93"], 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x94, &(0x7f00000000c0)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="02eeff000000000000000000000052b73c8045c93d7128f3e107cb0c000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) unlink(&(0x7f0000000200)='./cgroup\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848470000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x71, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_da_update_reserve_space\x00', r3}, 0x19) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_da_update_reserve_space\x00', r4}, 0x19) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x2000000000000046, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@alu={0x7, 0x1, 0x0, 0x9, 0x2, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x5d}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x40000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x15440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (rerun: 32) 2.11842373s ago: executing program 0 (id=951): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84f}}, &(0x7f0000000200)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x8000000}, 0x18) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x20c00, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="03000000040000000000000000d10000000000004fd67e89fd21372a0a8af4b78fe41b6b98de1f07c2b57095631d31cab7e85aba829800"/66, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200"/28], 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1}, 0x161) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0xf0ff1f00000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 2.118152237s ago: executing program 4 (id=952): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000380)=ANY=[@ANYBLOB='c *:* r9'], 0x8) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0xb000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 2.105072166s ago: executing program 3 (id=953): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x400000}, 0x80, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x900}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.788731035s ago: executing program 2 (id=954): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5a8}], 0x10}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000008fada7ee0000000000950074"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000100), &(0x7f0000000180)=r0}, 0x20) close(r0) 1.3486s ago: executing program 0 (id=955): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x9b304200, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0x3}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x40000000, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = getpid() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0xa7, 0x0, 0x4, 0x0, 0x9, 0x10200, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0x8, 0xce1}, 0x1, 0xffffffffffffffff, 0x7, 0x7, 0x1, 0x8, 0x1, 0x0, 0x1, 0x0, 0x537}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x5452, 0x2000141e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0x2, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback, 0x8, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1.347739303s ago: executing program 3 (id=956): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080), 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x9c}, {0x6}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r5, 0x11) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000940), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0xfffffffffffffe31, &(0x7f00000004c0), &(0x7f0000001540), 0x8, 0x75, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000600)=""/108, 0x65, 0x0, &(0x7f0000000680)=""/210, 0xd2}}, 0x7) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x3a, 0xe, 0x0, &(0x7f0000000180)="e460cdfbef9412961cfa3e6e88ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000100000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002540)={0x6, 0x7, &(0x7f0000002500)=ANY=[@ANYBLOB="1900000004000000000100006d0b000018600000040000000000000009000000185700000c00000000000000000000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0x6, 0x800005}, 0x8, 0x10, &(0x7f0000002440)={0x5, 0xe, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r1, r8, 0xffffffffffffffff], 0x0, 0x10, 0x4, @void, @value}, 0x94) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002880), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0x11, 0x0, 0x0, &(0x7f0000002800)='syzkaller\x00', 0x3, 0x2b, &(0x7f0000002840)=""/43, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, r9, 0x8, &(0x7f00000028c0)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x1, 0x0, &(0x7f0000002940)=[{0x4, 0x1, 0x5, 0xc}], 0x10, 0x3, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0xf26}, 0x0, 0x4, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0xfd, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x8485, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x400, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x5, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 951.417468ms ago: executing program 4 (id=957): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="392df120a7d1271fe9714781764473058e18f7d2301bf66384f106826483b185830b619dd58e1c7c3f5b5c49342ee346d772d9d2678bbbdbaa1ab629201ad2acd9f1f670cccd91b7a52831a97d10fb4c86ab1aeb08692d6c6a65f78c85f686573d852416b67597c8be08a19ff60a87e759fe9205416e40", 0x77}, {&(0x7f0000000240)="ea5fa350ce7ce34169274d69ed68a8d1a5de01587b0a0344692eea4065efd27d4bc97577b7a60cc0112683d37a6e6a22bb80977c72cf17f4cd2f55f67048bb10aafeb48d2110e67092ca9633fe5f895f7381916c127684e89ee2070dea613a85", 0x60}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000008001a0000000000000001000045516781d8fb46797c64c1eec2697c13894fc8c77d51f6fd46b7b13348aae489791076f792c59fb822b0aa4d16d13aefe3b95916efe6d5846342b573a65f1f3c0907d0fdb943d9b6a273535ec57c364d5db69c67362f57f7a9ad7a1418e39cd2a1aef16b1deec11ca085a665e2af0cc1fe95858bc04542788e5aeaa24a43a04b5970bbb762aad397b868c2d7688fe8c69d7827382d0f92ade34e85bb274d34c955508d65da4a92379489d5bb79e2cdeca332f46974b180be0e56dd", @ANYRES32, @ANYRES32=r0], 0xc8, 0x90}, 0x0) 618.718408ms ago: executing program 2 (id=958): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x9b304200, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0x3}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x40000000, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = getpid() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0xa7, 0x0, 0x4, 0x0, 0x9, 0x10200, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0x8, 0xce1}, 0x1, 0xffffffffffffffff, 0x7, 0x7, 0x1, 0x8, 0x1, 0x0, 0x1, 0x0, 0x537}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x5452, 0x2000141e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0x2, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback, 0x8, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 464.828148ms ago: executing program 4 (id=959): bpf$LINK_DETACH(0x22, 0x0, 0x0) 394.410614ms ago: executing program 3 (id=960): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff002, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 214.230413ms ago: executing program 4 (id=961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e", 0xd}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 0s ago: executing program 0 (id=962): gettid() perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xd) r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8933, &(0x7f00000003c0)) (fail_nth: 9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 66.655555][ T5816] cgroup: Unknown subsys name 'net' [ 66.778097][ T5816] cgroup: Unknown subsys name 'cpuset' [ 66.787464][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.380308][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.659163][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.681890][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.690257][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.698161][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.698754][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.706685][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.713293][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.721462][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.727142][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.735450][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.748248][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.757083][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.758903][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.772204][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.780560][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.781035][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.793142][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.794714][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.802494][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.810523][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.823525][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.831629][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.834761][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.846314][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.846717][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.860787][ T5143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.864749][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.875247][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.882893][ T5143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.895036][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.238105][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 71.318681][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 71.406816][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 71.490956][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 71.540545][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.549455][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.557019][ T5827] bridge_slave_0: entered allmulticast mode [ 71.563841][ T5827] bridge_slave_0: entered promiscuous mode [ 71.592817][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.600600][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.611015][ T5827] bridge_slave_1: entered allmulticast mode [ 71.611118][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.618196][ T5827] bridge_slave_1: entered promiscuous mode [ 71.628935][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.688095][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.697465][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 71.736304][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.743563][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.751332][ T5843] bridge_slave_0: entered allmulticast mode [ 71.758220][ T5843] bridge_slave_0: entered promiscuous mode [ 71.766131][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.773354][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.780713][ T5843] bridge_slave_1: entered allmulticast mode [ 71.788289][ T5843] bridge_slave_1: entered promiscuous mode [ 71.796668][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.827372][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.834609][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.841796][ T5841] bridge_slave_0: entered allmulticast mode [ 71.849369][ T5841] bridge_slave_0: entered promiscuous mode [ 71.891588][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.898941][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.906344][ T5841] bridge_slave_1: entered allmulticast mode [ 71.913212][ T5841] bridge_slave_1: entered promiscuous mode [ 71.954440][ T5827] team0: Port device team_slave_0 added [ 71.970570][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.977952][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.985865][ T5830] bridge_slave_0: entered allmulticast mode [ 71.992669][ T5830] bridge_slave_0: entered promiscuous mode [ 72.011777][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.022955][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.036757][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.050907][ T5827] team0: Port device team_slave_1 added [ 72.057810][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.065401][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.072613][ T5830] bridge_slave_1: entered allmulticast mode [ 72.079943][ T5830] bridge_slave_1: entered promiscuous mode [ 72.087941][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.173309][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.183506][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.209976][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.234708][ T5841] team0: Port device team_slave_0 added [ 72.243666][ T5843] team0: Port device team_slave_0 added [ 72.251941][ T5843] team0: Port device team_slave_1 added [ 72.266252][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.273446][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.280758][ T5833] bridge_slave_0: entered allmulticast mode [ 72.287618][ T5833] bridge_slave_0: entered promiscuous mode [ 72.297004][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.303990][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.330855][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.344117][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.356417][ T5841] team0: Port device team_slave_1 added [ 72.389244][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.396623][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.403765][ T5833] bridge_slave_1: