last executing test programs: 7m7.015256649s ago: executing program 0 (id=3929): socket$kcm(0x21, 0x2, 0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010040) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x24, 0xa, 0x0, &(0x7f0000000600)) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1d00e0ad9d82", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000055a60701000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000030000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000a75e39fb584f12d800c654bcf1bc0a4884c8a78eb81bf4ef8d56fb0f1a0848a759c838e26768f493aecd53b4c6d5962e4c29d33c386c13c988cbcdff18a8c1b5532ee92f5f063b773867f22d4b6dd9d2a1293dccd4906bedfef5b2430b8b7d994e0fa344195d73866c93c6354c93c70fb09f84f402056eae65e45cd266417648ce091488ea329f9bde4678956ec395"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00005d2b000500000000040000010000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x9) ioctl$TUNSETLINK(r5, 0x401054d6, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 7m4.908579947s ago: executing program 0 (id=3947): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x3, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/97, 0x61}}, 0x10) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x5604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703380000001f03000000000000040014000d000a000d0000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) 7m3.735019582s ago: executing program 0 (id=3955): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) 7m3.252517498s ago: executing program 0 (id=3959): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x3, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/97, 0x61}}, 0x10) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7m3.006012641s ago: executing program 0 (id=3963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x10000}, 0x481}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102500000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x17, &(0x7f0000000000)=r6, 0x10) sendmsg$kcm(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5, 0x0, 0x0, @void, @value}, 0x10) r9 = syz_clone(0x20000, &(0x7f0000000140)="13b2476cca1368919d28941f220263153c18e22d9203068bfa0435d92fe0735cd82f3e1980086af8298a8b66b38a6625b5d83b5b95b755674654056b0b8f2e848e91e4d84329", 0x46, 0x0, &(0x7f0000000280), &(0x7f0000000500)="f43f1f8a3ff3c21579e5344022cddd9791e49f8e61a28928e7ecc37717c5e34a2badc0f3087c46ae623d396e71bc40eda6fbc6642d5fe324e746ed92216384d116903839ceb76bd5f38f476356b7b46e264f2aa17772149dbabd0050953e6d431b6dfeb954e8833d2eeb2845794628878e29a12a7a126b18ba5b92adae54a75de72abda6a2ccd0aac1c31dbba9357f9d7f708900b0f5bbf651a459da3f08bc82ea75346a56fb2ede4fa33c5cd161") perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xa4, 0x2, 0x9, 0x6, 0x0, 0x3, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10, 0x1, @perf_bp={&(0x7f00000002c0), 0x7a34206184387962}, 0x180e4, 0xfffffffffffffff7, 0x0, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x0, 0xe14}, r9, 0x6, r0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001d00)=""/4106, 0x100a}, {&(0x7f0000001c40)=""/155, 0x9b}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000001a80)=""/213, 0xd5}, {&(0x7f0000000080)=""/28, 0x1c}], 0x6}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000640), 0x1003, r10}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r10}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m0.458141775s ago: executing program 0 (id=3981): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a2", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000280)="0e", 0x1}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2d, 0x0, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x204a80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a2", 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000280)="0e", 0x1}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$kcm(0x2, 0x1, 0x0) (async) socket$kcm(0x21, 0x2, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2d, 0x0, 0x0) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x204a80, 0x0) (async) 6m45.417044451s ago: executing program 32 (id=3981): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a2", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000280)="0e", 0x1}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2d, 0x0, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x204a80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a2", 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001740)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000280)="0e", 0x1}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$kcm(0x2, 0x1, 0x0) (async) socket$kcm(0x21, 0x2, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2d, 0x0, 0x0) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x204a80, 0x0) (async) 3m37.31603392s ago: executing program 4 (id=5719): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x3, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x8, 0x2, 0x0, 0x2, 0x9, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000f4618b7b0000000000000000e2ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="050000000000000000000000000000000000000090c5d41cf8507323cec0c9d3a279e1c53196291baf7c3d82f2feb5f43fdb891aa4e77ac48de77ad090aca2fd43c7aa74dbbf9cf69eb126ac8079dfcf49a4cabc7c44861f9ec4bd452e063989ee0fca719ff823fd5f103c55c7ff4d6c80838a764fb20fb2e0d37a70b090f55fe23d2006ff9e0d68312e3fbff8cba1", @ANYRES32=r8, @ANYRES32, @ANYBLOB="000000000100000000002000"/28], 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000000b77860970000000400000000005f00"], &(0x7f0000000c80)=""/179, 0x1c, 0xb3, 0x0, 0x1ff, 0x0, @void, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], 0x0, 0x3c, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1c, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000186a00000b0000000000000004000000181b0000", @ANYRES32=r5, @ANYBLOB="c53b0200e5ffffffffff905a265f5e6b1e9ccf69e1000000"], &(0x7f00000003c0)='syzkaller\x00', 0xd, 0xbb, &(0x7f0000000500)=""/187, 0x41000, 0x76, '\x00', r8, @fallback=0x24, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0x10, 0xfffffffc, 0x401}, 0x10, r10, 0xffffffffffffffff, 0x5, &(0x7f0000000b00)=[r5], &(0x7f0000000b40)=[{0x0, 0x3, 0xa, 0x2}, {0x4, 0x3, 0xd}, {0x1, 0x3, 0xa, 0x3}, {0x0, 0x3, 0x9}, {0x5, 0x1, 0xa, 0x7}], 0x10, 0x296e, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f2, &(0x7f0000000080)) 3m36.940780975s ago: executing program 4 (id=5723): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000018000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 3m36.805055357s ago: executing program 4 (id=5728): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) close(0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x9, 0x10001, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/98, 0x28}, 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) 3m36.402521392s ago: executing program 4 (id=5737): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000018000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 3m36.206729064s ago: executing program 4 (id=5740): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x80100, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000080)) 3m35.926199998s ago: executing program 4 (id=5745): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'geneve0\x00', @remote}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0xfffffffffffffc22, 0x0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x1000008, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x80000000, '\x00', r5, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$cgroup_int(r3, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {}, {0x16, 0x9}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x27) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 3m20.830631895s ago: executing program 33 (id=5745): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'geneve0\x00', @remote}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0xfffffffffffffc22, 0x0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x1000008, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x80000000, '\x00', r5, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$cgroup_int(r3, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {}, {0x16, 0x9}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x27) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 25.796794854s ago: executing program 1 (id=7660): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x7ff}, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000002a40)={&(0x7f0000002940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000500)=""/25, 0x19}], 0x1, &(0x7f0000002a80)=""/65, 0x41}, 0x0) 25.415073899s ago: executing program 1 (id=7663): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 25.074672313s ago: executing program 1 (id=7667): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x3304}, 0x0, 0x0, 0x2000, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc601000050008000900053582c137153e37000c0180fc0b1d00f80b", 0x2e}], 0x1, 0x0, 0xfffffffffffffddf, 0x12}, 0x20008010) recvmsg(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0f, &(0x7f00000001c0), 0x2}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x8, 0x0, 0x39}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000001e000000000000000095002400000000003db9246c80b1d5c590f8b021e45696bc1dd052c2b9df1971359c8f54d399bf7e1ee9157b4e3c1067344f6a9be12b8663c087ca81ffb483b1d74157883a97961568"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r3, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0300"/12], 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x200000000007fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x3, 0xfffffbff, 