last executing test programs: 16.985309274s ago: executing program 2 (id=2931): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, 0x0, 0x20000) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x72, &(0x7f0000000000), 0xc) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000002e008188040f80ec59acbc0413a1f84829", 0x15}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) (async) recvmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) 16.588759949s ago: executing program 2 (id=2934): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89b0, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x22, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) r7 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xf1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1a089, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0}, 0x2018, 0x80000000, 0x0, 0x8, 0x72, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 16.007052078s ago: executing program 2 (id=2938): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8b26, 0x0) 15.595955954s ago: executing program 2 (id=2941): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000048"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa2b"], 0xfdef) perf_event_open$cgroup(&(0x7f00000004c0)={0x3, 0x80, 0x1, 0x1, 0x2, 0xfe, 0x0, 0x9, 0x46000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000440), 0x9}, 0x0, 0x81, 0x0, 0x4, 0x8, 0x4eb, 0x7, 0x0, 0x7, 0x0, 0x987}, r8, 0xb, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x49) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2a100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={&(0x7f0000000700)="2e9b2375637a8d1ac09df3c2c5a9d9af58a0eedf033e041e0302a26b6c9cac8b1fffbc8a2d974acb68b2c0856d996485416e552db54216f4eb7902bc9b7c5b4b5b84ea1c1021379b61872fb49e1c65dc134118130528f602373e618912dabc3e6a9bd89093fde9a0332d513865d538f7ee525c61ecf93c56e934fd82fa0e471e47a8cbe160f41dc34bd9f4cf16359ad97a0f7043ed", &(0x7f00000007c0)=""/143, &(0x7f0000000a00)="e55bb758e5fe31e92076d4485589995dcfeb6fb4c4435998e46159ca6385561bece2ecd02942a0332b3fd045739a9e8459d333ae82d8c6531fcfb9499b4f6a45d35b9d207e32ab4d233033d8550f43244ed0cddf18c5d4946a4003154997034dceb4ee0b89e77a7d1e85f8e0c7b31110b8974e0545723e6ababb1f3bde51d4046ad1cfdb2566f565f64e5ca3b051382d7f26eb1a3332ee6bfb5c298636fabf23a5eb4eb03ce3ec809a1a3367c229a1ac45075af9578d168f723d7b09522276acaa28dc10d7fc4abd2e823dd9146dccd5175cea9b0a59dd5f4a0336ee5a5d1b37576402d52c5dd36d406f52a75e08115efd8f6f7d8c76bc76", &(0x7f0000000880)="ad298fb4cb99a58c41f01c063badc66232566c87dd4dbf306b95b91567d871e83f72d33aa5801405adc371f8d3577803f899af44716bf254b74795aa0648fb345192b1ffbb7c62a17f9c9d488d7bde84a3f173cd1917c79596a4afd21b6c54f10afb91e28887dae1290e6c5f90e5a7a1f33ee64c46", 0xffffffff, r8}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a", 0x12}], 0x1}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r9], 0xfe33) sendmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e1050007", 0x15}, {&(0x7f0000000080)="a952fa31704ca1311036533f9d6219a094c9068628e5cdc3cf2d6e16634347566b", 0x21}, {0x0}, {0x0}], 0x4}, 0x4000000) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000280)="8fac", 0x2}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001800000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 13.853657917s ago: executing program 2 (id=2948): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$kcm(0x2a, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000800000000002000000000000000000"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e00280010000700028000001294", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xa, 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0xe9e0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x40000010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, 0x0, &(0x7f0000000380)}, 0x20) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x41, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000580)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x92}, [@call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 5.866867306s ago: executing program 4 (id=2988): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x8000000000000000, 0x8001}, 0x200418, 0x2e, 0xfffffbff, 0x4, 0x2, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10002, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x400000, @private2}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0x851) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="1200000000000000", @ANYRES32=0x0, @ANYBLOB="034069c4412d2ac57314205d9f12b3a53a740349de11d095b7f4334aa61cdf440159e3e5a2d6a3", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f00000000c0)={'bond_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x382, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffeffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0xc0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00000400acb889eb4236759965bc", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 3.702738653s ago: executing program 3 (id=2991): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x282, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xae9}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xa, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x5, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb2acc00917f29337c5e4c99010018000000000000000c000000ff00"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000009249e5b7009500000000000000cefed28d300f11cfa0b95f31bab3e2b7c73c00ea7edf01557cbea7570d980479f17c6a90219f108f76c9ef17fc6e7f8306c45c0bc32527ad49d7b315db744be8892071d341391daaebfb8366c615703f346edbb74b0775b1fd6bee9e5fe7cb39ce9c25412589b632e85333ab2313eb0985e64c914f31949b8129365daecb11ce8aee89933892b6b698a374dbf3bd07ae8b7bb43f5498b82900d783998004d5db864e"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) openat$ppp(0xffffffffffffff9c, 0x0, 0x20802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x141001, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xb, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8912, &(0x7f0000000080)) sendmsg$kcm(r5, &(0x7f0000000400)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0xfffff000, @private1, 0xc73}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="5f64ee9d3dbf640523d83c3ca38496db5a2312d6684ea8d27552a992dfc514d59b8dab7afbc894974225ff9e9cf01f47322c34fd5452e78f137a04028b2d789646b6fc433473056e8a96c354f8f440178d12783352dacf336b284c30a494a9515010d8edfc27202616b7f3203d11f10be59b7603c31b744ab9576d0cfe10ffc95199c1a3d91cf09967295498d0cdd4d335411f788530d86aa8fe928c43344b9aec6ce6095430800f176a26628ed5", 0xae}, {&(0x7f0000000240)="b7876466958584640392d7b2174f17f70eb5036659dfc6017b68e434c162e641353c92b0d454ece1b59ee8b08943ff8f96a037e9f1035f6dfb25cc346800147c5684d7bf99b3a2c63a74e6e5afff12c97bc938d830465d835c3058b7f1", 0x5d}, {0x0}], 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="4000000000000000030100009304000000f8704a85576835349d6601b5b1945a4761141afdd87e9f9cfba6915429d3eb901f711ad13286bcd9359f9f8ff3f177fd7d0000"], 0x40}, 0x20008080) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x80, 0x0}, 0x4000000) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a00", 0x36}], 0x1}, 0x20000880) (async) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) recvmsg(r0, 0x0, 0x40000001) 3.631618466s ago: executing program 1 (id=2992): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007a80)={&(0x7f0000007940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x3}]}, {0x0, [0x5f, 0x2e, 0x41, 0x2e, 0x2e]}}, 0x0, 0x2b, 0x0, 0x1, 0x1}, 0x1f) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000000001000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{r0}, &(0x7f0000001440), &(0x7f0000001480)='%pK \x00'}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac1414160e089f034d2f87e5830c0cab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 3.544122087s ago: executing program 4 (id=2993): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="89000000120081ae08060c", 0xb}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1, 0x20000000000001, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000200)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000440)=0x807, 0x12) 3.482037885s ago: executing program 3 (id=2994): socket$kcm(0x10, 0x3, 0x10) (async) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="0000efff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}]}, &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x2, 0x10, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r2, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r2, 0x0, 0x5}, 0x18) socket$kcm(0x21, 0x2, 0xa) (async) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) (async) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="140000002b000b6c690000000000000002000000", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x29, 0x7, 0x0) recvmsg(r4, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113300000000008510000002000000850000001800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.310150466s ago: executing program 1 (id=2995): socket$kcm(0x11, 0x200000000000002, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000440)={0x2, 0x80, 0xa, 0x9, 0x81, 0xde, 0x0, 0x3, 0x1002, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x3, 0x9}, 0x10400, 0x8, 0x2, 0x0, 0x6, 0x7f, 0xfff7, 0x0, 0x400, 0x0, 0x3}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x4, @mcast2, 0x5}}}, 0x80, 0x0}, 0x84) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x4000804) sendmsg$kcm(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000480)}, 0x0) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe88ca00121100632f77fbac14141d88a8", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.304184157s ago: executing program 3 (id=2996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8efffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000340)=""/218, 0x0, 0x8}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230040) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) close(0x3) 3.249941118s ago: executing program 0 (id=2997): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff7ffffc, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000010000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="bb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000800000076"], 0x40}, 0x20004000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff7ffffc, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000010000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x29, 0x5, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) (async) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="bb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000800000076"], 0x40}, 0x20004000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) 3.126886697s ago: executing program 4 (id=2998): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x40, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca200000000f800a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.479876416s ago: executing program 4 (id=2999): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x33a, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000280)}, 0x14105, 0x101, 0xfffffbff, 0x3, 0x19, 0xfffffffc, 0x6, 0x0, 0xfffffffc, 0x0, 0xa9e2}, 0x0, 0xf, 0xffffffffffffffff, 0x9) socket$kcm(0x28, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0, 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x2, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x2, 0x80}, 0x14105, 0x2c, 0x1ff, 0x3, 0x2, 0xfffffffd, 0x5, 0x0, 0xff, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x3, 0x73) socketpair(0x2, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x260a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @local}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.406834417s ago: executing program 0 (id=3000): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe88ca00121100632f77fbac14141d88a8", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.176231077s ago: executing program 1 (id=3001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e00000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0xe0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071106d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 2.043067815s ago: executing program 3 (id=3002): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x7, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f0000000240), 0x0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x114, 0x4, 0x0, 0xe2a0a06200000010) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x71, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.925530214s ago: executing program 0 (id=3003): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x31, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ff0000000000000000000000000000000000000000005728508f7c061cf82c8b35e7b1e17f8137fde1a045f8ff97dd2e880ef123b45d6ab7e6322bc58736a3823782453038ca70da6f89a4637af6262112ed56b6ae419c52199b63d93212fbd422e4a98a14dcbcbd005939d9309e9aff733850"], 0x48) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa0, 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x5}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xdffb, @loopback}, 0xffffffffffffffae, 0x0, 0x32}, 0xc8002) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x5a}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000010000)='cpu\t&00&\t\x94\xce\xd6\x8b\xea\xceABz$b\x98\xf7\xd3\x10\x89j\x11\x1d\x10Q\xd3\xc0\f\xd3\x99gk\xdc\x9e\xef\xdd\xce\x80\x04\x86Y*\xb5+\vs\x91\x05\xbb\x1a\x13\xbd\\\xcew!7\xe0\xea\xc4Tc\b\xa0\xba|\xb0J\x8e:\x01\xb7\x92') 1.780546558s ago: executing program 1 (id=3004): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071129c000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) 1.706952318s ago: executing program 3 (id=3005): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x5, 0x84) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000080000000000000000400000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/ipc\x00') r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="200000001e006bcd9e3fe3dc6e08000007000000190000007ea60864160af365", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) 1.3002035s ago: executing program 1 (id=3006): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x1, 0x3, 0x3}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)="6247b771130c4b0e50a672a10184b5a588bda61805198e68d04cbbc82ae359cc89af0e7637f120959fbf0229e760b1d373f4e6cec47bbeac4eec6f77ce83dd9b69172ecef28d7f49f67a33e6b0f13c22c3798ed50557f6f420779324ee18d39182cea786efbdb94b9227c0c346b1af3c153a00552d05163107063da56305ada3750c24002d35ad7f596b7bf9feb3333a09709829d5", 0x95}, {&(0x7f0000000440)="92d6ffe6d0fd02c1f7e7f8ddf47d6ca9cee68cea20088a1ae543be4a77822cad0e1ef3ee40e0ccf132acb649ebc6839af87b1788f5cd6b65dcbd2f5429cfd06d3288ebb05467c9f36d3c560a60a20d6a04f1d7250b0060f6a6d12744af3ce35d48d03226bc9d80e8f0e0f94fba985fb5bacdebee6b772d417b2e2562886426d6f327e9161e8ec311b75412a2de894c3cffb897a1a97332dd8aba8b9cf6e5d87cbf095d5da3c69edb295d5b4759d98268ea4cfeb4a143e067fba3ae00e273cce381d65f5b2f160c661b152d3f260ca56c71a5cfc35c47214778903061", 0xdc}], 0x2}, 0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x16, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) r7 = socket$kcm(0x11, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x40) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2004c841) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000240)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) r10 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000027c0)=""/4065, 0xfe1}, {&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000500)=""/42, 0x2a}], 0x6}, 0x40000100) sendmsg$inet(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20006840) 1.209788454s ago: executing program 0 (id=3007): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="89000000120081ae08060c", 0xb}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1, 0x20000000000001, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000200)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000440)=0x807, 0x12) 869.483229ms ago: executing program 0 (id=3008): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x40, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000201a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 717.367542ms ago: executing program 0 (id=3009): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 64) r0 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) (async) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x101, 0x2000000, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000000), 0x4}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xed}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000000c0)='skb_copy_datagram_iovec\x00', r3, 0x0, 0x4651}, 0x18) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000400)={&(0x7f0000000300)=""/48, 0x30, 0x0, &(0x7f0000000580)=""/247, 0xf7}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000c35c581e000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0008000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000008500000022000000bf91000000000000b7020000010000008500004084000000b700000000000000950000000000000003d2b60662d0750417b608cbaf8e1a32233069e964d4a32230ee"], &(0x7f0000000000)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xa, 0x5731, 0x7}, 0x10, r4, r3, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) (async, rerun: 32) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 211.133984ms ago: executing program 4 (id=3010): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000140)=[{0x0, 0x2}], 0x110, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000400)="5c00000014006bcc9e3be05c6e17aa31286b876c1d0000007ea60864160af36514001ac0080002002c26d330196e87c0568cff3407000c0005007c2ed239122dbd94c9affe1801c00364bc24eab556a705251e618294ff0051f60a84", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 98.523834ms ago: executing program 3 (id=3011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1a00005c99061dc5cc8a806000efefa6a0e86a553212c72cb6d44d48b6016b76", @ANYRESDEC=r5, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="02000000050000000100"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x9, 