entered allmulticast mode [ 72.417600][ T5833] bridge_slave_1: entered promiscuous mode [ 72.431500][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.448515][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.455651][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.482082][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.529199][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.539924][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.566480][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.580435][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.600708][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.607968][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.635032][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.647360][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.655138][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.681636][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.707067][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.718768][ T5830] team0: Port device team_slave_0 added [ 72.727474][ T5830] team0: Port device team_slave_1 added [ 72.774990][ T5833] team0: Port device team_slave_0 added [ 72.790917][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.798439][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.824545][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.836974][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.843953][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.870274][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.885711][ T5143] Bluetooth: hci0: command tx timeout [ 72.890288][ T5827] hsr_slave_0: entered promiscuous mode [ 72.898171][ T5827] hsr_slave_1: entered promiscuous mode [ 72.907021][ T5833] team0: Port device team_slave_1 added [ 72.964366][ T5143] Bluetooth: hci1: command tx timeout [ 72.964391][ T5834] Bluetooth: hci4: command tx timeout [ 72.964725][ T5834] Bluetooth: hci3: command tx timeout [ 72.981845][ T5845] Bluetooth: hci2: command tx timeout [ 73.008301][ T5843] hsr_slave_0: entered promiscuous mode [ 73.018547][ T5843] hsr_slave_1: entered promiscuous mode [ 73.025334][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.033065][ T5843] Cannot create hsr debugfs directory [ 73.051722][ T5830] hsr_slave_0: entered promiscuous mode [ 73.060329][ T5830] hsr_slave_1: entered promiscuous mode [ 73.066668][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.074418][ T5830] Cannot create hsr debugfs directory [ 73.096584][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.103593][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.129590][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.144656][ T5841] hsr_slave_0: entered promiscuous mode [ 73.151058][ T5841] hsr_slave_1: entered promiscuous mode [ 73.157952][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.165639][ T5841] Cannot create hsr debugfs directory [ 73.182913][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.190016][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.216278][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.371346][ T5833] hsr_slave_0: entered promiscuous mode [ 73.378275][ T5833] hsr_slave_1: entered promiscuous mode [ 73.384588][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.392181][ T5833] Cannot create hsr debugfs directory [ 73.623437][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.637677][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.661243][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.682468][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.728037][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.740223][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.749948][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.768125][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.818896][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.830103][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.863304][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.872942][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.947815][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.959127][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.979027][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.990027][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.038683][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.069516][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.079897][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.093884][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.167166][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.207602][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.228860][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.247839][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.262838][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.270189][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.286551][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.318267][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.325431][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.356428][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.363554][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.382788][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.400898][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.408080][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.434071][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.441227][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.493286][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.500479][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.549101][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.632502][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.689873][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.702431][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.709605][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.729746][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.736893][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.797384][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.811891][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.869513][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.876676][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.909236][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.916459][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.965351][ T5845] Bluetooth: hci0: command tx timeout [ 75.044808][ T5845] Bluetooth: hci2: command tx timeout [ 75.045484][ T5834] Bluetooth: hci3: command tx timeout [ 75.050257][ T5840] Bluetooth: hci1: command tx timeout [ 75.056459][ T5834] Bluetooth: hci4: command tx timeout [ 75.083459][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.137812][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.158692][ T5843] veth0_vlan: entered promiscuous mode [ 75.230364][ T5843] veth1_vlan: entered promiscuous mode [ 75.276128][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.322775][ T5841] veth0_vlan: entered promiscuous mode [ 75.350567][ T5843] veth0_macvtap: entered promiscuous mode [ 75.365853][ T5827] veth0_vlan: entered promiscuous mode [ 75.390788][ T5843] veth1_macvtap: entered promiscuous mode [ 75.414499][ T5841] veth1_vlan: entered promiscuous mode [ 75.430519][ T5830] veth0_vlan: entered promiscuous mode [ 75.441130][ T5827] veth1_vlan: entered promiscuous mode [ 75.478161][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.490273][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.508859][ T5830] veth1_vlan: entered promiscuous mode [ 75.519200][ T5827] veth0_macvtap: entered promiscuous mode [ 75.538543][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.548822][ T5827] veth1_macvtap: entered promiscuous mode [ 75.577217][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.593104][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.602314][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.612566][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.628181][ T5841] veth0_macvtap: entered promiscuous mode [ 75.670886][ T5841] veth1_macvtap: entered promiscuous mode [ 75.699079][ T5830] veth0_macvtap: entered promiscuous mode [ 75.728780][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.750270][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.763003][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.775100][ T5830] veth1_macvtap: entered promiscuous mode [ 75.798641][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.813733][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.823672][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.835077][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.849052][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.879164][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.891177][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.901642][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.912325][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.922304][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.934074][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.946009][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.959547][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.970203][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.981734][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.998714][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.010420][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.020579][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.031347][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.042816][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.058599][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.069060][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.078404][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.088493][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.100275][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.111139][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.121319][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.132018][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.142077][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.152551][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.163573][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.176118][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.185245][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194007][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.203416][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.221645][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.234293][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.246466][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.255283][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.264002][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.272991][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.345545][ T5089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.353672][ T5089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.430124][ T5833] veth0_vlan: entered promiscuous mode [ 76.463064][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.471608][ T5833] veth1_vlan: entered promiscuous mode [ 76.574090][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.616458][ T5911] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 76.628567][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.637777][ T5833] veth0_macvtap: entered promiscuous mode [ 76.645773][ T5911] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 76.646430][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.653525][ T5911] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.676022][ T5833] veth1_macvtap: entered promiscuous mode [ 76.682936][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.692969][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.703058][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.733422][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.744346][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.754255][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.764855][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.774751][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.785264][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.795184][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.805847][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.824764][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.853078][ T4939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.868961][ T4939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.889017][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.900208][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.913870][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.924907][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.934867][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.945445][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.955356][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.966040][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.977004][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.010472][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.021110][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.030420][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.040420][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.054783][ T5834] Bluetooth: hci0: command tx timeout [ 77.088341][ T5089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.107493][ T5089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.115440][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.124129][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.125719][ T5834] Bluetooth: hci4: command tx timeout [ 77.139561][ T5143] Bluetooth: hci2: command tx timeout [ 77.139639][ T5845] Bluetooth: hci1: command tx timeout [ 77.145052][ T5143] Bluetooth: hci3: command tx timeout [ 77.352693][ T5089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.391353][ T5089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.509072][ T4939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.533241][ T4939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.672714][ T5928] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.9'. [ 77.722920][ T5928] netlink: zone id is out of range [ 77.760004][ T5931] FAULT_INJECTION: forcing a failure. [ 77.760004][ T5931] name failslab, interval 1, probability 0, space 0, times 0 [ 77.773546][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: syz.2.10 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 77.775308][ T5928] netlink: zone id is out of range [ 77.784085][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 77.799319][ T5931] Call Trace: [ 77.802634][ T5931] [ 77.805597][ T5931] dump_stack_lvl+0x241/0x360 [ 77.810341][ T5931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.815594][ T5931] ? __pfx__printk+0x10/0x10 [ 77.820238][ T5931] ? __kmalloc_noprof+0xb5/0x4c0 [ 77.825222][ T5931] ? __pfx___might_resched+0x10/0x10 [ 77.830550][ T5931] should_fail_ex+0x3b0/0x4e0 [ 77.835381][ T5931] should_failslab+0xac/0x100 [ 77.840195][ T5931] __kmalloc_noprof+0xdd/0x4c0 [ 77.845007][ T5931] ? iovec_from_user+0x87/0x240 [ 77.849906][ T5931] iovec_from_user+0x87/0x240 [ 77.854636][ T5931] __import_iovec+0x152/0x870 [ 77.859384][ T5931] import_iovec+0xeb/0x120 [ 77.863873][ T5931] copy_msghdr_from_user+0x52f/0x680 [ 77.869222][ T5931] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 77.875086][ T5931] ? __fget_files+0x2a/0x410 [ 77.879738][ T5931] ? __fget_files+0x2a/0x410 [ 77.884397][ T5931] __sys_recvmsg+0x200/0x390 [ 77.889054][ T5931] ? __pfx___sys_recvmsg+0x10/0x10 [ 77.894219][ T5931] ? __mutex_unlock_slowpath+0x21e/0x790 [ 77.899933][ T5931] ? __fget_files+0x2a/0x410 [ 77.904287][ T5928] netlink: zone id is out of range [ 77.904569][ T5931] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.916034][ T5931] ? do_syscall_64+0x100/0x230 [ 77.920873][ T5931] ? do_syscall_64+0xb6/0x230 [ 77.923465][ T5928] netlink: zone id is out of range [ 77.925578][ T5931] do_syscall_64+0xf3/0x230 [ 77.925616][ T5931] ? clear_bhb_loop+0x35/0x90 [ 77.925653][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.925685][ T5931] RIP: 0033:0x7f9bc1585d19 [ 77.925715][ T5931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.925734][ T5931] RSP: 002b:00007f9bc22df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 77.925761][ T5931] RAX: ffffffffffffffda RBX: 00007f9bc1775fa0 RCX: 00007f9bc1585d19 [ 77.925779][ T5931] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 77.925794][ T5931] RBP: 00007f9bc22df090 R08: 0000000000000000 R09: 0000000000000000 [ 77.925810][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.925824][ T5931] R13: 0000000000000000 R14: 00007f9bc1775fa0 R15: 00007fffdfee3788 [ 77.925863][ T5931] [ 78.083384][ T5928] netlink: zone id is out of range [ 78.099716][ T5939] netlink: 'syz.2.11': attribute type 2 has an invalid length. [ 78.149707][ T5939] netlink: 'syz.2.11': attribute type 8 has an invalid length. [ 78.167190][ T5939] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11'. [ 78.174399][ T5928] netlink: zone id is out of range [ 78.211977][ T5928] netlink: zone id is out of range [ 78.241652][ T5928] netlink: zone id is out of range [ 78.278694][ T5928] netlink: zone id is out of range [ 78.304683][ T5928] netlink: zone id is out of range [ 78.375603][ C0] hrtimer: interrupt took 27850 ns [ 78.583729][ T5952] FAULT_INJECTION: forcing a failure. [ 78.583729][ T5952] name failslab, interval 1, probability 0, space 0, times 0 [ 78.627419][ T5948] netlink: 'syz.0.16': attribute type 33 has an invalid length. [ 78.635485][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: syz.2.15 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 78.646062][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 78.656174][ T5952] Call Trace: [ 78.659499][ T5952] [ 78.662472][ T5952] dump_stack_lvl+0x241/0x360 [ 78.667192][ T5952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.672427][ T5952] ? __pfx__printk+0x10/0x10 [ 78.677054][ T5952] ? fs_reclaim_acquire+0x93/0x130 [ 78.682191][ T5952] ? __pfx___might_resched+0x10/0x10 [ 78.687497][ T5952] ? lockdep_init_map_type+0xa1/0x910 [ 78.692918][ T5952] should_fail_ex+0x3b0/0x4e0 [ 78.697625][ T5952] should_failslab+0xac/0x100 [ 78.702330][ T5952] ? security_inode_alloc+0x37/0x310 [ 78.707653][ T5952] kmem_cache_alloc_noprof+0x70/0x380 [ 78.713059][ T5952] security_inode_alloc+0x37/0x310 [ 78.718197][ T5952] inode_init_always_gfp+0xa0f/0xd90 [ 78.723505][ T5952] ? __pfx_sock_alloc_inode+0x10/0x10 [ 78.728906][ T5952] alloc_inode+0x9f/0x1a0 [ 78.733266][ T5952] __sock_create+0x127/0xa30 [ 78.737897][ T5952] __sys_socket+0x150/0x3c0 [ 78.742441][ T5952] ? __pfx___sys_socket+0x10/0x10 [ 78.747489][ T5952] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.753850][ T5952] ? do_syscall_64+0x100/0x230 [ 78.758646][ T5952] __x64_sys_socket+0x7a/0x90 [ 78.763352][ T5952] do_syscall_64+0xf3/0x230 [ 78.767898][ T5952] ? clear_bhb_loop+0x35/0x90 [ 78.772612][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.778547][ T5952] RIP: 0033:0x7f9bc1585d19 [ 78.782984][ T5952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.802627][ T5952] RSP: 002b:00007f9bc22df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 78.811069][ T5952] RAX: ffffffffffffffda RBX: 00007f9bc1775fa0 RCX: 00007f9bc1585d19 [ 78.819058][ T5952] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 000000000000000a [ 78.827045][ T5952] RBP: 00007f9bc22df090 R08: 0000000000000000 R09: 0000000000000000 [ 78.835038][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.843039][ T5952] R13: 0000000000000000 R14: 00007f9bc1775fa0 R15: 00007fffdfee3788 [ 78.851055][ T5952] [ 78.863971][ T5948] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 78.886433][ T5948] netlink: 108 bytes leftover after parsing attributes in process `syz.0.16'. [ 79.131929][ T5845] Bluetooth: hci0: command tx timeout [ 79.207220][ T5845] Bluetooth: hci4: command tx timeout [ 79.213013][ T5840] Bluetooth: hci3: command tx timeout [ 79.213052][ T5834] Bluetooth: hci2: command tx timeout [ 79.219131][ T5840] Bluetooth: hci1: command tx timeout [ 79.859123][ T5974] netlink: 'syz.1.25': attribute type 2 has an invalid length. [ 79.905050][ T5974] netlink: 'syz.1.25': attribute type 8 has an invalid length. [ 79.940211][ T5974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.25'. [ 80.399905][ T5988] netlink: 60 bytes leftover after parsing attributes in process `syz.0.31'. [ 80.417993][ T5986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.31'. [ 80.456500][ T5986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.31'. [ 81.263369][ T6002] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.32'. [ 83.265193][ T6027] netlink: 'syz.4.41': attribute type 2 has an invalid length. [ 83.326828][ T6027] netlink: 'syz.4.41': attribute type 8 has an invalid length. [ 83.360025][ T6027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.41'. [ 83.510270][ T6030] netlink: 'syz.0.40': attribute type 10 has an invalid length. [ 83.620373][ T6030] lo: entered promiscuous mode [ 83.864023][ T6030] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 84.034262][ T6032] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 85.424529][ T6050] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.48'. [ 86.715984][ T6068] netlink: 14 bytes leftover after parsing attributes in process `syz.1.52'. [ 86.920749][ T6078] netlink: 'syz.3.53': attribute type 10 has an invalid length. [ 86.956164][ T6078] bridge0: port 3(netdevsim0) entered blocking state [ 86.963211][ T6078] bridge0: port 3(netdevsim0) entered disabled state [ 86.977621][ T975] cfg80211: failed to load regulatory.db [ 86.985460][ T6078] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 86.994602][ T6078] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 87.002971][ T6078] bridge0: port 3(netdevsim0) entered blocking state [ 87.010031][ T6078] bridge0: port 3(netdevsim0) entered forwarding state [ 89.103526][ T6097] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.60'. [ 89.288860][ T6097] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.60'. [ 91.112461][ T6110] netlink: 'syz.4.63': attribute type 10 has an invalid length. [ 97.095169][ T6110] lo: entered promiscuous mode [ 97.107224][ T6110] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.233255][ T6110] syz.4.63 (6110) used greatest stack depth: 17536 bytes left [ 97.448007][ T6122] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 97.555445][ T6122] lo: entered promiscuous mode [ 97.569595][ T6122] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.955271][ T6129] netlink: 'syz.3.68': attribute type 10 has an invalid length. [ 99.914883][ T6149] warning: `syz.2.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.442776][ T6172] netlink: 'syz.1.81': attribute type 10 has an invalid length. [ 100.464459][ T6172] bridge0: port 3(netdevsim0) entered blocking state [ 100.483090][ T6172] bridge0: port 3(netdevsim0) entered disabled state [ 100.490560][ T6172] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 100.507332][ T6172] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 100.515913][ T6172] bridge0: port 3(netdevsim0) entered blocking state [ 100.522749][ T6172] bridge0: port 3(netdevsim0) entered forwarding state [ 100.882315][ T6181] netlink: 'syz.2.84': attribute type 21 has an invalid length. [ 100.890284][ T6181] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 101.028027][ T6184] FAULT_INJECTION: forcing a failure. [ 101.028027][ T6184] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.041543][ T6181] netlink: 38583 bytes leftover after parsing attributes in process `syz.2.84'. [ 101.055226][ T6184] CPU: 0 UID: 0 PID: 6184 Comm: syz.3.85 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 101.065791][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 101.075887][ T6184] Call Trace: [ 101.079221][ T6184] [ 101.082186][ T6184] dump_stack_lvl+0x241/0x360 [ 101.086926][ T6184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.092169][ T6184] ? __pfx__printk+0x10/0x10 [ 101.096821][ T6184] ? __pfx_lock_release+0x10/0x10 [ 101.101905][ T6184] should_fail_ex+0x3b0/0x4e0 [ 101.106638][ T6184] _copy_to_iter+0x440/0x1c50 [ 101.111393][ T6184] ? __pfx__copy_to_iter+0x10/0x10 [ 101.116558][ T6184] ? __virt_addr_valid+0x183/0x530 [ 101.121712][ T6184] ? __virt_addr_valid+0x183/0x530 [ 101.126867][ T6184] ? __virt_addr_valid+0x45f/0x530 [ 101.132026][ T6184] ? __check_object_size+0x47a/0x730 [ 101.137362][ T6184] __skb_datagram_iter+0x107/0x900 [ 101.142606][ T6184] ? __virt_addr_valid+0x183/0x530 [ 101.147771][ T6184] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 101.153447][ T6184] ? __check_object_size+0x47a/0x730 [ 101.158780][ T6184] __skb_datagram_iter+0x6e4/0x900 [ 101.163936][ T6184] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 101.169646][ T6184] skb_copy_datagram_iter+0xd1/0x250 [ 101.174988][ T6184] rawv6_recvmsg+0x484/0xeb0 [ 101.179634][ T6184] ? __pfx_rawv6_recvmsg+0x10/0x10 [ 101.184793][ T6184] ? aa_sk_perm+0x96d/0xab0 [ 101.189354][ T6184] sock_common_recvmsg+0x123/0x250 [ 101.194518][ T6184] ? __pfx_sock_common_recvmsg+0x10/0x10 [ 101.200192][ T6184] ? aa_sock_msg_perm+0x91/0x160 [ 101.205166][ T6184] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 101.210489][ T6184] ? __pfx_sock_common_recvmsg+0x10/0x10 [ 101.216164][ T6184] sock_recvmsg+0x22f/0x280 [ 101.220733][ T6184] ____sys_recvmsg+0x1c6/0x480 [ 101.225576][ T6184] ? __pfx_____sys_recvmsg+0x10/0x10 [ 101.230934][ T6184] __sys_recvmsg+0x291/0x390 [ 101.235568][ T6184] ? __pfx___sys_recvmsg+0x10/0x10 [ 101.240731][ T6184] ? __mutex_unlock_slowpath+0x21e/0x790 [ 101.246408][ T6184] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 101.252573][ T6184] ? do_syscall_64+0xb6/0x230 [ 101.257289][ T6184] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.263659][ T6184] ? do_syscall_64+0x100/0x230 [ 101.268446][ T6184] ? do_syscall_64+0xb6/0x230 [ 101.273147][ T6184] do_syscall_64+0xf3/0x230 [ 101.277664][ T6184] ? clear_bhb_loop+0x35/0x90 [ 101.282382][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.288296][ T6184] RIP: 0033:0x7f6f82f85d19 [ 101.292733][ T6184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.312386][ T6184] RSP: 002b:00007f6f83dc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 101.320855][ T6184] RAX: ffffffffffffffda RBX: 00007f6f83175fa0 RCX: 00007f6f82f85d19 [ 101.328868][ T6184] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 101.336965][ T6184] RBP: 00007f6f83dc1090 R08: 0000000000000000 R09: 0000000000000000 [ 101.345067][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.353170][ T6184] R13: 0000000000000000 R14: 00007f6f83175fa0 R15: 00007ffc08776848 [ 101.361298][ T6184] [ 102.045476][ T6214] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 102.200385][ T6214] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.213559][ T6214] bond0: (slave