0x4, 0x9, 0xc, 0x0, 0x10, 0x20a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x81, 0x8100}, 0xa854, 0xafe3, 0x0, 0x6, 0x8, 0x7, 0x8, 0x0, 0x81, 0x0, 0x6}, r6, 0x7, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x9, 0x0, 0x3, 0x0, 0xf, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x9, 0x9}, 0x1400, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x4}, r6, 0xa, r2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc851, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffd}, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x10e, 0x3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000004c0)="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", 0x12d}], 0x1}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 80.025968ms ago: executing program 1 (id=3012): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x5, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r5}, 0x38) r6 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x10}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000340)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, [@bcast, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000580)="ba408eccbf6f9f3170f281fbdb4dfec89fde83f9928155a82c4a209cc639d68ba5c045909d6889e74c0e1e2ba7e25967688d32e52c8de3905419cb4055caf84e342049d509455e6324f0a03a2dd83e367e2972407bba04144b7b602c5241d58d47cc8c4388445eb8fb2099f016076e10c5df78e4573d5e84fd686b3d40b538f52a1f215879b06fae7f10936879628fd47bce1950ff4b2dfe1884d519308421ec3a1b516e21c79329c1687316919beea8b952d017d4d8a4908388d61680345261de085a46a32abf405ff3c2b37cdcf3f0e0", 0xd1}, {&(0x7f0000000680)="e0e1caf39eb9a53cb2a479cfa2ab6c5e4c32ff499dc7707beb0c09c4e09fd988181dc6a50a579119eac9b6e5600c6f7192aadaef2c77be47acc057b10b1e791f1f16b86d9f68c4ff5e493e0a1ecf76b3839d6c48cfbd45efae501edc2bb4cd8cf733028f95ec6631bacee20302c4f3c1dee5d12c624d4fcef9100b3b795dc2aeeeb4f7c22c9fc28a4d21d5b47bf344abbcc6696314bd59307d5674", 0x9b}, {&(0x7f0000000740)="165fe4aba0d5cc500daab98235f47e35929f55a2a67d68ef744c2021fb5c04941297c7dcebfd913d8a661ffddd090bc23097c03f7fea4a7df724f87cd3ee1b667eae4f45ef15a31c37c569a750abdfa39a6ad4", 0x53}, {&(0x7f0000000000)="0a75bbf7c0f920aa0b1b9a3ac9f48f8d6de34a70d8de03e8abe202345d18ad7d8953d255604b42b42d130eb7202b", 0x2e}, {&(0x7f00000007c0)="559c70290b4cd18e9b688259410e0b1f987c896cae7dd6e9b40338728569c7e53b714a09a4f7c30413a6221ff9285d93334af818b7ddacf0a3744dd4f989d995b9009c45cbe1991c", 0x48}, {&(0x7f0000000840)="a9a2a6fcd65d770adda45727a3f1cb7a3e299febfc8646d6320ce2c57c082a821d8ee668b4ad9b9ed84ce97492feedd62d116e96ae3559206953e119049ee3b3c76d92ece4ea7cb48c12ea9e82b11abe2d3833fb973430c916186f307c4e691cdd264010ee3278b73f5d335b327d02ab52c554ca66abaa4965ce091bbaa8aa06f3adfeeb363d0d4dcdd8b7158b5887f1a8336c4b9775b2fbadf8ee4aca2c7314eb38a20e9d004cc3d368b27fb6c532027f8a16c6015e6c02d981387dcf7f812f7eb355ed60bb6c2e0b18b305235eb33d5bfed29293f6affcbdbe105cde43fba7", 0xe0}], 0x6}, 0x91) 0s ago: executing program 4 (id=3013): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x2400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x81, 0x0, 0x0, 0x0, 0x8001, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2c, 0xfffffbff, 0x3, 0x1, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) (async) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1, 0x84) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) (async) socket$kcm(0x2, 0x200000000000001, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f00000013c0)=""/195}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x90) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) (async) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "da33640df3de730ed4"}], 0x20}, 0x41) kernel console output (not intermixed with test programs): _64+0xbe/0x3b0 [ 406.358344][T12333] do_syscall_64+0xfa/0x3b0 [ 406.358367][T12333] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.358388][T12333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.358409][T12333] ? clear_bhb_loop+0x60/0xb0 [ 406.358435][T12333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.358455][T12333] RIP: 0033:0x7f093ab8d3bc [ 406.358474][T12333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 406.358493][T12333] RSP: 002b:00007f093b91b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.358516][T12333] RAX: ffffffffffffffda RBX: 00007f093adb5fa0 RCX: 00007f093ab8d3bc [ 406.358531][T12333] RDX: 000000000000000f RSI: 00007f093b91b0a0 RDI: 0000000000000005 [ 406.358545][T12333] RBP: 00007f093b91b090 R08: 0000000000000000 R09: 0000000000000000 [ 406.358558][T12333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.358571][T12333] R13: 0000000000000000 R14: 00007f093adb5fa0 R15: 00007fff363608b8 [ 406.358616][T12333] [ 406.694030][T12335] validate_nla: 5 callbacks suppressed [ 406.694052][T12335] netlink: 'syz.2.1909': attribute type 4 has an invalid length. [ 406.758160][T12335] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1909'. [ 406.870507][T12341] netlink: 'syz.4.1912': attribute type 2 has an invalid length. [ 406.881020][T12341] netlink: 'syz.4.1912': attribute type 1 has an invalid length. [ 406.957798][T12341] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1912'. [ 406.997860][T12341] nbd: couldn't find a device at index 149 [ 407.014666][T12345] netlink: 'syz.0.1911': attribute type 2 has an invalid length. [ 407.035281][T12345] netlink: 'syz.0.1911': attribute type 1 has an invalid length. [ 407.047813][T12345] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.1911'. [ 407.058036][T12345] block nbd0: not configured, cannot reconfigure [ 408.036064][T12377] netlink: 'syz.4.1925': attribute type 2 has an invalid length. [ 408.128038][T12377] netlink: 'syz.4.1925': attribute type 1 has an invalid length. [ 408.136651][T12377] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1925'. [ 408.150289][T12377] nbd: couldn't find a device at index 149 [ 408.426282][T12384] netlink: 'syz.2.1927': attribute type 2 has an invalid length. [ 408.465171][T12384] netlink: 'syz.2.1927': attribute type 1 has an invalid length. [ 408.479645][T12384] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.1927'. [ 408.502758][T12384] block nbd0: not configured, cannot reconfigure [ 408.851462][T12398] netlink: 'syz.3.1932': attribute type 4 has an invalid length. [ 408.864400][T12398] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1932'. [ 409.412929][T12417] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1939'. [ 409.423269][T12417] block nbd0: not configured, cannot reconfigure [ 409.437809][T12415] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.1937'. [ 409.453607][T12415] nbd: couldn't find a device at index 149 [ 410.050227][T12430] veth1_macvtap: left allmulticast mode [ 410.085482][T12430] veth1_macvtap: left promiscuous mode [ 410.105419][T12430] macsec0: left promiscuous mode [ 410.110556][T12430] macsec0: left allmulticast mode [ 410.125180][T12430] veth1_macvtap: entered promiscuous mode [ 410.131198][T12430] macsec0: entered promiscuous mode [ 410.139978][T12430] macsec0: entered allmulticast mode [ 410.145518][T12430] veth1_macvtap: entered allmulticast mode [ 410.254397][T12437] FAULT_INJECTION: forcing a failure. [ 410.254397][T12437] name failslab, interval 1, probability 0, space 0, times 0 [ 410.267379][T12437] CPU: 0 UID: 0 PID: 12437 Comm: syz.1.1946 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 410.267399][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.267410][T12437] Call Trace: [ 410.267417][T12437] [ 410.267423][T12437] dump_stack_lvl+0x189/0x250 [ 410.267448][T12437] ? __pfx____ratelimit+0x10/0x10 [ 410.267465][T12437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.267489][T12437] ? __pfx__printk+0x10/0x10 [ 410.267518][T12437] ? _raw_write_lock_irq+0xae/0xf0 [ 410.267539][T12437] ? __pfx__raw_write_lock_irq+0x10/0x10 [ 410.267570][T12437] should_fail_ex+0x414/0x560 [ 410.267599][T12437] should_failslab+0xa8/0x100 [ 410.267633][T12437] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 410.267665][T12437] ? netlink_realloc_groups+0x11b/0x340 [ 410.267702][T12437] ? netlink_realloc_groups+0x11b/0x340 [ 410.267732][T12437] krealloc_noprof+0x124/0x340 [ 410.267760][T12437] ? netlink_realloc_groups+0xd4/0x340 [ 410.267795][T12437] netlink_realloc_groups+0x11b/0x340 [ 410.267832][T12437] netlink_setsockopt+0x37a/0x770 [ 410.267864][T12437] ? __pfx_aa_sk_perm+0x10/0x10 [ 410.267888][T12437] ? __pfx_netlink_setsockopt+0x10/0x10 [ 410.267928][T12437] ? aa_sock_opt_perm+0x74/0x110 [ 410.267955][T12437] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 410.267978][T12437] ? __pfx_netlink_setsockopt+0x10/0x10 [ 410.268012][T12437] do_sock_setsockopt+0x17c/0x1b0 [ 410.268051][T12437] __x64_sys_setsockopt+0x13f/0x1b0 [ 410.268090][T12437] do_syscall_64+0xfa/0x3b0 [ 410.268114][T12437] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.268136][T12437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.268159][T12437] ? clear_bhb_loop+0x60/0xb0 [ 410.268185][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.268206][T12437] RIP: 0033:0x7f5ceb78e9a9 [ 410.268226][T12437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.268246][T12437] RSP: 002b:00007f5cec67c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 410.268268][T12437] RAX: ffffffffffffffda RBX: 00007f5ceb9b5fa0 RCX: 00007f5ceb78e9a9 [ 410.268283][T12437] RDX: 0000000000000002 RSI: 000000000000010e RDI: 0000000000000004 [ 410.268295][T12437] RBP: 00007f5cec67c090 R08: 0000000000000004 R09: 0000000000000000 [ 410.268308][T12437] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 410.268321][T12437] R13: 0000000000000000 R14: 00007f5ceb9b5fa0 R15: 00007ffc4e64a938 [ 410.268354][T12437] [ 410.822377][T12444] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.1951'. [ 410.872748][T12444] nbd: couldn't find a device at index 149 [ 410.881945][T12449] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.1950'. [ 410.894823][T12449] block nbd0: not configured, cannot reconfigure [ 411.053883][T12458] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1954'. [ 412.006969][T12493] validate_nla: 9 callbacks suppressed [ 412.007048][T12493] netlink: 'syz.1.1966': attribute type 2 has an invalid length. [ 412.037776][T12493] netlink: 'syz.1.1966': attribute type 1 has an invalid length. [ 412.063457][T12493] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1966'. [ 412.137824][T12493] block nbd0: not configured, cannot reconfigure [ 412.228677][T12499] netlink: 'syz.2.1968': attribute type 2 has an invalid length. [ 412.241948][T12499] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 412.249884][T12499] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.1968'. [ 412.261931][T12499] nbd: couldn't find a device at index 149 [ 412.537147][T12509] netlink: 'syz.1.1973': attribute type 10 has an invalid length. [ 412.560481][T12509] : (slave team0): Releasing backup interface [ 412.620200][T12509] team0: left promiscuous mode [ 412.625070][T12509] team_slave_1: left promiscuous mode [ 412.708031][T12509] team0: Cannot enslave team device to itself [ 412.918280][T12523] netlink: 'syz.4.1978': attribute type 4 has an invalid length. [ 412.926084][T12523] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1978'. [ 413.268951][T12529] netlink: 'syz.3.1980': attribute type 2 has an invalid length. [ 413.283301][T12529] netlink: 'syz.3.1980': attribute type 1 has an invalid length. [ 413.319409][T12529] block nbd0: not configured, cannot reconfigure [ 413.650169][T12538] netlink: 'syz.2.1982': attribute type 2 has an invalid length. [ 413.666418][T12538] netlink: 'syz.2.1982': attribute type 1 has an invalid length. [ 413.685151][T12538] __nla_validate_parse: 1 callbacks suppressed [ 413.685172][T12538] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.1982'. [ 413.727714][T12538] nbd: couldn't find a device at index 149 [ 414.979950][T12568] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.1993'. [ 415.022661][T12568] block nbd0: not configured, cannot reconfigure [ 415.416722][T12574] FAULT_INJECTION: forcing a failure. [ 415.416722][T12574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.551905][T12574] CPU: 0 UID: 0 PID: 12574 Comm: syz.0.1994 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 415.551938][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.551953][T12574] Call Trace: [ 415.551962][T12574] [ 415.551971][T12574] dump_stack_lvl+0x189/0x250 [ 415.552003][T12574] ? __pfx____ratelimit+0x10/0x10 [ 415.552027][T12574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.552053][T12574] ? __pfx__printk+0x10/0x10 [ 415.552096][T12574] should_fail_ex+0x414/0x560 [ 415.552125][T12574] _copy_to_user+0x31/0xb0 [ 415.552158][T12574] simple_read_from_buffer+0xe1/0x170 [ 415.552196][T12574] proc_fail_nth_read+0x1df/0x250 [ 415.552222][T12574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.552247][T12574] ? rw_verify_area+0x258/0x650 [ 415.552275][T12574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.552298][T12574] vfs_read+0x200/0x980 [ 415.552333][T12574] ? __pfx___mutex_lock+0x10/0x10 [ 415.552359][T12574] ? __pfx_vfs_read+0x10/0x10 [ 415.552388][T12574] ? __fget_files+0x2a/0x420 [ 415.552412][T12574] ? __fget_files+0x3a0/0x420 [ 415.552430][T12574] ? __fget_files+0x2a/0x420 [ 415.552466][T12574] ksys_read+0x145/0x250 [ 415.552498][T12574] ? __pfx_ksys_read+0x10/0x10 [ 415.552532][T12574] ? do_syscall_64+0xbe/0x3b0 [ 415.552561][T12574] do_syscall_64+0xfa/0x3b0 [ 415.552584][T12574] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.552606][T12574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.552628][T12574] ? clear_bhb_loop+0x60/0xb0 [ 415.552654][T12574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.552679][T12574] RIP: 0033:0x7fec56b8d3bc [ 415.552699][T12574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 415.552718][T12574] RSP: 002b:00007fec57a70030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.552741][T12574] RAX: ffffffffffffffda RBX: 00007fec56db5fa0 RCX: 00007fec56b8d3bc [ 415.552756][T12574] RDX: 000000000000000f RSI: 00007fec57a700a0 RDI: 0000000000000006 [ 415.552773][T12574] RBP: 00007fec57a70090 R08: 0000000000000000 R09: 0000000000000000 [ 415.552786][T12574] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 415.552799][T12574] R13: 0000000000000000 R14: 00007fec56db5fa0 R15: 00007ffe2ca1f688 [ 415.552833][T12574] [ 415.650592][T12576] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1996'. [ 415.861994][T12578] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.1997'. [ 415.876350][T12578] nbd: couldn't find a device at index 149 [ 416.612708][T12604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.812739][T12610] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2008'. [ 416.849857][T12610] block nbd0: not configured, cannot reconfigure [ 417.172295][T12619] validate_nla: 7 callbacks suppressed [ 417.172350][T12619] netlink: 'syz.2.2011': attribute type 2 has an invalid length. [ 417.194573][T12619] netlink: 'syz.2.2011': attribute type 1 has an invalid length. [ 417.266545][T12619] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2011'. [ 417.330418][T12619] nbd: couldn't find a device at index 149 [ 417.389763][T12626] netlink: 'syz.3.2015': attribute type 4 has an invalid length. [ 417.457173][T12626] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2015'. [ 417.756297][T12637] GPL: port 1(erspan0) entered blocking state [ 417.773749][T12637] GPL: port 1(erspan0) entered disabled state [ 417.788956][T12637] erspan0: entered allmulticast mode [ 417.829650][T12637] erspan0: entered promiscuous mode [ 417.870470][T12638] GPL: port 1(erspan0) entered blocking state [ 417.876845][T12638] GPL: port 1(erspan0) entered forwarding state [ 418.044148][T12644] netlink: 'syz.4.2022': attribute type 2 has an invalid length. [ 418.072377][T12644] netlink: 'syz.4.2022': attribute type 1 has an invalid length. [ 418.106809][T12644] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2022'. [ 418.126803][T12644] block nbd0: not configured, cannot reconfigure [ 418.323428][T12657] netlink: 'syz.4.2027': attribute type 2 has an invalid length. [ 418.343212][T12657] netlink: 'syz.4.2027': attribute type 1 has an invalid length. [ 418.360296][T12657] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2027'. [ 418.371234][T12657] nbd: couldn't find a device at index 149 [ 419.318155][T12676] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2034'. [ 419.691263][T12687] netlink: 'syz.1.2039': attribute type 4 has an invalid length. [ 419.700413][T12687] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2039'. [ 419.805971][T12689] netlink: 'syz.2.2040': attribute type 2 has an invalid length. [ 419.840750][T12691] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2039'. [ 419.871029][T12689] netlink: 'syz.2.2040': attribute type 1 has an invalid length. [ 419.888997][T12689] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2040'. [ 419.929655][T12689] block nbd0: not configured, cannot reconfigure [ 419.950131][T12692] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2041'. [ 419.997834][T12692] nbd: couldn't find a device at index 149 [ 420.878819][T12713] can: request_module (can-proto-0) failed. [ 420.928812][T12718] delete_channel: no stack [ 420.934735][T12718] delete_channel: no stack [ 420.965098][T12718] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2049'. [ 421.299380][T12730] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2054'. [ 421.311804][T12730] nbd: couldn't find a device at index 149 [ 421.321530][T12729] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2053'. [ 421.373807][T12729] block nbd0: not configured, cannot reconfigure [ 421.709768][T12738] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2057'. [ 421.802416][T12748] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2057'. [ 422.571866][T12760] syzkaller0: entered promiscuous mode [ 423.226303][T12781] validate_nla: 8 callbacks suppressed [ 423.226361][T12781] netlink: 'syz.1.2068': attribute type 2 has an invalid length. [ 423.251940][T12781] netlink: 'syz.1.2068': attribute type 1 has an invalid length. [ 423.274946][T12781] nbd: couldn't find a device at index 149 [ 423.499145][T12785] netlink: 'syz.1.2070': attribute type 2 has an invalid length. [ 423.515321][T12785] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 423.535596][T12785] block nbd0: not configured, cannot reconfigure [ 425.891084][T12810] netlink: 'syz.0.2077': attribute type 4 has an invalid length. [ 425.899288][T12810] __nla_validate_parse: 2 callbacks suppressed [ 425.899306][T12810] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2077'. [ 425.999264][T12811] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2077'. [ 426.426355][T12819] netlink: 'syz.3.2080': attribute type 2 has an invalid length. [ 426.511233][T12819] netlink: 'syz.3.2080': attribute type 1 has an invalid length. [ 426.526719][T12819] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2080'. [ 426.537108][T12819] nbd: couldn't find a device at index 149 [ 426.768835][T12825] netlink: 'syz.3.2082': attribute type 2 has an invalid length. [ 426.787791][T12825] netlink: 'syz.3.2082': attribute type 1 has an invalid length. [ 426.801697][T12825] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2082'. [ 426.825881][T12825] block nbd0: not configured, cannot reconfigure [ 428.410528][T12850] netlink: 'syz.1.2090': attribute type 6 has an invalid length. [ 428.422451][T12850] netlink: 'syz.1.2090': attribute type 7 has an invalid length. [ 428.432644][T12850] netlink: 13182 bytes leftover after parsing attributes in process `syz.1.2090'. [ 428.642956][T12856] netlink: 'syz.2.2092': attribute type 2 has an invalid length. [ 428.652843][T12856] netlink: 'syz.2.2092': attribute type 1 has an invalid length. [ 428.660924][T12856] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2092'. [ 428.671026][T12856] nbd: couldn't find a device at index 149 [ 428.828356][T12865] netlink: 'syz.2.2095': attribute type 4 has an invalid length. [ 428.856579][T12865] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2095'. [ 428.939245][T12857] syzkaller0: entered promiscuous mode [ 428.948445][T12867] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2095'. [ 429.368452][T12875] netlink: 'syz.4.2098': attribute type 2 has an invalid length. [ 429.376897][T12875] netlink: 'syz.4.2098': attribute type 1 has an invalid length. [ 429.387512][T12875] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2098'. [ 429.397748][T12875] block nbd0: not configured, cannot reconfigure [ 429.965919][T12886] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2102'. [ 430.244553][T12892] netlink: 'syz.4.2105': attribute type 2 has an invalid length. [ 430.254910][T12892] netlink: 'syz.4.2105': attribute type 1 has an invalid length. [ 430.265033][T12892] nbd: couldn't find a device at index 149 [ 430.990322][T12905] netlink: 'syz.2.2109': attribute type 2 has an invalid length. [ 431.005981][T12905] __nla_validate_parse: 1 callbacks suppressed [ 431.006020][T12905] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2109'. [ 431.026017][T12905] block nbd0: not configured, cannot reconfigure [ 431.272426][T12911] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2112'. [ 431.371473][T12919] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2112'. [ 431.746981][T12928] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2116'. [ 431.767721][T12928] nbd: couldn't find a device at index 149 [ 431.961944][T12933] bridge_slave_1: left allmulticast mode [ 431.967986][T12933] bridge_slave_1: left promiscuous mode [ 431.973912][T12933] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.994462][T12933] bridge_slave_0: left allmulticast mode [ 432.003211][T12933] bridge_slave_0: left promiscuous mode [ 432.013307][T12933] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.181084][T12937] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2121'. [ 432.209766][T12937] block nbd0: not configured, cannot reconfigure [ 432.722404][T12954] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2128'. [ 432.747739][T12954] nbd: couldn't find a device at index 149 [ 433.404834][T12966] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2132'. [ 433.522238][T12969] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2132'. [ 433.651005][T12972] validate_nla: 11 callbacks suppressed [ 433.651048][T12972] netlink: 'syz.3.2135': attribute type 2 has an invalid length. [ 433.675980][T12972] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 433.715521][T12972] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2135'. [ 433.796144][T12972] block nbd0: not configured, cannot reconfigure [ 435.335828][T12992] netlink: 'syz.4.2142': attribute type 2 has an invalid length. [ 435.348195][T12992] netlink: 'syz.4.2142': attribute type 1 has an invalid length. [ 435.364596][T12992] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2142'. [ 435.377143][T12992] nbd: couldn't find a device at index 149 [ 435.985196][T13012] netlink: 'syz.1.2150': attribute type 4 has an invalid length. [ 436.034284][T13009] netlink: 'syz.2.2148': attribute type 2 has an invalid length. [ 436.052353][T13009] netlink: 'syz.2.2148': attribute type 1 has an invalid length. [ 436.076309][T13009] __nla_validate_parse: 2 callbacks suppressed [ 436.076348][T13009] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2148'. [ 436.104326][T13009] block nbd0: not configured, cannot reconfigure [ 436.113435][T13017] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2150'. [ 436.672423][T13031] netlink: 'syz.3.2155': attribute type 2 has an invalid length. [ 436.681281][T13031] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 436.691063][T13031] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2155'. [ 436.710765][T13031] nbd: couldn't find a device at index 149 [ 436.821067][T13033] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2156'. [ 437.147949][T13040] netlink: 'syz.0.2159': attribute type 6 has an invalid length. [ 437.161528][T13040] netlink: 13182 bytes leftover after parsing attributes in process `syz.0.2159'. [ 437.304205][T13050] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2162'. [ 437.419860][T13050] block nbd0: not configured, cannot reconfigure [ 437.461891][T13053] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2163'. [ 437.473711][T13053] nbd: couldn't find a device at index 149 [ 437.685286][T13061] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2166'. [ 437.710451][T13061] nbd: couldn't find a device at index 149 [ 437.721160][T13064] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2167'. [ 437.803342][T13066] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2167'. [ 439.102126][T13098] validate_nla: 8 callbacks suppressed [ 439.102166][T13098] netlink: 'syz.2.2177': attribute type 2 has an invalid length. [ 439.126396][T13098] netlink: 'syz.2.2177': attribute type 1 has an invalid length. [ 439.144792][T13098] block nbd0: not configured, cannot reconfigure [ 439.236752][T13101] netlink: 'syz.0.2179': attribute type 2 has an invalid length. [ 439.305282][T13101] netlink: 'syz.0.2179': attribute type 1 has an invalid length. [ 439.352539][T13101] nbd: couldn't find a device at index 149 [ 439.865719][T13121] netlink: 'syz.4.2186': attribute type 4 has an invalid length. [ 440.071862][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.078417][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.605946][T13141] netlink: 'syz.0.2191': attribute type 2 has an invalid length. [ 440.629353][T13141] netlink: 'syz.0.2191': attribute type 1 has an invalid length. [ 440.645154][T13141] block nbd0: not configured, cannot reconfigure [ 440.865690][T13148] netlink: 'syz.0.2193': attribute type 2 has an invalid length. [ 440.899446][T13148] netlink: 'syz.0.2193': attribute type 1 has an invalid length. [ 440.911854][T13148] nbd: couldn't find a device at index 149 [ 441.210794][T13160] FAULT_INJECTION: forcing a failure. [ 441.210794][T13160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.244429][T13160] CPU: 1 UID: 0 PID: 13160 Comm: syz.4.2200 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 441.244459][T13160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.244473][T13160] Call Trace: [ 441.244481][T13160] [ 441.244490][T13160] dump_stack_lvl+0x189/0x250 [ 441.244522][T13160] ? __pfx____ratelimit+0x10/0x10 [ 441.244546][T13160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.244571][T13160] ? __pfx__printk+0x10/0x10 [ 441.244601][T13160] ? __might_fault+0xb0/0x130 [ 441.244644][T13160] should_fail_ex+0x414/0x560 [ 441.244673][T13160] _copy_from_iter+0x1db/0x16f0 [ 441.244714][T13160] ? __pfx__copy_from_iter+0x10/0x10 [ 441.244744][T13160] ? __build_skb_around+0x257/0x3e0 [ 441.244779][T13160] ? netlink_sendmsg+0x642/0xb30 [ 441.244808][T13160] ? skb_put+0x11b/0x210 [ 441.244842][T13160] netlink_sendmsg+0x6b2/0xb30 [ 441.244884][T13160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.244918][T13160] ? aa_sock_msg_perm+0x94/0x160 [ 441.244944][T13160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.244968][T13160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.244999][T13160] __sock_sendmsg+0x21c/0x270 [ 441.245029][T13160] sock_write_iter+0x258/0x330 [ 441.245055][T13160] ? __pfx_sock_write_iter+0x10/0x10 [ 441.245092][T13160] ? bpf_lsm_file_permission+0x9/0x20 [ 441.245124][T13160] ? security_file_permission+0x75/0x290 [ 441.245166][T13160] vfs_write+0x548/0xa90 [ 441.245202][T13160] ? __pfx_sock_write_iter+0x10/0x10 [ 441.245226][T13160] ? __pfx_vfs_write+0x10/0x10 [ 441.245267][T13160] ? __fget_files+0x2a/0x420 [ 441.245297][T13160] ksys_write+0x145/0x250 [ 441.245329][T13160] ? __pfx_ksys_write+0x10/0x10 [ 441.245372][T13160] do_syscall_64+0xfa/0x3b0 [ 441.245398][T13160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.245418][T13160] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.245441][T13160] ? clear_bhb_loop+0x60/0xb0 [ 441.245467][T13160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.245488][T13160] RIP: 0033:0x7f5935d8e9a9 [ 441.245508][T13160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.245527][T13160] RSP: 002b:00007f5936c3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 441.245549][T13160] RAX: ffffffffffffffda RBX: 00007f5935fb5fa0 RCX: 00007f5935d8e9a9 [ 441.245565][T13160] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000009 [ 441.245578][T13160] RBP: 00007f5936c3c090 R08: 0000000000000000 R09: 0000000000000000 [ 441.245592][T13160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.245604][T13160] R13: 0000000000000000 R14: 00007f5935fb5fa0 R15: 00007ffc690ad0c8 [ 441.245638][T13160] [ 441.595010][T13165] netlink: 'syz.3.2202': attribute type 6 has an invalid length. [ 441.603580][T13165] __nla_validate_parse: 7 callbacks suppressed [ 441.603637][T13165] netlink: 13182 bytes leftover after parsing attributes in process `syz.3.2202'. [ 441.776519][T13170] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2204'. [ 441.893682][T13174] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2204'. [ 442.013131][T13176] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2205'. [ 442.057880][T13176] block nbd0: not configured, cannot reconfigure [ 442.163322][T13181] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2208'. [ 442.191963][T13181] nbd: couldn't find a device at index 149 [ 443.416137][T13216] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2220'. [ 443.430442][T13216] block nbd0: not configured, cannot reconfigure [ 443.706293][T13223] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2223'. [ 443.749274][T13223] nbd: couldn't find a device at index 149 [ 443.831544][T13227] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2225'. [ 443.961462][T13228] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2225'. [ 445.034815][T13254] validate_nla: 11 callbacks suppressed [ 445.034860][T13254] netlink: 'syz.3.2233': attribute type 2 has an invalid length. [ 445.066351][T13254] netlink: 'syz.3.2233': attribute type 1 has an invalid length. [ 445.075419][T13254] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2233'. [ 445.086669][T13254] block nbd0: not configured, cannot reconfigure [ 445.234132][T13259] netlink: 'syz.1.2236': attribute type 2 has an invalid length. [ 445.261706][T13259] netlink: 'syz.1.2236': attribute type 1 has an invalid length. [ 445.270351][T13259] nbd: couldn't find a device at index 149 [ 445.679984][T13274] FAULT_INJECTION: forcing a failure. [ 445.679984][T13274] name failslab, interval 1, probability 0, space 0, times 0 [ 445.694359][T13274] CPU: 1 UID: 0 PID: 13274 Comm: syz.2.2244 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 445.694390][T13274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.694404][T13274] Call Trace: [ 445.694412][T13274] [ 445.694421][T13274] dump_stack_lvl+0x189/0x250 [ 445.694455][T13274] ? __pfx____ratelimit+0x10/0x10 [ 445.694479][T13274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.694505][T13274] ? __pfx__printk+0x10/0x10 [ 445.694547][T13274] should_fail_ex+0x414/0x560 [ 445.694574][T13274] should_failslab+0xa8/0x100 [ 445.694607][T13274] kmem_cache_alloc_noprof+0x73/0x3c0 [ 445.694635][T13274] ? skb_clone+0x212/0x3a0 [ 445.694660][T13274] skb_clone+0x212/0x3a0 [ 445.694684][T13274] __netlink_deliver_tap+0x404/0x850 [ 445.694729][T13274] ? netlink_deliver_tap+0x2e/0x1b0 [ 445.694762][T13274] netlink_deliver_tap+0x19c/0x1b0 [ 445.694793][T13274] netlink_unicast+0x730/0x8e0 [ 445.694831][T13274] netlink_sendmsg+0x805/0xb30 [ 445.694871][T13274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.694906][T13274] ? aa_sock_msg_perm+0x94/0x160 [ 445.694933][T13274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 445.694987][T13274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.695019][T13274] __sock_sendmsg+0x21c/0x270 [ 445.695049][T13274] sock_write_iter+0x258/0x330 [ 445.695077][T13274] ? __pfx_sock_write_iter+0x10/0x10 [ 445.695098][T13274] ? migrate_enable+0x29c/0x3c0 [ 445.695140][T13274] ? bpf_lsm_file_permission+0x9/0x20 [ 445.695167][T13274] ? security_file_permission+0x75/0x290 [ 445.695211][T13274] vfs_write+0x548/0xa90 [ 445.695247][T13274] ? __pfx_sock_write_iter+0x10/0x10 [ 445.695273][T13274] ? __pfx_vfs_write+0x10/0x10 [ 445.695315][T13274] ? __fget_files+0x2a/0x420 [ 445.695347][T13274] ksys_write+0x145/0x250 [ 445.695380][T13274] ? __pfx_ksys_write+0x10/0x10 [ 445.695416][T13274] ? do_syscall_64+0xbe/0x3b0 [ 445.695446][T13274] do_syscall_64+0xfa/0x3b0 [ 445.695472][T13274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.695493][T13274] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.695516][T13274] ? clear_bhb_loop+0x60/0xb0 [ 445.695543][T13274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.695566][T13274] RIP: 0033:0x7f76e3d8e9a9 [ 445.695586][T13274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.695606][T13274] RSP: 002b:00007f76e4b0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.695629][T13274] RAX: ffffffffffffffda RBX: 00007f76e3fb5fa0 RCX: 00007f76e3d8e9a9 [ 445.695645][T13274] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000009 [ 445.695659][T13274] RBP: 00007f76e4b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 445.695672][T13274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.695686][T13274] R13: 0000000000000000 R14: 00007f76e3fb5fa0 R15: 00007ffdc6a9f168 [ 445.695716][T13274] [ 445.695856][T13274] netlink: 'syz.2.2244': attribute type 6 has an invalid length. [ 445.875072][T13280] netlink: 'syz.1.2245': attribute type 4 has an invalid length. [ 445.898281][T13274] netlink: 'syz.2.2244': attribute type 7 has an invalid length. [ 446.264205][T13290] netlink: 'syz.3.2248': attribute type 2 has an invalid length. [ 446.312434][T13290] netlink: 'syz.3.2248': attribute type 1 has an invalid length. [ 446.352752][T13290] block nbd0: not configured, cannot reconfigure [ 446.381829][T13295] netlink: 'syz.0.2249': attribute type 2 has an invalid length. [ 446.394685][T13295] nbd: couldn't find a device at index 149 [ 447.073268][T13313] __nla_validate_parse: 7 callbacks suppressed [ 447.073303][T13313] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2256'. [ 448.403785][T13330] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2261'. [ 448.420513][T13330] nbd: couldn't find a device at index 149 [ 448.448942][T13329] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2262'. [ 448.482643][T13329] block nbd0: not configured, cannot reconfigure [ 448.646245][T13343] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2265'. [ 448.756998][T13346] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2265'. [ 449.846653][T13367] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2274'. [ 449.869113][T13367] nbd: couldn't find a device at index 149 [ 450.263915][T13373] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2275'. [ 450.292580][T13377] validate_nla: 10 callbacks suppressed [ 450.292621][T13377] netlink: 'syz.4.2277': attribute type 2 has an invalid length. [ 450.292809][T13377] netlink: 'syz.4.2277': attribute type 1 has an invalid length. [ 450.292927][T13377] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2277'. [ 450.293465][T13377] block nbd0: not configured, cannot reconfigure [ 451.067443][T13397] netlink: 'syz.1.2283': attribute type 4 has an invalid length. [ 451.075319][T13397] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2283'. [ 451.131099][T13400] netlink: 'syz.0.2286': attribute type 2 has an invalid length. [ 451.146272][T13400] netlink: 'syz.0.2286': attribute type 1 has an invalid length. [ 451.160350][T13400] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2286'. [ 451.171043][T13400] nbd: couldn't find a device at index 149 [ 451.336400][T13405] netlink: 'syz.3.2284': attribute type 6 has an invalid length. [ 451.345531][T13405] netlink: 'syz.3.2284': attribute type 7 has an invalid length. [ 451.405979][T13405] FAULT_INJECTION: forcing a failure. [ 451.405979][T13405] name failslab, interval 1, probability 0, space 0, times 0 [ 451.419925][T13405] CPU: 1 UID: 0 PID: 13405 Comm: syz.3.2284 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 451.419956][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.419970][T13405] Call Trace: [ 