team0): Enslaving as an active interface with an up link [ 102.974870][ T6241] netlink: 'syz.4.102': attribute type 10 has an invalid length. [ 103.044907][ T6241] netlink: 55 bytes leftover after parsing attributes in process `syz.4.102'. [ 103.287638][ T6248] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.103'. [ 103.343031][ T6248] net_ratelimit: 101 callbacks suppressed [ 103.343093][ T6248] openvswitch: netlink: Message has 44053 unknown bytes. [ 103.808414][ T6258] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 103.886988][ T6262] Zero length message leads to an empty skb [ 103.923551][ T6257] netlink: 'syz.4.106': attribute type 21 has an invalid length. [ 103.964915][ T6257] netlink: 'syz.4.106': attribute type 1 has an invalid length. [ 104.090524][ T6264] netlink: 38583 bytes leftover after parsing attributes in process `syz.4.106'. [ 104.107459][ T6271] FAULT_INJECTION: forcing a failure. [ 104.107459][ T6271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.142444][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.1.111 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 104.153126][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 104.163224][ T6271] Call Trace: [ 104.166535][ T6271] [ 104.169486][ T6271] dump_stack_lvl+0x241/0x360 [ 104.174200][ T6271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.179438][ T6271] ? __pfx__printk+0x10/0x10 [ 104.184159][ T6271] ? __pfx_lock_release+0x10/0x10 [ 104.189232][ T6271] should_fail_ex+0x3b0/0x4e0 [ 104.193948][ T6271] _copy_from_user+0x2f/0xc0 [ 104.198583][ T6271] copy_msghdr_from_user+0xae/0x680 [ 104.203824][ T6271] ? __pfx_perf_trace_lock+0x10/0x10 [ 104.209151][ T6271] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 104.214999][ T6271] ? __fget_files+0x2a/0x410 [ 104.219634][ T6271] ? __fget_files+0x2a/0x410 [ 104.224274][ T6271] __sys_sendmsg+0x209/0x350 [ 104.228912][ T6271] ? __pfx_lock_release+0x10/0x10 [ 104.233981][ T6271] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.239153][ T6271] ? __pfx_vfs_write+0x10/0x10 [ 104.243975][ T6271] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 104.250158][ T6271] ? do_syscall_64+0xb6/0x230 [ 104.254882][ T6271] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.261247][ T6271] ? do_syscall_64+0x100/0x230 [ 104.266060][ T6271] ? do_syscall_64+0xb6/0x230 [ 104.270783][ T6271] do_syscall_64+0xf3/0x230 [ 104.275330][ T6271] ? clear_bhb_loop+0x35/0x90 [ 104.280064][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.286053][ T6271] RIP: 0033:0x7f08f1985d19 [ 104.290577][ T6271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.310220][ T6271] RSP: 002b:00007f08f2714038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.318656][ T6271] RAX: ffffffffffffffda RBX: 00007f08f1b75fa0 RCX: 00007f08f1985d19 [ 104.326641][ T6271] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 104.334622][ T6271] RBP: 00007f08f2714090 R08: 0000000000000000 R09: 0000000000000000 [ 104.342601][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.350578][ T6271] R13: 0000000000000000 R14: 00007f08f1b75fa0 R15: 00007fff1efbabd8 [ 104.358577][ T6271] [ 104.445631][ T6266] veth0_vlan: entered allmulticast mode [ 105.015832][ T6273] netlink: 'syz.1.112': attribute type 21 has an invalid length. [ 105.023740][ T6273] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 105.463346][ T6279] netlink: 164 bytes leftover after parsing attributes in process `syz.1.115'. [ 105.665996][ T6279] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.108886][ T35] wlan1: Trigger new scan to find an IBSS to join [ 106.690008][ T6294] FAULT_INJECTION: forcing a failure. [ 106.690008][ T6294] name failslab, interval 1, probability 0, space 0, times 0 [ 106.704713][ T6293] netlink: 204156 bytes leftover after parsing attributes in process `syz.0.118'. [ 106.734500][ T6293] netlink: zone id is out of range [ 106.749968][ T6293] netlink: zone id is out of range [ 106.766896][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: syz.4.117 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 106.777554][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 106.787648][ T6294] Call Trace: [ 106.790961][ T6294] [ 106.793932][ T6294] dump_stack_lvl+0x241/0x360 [ 106.798693][ T6294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.803957][ T6294] ? __pfx__printk+0x10/0x10 [ 106.808599][ T6294] ? kmem_cache_alloc_noprof+0x48/0x380 [ 106.814200][ T6294] ? __pfx___might_resched+0x10/0x10 [ 106.819548][ T6294] should_fail_ex+0x3b0/0x4e0 [ 106.824277][ T6294] should_failslab+0xac/0x100 [ 106.829006][ T6294] ? sk_prot_alloc+0x58/0x210 [ 106.833724][ T6294] kmem_cache_alloc_noprof+0x70/0x380 [ 106.839158][ T6294] sk_prot_alloc+0x58/0x210 [ 106.843715][ T6294] ? sk_alloc+0x26/0x370 [ 106.848004][ T6294] sk_alloc+0x38/0x370 [ 106.852133][ T6294] inet6_create+0x6ce/0x10f0 [ 106.856810][ T6294] ? inet6_create+0x78/0x10f0 [ 106.861554][ T6294] __sock_create+0x4c0/0xa30 [ 106.866207][ T6294] mptcp_subflow_create_socket+0x132/0xdf0 [ 106.872083][ T6294] ? irqentry_exit+0x63/0x90 [ 106.876727][ T6294] ? lockdep_hardirqs_on+0x99/0x150 [ 106.881981][ T6294] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 106.888381][ T6294] __mptcp_nmpc_sk+0x178/0x800 [ 106.893226][ T6294] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 106.898575][ T6294] mptcp_setsockopt+0xea5/0x3bc0 [ 106.903565][ T6294] ? aa_sk_perm+0x96d/0xab0 [ 106.908114][ T6294] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 106.913572][ T6294] ? __pfx_aa_sk_perm+0x10/0x10 [ 106.918486][ T6294] ? __pfx_lock_acquire+0x10/0x10 [ 106.923554][ T6294] ? aa_sock_opt_perm+0x79/0x120 [ 106.928530][ T6294] ? sock_common_setsockopt+0x37/0xc0 [ 106.933950][ T6294] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 106.939891][ T6294] do_sock_setsockopt+0x3af/0x720 [ 106.944963][ T6294] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 106.950556][ T6294] ? __fget_files+0x395/0x410 [ 106.955314][ T6294] ? __fget_files+0x2a/0x410 [ 106.959962][ T6294] __x64_sys_setsockopt+0x1ee/0x280 [ 106.965243][ T6294] do_syscall_64+0xf3/0x230 [ 106.969793][ T6294] ? clear_bhb_loop+0x35/0x90 [ 106.974515][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.980449][ T6294] RIP: 0033:0x7fc4b6d85d19 [ 106.984896][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.004622][ T6294] RSP: 002b:00007fc4b7aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.013167][ T6294] RAX: ffffffffffffffda RBX: 00007fc4b6f75fa0 RCX: 00007fc4b6d85d19 [ 107.021171][ T6294] RDX: 000000000000004e RSI: 0000000000000029 RDI: 0000000000000003 [ 107.029192][ T6294] RBP: 00007fc4b7aef090 R08: 0000000000000004 R09: 0000000000000000 [ 107.037202][ T6294] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 107.045207][ T6294] R13: 0000000000000000 R14: 00007fc4b6f75fa0 R15: 00007ffd89287548 [ 107.053239][ T6294] [ 107.063010][ T6293] netlink: zone id is out of range [ 107.068292][ T6293] netlink: zone id is out of range [ 107.084361][ T6293] netlink: zone id is out of range [ 107.089525][ T6293] netlink: zone id is out of range [ 107.096877][ T6293] netlink: zone id is out of range [ 107.102029][ T6293] netlink: zone id is out of range [ 107.107314][ T6293] netlink: zone id is out of range [ 111.745678][ T6408] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.151'. [ 111.798330][ T6408] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.151'. [ 112.495952][ T6415] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 (while UP) [ 114.531705][ T6454] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.166'. [ 114.572137][ T6454] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.166'. [ 115.399553][ T6457] syzkaller0: entered promiscuous mode [ 115.420326][ T6457] syzkaller0: entered allmulticast mode [ 115.835212][ T6473] netlink: 'syz.2.170': attribute type 10 has an invalid length. [ 116.360413][ T6482] netlink: 'syz.3.175': attribute type 10 has an invalid length. [ 119.609598][ T6475] netlink: 60 bytes leftover after parsing attributes in process `syz.4.172'. [ 119.633426][ T6473] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 120.654461][ T5840] Bluetooth: hci0: ISO packet for unknown connection handle 255 [ 121.941000][ T6526] netlink: 'syz.1.190': attribute type 10 has an invalid length. [ 122.977729][ T6539] FAULT_INJECTION: forcing a failure. [ 122.977729][ T6539] name failslab, interval 1, probability 0, space 0, times 0 [ 123.343687][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz.4.194 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 123.354374][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 123.364475][ T6539] Call Trace: [ 123.367791][ T6539] [ 123.370761][ T6539] dump_stack_lvl+0x241/0x360 [ 123.375524][ T6539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.380795][ T6539] ? __pfx__printk+0x10/0x10 [ 123.385454][ T6539] ? __kmalloc_noprof+0xb5/0x4c0 [ 123.390445][ T6539] ? __pfx___might_resched+0x10/0x10 [ 123.395891][ T6539] should_fail_ex+0x3b0/0x4e0 [ 123.400634][ T6539] should_failslab+0xac/0x100 [ 123.405366][ T6539] __kmalloc_noprof+0xdd/0x4c0 [ 123.410182][ T6539] ? fib6_get_table+0x253/0x270 [ 123.415076][ T6539] ? fib6_info_alloc+0x2e/0xf0 [ 123.419907][ T6539] fib6_info_alloc+0x2e/0xf0 [ 123.424570][ T6539] ip6_route_info_create+0x445/0x12b0 [ 123.430005][ T6539] ip6_route_add+0x28/0x160 [ 123.434552][ T6539] ipv6_route_ioctl+0x588/0x870 [ 123.439458][ T6539] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 123.444886][ T6539] ? __might_fault+0xc6/0x120 [ 123.449579][ T6539] inet6_ioctl+0x21a/0x280 [ 123.454021][ T6539] ? __pfx_inet6_ioctl+0x10/0x10 [ 123.458992][ T6539] ? tomoyo_path_number_perm+0x206/0x860 [ 123.464660][ T6539] sock_do_ioctl+0x158/0x460 [ 123.469365][ T6539] ? __pfx_sock_do_ioctl+0x10/0x10 [ 123.474509][ T6539] sock_ioctl+0x626/0x8e0 [ 123.478865][ T6539] ? __pfx_sock_ioctl+0x10/0x10 [ 123.483735][ T6539] ? __fget_files+0x2a/0x410 [ 123.488347][ T6539] ? __fget_files+0x2a/0x410 [ 123.492957][ T6539] ? __pfx_sock_ioctl+0x10/0x10 [ 123.497838][ T6539] __se_sys_ioctl+0xf5/0x170 [ 123.502449][ T6539] do_syscall_64+0xf3/0x230 [ 123.506971][ T6539] ? clear_bhb_loop+0x35/0x90 [ 123.511670][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.517676][ T6539] RIP: 0033:0x7fc4b6d85d19 [ 123.522145][ T6539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.541781][ T6539] RSP: 002b:00007fc4b7aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.550222][ T6539] RAX: ffffffffffffffda RBX: 00007fc4b6f75fa0 RCX: 00007fc4b6d85d19 [ 123.558208][ T6539] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000003 [ 123.566189][ T6539] RBP: 00007fc4b7aef090 R08: 0000000000000000 R09: 0000000000000000 [ 123.574172][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.582162][ T6539] R13: 0000000000000000 R14: 00007fc4b6f75fa0 R15: 00007ffd89287548 [ 123.590161][ T6539] [ 125.213864][ T6553] netlink: 'syz.3.198': attribute type 10 has an invalid length. [ 125.484516][ T6550] Driver unsupported XDP return value 0 on prog (id 186) dev N/A, expect packet loss! [ 125.688969][ T6553] lo: entered promiscuous mode [ 125.759347][ T6553] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 125.804807][ T6561] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.201'. [ 125.893332][ T6558] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.201'. [ 126.268932][ T6570] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 126.741117][ T6579] netlink: 14 bytes leftover after parsing attributes in process `syz.2.208'. [ 126.821783][ T6586] sctp: [Deprecated]: syz.1.209 (pid 6586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.821783][ T6586] Use struct sctp_sack_info instead [ 127.191428][ T6592] netlink: 'syz.3.212': attribute type 21 has an invalid length. [ 127.214362][ T6592] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 127.234592][ T6593] netlink: 38583 bytes leftover after parsing attributes in process `syz.3.212'. [ 127.327778][ T6597] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 127.338069][ T6597] netlink: 176 bytes leftover after parsing attributes in process `syz.0.214'. [ 127.527174][ T6597] netlink: 'syz.0.214': attribute type 32 has an invalid length. [ 127.594710][ T6603] netlink: 60 bytes leftover after parsing attributes in process `syz.4.215'. [ 127.644629][ T6602] netlink: 60 bytes leftover after parsing attributes in process `syz.4.215'. [ 127.670589][ T6606] netlink: 60 bytes leftover after parsing attributes in process `syz.4.215'. [ 127.987984][ T6615] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.218'. [ 128.001999][ T6617] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 128.004813][ T6613] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.218'. [ 128.266512][ T6617] team0: Port device macvlan0 added [ 128.797670][ T6641] netlink: 'syz.2.226': attribute type 21 has an invalid length. [ 128.834437][ T6641] netlink: 'syz.2.226': attribute type 1 has an invalid length. [ 129.321993][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.007116][ T6662] bridge_slave_0 (unregistering): left allmulticast mode [ 130.034420][ T6662] bridge_slave_0 (unregistering): left promiscuous mode [ 130.060505][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.861191][ T6686] netlink: 'syz.2.238': attribute type 3 has an invalid length. [ 130.925472][ T6686] netlink: 'syz.2.238': attribute type 1 has an invalid length. [ 130.984497][ T6686] __nla_validate_parse: 3 callbacks suppressed [ 130.984632][ T6686] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.238'. [ 131.096392][ T6686] nbd: couldn't find device at index 63 [ 