451.419979][T13405] [ 451.419989][T13405] dump_stack_lvl+0x189/0x250 [ 451.420021][T13405] ? __pfx____ratelimit+0x10/0x10 [ 451.420045][T13405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.420073][T13405] ? __pfx__printk+0x10/0x10 [ 451.420112][T13405] ? __pfx___might_resched+0x10/0x10 [ 451.420146][T13405] should_fail_ex+0x414/0x560 [ 451.420176][T13405] should_failslab+0xa8/0x100 [ 451.420214][T13405] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 451.420246][T13405] ? __alloc_skb+0x112/0x2d0 [ 451.420281][T13405] __alloc_skb+0x112/0x2d0 [ 451.420317][T13405] inet_rtm_getroute+0x752/0x27b0 [ 451.420359][T13405] ? __local_bh_enable_ip+0xce/0x1c0 [ 451.420388][T13405] ? perf_trace_lock+0xec/0x3b0 [ 451.420419][T13405] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 451.420491][T13405] ? perf_trace_lock+0xec/0x3b0 [ 451.420524][T13405] ? __pfx_perf_trace_lock+0x10/0x10 [ 451.420562][T13405] ? rcu_read_unlock+0x87/0xa0 [ 451.420605][T13405] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 451.420632][T13405] rtnetlink_rcv_msg+0x7cf/0xb70 [ 451.420667][T13405] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 451.420695][T13405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.420747][T13405] netlink_rcv_skb+0x208/0x470 [ 451.420777][T13405] ? rcu_is_watching+0x15/0xb0 [ 451.420804][T13405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.420835][T13405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.420884][T13405] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.420926][T13405] netlink_unicast+0x75c/0x8e0 [ 451.420969][T13405] netlink_sendmsg+0x805/0xb30 [ 451.421013][T13405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.421048][T13405] ? aa_sock_msg_perm+0x94/0x160 [ 451.421074][T13405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.421098][T13405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.421131][T13405] __sock_sendmsg+0x21c/0x270 [ 451.421161][T13405] sock_write_iter+0x258/0x330 [ 451.421189][T13405] ? __pfx_sock_write_iter+0x10/0x10 [ 451.421210][T13405] ? perf_trace_lock+0xec/0x3b0 [ 451.421250][T13405] ? bpf_lsm_file_permission+0x9/0x20 [ 451.421276][T13405] ? security_file_permission+0x75/0x290 [ 451.421321][T13405] vfs_write+0x548/0xa90 [ 451.421359][T13405] ? __pfx_sock_write_iter+0x10/0x10 [ 451.421385][T13405] ? __pfx_vfs_write+0x10/0x10 [ 451.421438][T13405] ? __fget_files+0x2a/0x420 [ 451.421471][T13405] ksys_write+0x145/0x250 [ 451.421506][T13405] ? __pfx_ksys_write+0x10/0x10 [ 451.421552][T13405] do_syscall_64+0xfa/0x3b0 [ 451.421579][T13405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.421600][T13405] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 451.421622][T13405] ? clear_bhb_loop+0x60/0xb0 [ 451.421649][T13405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.421671][T13405] RIP: 0033:0x7f093ab8e9a9 [ 451.421691][T13405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.421711][T13405] RSP: 002b:00007f09389f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.421734][T13405] RAX: ffffffffffffffda RBX: 00007f093adb6080 RCX: 00007f093ab8e9a9 [ 451.421750][T13405] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000009 [ 451.421764][T13405] RBP: 00007f09389f6090 R08: 0000000000000000 R09: 0000000000000000 [ 451.421778][T13405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.421791][T13405] R13: 0000000000000000 R14: 00007f093adb6080 R15: 00007fff363608b8 [ 451.421829][T13405] [ 452.047576][T13415] netlink: 'syz.4.2289': attribute type 3 has an invalid length. [ 452.078211][T13415] netlink: 'syz.4.2289': attribute type 1 has an invalid length. [ 452.112272][T13415] __nla_validate_parse: 2 callbacks suppressed [ 452.112442][T13415] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2289'. [ 452.233973][T13420] netlink: 'syz.1.2291': attribute type 2 has an invalid length. [ 452.278499][T13420] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2291'. [ 452.309845][T13420] nbd: must specify a device to reconfigure [ 452.570336][T13431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2296'. [ 452.625629][T13436] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2296'. [ 452.675080][T13431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2296'. [ 452.706934][T13438] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2298'. [ 452.716948][T13438] nbd: couldn't find a device at index 149 [ 452.870356][T13448] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2301'. [ 452.928497][T13451] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.937278][T13451] team0: entered promiscuous mode [ 452.946943][T13451] team_slave_1: entered promiscuous mode [ 452.954824][T13451] : (slave team0): Enslaving as an active interface with an up link [ 452.965291][T13452] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2301'. [ 453.689952][T13462] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2306'. [ 453.703611][T13462] nbd: must specify a device to reconfigure [ 453.787145][T13467] FAULT_INJECTION: forcing a failure. [ 453.787145][T13467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.787188][T13467] CPU: 1 UID: 0 PID: 13467 Comm: syz.0.2305 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 453.787215][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.787229][T13467] Call Trace: [ 453.787237][T13467] [ 453.787254][T13467] dump_stack_lvl+0x189/0x250 [ 453.787286][T13467] ? __pfx____ratelimit+0x10/0x10 [ 453.787312][T13467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.787339][T13467] ? __pfx__printk+0x10/0x10 [ 453.787370][T13467] ? __might_fault+0xb0/0x130 [ 453.787415][T13467] should_fail_ex+0x414/0x560 [ 453.787445][T13467] _copy_from_user+0x2d/0xb0 [ 453.787481][T13467] ___sys_sendmsg+0x158/0x2a0 [ 453.787519][T13467] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.787597][T13467] ? __fget_files+0x2a/0x420 [ 453.787616][T13467] ? __fget_files+0x3a0/0x420 [ 453.787649][T13467] __x64_sys_sendmsg+0x19b/0x260 [ 453.787682][T13467] ? perf_trace_run_bpf_submit+0x100/0x170 [ 453.787709][T13467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.787755][T13467] ? __pfx_ksys_write+0x10/0x10 [ 453.787783][T13467] ? rcu_is_watching+0x15/0xb0 [ 453.787815][T13467] ? do_syscall_64+0xbe/0x3b0 [ 453.787846][T13467] do_syscall_64+0xfa/0x3b0 [ 453.787869][T13467] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.787893][T13467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.787915][T13467] ? clear_bhb_loop+0x60/0xb0 [ 453.787942][T13467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.787964][T13467] RIP: 0033:0x7fec56b8e9a9 [ 453.787983][T13467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.788003][T13467] RSP: 002b:00007fec57a4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.788026][T13467] RAX: ffffffffffffffda RBX: 00007fec56db6080 RCX: 00007fec56b8e9a9 [ 453.788042][T13467] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 453.788056][T13467] RBP: 00007fec57a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 453.788070][T13467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.788083][T13467] R13: 0000000000000001 R14: 00007fec56db6080 R15: 00007ffe2ca1f688 [ 453.788118][T13467] [ 454.958760][T13481] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.177015][T13485] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2312'. [ 455.217713][T13485] nbd: couldn't find a device at index 149 [ 455.491253][T13498] validate_nla: 9 callbacks suppressed [ 455.491303][T13498] netlink: 'syz.1.2318': attribute type 2 has an invalid length. [ 455.566751][T13498] nbd: must specify a device to reconfigure [ 455.656111][T13507] netlink: 'syz.3.2320': attribute type 4 has an invalid length. [ 455.790164][T13502] delete_channel: no stack [ 456.705501][T13524] netlink: 'syz.1.2327': attribute type 6 has an invalid length. [ 456.736806][T13524] netlink: 'syz.1.2327': attribute type 7 has an invalid length. [ 456.767265][T13520] syzkaller0: entered promiscuous mode [ 456.776146][T13520] syzkaller0: entered allmulticast mode [ 456.940973][T13531] netlink: 'syz.0.2328': attribute type 2 has an invalid length. [ 456.954388][T13531] netlink: 'syz.0.2328': attribute type 1 has an invalid length. [ 456.967990][T13531] nbd: couldn't find a device at index 149 [ 457.176211][T13540] netlink: 'syz.1.2329': attribute type 10 has an invalid length. [ 457.203535][T13539] netlink: 'syz.3.2332': attribute type 2 has an invalid length. [ 457.215947][T13539] __nla_validate_parse: 5 callbacks suppressed [ 457.215982][T13539] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2332'. [ 457.260884][T13539] nbd: must specify a device to reconfigure [ 458.613780][T13540] : (slave hsr0): The slave device specified does not support setting the MAC address [ 458.625367][T13540] : (slave hsr0): Error -95 calling set_mac_address [ 458.634570][T13541] mac80211_hwsim hwsim7 O3ãc¤±: renamed from wlan1 (while UP) [ 458.644321][T13542] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2329'. [ 458.656751][T13551] veth0_vlan: entered allmulticast mode [ 458.677430][T13533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2329'. [ 458.682530][T13549] delete_channel: no stack [ 458.813366][T13556] netlink: 'syz.4.2335': attribute type 4 has an invalid length. [ 458.853834][T13556] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2335'. [ 458.971353][T13556] netlink: 13695 bytes leftover after parsing attributes in process `syz.4.2335'. [ 459.124881][T13574] netlink: 'syz.3.2341': attribute type 2 has an invalid length. [ 459.134223][T13574] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2341'. [ 459.145172][T13574] nbd: couldn't find a device at index 149 [ 459.403835][T13580] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2343'. [ 459.423800][T13580] nbd: must specify a device to reconfigure [ 460.034796][T13593] FAULT_INJECTION: forcing a failure. [ 460.034796][T13593] name failslab, interval 1, probability 0, space 0, times 0 [ 460.074657][T13593] CPU: 1 UID: 0 PID: 13593 Comm: syz.2.2350 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 460.074764][T13593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.074782][T13593] Call Trace: [ 460.074795][T13593] [ 460.074814][T13593] dump_stack_lvl+0x189/0x250 [ 460.074851][T13593] ? __pfx____ratelimit+0x10/0x10 [ 460.074880][T13593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.074926][T13593] ? __pfx__printk+0x10/0x10 [ 460.074979][T13593] ? __pfx___might_resched+0x10/0x10 [ 460.075024][T13593] should_fail_ex+0x414/0x560 [ 460.075069][T13593] should_failslab+0xa8/0x100 [ 460.075112][T13593] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 460.075149][T13593] ? __alloc_skb+0x112/0x2d0 [ 460.075196][T13593] __alloc_skb+0x112/0x2d0 [ 460.075253][T13593] netlink_sendmsg+0x5c6/0xb30 [ 460.075321][T13593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.075369][T13593] ? aa_sock_msg_perm+0x94/0x160 [ 460.075420][T13593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.075446][T13593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.075492][T13593] __sock_sendmsg+0x21c/0x270 [ 460.075533][T13593] ____sys_sendmsg+0x505/0x830 [ 460.075591][T13593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.075667][T13593] ? import_iovec+0x74/0xa0 [ 460.075726][T13593] ___sys_sendmsg+0x21f/0x2a0 [ 460.075772][T13593] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.075881][T13593] ? __fget_files+0x2a/0x420 [ 460.075942][T13593] ? __fget_files+0x2a/0x420 [ 460.075963][T13593] ? __fget_files+0x3a0/0x420 [ 460.076027][T13593] __x64_sys_sendmsg+0x19b/0x260 [ 460.076057][T13593] ? perf_trace_run_bpf_submit+0x100/0x170 [ 460.076088][T13593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.076149][T13593] ? __pfx_ksys_write+0x10/0x10 [ 460.076175][T13593] ? rcu_is_watching+0x15/0xb0 [ 460.076216][T13593] ? do_syscall_64+0xbe/0x3b0 [ 460.076252][T13593] do_syscall_64+0xfa/0x3b0 [ 460.076280][T13593] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.076304][T13593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.076325][T13593] ? clear_bhb_loop+0x60/0xb0 [ 460.076359][T13593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.076466][T13593] RIP: 0033:0x7f76e3d8e9a9 [ 460.076488][T13593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.076508][T13593] RSP: 002b:00007f76e4b0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.076530][T13593] RAX: ffffffffffffffda RBX: 00007f76e3fb5fa0 RCX: 00007f76e3d8e9a9 [ 460.076545][T13593] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 460.076558][T13593] RBP: 00007f76e4b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 460.076572][T13593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.076584][T13593] R13: 0000000000000000 R14: 00007f76e3fb5fa0 R15: 00007ffdc6a9f168 [ 460.076649][T13593] [ 460.077765][T13597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2349'. [ 460.506182][T13606] validate_nla: 5 callbacks suppressed [ 460.506218][T13606] netlink: 'syz.2.2353': attribute type 2 has an invalid length. [ 460.529834][T13606] netlink: 'syz.2.2353': attribute type 1 has an invalid length. [ 460.538919][T13606] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2353'. [ 460.586631][T13606] nbd: couldn't find a device at index 149 [ 460.641492][T13610] netlink: 'syz.0.2355': attribute type 2 has an invalid length. [ 460.650049][T13610] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2355'. [ 460.697657][T13610] nbd: must specify a device to reconfigure [ 460.828829][T13620] netlink: 'syz.0.2359': attribute type 4 has an invalid length. [ 461.081852][T13629] netlink: 'syz.3.2361': attribute type 10 has an invalid length. [ 461.700043][T13643] netlink: 'syz.1.2367': attribute type 2 has an invalid length. [ 461.746838][T13643] netlink: 'syz.1.2367': attribute type 1 has an invalid length. [ 461.807771][T13643] nbd: couldn't find a device at index 149 [ 462.102663][T13652] netlink: 'syz.4.2371': attribute type 2 has an invalid length. [ 462.147883][T13652] nbd: must specify a device to reconfigure [ 462.367213][T13660] netlink: 'syz.4.2374': attribute type 6 has an invalid length. [ 462.378540][T13660] netlink: 'syz.4.2374': attribute type 7 has an invalid length. [ 462.387005][T13660] __nla_validate_parse: 4 callbacks suppressed [ 462.387034][T13660] netlink: 13182 bytes leftover after parsing attributes in process `syz.4.2374'. [ 462.897618][T13675] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2379'. [ 462.966400][T13679] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2380'. [ 462.982119][T13679] nbd: couldn't find a device at index 149 [ 462.994148][T13681] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2379'. [ 463.424143][T13693] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2384'. [ 463.435265][T13693] nbd: must specify a device to reconfigure [ 463.583347][T13695] netlink: 13182 bytes leftover after parsing attributes in process `syz.1.2385'. [ 464.165217][T13705] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2400'. [ 464.250080][T13710] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2400'. [ 464.572479][T13720] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2393'. [ 464.582735][T13720] block nbd0: not configured, cannot reconfigure [ 465.347724][T13742] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2401'. [ 465.362931][T13742] nbd: must specify a device to reconfigure [ 465.800229][T13759] validate_nla: 12 callbacks suppressed [ 465.800257][T13759] netlink: 'syz.2.2407': attribute type 10 has an invalid length. [ 465.932954][T13761] netlink: 'syz.3.2408': attribute type 2 has an invalid length. [ 465.944692][T13761] netlink: 'syz.3.2408': attribute type 1 has an invalid length. [ 465.958587][T13761] block nbd0: not configured, cannot reconfigure [ 466.299805][T13770] netlink: 'syz.0.2412': attribute type 4 has an invalid length. [ 466.345435][T13772] netlink: 'syz.3.2413': attribute type 10 has an invalid length. [ 466.474720][T13776] netlink: 'syz.4.2414': attribute type 2 has an invalid length. [ 466.536305][T13776] nbd: must specify a device to reconfigure [ 467.232856][T13803] netlink: 'syz.3.2422': attribute type 2 has an invalid length. [ 467.256194][T13803] netlink: 'syz.3.2422': attribute type 1 has an invalid length. [ 467.266661][T13803] block nbd0: not configured, cannot reconfigure [ 467.551499][T13813] netlink: 'syz.4.2428': attribute type 2 has an invalid length. [ 467.560921][T13813] __nla_validate_parse: 5 callbacks suppressed [ 467.560974][T13813] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2428'. [ 467.583289][T13813] nbd: must specify a device to reconfigure [ 468.693208][T13833] netlink: 'syz.2.2436': attribute type 29 has an invalid length. [ 468.821943][T13836] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2437'. [ 468.893617][T13837] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2437'. [ 471.327255][T13841] validate_nla: 4 callbacks suppressed [ 471.327287][T13841] netlink: 'syz.1.2438': attribute type 2 has an invalid length. [ 471.344352][T13841] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 471.357255][T13841] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2438'. [ 471.370027][T13841] block nbd0: not configured, cannot reconfigure [ 471.706881][T13846] netlink: 'syz.2.2440': attribute type 2 has an invalid length. [ 471.721559][T13846] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2440'. [ 471.740340][T13846] nbd: must specify a device to reconfigure [ 471.768779][T13850] netlink: 'syz.1.2442': attribute type 6 has an invalid length. [ 471.785324][T13850] netlink: 'syz.1.2442': attribute type 7 has an invalid length. [ 471.794302][T13850] netlink: 13182 bytes leftover after parsing attributes in process `syz.1.2442'. [ 472.404281][T13866] netlink: 'syz.2.2448': attribute type 6 has an invalid length. [ 472.465377][T13866] netlink: 'syz.2.2448': attribute type 7 has an invalid length. [ 472.518580][T13866] netlink: 13182 bytes leftover after parsing attributes in process `syz.2.2448'. [ 473.052772][T13874] netlink: 'syz.4.2451': attribute type 21 has an invalid length. [ 473.067733][T13875] netlink: 'syz.0.2450': attribute type 4 has an invalid length. [ 473.083421][T13874] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2451'. [ 473.107647][T13875] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2450'. [ 473.109777][T13874] netlink: 'syz.4.2451': attribute type 1 has an invalid length. [ 473.132385][T13876] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2452'. [ 473.175143][T13876] block nbd0: not configured, cannot reconfigure [ 473.208321][T13879] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2450'. [ 473.435367][T13883] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2454'. [ 473.466921][T13883] nbd: must specify a device to reconfigure [ 473.759155][T13895] FAULT_INJECTION: forcing a failure. [ 473.759155][T13895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.791603][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.2.2457 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 473.791650][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 473.791672][T13895] Call Trace: [ 473.791683][T13895] [ 473.791694][T13895] dump_stack_lvl+0x189/0x250 [ 473.791731][T13895] ? __pfx____ratelimit+0x10/0x10 [ 473.791761][T13895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.791793][T13895] ? __pfx__printk+0x10/0x10 [ 473.791830][T13895] ? __might_fault+0xb0/0x130 [ 473.791873][T13895] ? __might_fault+0xb0/0x130 [ 473.791926][T13895] should_fail_ex+0x414/0x560 [ 473.791971][T13895] _copy_from_iter+0x1db/0x16f0 [ 473.792018][T13895] ? rcu_is_watching+0x15/0xb0 [ 473.792058][T13895] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 473.792098][T13895] ? __pfx__copy_from_iter+0x10/0x10 [ 473.792137][T13895] ? __build_skb_around+0x257/0x3e0 [ 473.792183][T13895] ? netlink_sendmsg+0x642/0xb30 [ 473.792221][T13895] ? skb_put+0x11b/0x210 [ 473.792270][T13895] netlink_sendmsg+0x6b2/0xb30 [ 473.792336][T13895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.792383][T13895] ? aa_sock_msg_perm+0x94/0x160 [ 473.792417][T13895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.792442][T13895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.792481][T13895] __sock_sendmsg+0x21c/0x270 [ 473.792524][T13895] ____sys_sendmsg+0x505/0x830 [ 473.792586][T13895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.792655][T13895] ? import_iovec+0x74/0xa0 [ 473.792703][T13895] ___sys_sendmsg+0x21f/0x2a0 [ 473.792750][T13895] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.792856][T13895] ? __fget_files+0x2a/0x420 [ 473.792919][T13895] ? __fget_files+0x2a/0x420 [ 473.792940][T13895] ? __fget_files+0x3a0/0x420 [ 473.792997][T13895] __x64_sys_sendmsg+0x19b/0x260 [ 473.793045][T13895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.793115][T13895] ? __pfx_ksys_write+0x10/0x10 [ 473.793143][T13895] ? rcu_is_watching+0x15/0xb0 [ 473.793189][T13895] ? do_syscall_64+0xbe/0x3b0 [ 473.793240][T13895] do_syscall_64+0xfa/0x3b0 [ 473.793276][T13895] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.793301][T13895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.793324][T13895] ? clear_bhb_loop+0x60/0xb0 [ 473.793360][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.793382][T13895] RIP: 0033:0x7f76e3d8e9a9 [ 473.793424][T13895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.793443][T13895] RSP: 002b:00007f76e4b0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.793466][T13895] RAX: ffffffffffffffda RBX: 00007f76e3fb5fa0 RCX: 00007f76e3d8e9a9 [ 473.793483][T13895] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 473.793496][T13895] RBP: 00007f76e4b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 473.793509][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.793522][T13895] R13: 0000000000000000 R14: 00007f76e3fb5fa0 R15: 00007ffdc6a9f168 [ 473.793587][T13895] [ 474.667641][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 474.678644][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'. [ 474.690954][T13912] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2461'. [ 474.779913][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'. [ 474.792161][T13912] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2461'. [ 474.934749][T13920] block nbd0: not configured, cannot reconfigure [ 475.154003][T13928] nbd: must specify a device to reconfigure [ 475.411814][T13936] mac80211_hwsim hwsim4 O3ãc¤±: renamed from wlan1 (while UP) [ 476.479643][T13962] validate_nla: 11 callbacks suppressed [ 476.479696][T13962] netlink: 'syz.3.2479': attribute type 2 has an invalid length. [ 476.498320][T13962] netlink: 'syz.3.2479': attribute type 1 has an invalid length. [ 476.517870][T13962] block nbd0: not configured, cannot reconfigure [ 476.801845][T13971] netlink: 'syz.3.2481': attribute type 2 has an invalid length. [ 476.839682][T13971] nbd: must specify a device to reconfigure [ 477.661132][T13990] FAULT_INJECTION: forcing a failure. [ 477.661132][T13990] name failslab, interval 1, probability 0, space 0, times 0 [ 477.696698][T13990] CPU: 0 UID: 0 PID: 13990 Comm: syz.0.2490 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 477.696747][T13990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 477.696769][T13990] Call Trace: [ 477.696786][T13990] [ 477.696804][T13990] dump_stack_lvl+0x189/0x250 [ 477.696856][T13990] ? __pfx____ratelimit+0x10/0x10 [ 477.696885][T13990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.696917][T13990] ? __pfx__printk+0x10/0x10 [ 477.696973][T13990] ? ref_tracker_alloc+0x318/0x460 [ 477.697012][T13990] should_fail_ex+0x414/0x560 [ 477.697055][T13990] should_failslab+0xa8/0x100 [ 477.697098][T13990] kmem_cache_alloc_noprof+0x73/0x3c0 [ 477.697130][T13990] ? skb_clone+0x212/0x3a0 [ 477.697169][T13990] skb_clone+0x212/0x3a0 [ 477.697208][T13990] __netlink_deliver_tap+0x404/0x850 [ 477.697283][T13990] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.697324][T13990] netlink_deliver_tap+0x19c/0x1b0 [ 477.697363][T13990] netlink_unicast+0x730/0x8e0 [ 477.697432][T13990] netlink_sendmsg+0x805/0xb30 [ 477.697499][T13990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.697546][T13990] ? aa_sock_msg_perm+0x94/0x160 [ 477.697578][T13990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.697604][T13990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.697643][T13990] __sock_sendmsg+0x21c/0x270 [ 477.697685][T13990] ____sys_sendmsg+0x505/0x830 [ 477.697743][T13990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.697812][T13990] ? import_iovec+0x74/0xa0 [ 477.697870][T13990] ___sys_sendmsg+0x21f/0x2a0 [ 477.697929][T13990] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.698031][T13990] ? __fget_files+0x2a/0x420 [ 477.698093][T13990] ? __fget_files+0x2a/0x420 [ 477.698111][T13990] ? __fget_files+0x3a0/0x420 [ 477.698168][T13990] __x64_sys_sendmsg+0x19b/0x260 [ 477.698213][T13990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.698280][T13990] ? __pfx_ksys_write+0x10/0x10 [ 477.698305][T13990] ? rcu_is_watching+0x15/0xb0 [ 477.698350][T13990] ? do_syscall_64+0xbe/0x3b0 [ 477.698390][T13990] do_syscall_64+0xfa/0x3b0 [ 477.698413][T13990] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.698437][T13990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.698460][T13990] ? clear_bhb_loop+0x60/0xb0 [ 477.698495][T13990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.698516][T13990] RIP: 0033:0x7fec56b8e9a9 [ 477.698539][T13990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.698557][T13990] RSP: 002b:00007fec57a70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.698579][T13990] RAX: ffffffffffffffda RBX: 00007fec56db5fa0 RCX: 00007fec56b8e9a9 [ 477.698595][T13990] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 477.698607][T13990] RBP: 00007fec57a70090 R08: 0000000000000000 R09: 0000000000000000 [ 477.698619][T13990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.698631][T13990] R13: 0000000000000000 R14: 00007fec56db5fa0 R15: 00007ffe2ca1f688 [ 477.698696][T13990] [ 478.002035][T13990] netlink: 'syz.0.2490': attribute type 10 has an invalid length. [ 478.013811][T13990] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.031407][T13995] netlink: 'syz.3.2492': attribute type 2 has an invalid length. [ 478.039551][T13995] netlink: 'syz.3.2492': attribute type 1 has an invalid length. [ 478.047547][T13995] block nbd0: not configured, cannot reconfigure [ 478.203486][T14002] netlink: 'syz.4.2494': attribute type 4 has an invalid length. [ 478.232245][T14002] __nla_validate_parse: 9 callbacks suppressed [ 478.232264][T14002] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2494'. [ 478.331320][T14006] netlink: 13695 bytes leftover after parsing attributes in process `syz.4.2494'. [ 478.375441][T14004] netlink: 'syz.2.2495': attribute type 2 has an invalid length. [ 478.377590][T14009] netlink: 'syz.3.2497': attribute type 10 has an invalid length. [ 478.404086][T14009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2497'. [ 478.406680][T14004] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2495'. [ 478.415874][T14009] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.424951][T14004] nbd: must specify a device to reconfigure [ 478.456960][T14009] bond0: (slave team0): Releasing backup interface [ 478.476628][T14009] bridge0: port 4(team0) entered blocking state [ 478.483898][T14009] bridge0: port 4(team0) entered disabled state [ 478.911292][T14026] netlink: 'syz.0.2503': attribute type 2 has an invalid length. [ 478.919757][T14026] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2503'. [ 478.930711][T14026] block nbd0: not configured, cannot reconfigure [ 479.416256][T14041] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2509'. [ 479.429555][T14041] nbd: must specify a device to reconfigure [ 480.414289][T14065] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2516'. [ 480.459598][T14064] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2517'. [ 480.480793][T14064] block nbd0: not configured, cannot reconfigure [ 480.525845][T14068] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2516'. [ 480.567042][T14066] netlink: 13182 bytes leftover after parsing attributes in process `syz.3.2518'. [ 480.993823][T14080] nbd: must specify a device to reconfigure [ 482.020878][T14102] validate_nla: 11 callbacks suppressed [ 482.020928][T14102] netlink: 'syz.4.2531': attribute type 2 has an invalid length. [ 482.065473][T14102] netlink: 'syz.4.2531': attribute type 1 has an invalid length. [ 482.085937][T14102] block nbd0: not configured, cannot reconfigure [ 482.157700][T14107] FAULT_INJECTION: forcing a failure. [ 482.157700][T14107] name failslab, interval 1, probability 0, space 0, times 0 [ 482.175297][T14107] CPU: 0 UID: 0 PID: 14107 Comm: syz.1.2534 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 482.175332][T14107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 482.175346][T14107] Call Trace: [ 482.175356][T14107] [ 482.175365][T14107] dump_stack_lvl+0x189/0x250 [ 482.175400][T14107] ? __pfx____ratelimit+0x10/0x10 [ 482.175438][T14107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.175468][T14107] ? __pfx__printk+0x10/0x10 [ 482.175518][T14107] ? __pfx___might_resched+0x10/0x10 [ 482.175559][T14107] should_fail_ex+0x414/0x560 [ 482.175601][T14107] should_failslab+0xa8/0x100 [ 482.175660][T14107] __kmalloc_cache_noprof+0x70/0x3d0 [ 482.175691][T14107] ? rtnl_newlink+0xed/0x1c70 [ 482.175730][T14107] rtnl_newlink+0xed/0x1c70 [ 482.175789][T14107] ? __pfx_rtnl_newlink+0x10/0x10 [ 482.175825][T14107] ? __pfx_perf_tp_event+0x10/0x10 [ 482.175847][T14107] ? kasan_quarantine_put+0x3d/0x220 [ 482.175938][T14107] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 482.175963][T14107] ? perf_swevent_event+0x113/0x5e0 [ 482.176006][T14107] ? __pfx_perf_swevent_event+0x10/0x10 [ 482.176025][T14107] ? __local_bh_enable_ip+0x12d/0x1c0 [ 482.176052][T14107] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.176098][T14107] ? perf_trace_run_bpf_submit+0xee/0x170 [ 482.176144][T14107] ? perf_trace_lock+0x2f8/0x3b0 [ 482.176196][T14107] ? __pfx_perf_trace_lock+0x10/0x10 [ 482.176252][T14107] ? rcu_read_unlock+0x87/0xa0 [ 482.176322][T14107] ? __pfx_rtnl_newlink+0x10/0x10 [ 482.176353][T14107] rtnetlink_rcv_msg+0x7cf/0xb70 [ 482.176398][T14107] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 482.176441][T14107] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.176468][T14107] ? ref_tracker_free+0x63a/0x7d0 [ 482.176505][T14107] ? perf_trace_run_bpf_submit+0xee/0x170 [ 482.176566][T14107] netlink_rcv_skb+0x208/0x470 [ 482.176605][T14107] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.176644][T14107] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.176721][T14107] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.176754][T14107] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.176807][T14107] netlink_unicast+0x75c/0x8e0 [ 482.176874][T14107] netlink_sendmsg+0x805/0xb30 [ 482.176939][T14107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.176985][T14107] ? aa_sock_msg_perm+0x94/0x160 [ 482.177019][T14107] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.177044][T14107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.177082][T14107] __sock_sendmsg+0x21c/0x270 [ 482.177123][T14107] ____sys_sendmsg+0x505/0x830 [ 482.177180][T14107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.177248][T14107] ? import_iovec+0x74/0xa0 [ 482.177295][T14107] ___sys_sendmsg+0x21f/0x2a0 [ 482.177342][T14107] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.177452][T14107] ? __fget_files+0x2a/0x420 [ 482.177513][T14107] ? __fget_files+0x2a/0x420 [ 482.177533][T14107] ? __fget_files+0x3a0/0x420 [ 482.177588][T14107] __x64_sys_sendmsg+0x19b/0x260 [ 482.177636][T14107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.177705][T14107] ? __pfx_ksys_write+0x10/0x10 [ 482.177733][T14107] ? rcu_is_watching+0x15/0xb0 [ 482.177779][T14107] ? do_syscall_64+0xbe/0x3b0 [ 482.177820][T14107] do_syscall_64+0xfa/0x3b0 [ 482.177852][T14107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.177873][T14107] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.177895][T14107] ? clear_bhb_loop+0x60/0xb0 [ 482.177932][T14107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.177954][T14107] RIP: 0033:0x7f5ceb78e9a9 [ 482.177977][T14107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.177996][T14107] RSP: 002b:00007f5cec67c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.178019][T14107] RAX: ffffffffffffffda RBX: 00007f5ceb9b5fa0 RCX: 00007f5ceb78e9a9 [ 482.178035][T14107] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 482.178049][T14107] RBP: 00007f5cec67c090 R08: 0000000000000000 R09: 0000000000000000 [ 482.178062][T14107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.178075][T14107] R13: 0000000000000000 R14: 00007f5ceb9b5fa0 R15: 00007ffc4e64a938 [ 482.178152][T14107] [ 482.864762][T14118] netlink: 'syz.3.2538': attribute type 4 has an invalid length. [ 482.973715][T14122] netlink: 'syz.4.2537': attribute type 2 has an invalid length. [ 482.982266][T14122] nbd: must specify a device to reconfigure [ 483.069568][T14126] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 483.723092][T14151] netlink: 'syz.1.2545': attribute type 2 has an invalid length. [ 483.734244][T14151] netlink: 'syz.1.2545': attribute type 1 has an invalid length. [ 483.744811][T14151] __nla_validate_parse: 9 callbacks suppressed [ 483.744847][T14151] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2545'. [ 483.764692][T14151] block nbd0: not configured, cannot reconfigure [ 484.059907][T14159] netlink: 'syz.3.2549': attribute type 10 has an invalid length. [ 484.109500][T14159] team0: left allmulticast mode [ 484.132740][T14159] C: left allmulticast mode [ 484.137340][T14159] team_slave_1: left allmulticast mode [ 484.164046][T14159] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 484.172041][T14159] team0: left promiscuous mode [ 484.177311][T14159] C: left promiscuous mode [ 484.203766][T14159] team_slave_1: left promiscuous mode [ 484.218036][T14159] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 484.241436][T14166] netlink: 'syz.4.2552': attribute type 2 has an invalid length. [ 484.247542][T14159] bridge0: port 4(team0) entered disabled state [ 484.256963][T14166] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2552'. [ 484.271493][T14166] nbd: must specify a device to reconfigure [ 484.286447][T14159] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.301094][T14159] team0: entered promiscuous mode [ 484.306377][T14159] C: entered promiscuous mode [ 484.312363][T14159] team_slave_1: entered promiscuous mode [ 484.319033][T14159] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 484.407266][T14159] team0: entered allmulticast mode [ 484.412957][T14159] C: entered allmulticast mode [ 484.418203][T14159] team_slave_1: entered allmulticast mode [ 484.424172][T14159] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 484.437386][T14159] bond0: (slave team0): Enslaving as an active interface with an up link [ 484.718436][T14178] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2555'. [ 484.763934][T14178] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2555'. [ 484.809908][T14184] netlink: 'syz.4.2557': attribute type 2 has an invalid length. [ 484.818417][T14184] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2557'. [ 484.834951][T14184] block nbd0: not configured, cannot reconfigure [ 484.986457][T14186] netlink: 13182 bytes leftover after parsing attributes in process `syz.1.2558'. [ 485.000561][T14186] FAULT_INJECTION: forcing a failure. [ 485.000561][T14186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.010511][T14190] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2559'. [ 485.014051][T14186] CPU: 0 UID: 0 PID: 14186 Comm: syz.1.2558 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 485.014085][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.014101][T14186] Call Trace: [ 485.014112][T14186] [ 485.014123][T14186] dump_stack_lvl+0x189/0x250 [ 485.014159][T14186] ? __pfx____ratelimit+0x10/0x10 [ 485.014187][T14186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.014217][T14186] ? __pfx__printk+0x10/0x10 [ 485.014266][T14186] should_fail_ex+0x414/0x560 [ 485.014299][T14186] _copy_to_user+0x31/0xb0 [ 485.014338][T14186] simple_read_from_buffer+0xe1/0x170 [ 485.014381][T14186] proc_fail_nth_read+0x1df/0x250 [ 485.014411][T14186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.014447][T14186] ? rw_verify_area+0x258/0x650 [ 485.014478][T14186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.014505][T14186] vfs_read+0x200/0x980 [ 485.014544][T14186] ? __pfx___mutex_lock+0x10/0x10 [ 485.014574][T14186] ? __pfx_vfs_read+0x10/0x10 [ 485.014609][T14186] ? __fget_files+0x2a/0x420 [ 485.014636][T14186] ? __fget_files+0x3a0/0x420 [ 485.014666][T14186] ? __fget_files+0x2a/0x420 [ 485.014700][T14186] ksys_read+0x145/0x250 [ 485.014736][T14186] ? __pfx_ksys_read+0x10/0x10 [ 485.014786][T14186] do_syscall_64+0xfa/0x3b0 [ 485.014815][T14186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.014837][T14186] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 485.014863][T14186] ? clear_bhb_loop+0x60/0xb0 [ 485.014893][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.014917][T14186] RIP: 0033:0x7f5ceb78d3bc [ 485.014940][T14186] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 485.014961][T14186] RSP: 002b:00007f5cec67c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.014987][T14186] RAX: ffffffffffffffda RBX: 00007f5ceb9b5fa0 RCX: 00007f5ceb78d3bc [ 485.015005][T14186] RDX: 000000000000000f RSI: 00007f5cec67c0a0 RDI: 000000000000000a [ 485.015021][T14186] RBP: 00007f5cec67c090 R08: 0000000000000000 R09: 0000000000000000 [ 485.015035][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.015050][T14186] R13: 0000000000000000 R14: 00007f5ceb9b5fa0 R15: 00007ffc4e64a938 [ 485.015088][T14186] [ 485.272030][T14190] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2559'. [ 485.787319][T14209] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2565'. [ 485.797278][T14209] nbd: must specify a device to reconfigure [ 486.177178][T14216] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2568'. [ 486.372495][T14222] block nbd0: not configured, cannot reconfigure [ 486.786230][T14227] FAULT_INJECTION: forcing a failure. [ 486.786230][T14227] name failslab, interval 1, probability 0, space 0, times 0 [ 486.805872][T14227] CPU: 0 UID: 0 PID: 14227 Comm: syz.3.2572 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 486.805904][T14227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.805919][T14227] Call Trace: [ 486.805930][T14227] [ 486.805941][T14227] dump_stack_lvl+0x189/0x250 [ 486.805977][T14227] ? __pfx____ratelimit+0x10/0x10 [ 486.806006][T14227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.806045][T14227] ? __pfx__printk+0x10/0x10 [ 486.806121][T14227] should_fail_ex+0x414/0x560 [ 486.806165][T14227] should_failslab+0xa8/0x100 [ 486.806208][T14227] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 486.806242][T14227] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 486.806267][T14227] ? __alloc_skb+0x112/0x2d0 [ 486.806316][T14227] __alloc_skb+0x112/0x2d0 [ 486.806365][T14227] rtmsg_ifinfo_build_skb+0x84/0x260 [ 486.806392][T14227] ? netpoll_poll_enable+0xce/0xe0 [ 486.806446][T14227] rtmsg_ifinfo+0x8c/0x1a0 [ 486.806497][T14227] __dev_notify_flags+0xf4/0x2e0 [ 486.806543][T14227] ? __pfx___dev_notify_flags+0x10/0x10 [ 486.806573][T14227] ? __dev_change_flags+0x4cc/0x6d0 [ 486.806629][T14227] ? __pfx___dev_change_flags+0x10/0x10 [ 486.806677][T14227] ? ___ratelimit+0x60e/0xab0 [ 486.806722][T14227] netif_change_flags+0xe8/0x1a0 [ 486.806777][T14227] do_setlink+0xc55/0x41c0 [ 486.806856][T14227] ? ___ratelimit+0x7c3/0xab0 [ 486.806881][T14227] ? __pfx_do_setlink+0x10/0x10 [ 486.806927][T14227] ? __pfx____ratelimit+0x10/0x10 [ 486.807009][T14227] ? __lock_acquire+0xab9/0xd20 [ 486.807070][T14227] ? __mutex_trylock_common+0x153/0x260 [ 486.807112][T14227] ? __pfx___mutex_trylock_common+0x10/0x10 [ 486.807160][T14227] ? rcu_is_watching+0x15/0xb0 [ 486.807191][T14227] ? trace_contention_end+0x39/0x120 [ 486.807225][T14227] ? __mutex_lock+0x330/0xe80 [ 486.807263][T14227] ? __pfx_aa_get_newest_label+0x10/0x10 [ 486.807306][T14227] ? rtnl_newlink+0x8db/0x1c70 [ 486.807335][T14227] ? rcu_is_watching+0x15/0xb0 [ 486.807369][T14227] ? __pfx___mutex_lock+0x10/0x10 [ 486.807430][T14227] ? ns_capable+0x8a/0xf0 [ 486.807467][T14227] ? rtnl_link_get_net_capable+0x16a/0x350 [ 486.807511][T14227] rtnl_newlink+0x160b/0x1c70 [ 486.807580][T14227] ? __pfx_rtnl_newlink+0x10/0x10 [ 486.807623][T14227] ? __pfx_perf_tp_event+0x10/0x10 [ 486.807730][T14227] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 486.807766][T14227] ? perf_swevent_event+0x113/0x5e0 [ 486.807811][T14227] ? __pfx_perf_swevent_event+0x10/0x10 [ 486.807831][T14227] ? __local_bh_enable_ip+0x12d/0x1c0 [ 486.807859][T14227] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.807906][T14227] ? perf_trace_run_bpf_submit+0xee/0x170 [ 486.807949][T14227] ? perf_trace_lock+0x2f8/0x3b0 [ 486.807998][T14227] ? __pfx_perf_trace_lock+0x10/0x10 [ 486.808066][T14227] ? rcu_read_unlock+0x87/0xa0 [ 486.808135][T14227] ? __pfx_rtnl_newlink+0x10/0x10 [ 486.808165][T14227] rtnetlink_rcv_msg+0x7cf/0xb70 [ 486.808208][T14227] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 486.808240][T14227] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 486.808266][T14227] ? ref_tracker_free+0x63a/0x7d0 [ 486.808303][T14227] ? perf_trace_run_bpf_submit+0xee/0x170 [ 486.808365][T14227] netlink_rcv_skb+0x208/0x470 [ 486.808403][T14227] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 486.808443][T14227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.808522][T14227] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.808556][T14227] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.808609][T14227] netlink_unicast+0x75c/0x8e0 [ 486.808676][T14227] netlink_sendmsg+0x805/0xb30 [ 486.808741][T14227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.808788][T14227] ? aa_sock_msg_perm+0x94/0x160 [ 486.808823][T14227] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.808848][T14227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.808887][T14227] __sock_sendmsg+0x21c/0x270 [ 486.808929][T14227] ____sys_sendmsg+0x505/0x830 [ 486.808988][T14227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.809064][T14227] ? import_iovec+0x74/0xa0 [ 486.809114][T14227] ___sys_sendmsg+0x21f/0x2a0 [ 486.809162][T14227] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.809269][T14227] ? __fget_files+0x2a/0x420 [ 486.809335][T14227] ? __fget_files+0x2a/0x420 [ 486.809355][T14227] ? __fget_files+0x3a0/0x420 [ 486.809413][T14227] __x64_sys_sendmsg+0x19b/0x260 [ 486.809462][T14227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.809533][T14227] ? __pfx_ksys_write+0x10/0x10 [ 486.809560][T14227] ? rcu_is_watching+0x15/0xb0 [ 486.809606][T14227] ? do_syscall_64+0xbe/0x3b0 [ 486.809647][T14227] do_syscall_64+0xfa/0x3b0 [ 486.809672][T14227] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.809697][T14227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.809721][T14227] ? clear_bhb_loop+0x60/0xb0 [ 486.809757][T14227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.809779][T14227] RIP: 0033:0x7f093ab8e9a9 [ 486.809803][T14227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.809822][T14227] RSP: 002b:00007f093b91b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.809845][T14227] RAX: ffffffffffffffda RBX: 00007f093adb5fa0 RCX: 00007f093ab8e9a9 [ 486.809862][T14227] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 486.809874][T14227] RBP: 00007f093b91b090 R08: 0000000000000000 R09: 0000000000000000 [ 486.809888][T14227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.809900][T14227] R13: 0000000000000000 R14: 00007f093adb5fa0 R15: 00007fff363608b8 [ 486.809968][T14227] [ 487.686123][T14246] validate_nla: 8 callbacks suppressed [ 487.686145][T14246] netlink: 'syz.2.2579': attribute type 4 has an invalid length. [ 487.745709][T14245] netlink: 'syz.1.2578': attribute type 2 has an invalid length. [ 487.754073][T14245] nbd: must specify a device to reconfigure [ 488.046154][T14260] netlink: 'syz.1.2583': attribute type 2 has an invalid length. [ 488.067118][T14260] netlink: 'syz.1.2583': attribute type 1 has an invalid length. [ 488.076646][T14260] block nbd0: not configured, cannot reconfigure [ 488.873796][T14278] tun0: tun_chr_ioctl cmd 1074025675 [ 488.905033][T14278] tun0: persist enabled [ 488.919039][T14275] tun0: tun_chr_ioctl cmd 1074025675 [ 488.948836][T14275] tun0: persist disabled [ 489.270187][T14289] netlink: 'syz.2.2592': attribute type 2 has an invalid length. [ 489.309717][T14289] __nla_validate_parse: 5 callbacks suppressed [ 489.309772][T14289] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2592'. [ 489.356298][T14289] nbd: must specify a device to reconfigure [ 489.415939][T14296] netlink: 'syz.1.2595': attribute type 2 has an invalid length. [ 489.438744][T14296] netlink: 'syz.1.2595': attribute type 1 has an invalid length. [ 489.459491][T14296] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2595'. [ 489.469237][T14296] block nbd0: not configured, cannot reconfigure [ 489.600230][T14300] netlink: 'syz.2.2597': attribute type 4 has an invalid length. [ 489.612636][T14300] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2597'. [ 489.699590][T14305] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2597'. [ 490.651056][T14319] netlink: 'syz.0.2604': attribute type 10 has an invalid length. [ 490.704597][T14319] FAULT_INJECTION: forcing a failure. [ 490.704597][T14319] name failslab, interval 1, probability 0, space 0, times 0 [ 490.722761][T14319] CPU: 1 UID: 0 PID: 14319 Comm: syz.0.2604 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 490.722793][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.722806][T14319] Call Trace: [ 490.722817][T14319] [ 490.722828][T14319] dump_stack_lvl+0x189/0x250 [ 490.722865][T14319] ? __pfx____ratelimit+0x10/0x10 [ 490.722903][T14319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.722932][T14319] ? __pfx__printk+0x10/0x10 [ 490.722984][T14319] ? __pfx___might_resched+0x10/0x10 [ 490.723032][T14319] should_fail_ex+0x414/0x560 [ 490.723071][T14319] should_failslab+0xa8/0x100 [ 490.723111][T14319] kmem_cache_alloc_noprof+0x73/0x3c0 [ 490.723144][T14319] ? __kernfs_new_node+0xd7/0x7e0 [ 490.723185][T14319] __kernfs_new_node+0xd7/0x7e0 [ 490.723223][T14319] ? __pfx_perf_trace_lock+0x10/0x10 [ 490.723279][T14319] ? __pfx___kernfs_new_node+0x10/0x10 [ 490.723308][T14319] ? kernfs_root+0x1c/0x230 [ 490.723372][T14319] ? kernfs_root+0x1c/0x230 [ 490.723395][T14319] ? kernfs_root+0x1c/0x230 [ 490.723414][T14319] ? kernfs_root+0x1c/0x230 [ 490.723455][T14319] kernfs_new_node+0x102/0x210 [ 490.723500][T14319] kernfs_create_dir_ns+0x44/0x130 [ 490.723539][T14319] sysfs_create_dir_ns+0x123/0x280 [ 490.723590][T14319] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 490.723652][T14319] kobject_add_internal+0x59f/0xb40 [ 490.723708][T14319] kobject_init_and_add+0x125/0x190 [ 490.723742][T14319] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 490.723778][T14319] ? __pfx_kobject_init_and_add+0x10/0x10 [ 490.723828][T14319] ? timer_init_key+0x171/0x2d0 [ 490.723887][T14319] bond_enslave+0xb96/0x3a20 [ 490.723969][T14319] ? __local_bh_enable_ip+0x12d/0x1c0 [ 490.724011][T14319] ? __local_bh_enable_ip+0x12d/0x1c0 [ 490.724050][T14319] ? __pfx_bond_enslave+0x10/0x10 [ 490.724127][T14319] ? __pfx___dev_change_flags+0x10/0x10 [ 490.724177][T14319] ? mutex_is_locked+0x17/0x50 [ 490.724219][T14319] do_set_master+0x533/0x6d0 [ 490.724279][T14319] do_setlink+0xcf0/0x41c0 [ 490.724362][T14319] ? __pfx_do_setlink+0x10/0x10 [ 490.724402][T14319] ? _printk+0xcf/0x120 [ 490.724432][T14319] ? __pfx____ratelimit+0x10/0x10 [ 490.724493][T14319] ? __lock_acquire+0xab9/0xd20 [ 490.724543][T14319] ? __mutex_trylock_common+0x153/0x260 [ 490.724586][T14319] ? __pfx___mutex_trylock_common+0x10/0x10 [ 490.724631][T14319] ? rcu_is_watching+0x15/0xb0 [ 490.724661][T14319] ? trace_contention_end+0x39/0x120 [ 490.724695][T14319] ? __mutex_lock+0x330/0xe80 [ 490.724733][T14319] ? __pfx_aa_get_newest_label+0x10/0x10 [ 490.724776][T14319] ? rtnl_newlink+0x8db/0x1c70 [ 490.724805][T14319] ? rcu_is_watching+0x15/0xb0 [ 490.724839][T14319] ? __pfx___mutex_lock+0x10/0x10 [ 490.724908][T14319] ? ns_capable+0x8a/0xf0 [ 490.724943][T14319] ? rtnl_link_get_net_capable+0x16a/0x350 [ 490.724989][T14319] rtnl_newlink+0x160b/0x1c70 [ 490.725063][T14319] ? __pfx_rtnl_newlink+0x10/0x10 [ 490.725107][T14319] ? __pfx_perf_tp_event+0x10/0x10 [ 490.725221][T14319] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 490.725252][T14319] ? perf_swevent_event+0x113/0x5e0 [ 490.725298][T14319] ? __pfx_perf_swevent_event+0x10/0x10 [ 490.725318][T14319] ? __local_bh_enable_ip+0x12d/0x1c0 [ 490.725346][T14319] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.725395][T14319] ? perf_trace_run_bpf_submit+0xee/0x170 [ 490.725441][T14319] ? perf_trace_lock+0x2f8/0x3b0 [ 490.725495][T14319] ? __pfx_perf_trace_lock+0x10/0x10 [ 490.725552][T14319] ? rcu_read_unlock+0x87/0xa0 [ 490.725623][T14319] ? __pfx_rtnl_newlink+0x10/0x10 [ 490.725656][T14319] rtnetlink_rcv_msg+0x7cf/0xb70 [ 490.725702][T14319] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 490.725733][T14319] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 490.725758][T14319] ? ref_tracker_free+0x63a/0x7d0 [ 490.725797][T14319] ? perf_trace_run_bpf_submit+0xee/0x170 [ 490.725858][T14319] netlink_rcv_skb+0x208/0x470 [ 490.725904][T14319] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 490.725943][T14319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.726022][T14319] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.726055][T14319] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.726109][T14319] netlink_unicast+0x75c/0x8e0 [ 490.726178][T14319] netlink_sendmsg+0x805/0xb30 [ 490.726243][T14319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.726289][T14319] ? aa_sock_msg_perm+0x94/0x160 [ 490.726323][T14319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.726348][T14319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.726387][T14319] __sock_sendmsg+0x21c/0x270 [ 490.726430][T14319] ____sys_sendmsg+0x505/0x830 [ 490.726487][T14319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.726557][T14319] ? import_iovec+0x74/0xa0 [ 490.726607][T14319] ___sys_sendmsg+0x21f/0x2a0 [ 490.726671][T14319] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.726778][T14319] ? __fget_files+0x2a/0x420 [ 490.726844][T14319] ? __fget_files+0x2a/0x420 [ 490.726864][T14319] ? __fget_files+0x3a0/0x420 [ 490.726928][T14319] __x64_sys_sendmsg+0x19b/0x260 [ 490.726975][T14319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.727043][T14319] ? __pfx_ksys_write+0x10/0x10 [ 490.727070][T14319] ? rcu_is_watching+0x15/0xb0 [ 490.727116][T14319] ? do_syscall_64+0xbe/0x3b0 [ 490.727155][T14319] do_syscall_64+0xfa/0x3b0 [ 490.727179][T14319] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.727204][T14319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.727228][T14319] ? clear_bhb_loop+0x60/0xb0 [ 490.727265][T14319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.727286][T14319] RIP: 0033:0x7fec56b8e9a9 [ 490.727308][T14319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.727328][T14319] RSP: 002b:00007fec57a70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.727350][T14319] RAX: ffffffffffffffda RBX: 00007fec56db5fa0 RCX: 00007fec56b8e9a9 [ 490.727365][T14319] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 490.727376][T14319] RBP: 00007fec57a70090 R08: 0000000000000000 R09: 0000000000000000 [ 490.727387][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.727397][T14319] R13: 0000000000000000 R14: 00007fec56db5fa0 R15: 00007ffe2ca1f688 [ 490.727457][T14319] [ 490.804084][T14326] netlink: 'syz.1.2607': attribute type 2 has an invalid length. [ 490.849098][T14323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2605'. [ 490.867636][T14319] kobject: kobject_add_internal failed for bonding_slave (error: -12 parent: team0) [ 490.897792][T14326] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2607'. [ 490.930200][T14323] bridge_slave_0: entered allmulticast mode [ 490.987225][T14326] nbd: must specify a device to reconfigure [ 490.992822][T14323] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2605'. [ 491.575789][T14329] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2608'. [ 491.594301][T14329] block nbd0: not configured, cannot reconfigure [ 491.997413][T14345] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2614'. [ 492.134891][T14350] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.2614'. [ 493.233531][T14375] validate_nla: 6 callbacks suppressed [ 493.233575][T14375] netlink: 'syz.3.2622': attribute type 2 has an invalid length. [ 493.265722][T14375] nbd: must specify a device to reconfigure [ 493.344316][T14377] netlink: 'syz.1.2623': attribute type 2 has an invalid length. [ 493.362550][T14377] netlink: 'syz.1.2623': attribute type 1 has an invalid length. [ 493.397181][T14377] block nbd0: not configured, cannot reconfigure [ 493.584978][T14379] netlink: 'syz.3.2624': attribute type 2 has an invalid length. [ 493.603486][T14379] netlink: 'syz.3.2624': attribute type 1 has an invalid length. [ 493.634009][T14379] block nbd0: not configured, cannot reconfigure [ 494.072601][T14396] netlink: 'syz.1.2632': attribute type 4 has an invalid length. [ 494.388076][T14407] netlink: 'syz.2.2635': attribute type 2 has an invalid length. [ 494.416672][T14407] __nla_validate_parse: 7 callbacks suppressed [ 494.416716][T14407] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2635'. [ 494.460518][T14407] nbd: must specify a device to reconfigure [ 494.503759][T14409] netlink: 'syz.0.2636': attribute type 2 has an invalid length. [ 494.540026][T14409] netlink: 'syz.0.2636': attribute type 1 has an invalid length. [ 494.585282][T14409] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2636'. [ 494.595836][T14409] block nbd0: not configured, cannot reconfigure [ 495.015833][T14418] netlink: 'syz.0.2649': attribute type 4 has an invalid length. [ 495.034856][T14418] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2649'. [ 495.054371][T14422] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2640'. [ 