133.074892][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.081434][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.915175][ T6695] netlink: 'syz.0.240': attribute type 21 has an invalid length. [ 134.935833][ T6695] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 135.122250][ T6702] netlink: 'syz.4.242': attribute type 21 has an invalid length. [ 135.138027][ T6702] netlink: 'syz.4.242': attribute type 1 has an invalid length. [ 135.168661][ T6702] netlink: 38583 bytes leftover after parsing attributes in process `syz.4.242'. [ 135.795331][ T6715] netlink: 14 bytes leftover after parsing attributes in process `syz.0.248'. [ 142.461928][ T6761] netlink: 14 bytes leftover after parsing attributes in process `syz.4.260'. [ 143.211725][ T6782] netlink: 'syz.2.265': attribute type 9 has an invalid length. [ 143.368215][ T6789] FAULT_INJECTION: forcing a failure. [ 143.368215][ T6789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.394663][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.2.268 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 143.405334][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 143.415424][ T6789] Call Trace: [ 143.418729][ T6789] [ 143.421687][ T6789] dump_stack_lvl+0x241/0x360 [ 143.426409][ T6789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.433642][ T6789] ? __pfx__printk+0x10/0x10 [ 143.438267][ T6789] ? __pfx_lock_release+0x10/0x10 [ 143.443333][ T6789] should_fail_ex+0x3b0/0x4e0 [ 143.448045][ T6789] _copy_from_user+0x2f/0xc0 [ 143.452681][ T6789] do_ipv6_setsockopt+0x2f5/0x3640 [ 143.457848][ T6789] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 143.463435][ T6789] ? __pfx_call_rcu+0x10/0x10 [ 143.468150][ T6789] ? bpf_inode_storage_free+0x72/0x300 [ 143.473653][ T6789] ? locks_free_lock_context+0x42/0x70 [ 143.479156][ T6789] ? __destroy_inode+0x4af/0x670 [ 143.484130][ T6789] ? __pfx_sock_free_inode+0x10/0x10 [ 143.489452][ T6789] ? evict+0x836/0x9a0 [ 143.493558][ T6789] ? __pfx_evict+0x10/0x10 [ 143.498008][ T6789] ? iput+0x713/0xa50 [ 143.502031][ T6789] ? __mptcp_nmpc_sk+0x641/0x800 [ 143.507040][ T6789] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 143.512373][ T6789] ipv6_setsockopt+0x5d/0x170 [ 143.517094][ T6789] mptcp_setsockopt+0xeda/0x3bc0 [ 143.522069][ T6789] ? aa_sk_perm+0x96d/0xab0 [ 143.526613][ T6789] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 143.532037][ T6789] ? __pfx_aa_sk_perm+0x10/0x10 [ 143.536936][ T6789] ? __pfx_lock_acquire+0x10/0x10 [ 143.542007][ T6789] ? aa_sock_opt_perm+0x79/0x120 [ 143.546973][ T6789] ? sock_common_setsockopt+0x37/0xc0 [ 143.552389][ T6789] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 143.558324][ T6789] do_sock_setsockopt+0x3af/0x720 [ 143.563392][ T6789] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 143.568977][ T6789] ? __fget_files+0x395/0x410 [ 143.573695][ T6789] ? __fget_files+0x2a/0x410 [ 143.578339][ T6789] __x64_sys_setsockopt+0x1ee/0x280 [ 143.583578][ T6789] do_syscall_64+0xf3/0x230 [ 143.588122][ T6789] ? clear_bhb_loop+0x35/0x90 [ 143.592841][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.598773][ T6789] RIP: 0033:0x7f9bc1585d19 [ 143.603255][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.622902][ T6789] RSP: 002b:00007f9bc22df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.631392][ T6789] RAX: ffffffffffffffda RBX: 00007f9bc1775fa0 RCX: 00007f9bc1585d19 [ 143.639403][ T6789] RDX: 000000000000004e RSI: 0000000000000029 RDI: 0000000000000003 [ 143.647404][ T6789] RBP: 00007f9bc22df090 R08: 0000000000000004 R09: 0000000000000000 [ 143.655407][ T6789] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 143.663404][ T6789] R13: 0000000000000000 R14: 00007f9bc1775fa0 R15: 00007fffdfee3788 [ 143.671424][ T6789] [ 143.714804][ T6793] FAULT_INJECTION: forcing a failure. [ 143.714804][ T6793] name failslab, interval 1, probability 0, space 0, times 0 [ 143.794900][ T6793] CPU: 1 UID: 0 PID: 6793 Comm: syz.3.267 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 143.805564][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 143.815647][ T6793] Call Trace: [ 143.818956][ T6793] [ 143.821910][ T6793] dump_stack_lvl+0x241/0x360 [ 143.826633][ T6793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.831875][ T6793] ? __pfx__printk+0x10/0x10 [ 143.836504][ T6793] ? kmem_cache_alloc_noprof+0x48/0x380 [ 143.842176][ T6793] ? __pfx___might_resched+0x10/0x10 [ 143.847511][ T6793] should_fail_ex+0x3b0/0x4e0 [ 143.852484][ T6793] should_failslab+0xac/0x100 [ 143.857220][ T6793] ? alloc_empty_file+0x9e/0x1d0 [ 143.862211][ T6793] kmem_cache_alloc_noprof+0x70/0x380 [ 143.867636][ T6793] alloc_empty_file+0x9e/0x1d0 [ 143.872463][ T6793] alloc_file_pseudo+0x1da/0x290 [ 143.877453][ T6793] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 143.883044][ T6793] ? __local_bh_enable_ip+0x168/0x200 [ 143.888546][ T6793] ? bpf_link_prime+0x7a/0x240 [ 143.893362][ T6793] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 143.899119][ T6793] anon_inode_getfile+0xc8/0x180 [ 143.904080][ T6793] bpf_link_prime+0xff/0x240 [ 143.908698][ T6793] bpf_raw_tp_link_attach+0x465/0x700 [ 143.914100][ T6793] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 143.920027][ T6793] ? __fget_files+0x2a/0x410 [ 143.924644][ T6793] ? fput+0x21b/0x290 [ 143.928666][ T6793] bpf_raw_tracepoint_open+0x177/0x1f0 [ 143.934143][ T6793] __sys_bpf+0x3c0/0x810 [ 143.938416][ T6793] ? __pfx___sys_bpf+0x10/0x10 [ 143.943195][ T6793] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.949187][ T6793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.955535][ T6793] ? do_syscall_64+0x100/0x230 [ 143.960341][ T6793] __x64_sys_bpf+0x7c/0x90 [ 143.964793][ T6793] do_syscall_64+0xf3/0x230 [ 143.969316][ T6793] ? clear_bhb_loop+0x35/0x90 [ 143.974014][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.979923][ T6793] RIP: 0033:0x7f6f82f85d19 [ 143.984348][ T6793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.003978][ T6793] RSP: 002b:00007f6f83dc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.012529][ T6793] RAX: ffffffffffffffda RBX: 00007f6f83175fa0 RCX: 00007f6f82f85d19 [ 144.020542][ T6793] RDX: 0000000000000010 RSI: 0000000020000e00 RDI: 0000000000000011 [ 144.028535][ T6793] RBP: 00007f6f83dc1090 R08: 0000000000000000 R09: 0000000000000000 [ 144.036515][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.044538][ T6793] R13: 0000000000000000 R14: 00007f6f83175fa0 R15: 00007ffc08776848 [ 144.052532][ T6793] [ 145.310908][ T6806] mac80211_hwsim hwsim5 »»»»»»: renamed from wlan0 (while UP) [ 145.622023][ T6813] netlink: 830 bytes leftover after parsing attributes in process `syz.3.277'. [ 146.262300][ T6823] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 146.275666][ T6821] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.279'. [ 146.304775][ T6821] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.279'. [ 146.656946][ T6836] netlink: 'syz.3.284': attribute type 29 has an invalid length. [ 146.667004][ T6836] netlink: 'syz.3.284': attribute type 29 has an invalid length. [ 146.938550][ T6845] netlink: 'syz.3.287': attribute type 5 has an invalid length. [ 147.005462][ T6845] netlink: 'syz.3.287': attribute type 33 has an invalid length. [ 147.988718][ T6875] netlink: 'syz.4.297': attribute type 29 has an invalid length. [ 148.010159][ T6875] netlink: 'syz.4.297': attribute type 29 has an invalid length. [ 149.065853][ T6912] netlink: 830 bytes leftover after parsing attributes in process `syz.1.313'. [ 149.106400][ T6912] bond_slave_0: entered promiscuous mode [ 149.112454][ T6912] bond_slave_1: entered promiscuous mode [ 149.119332][ T6912] team_slave_0: entered promiscuous mode [ 149.125324][ T6912] team_slave_1: entered promiscuous mode [ 152.792216][ T6954] netlink: 'syz.4.325': attribute type 21 has an invalid length. [ 153.246353][ T6977] pim6reg1: entered promiscuous mode [ 153.252111][ T6977] pim6reg1: entered allmulticast mode [ 153.289656][ T6977] veth0_virt_wifi: entered promiscuous mode [ 153.305271][ T6977] veth0_virt_wifi: entered allmulticast mode [ 154.416964][ T7000] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 157.439581][ T7048] veth0_vlan: entered allmulticast mode [ 164.588201][ T7135] veth0_vlan: entered allmulticast mode [ 164.640150][ T7142] veth0_vlan: left promiscuous mode [ 164.653713][ T7142] veth0_vlan: entered promiscuous mode [ 170.119646][ T7190] wg2: entered promiscuous mode [ 170.218787][ T7190] wg2: entered allmulticast mode [ 174.747627][ T7228] ÿÿÿÿÿÿ: renamed from vlan1 [ 178.155216][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.162861][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.216024][ T7248] bridge0: entered allmulticast mode [ 178.320893][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.328119][ T7250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.335636][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.342774][ T7250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.507959][ T7250] bridge0: entered promiscuous mode [ 182.516206][ T7330] syzkaller0: entered promiscuous mode [ 182.521789][ T7330] syzkaller0: entered allmulticast mode [ 184.107017][ T7348] syzkaller0: entered promiscuous mode [ 184.112561][ T7348] syzkaller0: entered allmulticast mode [ 184.210167][ T7358] net_ratelimit: 3 callbacks suppressed [ 184.210186][ T7358] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 185.511889][ T7363] netlink: 'syz.3.460': attribute type 21 has an invalid length. [ 186.145448][ T7378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 186.152141][ T7378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 187.875120][ T7420] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 187.881933][ T7420] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 191.363904][ T7474] tap0: tun_chr_ioctl cmd 2147767521 [ 191.436991][ T7476] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 191.443843][ T7476] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 193.733570][ T7502] syzkaller0: entered promiscuous mode [ 193.774394][ T7502] syzkaller0: entered allmulticast mode [ 194.655077][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.661763][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.344224][ T7536] netlink: 'syz.1.525': attribute type 21 has an invalid length. [ 196.452697][ T7542] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 196.673868][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 196.680190][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 196.687600][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 196.707168][ T7548] bond_slave_0: left promiscuous mode [ 196.713171][ T7548] bond_slave_1: left promiscuous mode [ 196.720091][ T7548] team_slave_0: left promiscuous mode [ 196.725738][ T7548] team_slave_1: left promiscuous mode [ 196.732347][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 196.739299][ T7548] bond0: entered promiscuous mode [ 196.739977][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 196.752536][ T7548] bond_slave_0: entered promiscuous mode [ 196.759170][ T7548] bond_slave_1: entered promiscuous mode [ 196.765044][ T7548] team0: entered promiscuous mode [ 196.773435][ T7548] team_slave_0: entered promiscuous mode [ 196.779485][ T7548] team_slave_1: entered promiscuous mode [ 196.785303][ T7548] macvlan0: entered promiscuous mode [ 197.480225][ T7572] netlink: 'syz.1.538': attribute type 2 has an invalid length. [ 197.488179][ T7572] netlink: 'syz.1.538': attribute type 3 has an invalid length. [ 197.554396][ T7572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.538'. [ 200.633472][ T7601] IPv6: Can't replace route, no match found [ 201.942529][ T7612] netlink: 'syz.2.548': attribute type 10 has an invalid length. [ 202.173960][ T7612] team0: Port device vlan0 added [ 202.390047][ T7625] netlink: 'syz.3.554': attribute type 10 has an invalid length. [ 202.418985][ T7625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.554'. [ 202.461739][ T7625] batman_adv: batadv0: Adding interface: virt_wifi0 [ 202.501835][ T7625] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.567136][ T7615] delete_channel: no stack [ 202.606025][ T7625] batman_adv: batadv0: Interface activated: virt_wifi0 [ 204.032304][ T7648] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 204.054551][ T7648] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.560'. [ 205.956776][ T7664] netlink: 'syz.3.566': attribute type 21 has an invalid length. [ 209.285882][ T7691] netlink: 'syz.2.575': attribute type 10 has an invalid length. [ 209.363255][ T7691] bridge0: port 1(netdevsim0) entered blocking state [ 209.395066][ T7691] bridge0: port 1(netdevsim0) entered disabled state [ 209.505880][ T7691] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 209.515002][ T7691] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 209.552907][ T7691] bridge0: port 1(netdevsim0) entered blocking state [ 209.559793][ T7691] bridge0: port 1(netdevsim0) entered forwarding state [ 211.664805][ T7707] netlink: 'syz.4.580': attribute type 10 has an invalid length. [ 211.714725][ T7707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.580'. [ 212.366665][ T7712] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.583'. [ 213.336989][ T7720] netlink: 'syz.4.585': attribute type 10 has an invalid length. [ 213.634731][ T7720] netlink: 156 bytes leftover after parsing attributes in process `syz.4.585'. [ 216.431278][ T7733] netlink: 'syz.1.588': attribute type 10 has an invalid length. [ 217.021938][ T7740] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 (while UP) [ 217.736936][ T7748] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 217.794191][ T7748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.593'. [ 217.954947][ T7748] batman_adv: batadv0: Adding interface: virt_wifi0 [ 218.032186][ T7748] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.114347][ T7748] batman_adv: batadv0: Interface activated: virt_wifi0 [ 218.240697][ T7755] netlink: 'syz.2.595': attribute type 2 has an invalid length. [ 218.248725][ T7755] netlink: 'syz.2.595': attribute type 8 has an invalid length. [ 218.256547][ T7755] netlink: 132 bytes leftover after parsing attributes in process `syz.2.595'. [ 218.662226][ T7751] syzkaller0: entered promiscuous mode [ 218.674192][ T7751] syzkaller0: entered allmulticast mode [ 219.172368][ T7778] netlink: 'syz.3.603': attribute type 10 has an invalid length. [ 219.344684][ T7782] netlink: 'syz.0.604': attribute type 10 has an invalid length. [ 222.985444][ T7799] netlink: 'syz.2.609': attribute type 10 has an invalid length. [ 223.558696][ T7778] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 223.576295][ T7782] bridge0: port 3(netdevsim0) entered blocking state [ 223.583527][ T7782] bridge0: port 3(netdevsim0) entered disabled state [ 223.592016][ T7782] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 223.606572][ T7782] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 223.615381][ T7782] bridge0: port 3(netdevsim0) entered blocking state [ 223.622258][ T7782] bridge0: port 3(netdevsim0) entered forwarding state [ 223.648290][ T7797] netlink: 188 bytes leftover after parsing attributes in process `syz.2.609'. [ 223.756991][ T7798] netlink: 144 bytes leftover after parsing attributes in process `syz.2.609'. [ 223.829799][ T7799] hsr_slave_0: left promiscuous mode [ 223.846971][ T7799] hsr_slave_1: left promiscuous mode [ 224.241629][ T7813] netlink: 14 bytes leftover after parsing attributes in process `syz.3.616'. [ 224.619515][ T7838] netlink: 'syz.4.621': attribute type 10 has an invalid length. [ 224.639925][ T7838] bridge0: port 3(netdevsim0) entered blocking state [ 224.689925][ T7832] FAULT_INJECTION: forcing a failure. [ 224.689925][ T7832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.711362][ T7838] bridge0: port 3(netdevsim0) entered disabled state [ 224.718298][ T7832] CPU: 1 UID: 0 PID: 7832 Comm: syz.0.620 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 224.728946][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 224.739053][ T7832] Call Trace: [ 224.742382][ T7832] [ 224.745371][ T7832] dump_stack_lvl+0x241/0x360 [ 224.750130][ T7832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.755393][ T7832] ? __pfx__printk+0x10/0x10 [ 224.760063][ T7832] ? snprintf+0xda/0x120 [ 224.764359][ T7832] should_fail_ex+0x3b0/0x4e0 [ 224.769100][ T7832] _copy_to_user+0x31/0xb0 [ 224.773588][ T7832] simple_read_from_buffer+0xca/0x150 [ 224.779053][ T7832] proc_fail_nth_read+0x1e9/0x250 [ 224.784145][ T7832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.789760][ T7832] ? rw_verify_area+0x55e/0x6f0 [ 224.794667][ T7832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.800293][ T7832] vfs_read+0x1fc/0xb70 [ 224.804518][ T7832] ? __pfx___mutex_lock+0x10/0x10 [ 224.809613][ T7832] ? __pfx_vfs_read+0x10/0x10 [ 224.814353][ T7832] ? __fget_files+0x2a/0x410 [ 224.819022][ T7832] ? __fget_files+0x395/0x410 [ 224.823762][ T7832] ? __fget_files+0x2a/0x410 [ 224.828440][ T7832] ksys_read+0x18f/0x2b0 [ 224.832921][ T7832] ? __pfx_ksys_read+0x10/0x10 [ 224.837741][ T7832] ? do_syscall_64+0x100/0x230 [ 224.842659][ T7832] ? do_syscall_64+0xb6/0x230 [ 224.847405][ T7832] do_syscall_64+0xf3/0x230 [ 224.851978][ T7832] ? clear_bhb_loop+0x35/0x90 [ 224.856728][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.862690][ T7832] RIP: 0033:0x7fd04698472c [ 224.867167][ T7832] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 224.886839][ T7832] RSP: 002b:00007fd0447f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.895386][ T7832] RAX: ffffffffffffffda RBX: 00007fd046b75fa0 RCX: 00007fd04698472c [ 224.903518][ T7832] RDX: 000000000000000f RSI: 00007fd0447f60a0 RDI: 0000000000000004 [ 224.911558][ T7832] RBP: 00007fd0447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.919682][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.927726][ T7832] R13: 0000000000000000 R14: 00007fd046b75fa0 R15: 00007ffc32fc5468 [ 224.935798][ T7832] [ 225.025496][ T7838] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 225.046280][ T7838] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 225.064896][ T7838] bridge0: port 3(netdevsim0) entered blocking state [ 225.071836][ T7838] bridge0: port 3(netdevsim0) entered forwarding state [ 226.040296][ T7867] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 226.480687][ T7881] netlink: 14 bytes leftover after parsing attributes in process `syz.3.635'. [ 227.432413][ T7897] netlink: 'syz.4.639': attribute type 10 has an invalid length. [ 227.541521][ T7897] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 228.698454][ T7916] netlink: 'syz.1.647': attribute type 21 has an invalid length. [ 228.719215][ T7916] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 228.740893][ T7915] netlink: 'syz.2.646': attribute type 21 has an invalid length. [ 228.767712][ T7915] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 228.798117][ T7916] netlink: 38583 bytes leftover after parsing attributes in process `syz.1.647'. [ 228.829101][ T7917] netlink: 38583 bytes leftover after parsing attributes in process `syz.2.646'. [ 231.509723][ T7964] netlink: 'syz.3.662': attribute type 21 has an invalid length. [ 231.523560][ T7964] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 231.536433][ T7964] netlink: 38583 bytes leftover after parsing attributes in process `syz.3.662'. [ 232.345150][ T7979] netlink: 'syz.3.668': attribute type 4 has an invalid length. [ 232.407167][ T7979] netlink: 152 bytes leftover after parsing attributes in process `syz.3.668'. [ 232.854711][ T8000] netlink: 'syz.2.675': attribute type 21 has an invalid length. [ 232.875940][ T8000] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 232.909016][ T8000] netlink: 38583 bytes leftover after parsing attributes in process `syz.2.675'. [ 234.622919][ T8052] @ÿ: renamed from veth0_vlan (while UP) [ 236.931815][ T8098] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.707'. [ 236.952845][ T8101] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.707'. [ 238.041799][ T8128] netlink: 'syz.0.718': attribute type 29 has an invalid length. [ 238.101294][ T8128] netlink: 'syz.0.718': attribute type 29 has an invalid length. [ 238.518422][ T8139] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 238.531879][ T8139] netlink: 55 bytes leftover after parsing attributes in process `syz.4.722'. [ 238.911361][ T8149] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.725'. [ 238.959044][ T8152] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.725'. [ 241.079995][ T8181] bridge0: port 4(gretap0) entered blocking state [ 241.094911][ T8181] bridge0: port 4(gretap0) entered disabled state [ 241.101752][ T8181] gretap0: entered allmulticast mode [ 241.110184][ T8181] gretap0: entered promiscuous mode [ 241.116677][ T8181] bridge0: port 4(gretap0) entered blocking state [ 241.123314][ T8181] bridge0: port 4(gretap0) entered forwarding state [ 242.201081][ T8211] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.743'. [ 242.241647][ T8218] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.743'. [ 242.258217][ T8217] netlink: 'syz.3.745': attribute type 29 has an invalid length. [ 242.278105][ T8217] netlink: 'syz.3.745': attribute type 29 has an invalid length. [ 242.970230][ T8233] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 243.063230][ T8234] netlink: 'syz.0.748': attribute type 10 has an invalid length. [ 243.094711][ T8234] netlink: 156 bytes leftover after parsing attributes in process `syz.0.748'. [ 243.399072][ T8242] netlink: 'syz.2.751': attribute type 10 has an invalid length. [ 243.434812][ T8242] netlink: 55 bytes leftover after parsing attributes in process `syz.2.751'. [ 244.560503][ T8242] team0: Port device vlan0 removed [ 246.410650][ T8299] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 247.055018][ T8326] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 (while UP) [ 247.515497][ T8343] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 248.020104][ T8358] netlink: 'syz.0.794': attribute type 10 has an invalid length. [ 248.119133][ T8359] netlink: 'syz.2.798': attribute type 10 has an invalid length. [ 248.436013][ T8364] netlink: 'syz.4.801': attribute type 10 has an invalid length. [ 248.496289][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.4.801'. [ 248.511211][ T8359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.563230][ T8359] team0: Port device batadv0 added [ 248.738790][ T8364] team0: Port device syz_tun added [ 249.285213][ T8377] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 249.736706][ T8398] netlink: 14 bytes leftover after parsing attributes in process `syz.3.810'. [ 249.805117][ T8399] netlink: 10 bytes leftover after parsing attributes in process `syz.1.815'. [ 249.832417][ T8399] netlink: 'syz.1.815': attribute type 10 has an invalid length. [ 249.982633][ T8399] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 250.011051][ T8407] netlink: 'syz.4.816': attribute type 10 has an invalid length. [ 250.024897][ T8399] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 250.152062][ T8407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.197194][ T8407] team0: Port device batadv0 added [ 250.500199][ T8418] can: request_module (can-proto-3) failed. [ 250.559037][ T8423] netlink: 'syz.2.821': attribute type 10 has an invalid length. [ 250.593995][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.821'. [ 250.677274][ T8423] batman_adv: batadv0: Adding interface: virt_wifi0 [ 250.710716][ T8423] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.757664][ T8426] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.822'. [ 250.774485][ T8423] batman_adv: batadv0: Interface activated: virt_wifi0 [ 250.789510][ T8427] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.805313][ T8431] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.822'. [ 250.814779][ T8427] netlink: 1 bytes leftover after parsing attributes in process `syz.4.823'. [ 251.211056][ T8436] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 253.312344][ T8499] netlink: 'syz.1.848': attribute type 10 has an invalid length. [ 253.374607][ T8499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.848'. [ 253.405685][ T8499] batman_adv: batadv0: Adding interface: virt_wifi0 [ 253.412348][ T8499] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.444396][ T8499] batman_adv: batadv0: Interface activated: virt_wifi0 [ 253.740757][ T8505] netlink: 14 bytes leftover after parsing attributes in process `syz.3.850'. [ 254.039054][ T8492] delete_channel: no stack [ 254.520882][ T8520] netlink: 'syz.2.854': attribute type 21 has an invalid length. [ 254.528942][ T8520] netlink: 'syz.2.854': attribute type 1 has an invalid length. [ 254.554287][ T8521] netlink: 38583 bytes leftover after parsing attributes in process `syz.2.854'. [ 255.971773][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.978322][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.056163][ T8552] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.862'. [ 256.533218][ T8574] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 257.433029][ T8593] FAULT_INJECTION: forcing a failure. [ 257.433029][ T8593] name failslab, interval 1, probability 0, space 0, times 0 [ 257.466424][ T8594] FAULT_INJECTION: forcing a failure. [ 257.466424][ T8594] name failslab, interval 1, probability 0, space 0, times 0 [ 257.489644][ T8593] CPU: 0 UID: 0 PID: 8593 Comm: syz.4.877 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 257.500310][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 257.510413][ T8593] Call Trace: [ 257.513715][ T8593] [ 257.516672][ T8593] dump_stack_lvl+0x241/0x360 [ 257.521401][ T8593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.526648][ T8593] ? __pfx__printk+0x10/0x10 [ 257.531285][ T8593] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 257.537840][ T8593] ? __pfx___might_resched+0x10/0x10 [ 257.543158][ T8593] should_fail_ex+0x3b0/0x4e0 [ 257.547876][ T8593] should_failslab+0xac/0x100 [ 257.552603][ T8593] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 257.558984][ T8593] ? __request_module+0x2d5/0x640 [ 257.564059][ T8593] kstrdup+0x39/0xb0 [ 257.567996][ T8593] __request_module+0x2d5/0x640 [ 257.572900][ T8593] ? __pfx_aa_get_newest_label+0x10/0x10 [ 257.578602][ T8593] ? capable+0x79/0xe0 [ 257.582713][ T8593] ? __pfx___request_module+0x10/0x10 [ 257.588132][ T8593] ? apparmor_capable+0x13b/0x1b0 [ 257.593203][ T8593] ? dev_load+0x21/0x1f0 [ 257.597503][ T8593] dev_ioctl+0x52e/0x1340 [ 257.601914][ T8593] sock_do_ioctl+0x240/0x460 [ 257.606579][ T8593] ? __pfx_sock_do_ioctl+0x10/0x10 [ 257.611760][ T8593] sock_ioctl+0x626/0x8e0 [ 257.616135][ T8593] ? __pfx_sock_ioctl+0x10/0x10 [ 257.621004][ T8593] ? __fget_files+0x2a/0x410 [ 257.625614][ T8593] ? __fget_files+0x2a/0x410 [ 257.630227][ T8593] ? __pfx_sock_ioctl+0x10/0x10 [ 257.635095][ T8593] __se_sys_ioctl+0xf5/0x170 [ 257.639699][ T8593] do_syscall_64+0xf3/0x230 [ 257.644231][ T8593] ? clear_bhb_loop+0x35/0x90 [ 257.648942][ T8593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.654856][ T8593] RIP: 0033:0x7fc4b6d85d19 [ 257.659279][ T8593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.678982][ T8593] RSP: 002b:00007fc4b7aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.687403][ T8593] RAX: ffffffffffffffda RBX: 00007fc4b6f75fa0 RCX: 00007fc4b6d85d19 [ 257.695380][ T8593] RDX: 00000000200003c0 RSI: 0000000000008933 RDI: 0000000000000003 [ 257.703355][ T8593] RBP: 00007fc4b7aef090 R08: 0000000000000000 R09: 0000000000000000 [ 257.711349][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.719327][ T8593] R13: 0000000000000000 R14: 00007fc4b6f75fa0 R15: 00007ffd89287548 [ 257.727317][ T8593] [ 257.751836][ T8594] CPU: 1 UID: 0 PID: 8594 Comm: syz.0.876 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 257.762522][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 257.772610][ T8594] Call Trace: [ 257.775897][ T8594] [ 257.778851][ T8594] dump_stack_lvl+0x241/0x360 [ 257.783549][ T8594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.788790][ T8594] ? __pfx__printk+0x10/0x10 [ 257.793420][ T8594] ? __kmalloc_noprof+0xb5/0x4c0 [ 257.798388][ T8594] ? __pfx___might_resched+0x10/0x10 [ 257.803691][ T8594] should_fail_ex+0x3b0/0x4e0 [ 257.808386][ T8594] should_failslab+0xac/0x100 [ 257.813075][ T8594] __kmalloc_noprof+0xdd/0x4c0 [ 257.817855][ T8594] ? bpf_test_init+0xe1/0x180 [ 257.822542][ T8594] bpf_test_init+0xe1/0x180 [ 257.827052][ T8594] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 257.832436][ T8594] ? __pfx_lock_release+0x10/0x10 [ 257.837503][ T8594] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 257.843320][ T8594] ? __fget_files+0x2a/0x410 [ 257.847947][ T8594] ? __fget_files+0x2a/0x410 [ 257.852578][ T8594] ? fput+0x21b/0x290 [ 257.856577][ T8594] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 257.862397][ T8594] bpf_prog_test_run+0x2e4/0x360 [ 257.867372][ T8594] __sys_bpf+0x48d/0x810 [ 257.871624][ T8594] ? __pfx___sys_bpf+0x10/0x10 [ 257.876407][ T8594] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.882400][ T8594] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.888751][ T8594] ? do_syscall_64+0x100/0x230 [ 257.893538][ T8594] __x64_sys_bpf+0x7c/0x90 [ 257.897976][ T8594] do_syscall_64+0xf3/0x230 [ 257.902507][ T8594] ? clear_bhb_loop+0x35/0x90 [ 257.907206][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.913139][ T8594] RIP: 0033:0x7fd046985d19 [ 257.917566][ T8594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.937182][ T8594] RSP: 002b:00007fd0447f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.945604][ T8594] RAX: ffffffffffffffda RBX: 00007fd046b75fa0 RCX: 00007fd046985d19 [ 257.953575][ T8594] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 257.961636][ T8594] RBP: 00007fd0447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.969611][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.977587][ T8594] R13: 0000000000000000 R14: 00007fd046b75fa0 R15: 00007ffc32fc5468 [ 257.985576][ T8594] [ 258.385714][ T8605] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 258.405714][ T8605] vlan0: entered allmulticast mode [ 260.585131][ T8630] netlink: 'syz.4.885': attribute type 10 has an invalid length. [ 260.971736][ T8633] syzkaller0: entered promiscuous mode [ 261.055098][ T8633] syzkaller0: entered allmulticast mode [ 261.616536][ T8658] netlink: 'syz.3.887': attribute type 2 has an invalid length. [ 261.651192][ T8658] netlink: 'syz.3.887': attribute type 8 has an invalid length. [ 261.688943][ T8658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.887'. [ 266.769910][ T8678] syzkaller0: entered promiscuous mode [ 266.776029][ T8678] syzkaller0: entered allmulticast mode [ 267.123027][ T8707] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.908'. [ 267.175146][ T8705] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.908'. [ 267.469465][ T8712] netlink: 'syz.4.909': attribute type 10 has an invalid length. [ 269.639648][ T8708] netlink: 'syz.3.907': attribute type 10 has an invalid length. [ 269.647953][ T8708] netlink: 156 bytes leftover after parsing attributes in process `syz.3.907'. [ 269.758279][ T8717] syzkaller0: entered promiscuous mode [ 269.763834][ T8717] syzkaller0: entered allmulticast mode [ 272.199204][ T8756] syz.4.921 (8756) used greatest stack depth: 17104 bytes left [ 272.238953][ T8758] FAULT_INJECTION: forcing a failure. [ 272.238953][ T8758] name failslab, interval 1, probability 0, space 0, times 0 [ 272.252238][ T8758] CPU: 0 UID: 0 PID: 8758 Comm: syz.4.922 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 272.262955][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 272.273019][ T8758] Call Trace: [ 272.276301][ T8758] [ 272.279247][ T8758] dump_stack_lvl+0x241/0x360 [ 272.283935][ T8758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.289227][ T8758] ? __pfx__printk+0x10/0x10 [ 272.293830][ T8758] ? __kmalloc_noprof+0xb5/0x4c0 [ 272.298775][ T8758] ? __pfx___might_resched+0x10/0x10 [ 272.304060][ T8758] ? __mutex_lock+0x37f/0xee0 [ 272.308766][ T8758] should_fail_ex+0x3b0/0x4e0 [ 272.313474][ T8758] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 272.319206][ T8758] should_failslab+0xac/0x100 [ 272.323900][ T8758] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 272.329643][ T8758] __kmalloc_noprof+0xdd/0x4c0 [ 272.334419][ T8758] ? tracepoint_add_func+0x34c/0xaa0 [ 272.339715][ T8758] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 272.345489][ T8758] tracepoint_add_func+0x34c/0xaa0 [ 272.350614][ T8758] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 272.356405][ T8758] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 272.363358][ T8758] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 272.370854][ T8758] ? __pfx___bpf_trace_sys_exit+0x10/0x10 [ 272.376586][ T8758] ? anon_inode_getfile+0xff/0x180 [ 272.381705][ T8758] ? bpf_probe_register+0x134/0x1f0 [ 272.386923][ T8758] bpf_raw_tp_link_attach+0x4a3/0x700 [ 272.392305][ T8758] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 272.398225][ T8758] ? __fget_files+0x2a/0x410 [ 272.402841][ T8758] ? fput+0x21b/0x290 [ 272.406857][ T8758] bpf_raw_tracepoint_open+0x177/0x1f0 [ 272.412329][ T8758] __sys_bpf+0x3c0/0x810 [ 272.416580][ T8758] ? __pfx___sys_bpf+0x10/0x10 [ 272.421361][ T8758] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.427355][ T8758] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.433694][ T8758] ? do_syscall_64+0x100/0x230 [ 272.438476][ T8758] __x64_sys_bpf+0x7c/0x90 [ 272.442908][ T8758] do_syscall_64+0xf3/0x230 [ 272.447428][ T8758] ? clear_bhb_loop+0x35/0x90 [ 272.452127][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.458046][ T8758] RIP: 0033:0x7fc4b6d85d19 [ 272.462486][ T8758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.482274][ T8758] RSP: 002b:00007fc4b7aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.490789][ T8758] RAX: ffffffffffffffda RBX: 00007fc4b6f75fa0 RCX: 00007fc4b6d85d19 [ 272.498794][ T8758] RDX: 0000000000000010 RSI: 0000000020000e00 RDI: 0000000000000011 [ 272.506784][ T8758] RBP: 00007fc4b7aef090 R08: 0000000000000000 R09: 0000000000000000 [ 272.514767][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.522747][ T8758] R13: 0000000000000000 R14: 00007fc4b6f75fa0 R15: 00007ffd89287548 [ 272.530738][ T8758] [ 274.514445][ T8741] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 274.522291][ T8741] netlink: 156 bytes leftover after parsing attributes in process `syz.0.917'. [ 274.546290][ T8762] netlink: 'syz.4.923': attribute type 10 has an invalid length. [ 274.569307][ T8762] netlink: 156 bytes leftover after parsing attributes in process `syz.4.923'. [ 274.940020][ T8777] netlink: 'syz.4.928': attribute type 10 has an invalid length. [ 275.000051][ T8777] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 275.026537][ T8780] netlink: 'syz.0.931': attribute type 21 has an invalid length. [ 275.076592][ T8780] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 275.101338][ T8783] netlink: 38583 bytes leftover after parsing attributes in process `syz.0.931'. [ 275.643759][ T8795] syzkaller0: entered promiscuous mode [ 275.671583][ T8795] syzkaller0: entered allmulticast mode [ 278.778552][ T8802] netlink: 'syz.2.941': attribute type 29 has an invalid length. [ 278.786741][ T8816] netlink: 'syz.3.944': attribute type 21 has an invalid length. [ 278.801740][ T8816] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 278.821777][ T8821] netlink: 38583 bytes leftover after parsing attributes in process `syz.3.944'. [ 279.878923][ T8849] netlink: 'syz.0.955': attribute type 10 has an invalid length. [ 280.172913][ T8849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.290582][ T8849] team0: Port device batadv0 added [ 280.834748][ T8859] netlink: 'syz.2.958': attribute type 10 has an invalid length. [ 281.076140][ T8867] FAULT_INJECTION: forcing a failure. [ 281.076140][ T8867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.077281][ T8867] [ 281.077292][ T8867] ====================================================== [ 281.077300][ T8867] WARNING: possible circular locking dependency detected [ 281.077309][ T8867] 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 Not tainted [ 281.077321][ T8867] ------------------------------------------------------ [ 281.077328][ T8867] syz.0.962/8867 is trying to acquire lock: [ 281.077339][ T8867] ffffffff8e813440 (console_owner){-...}-{0:0}, at: console_flush_all+0x1a3/0xeb0 [ 281.077392][ T8867] [ 281.077392][ T8867] but task is already holding lock: [ 281.077398][ T8867] ffff8880b873e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 281.077455][ T8867] [ 281.077455][ T8867] which lock already depends on the new lock. [ 281.077455][ T8867] [ 281.077461][ T8867] [ 281.077461][ T8867] the existing dependency chain (in reverse order) is: [ 281.077468][ T8867] [ 281.077468][ T8867] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 281.077496][ T8867] lock_acquire+0x1ed/0x550 [ 281.077519][ T8867] _raw_spin_lock_nested+0x31/0x40 [ 281.077545][ T8867] raw_spin_rq_lock_nested+0x2a/0x140 [ 281.077575][ T8867] task_rq_lock+0xc6/0x360 [ 281.077591][ T8867] cgroup_move_task+0x9b/0x5a0 [ 281.077619][ T8867] css_set_move_task+0x72e/0x950 [ 281.077637][ T8867] cgroup_post_fork+0x256/0x880 [ 281.077654][ T8867] copy_process+0x39e9/0x3d50 [ 281.077672][ T8867] kernel_clone+0x226/0x8e0 [ 281.077691][ T8867] user_mode_thread+0x132/0x1a0 [ 281.077711][ T8867] rest_init+0x23/0x300 [ 281.077729][ T8867] start_kernel+0x47f/0x500 [ 281.077750][ T8867] x86_64_start_reservations+0x2a/0x30 [ 281.077777][ T8867] x86_64_start_kernel+0x9f/0xa0 [ 281.077803][ T8867] common_startup_64+0x13e/0x147 [ 281.077832][ T8867] [ 281.077832][ T8867] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 281.077862][ T8867] lock_acquire+0x1ed/0x550 [ 281.077885][ T8867] _raw_spin_lock_irqsave+0xd5/0x120 [ 281.077908][ T8867] try_to_wake_up+0xc2/0x1470 [ 281.077932][ T8867] __wake_up_common_lock+0x130/0x1e0 [ 281.077955][ T8867] tty_port_default_wakeup+0xa6/0xf0 [ 281.077976][ T8867] serial8250_tx_chars+0x6e2/0x930 [ 281.078013][ T8867] serial8250_handle_irq+0x630/0xb80 [ 281.078043][ T8867] serial8250_default_handle_irq+0xd1/0x1f0 [ 281.078066][ T8867] serial8250_interrupt+0xa9/0x1f0 [ 281.078092][ T8867] __handle_irq_event_percpu+0x29a/0xa60 [ 281.078112][ T8867] handle_irq_event+0x89/0x1f0 [ 281.078131][ T8867] handle_edge_irq+0x25f/0xc20 [ 281.078159][ T8867] __common_interrupt+0x136/0x230 [ 281.078190][ T8867] common_interrupt+0xb4/0xd0 [ 281.078210][ T8867] asm_common_interrupt+0x26/0x40 [ 281.078238][ T8867] vfs_getattr+0x45/0x3b0 [ 281.078265][ T8867] vfs_fstatat+0xa8/0x130 [ 281.078290][ T8867] __x64_sys_newfstatat+0x11d/0x1a0 [ 281.078319][ T8867] do_syscall_64+0xf3/0x230 [ 281.078347][ T8867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.078377][ T8867] [ 281.078377][ T8867] -> #2 (&tty->write_wait){-...}-{3:3}: [ 281.078407][ T8867] lock_acquire+0x1ed/0x550 [ 281.078430][ T8867] _raw_spin_lock_irqsave+0xd5/0x120 [ 281.078454][ T8867] __wake_up_common_lock+0x25/0x1e0 [ 281.078477][ T8867] tty_port_default_wakeup+0xa6/0xf0 [ 281.078498][ T8867] serial8250_tx_chars+0x6e2/0x930 [ 281.078527][ T8867] serial8250_handle_irq+0x630/0xb80 [ 281.078557][ T8867] serial8250_default_handle_irq+0xd1/0x1f0 [ 281.078581][ T8867] serial8250_interrupt+0xa9/0x1f0 [ 281.078623][ T8867] __handle_irq_event_percpu+0x29a/0xa60 [ 281.078643][ T8867] handle_irq_event+0x89/0x1f0 [ 281.078662][ T8867] handle_edge_irq+0x25f/0xc20 [ 281.078691][ T8867] __common_interrupt+0x136/0x230 [ 281.078721][ T8867] common_interrupt+0xb4/0xd0 [ 281.078752][ T8867] asm_common_interrupt+0x26/0x40 [ 281.078780][ T8867] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 281.078803][ T8867] uart_write+0x3e4/0xa40 [ 281.078830][ T8867] n_tty_write+0xd62/0x1230 [ 281.078852][ T8867] file_tty_write+0x546/0x9b0 [ 281.078878][ T8867] vfs_write+0xaeb/0xd30 [ 281.078896][ T8867] ksys_write+0x18f/0x2b0 [ 281.078914][ T8867] do_syscall_64+0xf3/0x230 [ 281.078940][ T8867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.078968][ T8867] [ 281.078968][ T8867] -> #1 (&port_lock_key){-...}-{3:3}: [ 281.079003][ T8867] lock_acquire+0x1ed/0x550 [ 281.079024][ T8867] _raw_spin_lock_irqsave+0xd5/0x120 [ 281.079047][ T8867] serial8250_console_write+0x1a7/0x1ed0 [ 281.079065][ T8867] console_flush_all+0x86b/0xeb0 [ 281.079083][ T8867] console_unlock+0x14f/0x3b0 [ 281.079109][ T8867] vprintk_emit+0x730/0xa10 [ 281.079153][ T8867] _printk+0xd5/0x120 [ 281.079177][ T8867] register_console+0xbf5/0xfd0 [ 281.079195][ T8867] univ8250_console_init+0x52/0x90 [ 281.079224][ T8867] console_init+0x1b8/0x6f0 [ 281.079244][ T8867] start_kernel+0x2d8/0x500 [ 281.079265][ T8867] x86_64_start_reservations+0x2a/0x30 [ 281.079294][ T8867] x86_64_start_kernel+0x9f/0xa0 [ 281.079320][ T8867] common_startup_64+0x13e/0x147 [ 281.079347][ T8867] [ 281.079347][ T8867] -> #0 (console_owner){-...