495.069572][T14422] block nbd0: not configured, cannot reconfigure [ 495.138201][T14423] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2649'. [ 495.613943][T14431] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2642'. [ 495.645512][T14431] block nbd0: not configured, cannot reconfigure [ 496.423513][T14450] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2648'. [ 496.534710][T14450] nbd: must specify a device to reconfigure [ 496.601292][T14454] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2650'. [ 496.613135][T14454] block nbd0: not configured, cannot reconfigure [ 497.015746][T14471] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2657'. [ 497.218614][T14476] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2657'. [ 497.964606][T14492] block nbd0: not configured, cannot reconfigure [ 498.309660][T14498] validate_nla: 12 callbacks suppressed [ 498.309708][T14498] netlink: 'syz.4.2664': attribute type 2 has an invalid length. [ 498.344304][T14498] nbd: must specify a device to reconfigure [ 498.605633][T14510] netlink: 'syz.0.2671': attribute type 2 has an invalid length. [ 498.818675][T14516] netlink: 'syz.2.2672': attribute type 10 has an invalid length. [ 499.491303][T14523] netlink: 'syz.0.2675': attribute type 4 has an invalid length. [ 499.520599][T14523] __nla_validate_parse: 2 callbacks suppressed [ 499.520623][T14523] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2675'. [ 499.542368][T14525] netlink: 'syz.3.2676': attribute type 23 has an invalid length. [ 499.688425][T14526] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2675'. [ 499.726738][T14529] netlink: 'syz.3.2678': attribute type 2 has an invalid length. [ 499.755483][T14529] netlink: 'syz.3.2678': attribute type 1 has an invalid length. [ 499.764380][T14529] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2678'. [ 499.792726][T14529] block nbd0: not configured, cannot reconfigure [ 500.305941][T14543] netlink: 'syz.3.2683': attribute type 2 has an invalid length. [ 500.358472][T14543] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2683'. [ 500.412463][T14543] nbd: must specify a device to reconfigure [ 500.653768][T14559] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2687'. [ 500.685010][T14560] netlink: 'syz.1.2688': attribute type 10 has an invalid length. [ 500.831256][T14566] netlink: 'syz.1.2691': attribute type 2 has an invalid length. [ 500.842942][T14566] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2691'. [ 500.853427][T14566] block nbd0: not configured, cannot reconfigure [ 501.452577][T14580] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2696'. [ 501.507893][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.514309][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.553936][T14583] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2696'. [ 501.576950][T14582] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2697'. [ 501.590193][T14582] nbd: must specify a device to reconfigure [ 501.856431][T14588] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2698'. [ 502.111546][T14595] block nbd0: not configured, cannot reconfigure [ 502.945206][T14616] nbd: must specify a device to reconfigure [ 503.520282][T14627] validate_nla: 9 callbacks suppressed [ 503.520337][T14627] netlink: 'syz.0.2713': attribute type 2 has an invalid length. [ 503.538445][T14627] netlink: 'syz.0.2713': attribute type 1 has an invalid length. [ 503.548621][T14627] block nbd0: not configured, cannot reconfigure [ 503.555806][T14629] netlink: 'syz.1.2715': attribute type 4 has an invalid length. [ 504.354914][T14651] netlink: 'syz.2.2721': attribute type 2 has an invalid length. [ 504.370015][T14651] nbd: must specify a device to reconfigure [ 504.719317][T14656] netlink: 'syz.2.2723': attribute type 10 has an invalid length. [ 504.887190][T14662] netlink: 'syz.4.2726': attribute type 2 has an invalid length. [ 504.918702][T14662] netlink: 'syz.4.2726': attribute type 1 has an invalid length. [ 504.952142][T14662] __nla_validate_parse: 9 callbacks suppressed [ 504.952194][T14662] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2726'. [ 504.983133][T14662] block nbd0: not configured, cannot reconfigure [ 505.375756][T14678] netlink: 'syz.2.2732': attribute type 4 has an invalid length. [ 505.388626][T14678] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2732'. [ 505.408532][T14680] netlink: 'syz.4.2733': attribute type 2 has an invalid length. [ 505.416451][T14680] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2733'. [ 505.428067][T14680] nbd: must specify a device to reconfigure [ 505.495556][T14683] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2732'. [ 506.206510][T14699] netlink: 'syz.0.2738': attribute type 10 has an invalid length. [ 506.223075][T14699] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.088976][T14703] netlink: 13182 bytes leftover after parsing attributes in process `syz.2.2741'. [ 507.349880][T14716] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2744'. [ 507.360729][T14716] nbd: must specify a device to reconfigure [ 507.644332][T14733] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2750'. [ 507.703696][T14733] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2750'. [ 508.516952][T14744] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2753'. [ 508.884557][T14754] validate_nla: 6 callbacks suppressed [ 508.884605][T14754] netlink: 'syz.2.2757': attribute type 2 has an invalid length. [ 508.924340][T14754] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2757'. [ 508.992751][T14754] nbd: must specify a device to reconfigure [ 509.198936][T14763] Dead loop on virtual device ip6_vti0, fix it urgently! [ 509.214927][T14763] netlink: 'syz.1.2760': attribute type 10 has an invalid length. [ 509.240523][T14765] netlink: 'syz.2.2762': attribute type 10 has an invalid length. [ 509.291827][T14766] netlink: 'syz.2.2762': attribute type 10 has an invalid length. [ 509.539400][T14774] netlink: 'syz.4.2764': attribute type 2 has an invalid length. [ 509.550886][T14774] netlink: 'syz.4.2764': attribute type 1 has an invalid length. [ 509.559320][T14774] block nbd0: not configured, cannot reconfigure [ 510.794937][T14787] netlink: 'syz.2.2768': attribute type 26 has an invalid length. [ 510.831675][T14787] __nla_validate_parse: 1 callbacks suppressed [ 510.831723][T14787] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2768'. [ 510.843919][T14791] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2769'. [ 511.261479][T14799] netlink: 'syz.3.2772': attribute type 2 has an invalid length. [ 511.288245][T14799] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2772'. [ 511.330817][T14799] nbd: must specify a device to reconfigure [ 511.619000][T14810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2776'. [ 511.767231][T14813] netlink: 'syz.1.2778': attribute type 21 has an invalid length. [ 511.890587][T14816] netlink: 'syz.3.2780': attribute type 10 has an invalid length. [ 512.142542][T14826] netlink: 13182 bytes leftover after parsing attributes in process `syz.2.2782'. [ 513.607077][T14852] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2791'. [ 513.630046][T14852] netlink: zone id is out of range [ 513.645493][T14852] netlink: zone id is out of range [ 513.652406][T14852] netlink: zone id is out of range [ 513.676040][T14852] netlink: zone id is out of range [ 513.698696][T14852] netlink: zone id is out of range [ 513.703911][T14852] netlink: zone id is out of range [ 513.749500][T14852] netlink: zone id is out of range [ 513.775210][T14852] netlink: zone id is out of range [ 513.791480][T14852] netlink: zone id is out of range [ 514.090718][T14867] validate_nla: 3 callbacks suppressed [ 514.090736][T14867] netlink: 'syz.2.2793': attribute type 21 has an invalid length. [ 514.090752][T14866] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2793'. [ 514.126898][T14867] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2793'. [ 514.138326][T14869] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2797'. [ 516.659508][T14894] syz.3.2802: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 516.710846][T14894] CPU: 0 UID: 0 PID: 14894 Comm: syz.3.2802 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 516.710883][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.710898][T14894] Call Trace: [ 516.710908][T14894] [ 516.710919][T14894] dump_stack_lvl+0x189/0x250 [ 516.710958][T14894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.710986][T14894] ? __pfx__printk+0x10/0x10 [ 516.711019][T14894] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 516.711050][T14894] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 516.711084][T14894] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 516.711118][T14894] warn_alloc+0x214/0x310 [ 516.711141][T14894] ? stack_depot_save_flags+0x40/0x900 [ 516.711172][T14894] ? __pfx_warn_alloc+0x10/0x10 [ 516.711196][T14894] ? kasan_save_track+0x4f/0x80 [ 516.711228][T14894] ? xskq_create+0x56/0x170 [ 516.711251][T14894] ? xsk_init_queue+0xb0/0x110 [ 516.711270][T14894] ? xsk_setsockopt+0x4de/0x710 [ 516.711302][T14894] ? do_sock_setsockopt+0x17c/0x1b0 [ 516.711349][T14894] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 516.711380][T14894] ? do_syscall_64+0xfa/0x3b0 [ 516.711406][T14894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.711439][T14894] __vmalloc_node_range_noprof+0x125/0x12f0 [ 516.711523][T14894] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 516.711573][T14894] ? __kasan_kmalloc+0x93/0xb0 [ 516.711609][T14894] vmalloc_user_noprof+0xad/0xf0 [ 516.711645][T14894] ? xskq_create+0xbf/0x170 [ 516.711669][T14894] xskq_create+0xbf/0x170 [ 516.711697][T14894] xsk_init_queue+0xb0/0x110 [ 516.711724][T14894] xsk_setsockopt+0x4de/0x710 [ 516.711762][T14894] ? __pfx_xsk_setsockopt+0x10/0x10 [ 516.711802][T14894] ? __fget_files+0x2a/0x420 [ 516.711823][T14894] ? aa_sock_opt_perm+0x74/0x110 [ 516.711852][T14894] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 516.711878][T14894] ? __pfx_xsk_setsockopt+0x10/0x10 [ 516.711915][T14894] do_sock_setsockopt+0x17c/0x1b0 [ 516.711955][T14894] __x64_sys_setsockopt+0x13f/0x1b0 [ 516.711995][T14894] do_syscall_64+0xfa/0x3b0 [ 516.712020][T14894] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.712044][T14894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.712068][T14894] ? clear_bhb_loop+0x60/0xb0 [ 516.712096][T14894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.712135][T14894] RIP: 0033:0x7f093ab8e9a9 [ 516.712158][T14894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.712179][T14894] RSP: 002b:00007f093b91b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 516.712205][T14894] RAX: ffffffffffffffda RBX: 00007f093adb5fa0 RCX: 00007f093ab8e9a9 [ 516.712223][T14894] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 516.712238][T14894] RBP: 00007f093ac10d69 R08: 0000000000000004 R09: 0000000000000000 [ 516.712254][T14894] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 516.712269][T14894] R13: 0000000000000000 R14: 00007f093adb5fa0 R15: 00007fff363608b8 [ 516.712305][T14894] [ 516.712327][T14894] Mem-Info: [ 517.177938][T14894] active_anon:19418 inactive_anon:0 isolated_anon:0 [ 517.177938][T14894] active_file:20621 inactive_file:39999 isolated_file:0 [ 517.177938][T14894] unevictable:768 dirty:167 writeback:0 [ 517.177938][T14894] slab_reclaimable:10413 slab_unreclaimable:99406 [ 517.177938][T14894] mapped:29655 shmem:15155 pagetables:1312 [ 517.177938][T14894] sec_pagetables:0 bounce:0 [ 517.177938][T14894] kernel_misc_reclaimable:0 [ 517.177938][T14894] free:1290332 free_pcp:15708 free_cma:0 [ 517.255619][T14894] Node 0 active_anon:76672kB inactive_anon:0kB active_file:82484kB inactive_file:159796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122620kB dirty:668kB writeback:0kB shmem:58084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11760kB pagetables:5140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 517.301340][T14894] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 517.338031][T14894] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.370643][T14894] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 517.376662][T14894] Node 0 DMA32 free:1250668kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:75024kB inactive_anon:0kB active_file:82484kB inactive_file:158232kB unevictable:1536kB writepending:668kB present:3129332kB managed:2558504kB mlocked:0kB bounce:0kB free_pcp:43248kB local_pcp:26272kB free_cma:0kB [ 517.465923][T14894] lowmem_reserve[]: 0 0 1 1 1 [ 517.521421][T14894] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 517.665650][T14894] lowmem_reserve[]: 0 0 0 0 0 [ 517.687746][T14894] Node 1 Normal free:3895076kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22304kB local_pcp:13568kB free_cma:0kB [ 517.958189][T14894] lowmem_reserve[]: 0 0 0 0 0 [ 517.974444][T14894] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 518.011359][T14894] Node 0 DMA32: 1984*4kB (UM) 730*8kB (UME) 653*16kB (UME) 805*32kB (UME) 620*64kB (UME) 224*128kB (UM) 76*256kB (UM) 41*512kB (UME) 22*1024kB (UME) 5*2048kB (UM) 265*4096kB (M) = 1276992kB [ 518.064499][T14894] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 518.093159][T14894] Node 1 Normal: 201*4kB (UE) 56*8kB (UME) 40*16kB (UME) 82*32kB (UME) 28*64kB (UME) 9*128kB (UME) 4*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3895076kB [ 518.158886][T14894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.194620][T14894] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 518.241581][T14894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.277252][T14894] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 518.325049][T14894] 66256 total pagecache pages [ 518.354555][T14894] 0 pages in swap cache [ 518.378881][T14894] Free swap = 124996kB [ 518.419271][T14894] Total swap = 124996kB [ 518.423508][T14894] 2097051 pages RAM [ 518.468519][T14894] 0 pages HighMem/MovableOnly [ 518.473416][T14894] 425383 pages reserved [ 518.517605][T14894] 0 pages cma reserved [ 518.778236][T14927] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2810'. [ 518.836663][T14930] netlink: 'syz.1.2811': attribute type 21 has an invalid length. [ 520.121193][T14948] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 520.129792][T14948] netlink: 'syz.1.2817': attribute type 4 has an invalid length. [ 520.138089][T14948] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2817'. [ 520.470229][T14958] netlink: 'syz.2.2820': attribute type 27 has an invalid length. [ 520.502920][T14958] netlink: 'syz.2.2820': attribute type 3 has an invalid length. [ 520.534376][T14958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2820'. [ 520.558531][T14973] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2823'. [ 520.570441][T14970] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2823'. [ 520.962591][T14992] veth1_macvtap: left promiscuous mode [ 520.985915][T14992] veth1_macvtap: entered promiscuous mode [ 521.000497][T14992] macsec0: entered promiscuous mode [ 521.010992][T14992] macsec0: entered allmulticast mode [ 521.016624][T14992] veth1_macvtap: entered allmulticast mode [ 521.434054][T15002] netlink: 'syz.0.2834': attribute type 10 has an invalid length. [ 521.505782][T15002] team0: Device hsr_slave_0 failed to register rx_handler [ 522.823847][T15028] netlink: 'syz.0.2842': attribute type 3 has an invalid length. [ 522.823877][T15027] netlink: 'syz.0.2842': attribute type 3 has an invalid length. [ 522.873965][T15028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2842'. [ 522.907723][T15027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2842'. [ 523.193930][T15037] netlink: 'syz.4.2846': attribute type 2 has an invalid length. [ 523.221320][T15037] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2846'. [ 523.291117][T15037] nbd: must specify a device to reconfigure [ 524.044582][T15060] netlink: 'syz.0.2853': attribute type 10 has an invalid length. [ 524.212524][T15060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2853'. [ 524.357854][T15060] team0: entered promiscuous mode [ 524.365079][T15060] team_slave_1: entered promiscuous mode [ 524.375912][T15060] .`: entered promiscuous mode [ 524.395775][T15060] bond_slave_1: entered promiscuous mode [ 524.420867][T15060] geneve1: entered promiscuous mode [ 524.468915][T15060] mac80211_hwsim hwsim7 O3ãc¤±: entered promiscuous mode [ 524.530116][T15060] team0: entered allmulticast mode [ 524.603704][T15060] team_slave_1: entered allmulticast mode [ 524.638834][T15060] .