}-{0:0}: [ 281.079375][ T8867] validate_chain+0x18ef/0x5920 [ 281.079402][ T8867] __lock_acquire+0x1397/0x2100 [ 281.079424][ T8867] lock_acquire+0x1ed/0x550 [ 281.079446][ T8867] console_flush_all+0x7f8/0xeb0 [ 281.079463][ T8867] console_unlock+0x14f/0x3b0 [ 281.079491][ T8867] vprintk_emit+0x730/0xa10 [ 281.079518][ T8867] _printk+0xd5/0x120 [ 281.079542][ T8867] should_fail_ex+0x391/0x4e0 [ 281.079560][ T8867] strncpy_from_user+0x36/0x270 [ 281.079589][ T8867] strncpy_from_user_nofault+0x71/0x140 [ 281.079612][ T8867] bpf_probe_read_compat_str+0xe9/0x180 [ 281.079638][ T8867] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 281.079654][ T8867] bpf_trace_run4+0x334/0x590 [ 281.079672][ T8867] __traceiter_sched_switch+0x98/0xd0 [ 281.079699][ T8867] __schedule+0x22bc/0x4c30 [ 281.079722][ T8867] preempt_schedule_irq+0xfb/0x1c0 [ 281.079747][ T8867] irqentry_exit+0x5e/0x90 [ 281.079772][ T8867] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.079802][ T8867] __kasan_check_write+0xa/0x20 [ 281.079821][ T8867] tomoyo_supervisor+0x257/0x11f0 [ 281.079845][ T8867] tomoyo_path_number_perm+0x5d3/0x860 [ 281.079875][ T8867] security_file_ioctl+0xc6/0x2a0 [ 281.079905][ T8867] __se_sys_ioctl+0x46/0x170 [ 281.079924][ T8867] do_syscall_64+0xf3/0x230 [ 281.079951][ T8867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.079986][ T8867] [ 281.079986][ T8867] other info that might help us debug this: [ 281.079986][ T8867] [ 281.079993][ T8867] Chain exists of: [ 281.079993][ T8867] console_owner --> &p->pi_lock --> &rq->__lock [ 281.079993][ T8867] [ 281.080026][ T8867] Possible unsafe locking scenario: [ 281.080026][ T8867] [ 281.080032][ T8867] CPU0 CPU1 [ 281.080038][ T8867] ---- ---- [ 281.080044][ T8867] lock(&rq->__lock); [ 281.080057][ T8867] lock(&p->pi_lock); [ 281.080073][ T8867] lock(&rq->__lock); [ 281.080087][ T8867] lock(console_owner); [ 281.080101][ T8867] [ 281.080101][ T8867] *** DEADLOCK *** [ 281.080101][ T8867] [ 281.080106][ T8867] 5 locks held by syz.0.962/8867: [ 281.080119][ T8867] #0: ffffffff8f00c8d0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x206/0x860 [ 281.080182][ T8867] #1: ffff8880b873e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 281.080243][ T8867] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 281.080291][ T8867] #3: ffffffff8e8134a0 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 281.080356][ T8867] #4: ffffffff8e8130b0 (console_srcu){....}-{0:0}, at: console_flush_all+0x1a3/0xeb0 [ 281.080403][ T8867] [ 281.080403][ T8867] stack backtrace: [ 281.080410][ T8867] CPU: 1 UID: 0 PID: 8867 Comm: syz.0.962 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 281.080433][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 281.080446][ T8867] Call Trace: [ 281.080453][ T8867] [ 281.080461][ T8867] dump_stack_lvl+0x241/0x360 [ 281.080492][ T8867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.080521][ T8867] ? __pfx__printk+0x10/0x10 [ 281.080552][ T8867] print_circular_bug+0x13a/0x1b0 [ 281.080584][ T8867] check_noncircular+0x36a/0x4a0 [ 281.080616][ T8867] ? __pfx_check_noncircular+0x10/0x10 [ 281.080645][ T8867] ? lockdep_lock+0x123/0x2b0 [ 281.080668][ T8867] ? add_lock_to_list+0x1e8/0x2f0 [ 281.080701][ T8867] validate_chain+0x18ef/0x5920 [ 281.080740][ T8867] ? __pfx_validate_chain+0x10/0x10 [ 281.080769][ T8867] ? sprintf+0xda/0x120 [ 281.080810][ T8867] ? vsnprintf+0x1cc3/0x1da0 [ 281.080833][ T8867] ? __pfx_sprintf+0x10/0x10 [ 281.080865][ T8867] ? __pfx_info_print_prefix+0x10/0x10 [ 281.080891][ T8867] ? mark_lock+0x9a/0x360 [ 281.080920][ T8867] __lock_acquire+0x1397/0x2100 [ 281.080953][ T8867] lock_acquire+0x1ed/0x550 [ 281.080977][ T8867] ? console_flush_all+0x1a3/0xeb0 [ 281.081009][ T8867] ? __pfx_lock_acquire+0x10/0x10 [ 281.081034][ T8867] ? __pfx_lock_release+0x10/0x10 [ 281.081057][ T8867] ? do_raw_spin_lock+0x14f/0x370 [ 281.081081][ T8867] ? do_raw_spin_unlock+0x13c/0x8b0 [ 281.081102][ T8867] ? console_flush_all+0x511/0xeb0 [ 281.081122][ T8867] ? console_flush_all+0x1a3/0xeb0 [ 281.081143][ T8867] console_flush_all+0x7f8/0xeb0 [ 281.081162][ T8867] ? console_flush_all+0x1a3/0xeb0 [ 281.081184][ T8867] ? console_flush_all+0x1a3/0xeb0 [ 281.081208][ T8867] ? __pfx_console_flush_all+0x10/0x10 [ 281.081229][ T8867] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 281.081256][ T8867] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.081287][ T8867] ? this_cpu_in_panic+0x4f/0x80 [ 281.081314][ T8867] ? is_printk_legacy_deferred+0x43/0x50 [ 281.081339][ T8867] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 281.081373][ T8867] console_unlock+0x14f/0x3b0 [ 281.081404][ T8867] ? __pfx_console_unlock+0x10/0x10 [ 281.081436][ T8867] ? this_cpu_in_panic+0x4f/0x80 [ 281.081464][ T8867] ? is_printk_legacy_deferred+0x43/0x50 [ 281.081488][ T8867] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 281.081523][ T8867] vprintk_emit+0x730/0xa10 [ 281.081554][ T8867] ? __pfx_vprintk_emit+0x10/0x10 [ 281.081585][ T8867] ? __bad_area_nosemaphore+0x118/0x770 [ 281.081641][ T8867] _printk+0xd5/0x120 [ 281.081670][ T8867] ? __pfx__printk+0x10/0x10 [ 281.081703][ T8867] should_fail_ex+0x391/0x4e0 [ 281.081725][ T8867] strncpy_from_user+0x36/0x270 [ 281.081756][ T8867] strncpy_from_user_nofault+0x71/0x140 [ 281.081778][ T8867] bpf_probe_read_compat_str+0xe9/0x180 [ 281.081807][ T8867] ? bpf_trace_run4+0x244/0x590 [ 281.081826][ T8867] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 281.081845][ T8867] bpf_trace_run4+0x334/0x590 [ 281.081865][ T8867] ? psi_group_change+0xb4e/0x1190 [ 281.081897][ T8867] ? __pfx_bpf_trace_run4+0x10/0x10 [ 281.081921][ T8867] ? __pfx_probe_sched_switch+0x10/0x10 [ 281.081943][ T8867] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 281.081977][ T8867] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 281.082026][ T8867] __traceiter_sched_switch+0x98/0xd0 [ 281.082057][ T8867] __schedule+0x22bc/0x4c30 [ 281.082082][ T8867] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 281.082109][ T8867] ? arch_stack_walk+0xfd/0x150 [ 281.082142][ T8867] ? __pfx___schedule+0x10/0x10 [ 281.082170][ T8867] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.082201][ T8867] ? preempt_schedule_irq+0xf0/0x1c0 [ 281.082229][ T8867] preempt_schedule_irq+0xfb/0x1c0 [ 281.082257][ T8867] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 281.082283][ T8867] ? number+0xb5e/0xf90 [ 281.082304][ T8867] ? string+0x26a/0x2b0 [ 281.082332][ T8867] irqentry_exit+0x5e/0x90 [ 281.082359][ T8867] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.082391][ T8867] RIP: 0010:__kasan_check_write+0xa/0x20 [ 281.082413][ T8867] Code: ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 01 00 00 00 e9 3c e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 [ 281.082431][ T8867] RSP: 0018:ffffc900023cfa18 EFLAGS: 00000293 [ 281.082449][ T8867] RAX: ffffffff8474ea85 RBX: 0000000000000000 RCX: ffffffff8474ea97 [ 281.082465][ T8867] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9a564c24 [ 281.082480][ T8867] RBP: ffffc900023cfbd0 R08: ffffffff8474ea76 R09: ffffffff8bc3cb94 [ 281.082496][ T8867] R10: 0000000000000012 R11: ffff88802622bc00 R12: ffffc900023cfd0c [ 281.082511][ T8867] R13: 1ffff92000479fa1 R14: 0000000000000000 R15: 0000000000000001 [ 281.082528][ T8867] ? vsnprintf+0x184/0x1da0 [ 281.082550][ T8867] ? tomoyo_supervisor+0x236/0x11f0 [ 281.082575][ T8867] ? tomoyo_supervisor+0x245/0x11f0 [ 281.082599][ T8867] ? tomoyo_supervisor+0x257/0x11f0 [ 281.082627][ T8867] tomoyo_supervisor+0x257/0x11f0 [ 281.082655][ T8867] ? __pfx_vsnprintf+0x10/0x10 [ 281.082679][ T8867] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 281.082707][ T8867] ? snprintf+0xda/0x120 [ 281.082732][ T8867] ? tomoyo_print_ulong+0x27/0xa0 [ 281.082761][ T8867] ? __pfx_snprintf+0x10/0x10 [ 281.082786][ T8867] ? tomoyo_check_acl+0x37e/0x3f0 [ 281.082830][ T8867] tomoyo_path_number_perm+0x5d3/0x860 [ 281.082861][ T8867] ? __lock_acquire+0x1397/0x2100 [ 281.082886][ T8867] ? tomoyo_path_number_perm+0x206/0x860 [ 281.082918][ T8867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 281.082968][ T8867] ? __pfx_lock_release+0x10/0x10 [ 281.082998][ T8867] ? __fget_files+0x2a/0x410 [ 281.083028][ T8867] ? __fget_files+0x2a/0x410 [ 281.083058][ T8867] security_file_ioctl+0xc6/0x2a0 [ 281.083088][ T8867] __se_sys_ioctl+0x46/0x170 [ 281.083110][ T8867] do_syscall_64+0xf3/0x230 [ 281.083139][ T8867] ? clear_bhb_loop+0x35/0x90 [ 281.083170][ T8867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.083199][ T8867] RIP: 0033:0x7fd046985d19 [ 281.083216][ T8867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.083233][ T8867] RSP: 002b:00007fd0447f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.083253][ T8867] RAX: ffffffffffffffda RBX: 00007fd046b75fa0 RCX: 00007fd046985d19 [ 281.083268][ T8867] RDX: 00000000200003c0 RSI: 0000000000008933 RDI: 0000000000000003 [ 281.083282][ T8867] RBP: 00007fd0447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.083295][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.083307][ T8867] R13: 0000000000000000 R14: 00007fd046b75fa0 R15: 00007ffc32fc5468 [ 281.083329][ T8867] [ 282.501424][ T8867] CPU: 1 UID: 0 PID: 8867 Comm: syz.0.962 Not tainted 6.13.0-rc2-syzkaller-00059-g00a5acdbf398 #0 [ 282.512010][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 282.522054][ T8867] Call Trace: [ 282.525327][ T8867] [ 282.528253][ T8867] dump_stack_lvl+0x241/0x360 [ 282.532945][ T8867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.538152][ T8867] ? __pfx__printk+0x10/0x10 [ 282.542752][ T8867] should_fail_ex+0x3b0/0x4e0 [ 282.547451][ T8867] strncpy_from_user+0x36/0x270 [ 282.552301][ T8867] strncpy_from_user_nofault+0x71/0x140 [ 282.557834][ T8867] bpf_probe_read_compat_str+0xe9/0x180 [ 282.563366][ T8867] ? bpf_trace_run4+0x244/0x590 [ 282.568201][ T8867] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 282.573642][ T8867] bpf_trace_run4+0x334/0x590 [ 282.578304][ T8867] ? psi_group_change+0xb4e/0x1190 [ 282.583409][ T8867] ? __pfx_bpf_trace_run4+0x10/0x10 [ 282.588629][ T8867] ? __pfx_probe_sched_switch+0x10/0x10 [ 282.594173][ T8867] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 282.600879][ T8867] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 282.606943][ T8867] __traceiter_sched_switch+0x98/0xd0 [ 282.612321][ T8867] __schedule+0x22bc/0x4c30 [ 282.616830][ T8867] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 282.622975][ T8867] ? arch_stack_walk+0xfd/0x150 [ 282.627829][ T8867] ? __pfx___schedule+0x10/0x10 [ 282.632700][ T8867] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.638766][ T8867] ? preempt_schedule_irq+0xf0/0x1c0 [ 282.644050][ T8867] preempt_schedule_irq+0xfb/0x1c0 [ 282.649183][ T8867] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 282.654898][ T8867] ? number+0xb5e/0xf90 [ 282.659064][ T8867] ? string+0x26a/0x2b0 [ 282.663217][ T8867] irqentry_exit+0x5e/0x90 [ 282.667648][ T8867] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 282.673637][ T8867] RIP: 0010:__kasan_check_write+0xa/0x20 [ 282.679267][ T8867] Code: ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 01 00 00 00 e9 3c e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 [ 282.698886][ T8867] RSP: 0018:ffffc900023cfa18 EFLAGS: 00000293 [ 282.704973][ T8867] RAX: ffffffff8474ea85 RBX: 0000000000000000 RCX: ffffffff8474ea97 [ 282.712938][ T8867] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9a564c24 [ 282.720921][ T8867] RBP: ffffc900023cfbd0 R08: ffffffff8474ea76 R09: ffffffff8bc3cb94 [ 282.728887][ T8867] R10: 0000000000000012 R11: ffff88802622bc00 R12: ffffc900023cfd0c [ 282.736853][ T8867] R13: 1ffff92000479fa1 R14: 0000000000000000 R15: 0000000000000001 [ 282.744839][ T8867] ? vsnprintf+0x184/0x1da0 [ 282.749366][ T8867] ? tomoyo_supervisor+0x236/0x11f0 [ 282.754582][ T8867] ? tomoyo_supervisor+0x245/0x11f0 [ 282.759821][ T8867] ? tomoyo_supervisor+0x257/0x11f0 [ 282.765044][ T8867] tomoyo_supervisor+0x257/0x11f0 [ 282.770083][ T8867] ? __pfx_vsnprintf+0x10/0x10 [ 282.774845][ T8867] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 282.780338][ T8867] ? snprintf+0xda/0x120 [ 282.784610][ T8867] ? tomoyo_print_ulong+0x27/0xa0 [ 282.789665][ T8867] ? __pfx_snprintf+0x10/0x10 [ 282.794358][ T8867] ? tomoyo_check_acl+0x37e/0x3f0 [ 282.799412][ T8867] tomoyo_path_number_perm+0x5d3/0x860 [ 282.804887][ T8867] ? __lock_acquire+0x1397/0x2100 [ 282.809915][ T8867] ? tomoyo_path_number_perm+0x206/0x860 [ 282.815545][ T8867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 282.821536][ T8867] ? __pfx_lock_release+0x10/0x10 [ 282.826556][ T8867] ? __fget_files+0x2a/0x410 [ 282.831161][ T8867] ? __fget_files+0x2a/0x410 [ 282.835842][ T8867] security_file_ioctl+0xc6/0x2a0 [ 282.840895][ T8867] __se_sys_ioctl+0x46/0x170 [ 282.845496][ T8867] do_syscall_64+0xf3/0x230 [ 282.850000][ T8867] ? clear_bhb_loop+0x35/0x90 [ 282.854780][ T8867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.860672][ T8867] RIP: 0033:0x7fd046985d19 [ 282.865092][ T8867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.884751][ T8867] RSP: 002b:00007fd0447f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.893174][ T8867] RAX: ffffffffffffffda RBX: 00007fd046b75fa0 RCX: 00007fd046985d19 [ 282.901143][ T8867] RDX: 00000000200003c0 RSI: 0000000000008933 RDI: 0000000000000003 [ 282.909107][ T8867] RBP: 00007fd0447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 282.917089][ T8867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.925051][ T8867] R13: 0000000000000000 R14: 00007fd046b75fa0 R15: 00007ffc32fc5468 [ 282.933024][ T8867]