`: entered allmulticast mode [ 524.687666][T15060] bond_slave_1: entered allmulticast mode [ 524.749998][T15060] geneve1: entered allmulticast mode [ 524.764719][T15060] mac80211_hwsim hwsim7 O3ãc¤±: entered allmulticast mode [ 524.804676][T15060] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.831091][T15060] bridge0: port 3(team0) entered blocking state [ 524.844625][T15060] bridge0: port 3(team0) entered disabled state [ 524.874341][T15060] bridge0: port 3(team0) entered blocking state [ 524.880912][T15060] bridge0: port 3(team0) entered forwarding state [ 525.410155][T15083] netlink: 'syz.2.2861': attribute type 6 has an invalid length. [ 525.421285][T15083] netlink: 'syz.2.2861': attribute type 7 has an invalid length. [ 525.447642][T15083] netlink: 13182 bytes leftover after parsing attributes in process `syz.2.2861'. [ 526.120524][T15096] netlink: 'syz.3.2864': attribute type 10 has an invalid length. [ 526.137124][T15096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2864'. [ 526.211322][T15096] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.306364][T15096] bond0: (slave team0): Releasing backup interface [ 526.420097][T15096] bridge0: port 4(team0) entered blocking state [ 526.439536][T15096] bridge0: port 4(team0) entered disabled state [ 526.661310][T15111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 526.670880][T15111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 526.680486][T15111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 526.691699][T15111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 526.707098][T15111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 526.749427][T15116] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2869'. [ 527.290752][ T6499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.424452][T15134] netlink: 'syz.4.2873': attribute type 2 has an invalid length. [ 527.448297][T15134] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2873'. [ 527.464181][ T6499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.735630][ T6499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.852206][ T6499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.990868][T15147] IPv6: Can't replace route, no match found [ 528.075775][T15107] chnl_net:caif_netlink_parms(): no params data found [ 528.270524][T15159] netlink: 'syz.2.2879': attribute type 9 has an invalid length. [ 528.314502][T15159] netlink: 'syz.2.2879': attribute type 8 has an invalid length. [ 528.359669][T15159] netlink: 143452 bytes leftover after parsing attributes in process `syz.2.2879'. [ 528.778094][T15111] Bluetooth: hci5: command tx timeout [ 528.978188][T15178] netlink: 'syz.4.2884': attribute type 10 has an invalid length. [ 529.010912][T15178] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2884'. [ 530.572984][ T6499]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.582274][ T6499] bond_slave_0: left promiscuous mode [ 530.599818][ T6499]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.612717][ T6499] bond_slave_1: left promiscuous mode [ 530.623137][ T6499]  (unregistering): (slave team0): Releasing backup interface [ 530.632262][ T6499] team0: left promiscuous mode [ 530.637280][ T6499] team_slave_1: left promiscuous mode [ 530.654149][ T6499]  (unregistering): Released all slaves [ 530.675274][T15107] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.693199][T15107] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.713341][T15107] bridge_slave_0: entered allmulticast mode [ 530.741851][T15107] bridge_slave_0: entered promiscuous mode [ 530.862177][T15111] Bluetooth: hci5: command tx timeout [ 531.027039][T15107] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.067678][T15107] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.087017][T15107] bridge_slave_1: entered allmulticast mode [ 531.103433][T15107] bridge_slave_1: entered promiscuous mode [ 531.273896][T15107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.293593][T15107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.478179][T15216] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2891'. [ 531.615466][T15107] team0: Port device team_slave_0 added [ 531.660315][T15107] team0: Port device team_slave_1 added [ 531.779160][T15226] netlink: 'syz.4.2894': attribute type 41 has an invalid length. [ 531.816198][T15228] netlink: 'syz.2.2896': attribute type 29 has an invalid length. [ 531.843219][T15107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.867555][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.944397][T15107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.994983][T15107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.032724][T15236] netlink: 'syz.3.2898': attribute type 4 has an invalid length. [ 532.051591][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.062225][T15236] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2898'. [ 532.147923][T15107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.225231][T15236] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2898'. [ 532.312685][ T6499] hsr_slave_0: left promiscuous mode [ 532.354961][ T6499] hsr_slave_1: left promiscuous mode [ 532.937759][T15111] Bluetooth: hci5: command tx timeout [ 533.816822][ T6499] team0 (unregistering): Port device team_slave_1 removed [ 534.293122][T15237] netlink: 'syz.2.2896': attribute type 29 has an invalid length. [ 534.528582][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 534.593518][T15107] hsr_slave_0: entered promiscuous mode [ 534.599743][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2910'. [ 534.616942][T15107] hsr_slave_1: entered promiscuous mode [ 534.628883][T15285] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2908'. [ 534.647949][T15285] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2908'. [ 534.936053][T15303] netlink: 'syz.2.2912': attribute type 4 has an invalid length. [ 534.945438][T15303] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2912'. [ 535.017943][T15111] Bluetooth: hci5: command tx timeout [ 535.111476][T15306] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2912'. [ 535.643577][T15314] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 536.206934][T15330] netlink: 'syz.0.2918': attribute type 29 has an invalid length. [ 536.398573][T15341] netlink: 'syz.3.2920': attribute type 10 has an invalid length. [ 536.594242][T15341] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 536.622932][T15341] netdevsim netdevsim3 ÿÿÿÿÿÿ: entered promiscuous mode [ 536.657779][T15341] netdevsim netdevsim3 ÿÿÿÿÿÿ: entered allmulticast mode [ 537.119901][T15107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 537.122895][T15360] netlink: 'syz.2.2924': attribute type 4 has an invalid length. [ 537.656789][T15107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 537.705948][T15107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 537.797341][T15107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 537.838600][T15367] netlink: 'syz.4.2926': attribute type 4 has an invalid length. [ 537.873407][T15367] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2926'. [ 537.987798][T15378] netlink: 13695 bytes leftover after parsing attributes in process `syz.4.2926'. [ 538.244271][T15107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.312495][T15107] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.346099][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.353542][ T6499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.395763][T15380] netlink: 'syz.0.2928': attribute type 21 has an invalid length. [ 538.470007][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.477503][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.493299][T15388] netlink: 42496 bytes leftover after parsing attributes in process `syz.2.2930'. [ 538.530117][T15380] netlink: 'syz.0.2928': attribute type 6 has an invalid length. [ 538.576849][T15380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2928'. [ 539.400053][T15419] netlink: 'syz.2.2935': attribute type 28 has an invalid length. [ 539.568020][T15107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.818760][T15107] veth0_vlan: entered promiscuous mode [ 539.895373][T15107] veth1_vlan: entered promiscuous mode [ 540.119569][T15107] veth0_macvtap: entered promiscuous mode [ 540.141148][T15443] netlink: 'syz.2.2941': attribute type 4 has an invalid length. [ 540.157533][T15443] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2941'. [ 540.160021][T15107] veth1_macvtap: entered promiscuous mode [ 540.248512][T15448] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2941'. [ 540.274540][T15107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.332803][T15107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.375461][T15107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.391752][T15107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.423361][T15107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.447009][T15107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.193019][T15471] netlink: 'syz.3.2946': attribute type 10 has an invalid length. [ 541.219413][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.242218][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.478135][ T6512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.598363][ T6512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.795238][T15477] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2948'. [ 541.986358][T15489] netlink: 'syz.1.2862': attribute type 2 has an invalid length. [ 542.073604][T15489] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2862'. [ 542.117666][T15489] nbd: must specify a device to reconfigure [ 542.499459][T15495] netlink: 'syz.4.2951': attribute type 29 has an invalid length. [ 542.857635][T15507] netlink: 'syz.4.2954': attribute type 11 has an invalid length. [ 542.893782][T15507] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2954'. [ 543.344813][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 543.354086][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 543.371657][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 543.382760][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 543.398270][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 543.519344][T15526] netlink: 'syz.1.2957': attribute type 4 has an invalid length. [ 543.559744][T15526] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2957'. [ 543.584693][T15530] netlink: 'syz.4.2956': attribute type 10 has an invalid length. [ 543.604573][T15530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2956'. [ 543.650283][T15533] netlink: 'syz.4.2956': attribute type 39 has an invalid length. [ 543.677891][T15526] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2957'. [ 543.827586][T15530] vcan0: entered promiscuous mode [ 543.833265][T15530] net_ratelimit: 76 callbacks suppressed [ 543.833283][T15530] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 544.169950][ T6499] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.576647][T15552] netlink: 'syz.3.2962': attribute type 2 has an invalid length. [ 544.607672][T15552] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2962'. [ 544.682052][ T6499] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.708226][T15552] nbd: must specify a device to reconfigure [ 544.863207][T15564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2967'. [ 544.898227][T15563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2967'. [ 544.991458][T15564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2967'. [ 545.209788][ T6499] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.439989][ T6499] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.503336][T15111] Bluetooth: hci0: command tx timeout [ 546.025096][T15594] netlink: 'syz.4.2972': attribute type 4 has an invalid length. [ 546.080445][T15594] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2972'. [ 546.131073][T15596] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2973'. [ 546.326619][T15517] chnl_net:caif_netlink_parms(): no params data found [ 546.451365][ T6499] erspan0: left allmulticast mode [ 546.456564][ T6499] erspan0: left promiscuous mode [ 546.488858][ T6499] GPL: port 1(erspan0) entered disabled state [ 546.949326][T15617] netlink: 'syz.1.2978': attribute type 2 has an invalid length. [ 546.957409][T15617] nbd: must specify a device to reconfigure [ 547.578981][T15111] Bluetooth: hci0: command tx timeout [ 549.448127][ T6499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.470620][ T6499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.495472][ T6499] bond0 (unregistering): (slave team0): Releasing backup interface [ 549.519451][ T6499] bond0 (unregistering): Released all slaves [ 549.673419][T15111] Bluetooth: hci0: command tx timeout [ 549.837992][T15664] netlink: 'syz.4.2988': attribute type 39 has an invalid length. [ 550.012638][T15670] netlink: 'syz.0.2989': attribute type 10 has an invalid length. [ 551.747558][T15111] Bluetooth: hci0: command tx timeout [ 552.209193][T15670] bridge0: port 3(team0) entered disabled state [ 552.215771][T15670] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.244813][T15670] team0: Device bridge0 is already an upper device of the team interface [ 552.412367][T15517] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.464762][T15517] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.508406][T15517] bridge_slave_0: entered allmulticast mode [ 552.541110][T15517] bridge_slave_0: entered promiscuous mode [ 552.602624][T15517] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.623736][T15517] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.666306][T15517] bridge_slave_1: entered allmulticast mode [ 552.715282][T15517] bridge_slave_1: entered promiscuous mode [ 553.204606][T15517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.243268][T15517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.572796][ T6499] veth1_macvtap: left promiscuous mode [ 554.307284][ T6499] team0 (unregistering): Port device virt_wifi0 removed [ 554.734540][ T6499] team0 (unregistering): Port device team_slave_1 removed [ 554.826317][ T6499] team0 (unregistering): Port device C removed [ 555.325161][T15517] team0: Port device team_slave_0 added [ 555.347491][T15746] __nla_validate_parse: 4 callbacks suppressed [ 555.347510][T15746] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3006'. [ 555.430987][T15517] team0: Port device team_slave_1 added [ 555.556688][T15763] [ 555.559596][T15763] ============================= [ 555.564585][T15763] WARNING: suspicious RCU usage [ 555.569595][T15763] 6.16.0-rc6-syzkaller-g7abc678e3084 #0 Not tainted [ 555.576229][T15763] ----------------------------- [ 555.581546][T15763] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage! [ 555.590821][T15763] [ 555.590821][T15763] other info that might help us debug this: [ 555.590821][T15763] [ 555.601585][T15763] [ 555.601585][T15763] rcu_scheduler_active = 2, debug_locks = 1 [ 555.610025][T15763] 1 lock held by syz.3.3011/15763: [ 555.615274][T15763] #0: ffffffff8e13f2c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 555.625669][T15763] [ 555.625669][T15763] stack backtrace: [ 555.631650][T15763] CPU: 0 UID: 0 PID: 15763 Comm: syz.3.3011 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full) [ 555.631679][T15763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.631693][T15763] Call Trace: [ 555.631704][T15763] [ 555.631714][T15763] dump_stack_lvl+0x189/0x250 [ 555.631752][T15763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.631780][T15763] ? __pfx__printk+0x10/0x10 [ 555.631823][T15763] lockdep_rcu_suspicious+0x140/0x1d0 [ 555.631854][T15763] task_cls_state+0x1a5/0x1d0 [ 555.631878][T15763] bpf_get_cgroup_classid_curr+0x18/0x60 [ 555.631907][T15763] bpf_prog_b5b40ed40e2e4ca0+0x4e/0x56 [ 555.631928][T15763] bpf_prog_run_pin_on_cpu+0x6a/0x150 [ 555.631965][T15763] bpf_prog_test_run_syscall+0x312/0x4b0 [ 555.632000][T15763] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 555.632039][T15763] ? __fget_files+0x2a/0x420 [ 555.632065][T15763] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 555.632101][T15763] bpf_prog_test_run+0x2c4/0x340 [ 555.632127][T15763] __sys_bpf+0x4a4/0x860 [ 555.632162][T15763] ? __pfx___sys_bpf+0x10/0x10 [ 555.632216][T15763] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 555.632250][T15763] ? rcu_is_watching+0x15/0xb0 [ 555.632283][T15763] __x64_sys_bpf+0x7c/0x90 [ 555.632314][T15763] do_syscall_64+0xfa/0x3b0 [ 555.632337][T15763] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.632358][T15763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.632378][T15763] ? clear_bhb_loop+0x60/0xb0 [ 555.632403][T15763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.632424][T15763] RIP: 0033:0x7f093ab8e9a9 [ 555.632442][T15763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.632461][T15763] RSP: 002b:00007f093b91b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.632483][T15763] RAX: ffffffffffffffda RBX: 00007f093adb5fa0 RCX: 00007f093ab8e9a9 [ 555.632498][T15763] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 555.632511][T15763] RBP: 00007f093ac10d69 R08: 0000000000000000 R09: 0000000000000000 [ 555.632524][T15763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.632536][T15763] R13: 0000000000000000 R14: 00007f093adb5fa0 R15: 00007fff363608b8 [ 555.632567][T15763] [ 555.873019][T15517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.880486][T15517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.911452][T15517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.926084][T15517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.937172][T15517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.985820][T15517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.255783][T15517] hsr_slave_0: entered promiscuous mode [ 556.270318][T15517] hsr_slave_1: entered promiscuous mode [ 556.291461][T15517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 556.305902][T15517] Cannot create hsr debugfs directory [ 557.013037][T15517] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 557.027388][T15517] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 557.043536][T15517] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 557.056143][T15517] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 557.210194][T15517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.242802][T15517] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.263651][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.270931][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.293442][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.300772][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.656609][T15517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.776020][T15517] veth0_vlan: entered promiscuous mode [ 557.795042][T15517] veth1_vlan: entered promiscuous mode [ 557.851357][T15517] veth0_macvtap: entered promiscuous mode [ 557.864077][T15517] veth1_macvtap: entered promiscuous mode [ 557.886902][T15517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.910221][T15517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.929500][T15517] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.939469][T15517] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.950664][T15517] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.960739][T15517] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.072106][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.095296][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.151470][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.162571][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.941178][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.948581][ T1301] ieee802154 phy1 wpan1: encryption failed: -22