0x5, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x23, &(0x7f0000000000), 0xff7b) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 24.247498674s ago: executing program 1 (id=7671): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @empty, 0x9}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000140)="75d73a70024c05930c6126bccceca7d827c310a828c89783fa5ee343c32e5479df67a9660fc280c5647a322841b767f41cfe48d962e23e1d485b60760f04ca00305922726629a117", 0x48}, {&(0x7f0000000400)="ac7e2d157468ebb6eaee30da06ee7d7d69fa58c6c61f4198b5a2c59cb0d8526713481ee6e79836107ad52035fa57f371c614de4e0947db43ac6aeff868f3a0b167242664318969937a9c0812b8794a8706eedf68c082040e346dc3f995587af7f906cee9ca6d47d579ff0a78e55fe16d96acda3606172ca1d83add4a3693c8ee562085b28a79164e4db9a55334aad34a990d8faf2abb40f83ac9e3ae3c795c00"/173, 0xad}, {&(0x7f0000000280)="2bdcd757f046d9c3d7f9b5ce466a0c027bb5438d", 0x14}, {&(0x7f00000004c0)="42a4ae7cfe62478d02ff4127baa1983648069aced4f3fb6edc0c65aeb1f734ea107c4816e39cd03b596733a95ff3efc1e8033017aba7aadf36d52fc026f8816edd44acf640a8fb6ae6f9adb9335fff70f91d26a77da4ca09a93d73fb28366e8c371561d8c60ad4f474a396e369b877f6703bcfbbe72a3a2275bd9bf239d8570ca775a89e4896a45373a1f6a50b78dbd2f106b858c3b296acfeb2e211cc588fbe52a84d8bb2bdf19a", 0xa8}, {&(0x7f0000000c40)="00bcbb29bbadc0318da3738082a77a0912fdca15ea69c0b671c511e611da82d53143c176e9d0a7fbf34fe741f74f294655e5b18226a1827f0eb81d9e62eb1999faf91cf11548ffa01a761eaf6a6fa419af2048e2b631eeb130836837bdb2d42cb9bed2ed055e35fd0b6ccaf026d1878c331e6f66593311234998b7ed203ca9a15f84cf3f6e19613ff455f46557d4789351b85e9840684ec018f1d8a38f3a03d650e3c661571f43227f365e9858d0be5c32fec63cbbd58a18acaa7f71c24ed50f9ff4a5fcb855d0e2190e1aa47c6865574f96dea851dc2708321296f2260743ee6a1993e38e5bada4e7d9ca2cd8ccf87b998a1112e36bdcd88ebd0a8a1dc4c6c060d69f6b01ff123c841bb0914ced6bbbd7314524bc364ac944461dbe0888965971d280cf231fd784b0071d8cdd13e151bffcb1084b89d0b274d8afc8af8dfc037c5bfcdd23ffdb60ca444be58cb90b9e10c670706e0eec72c5844224f0bd222f92c56e959b5b84225b03cd02444c61fee7f9b60db7e90d717668c46e1952ae5ee423644929312dc6f18f02c3ef9cf1ed2ef6b801985df91c731314ecedc3ee4cad553a18d9616f0303bca054a1f28191d94f25ee1cf8b77a6b85d02d6c4ccb2d383f6375edb309742929f296555e1f116906284e5bac4492ca1c3e324f2312448e24c59ecf495d96e677be8d32ce03add564c74c17ee5a1e9d05ff72a97c970225d7fd0d3a19da690fa41fe2512899bb35036c82d4ba7709adc0ea6b7876278d3194cc385e948d5671b9eebb069e2de9cd13c926da016bff768a78d63c3ac683ca9acfa20f03e294650b84ad7b919fc95b0c1a4f85708a8d1dbbded22c212c0c5accef2b1d2e4079153805c4cc6ac6342c5dda59fe5c12f6e86deadfddc6229341a96fa0de5fe500c15eaabcbe4298044495a58aeaacb03b7e0f2d65af0936ece64ae8ce4a98fe139392c37e5c91dd9d6df637f049c713a0866bf45d06761f3a4fac3d2b4d51f6c3e63676f7fff3d9fe4ca8a5bca8fed6520de01713d2fe007e9638469668bcec38e8bf829506c7b764fdecbc05071d0a7688be1a4ec736a453919bc51e6b5a11d954fc9d584268d9ca00eb13b9e2c43286138f15e131263739afdaff25d8a49c9017c76466d3ddce7723103d1e14869dbf6807ab14c3498d970260f6578187a653d840b650a335b6600ddbacb20eebdc70516f96a2724152ff9ffb771c4e98ad0ea8ce4c2abf98dd033da0f1ab6167f884bf33f60e4d62c43807ac2cfe78d6e0c3fd06f9c7f2be18e190f2b1bb29ae115ad971275949bb45155f4172c88ac50c7a7fcaf5ba1ebaa747b356bb57dc360ac3", 0x3b8}, {&(0x7f00000008c0)="ae6755d9", 0x4}], 0x6, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 24.131127086s ago: executing program 1 (id=7673): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x7ff}, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000002a40)={&(0x7f0000002940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000500)=""/25, 0x19}], 0x1, &(0x7f0000002a80)=""/65, 0x41}, 0x0) 23.82008103s ago: executing program 1 (id=7677): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)="c07c365787a3", 0x0, 0x4543f02, 0xffffffffffffffff, 0x4}, 0x38) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0xfffe) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.176232407s ago: executing program 6 (id=7769): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x2}, 0x573bb45185fc52d4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) r1 = socket$kcm(0x2, 0x1, 0x84) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x15, 0x5, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$kcm(0x2, 0x200000000000001, 0x0) (rerun: 64) r2 = syz_clone(0x48118500, &(0x7f0000000100)="900b23e20691bb661266a7b0aed09643c65cd87fc294d624b6a3dbb66ddd922356465ca69a14027c12048fb19abc0d42b4255233c3558c5d41c6fc639504c6c7b141c4ab3a50c7a298a21cd3f3b5e2855c6e644c718b3c90658a02d14a4296a51970808712dea76c2d65c2932db5eb2c637311d3c229233f270aee9dd2e1c8d00d543b78126c2e89b6b71b52260f", 0x8e, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="1ed1a9c3d288fb00ccf04edeacd3016045aee6eb045d85545fe51073a58bffc0fc7531434f61ba0617870a2a02b241a5c7a80923fdbd262e81a2a94387") perf_event_open(0x0, r2, 0x9, 0xffffffffffffffff, 0x3) (async) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000300)={0x1, 0x80, 0xed, 0x2, 0x9, 0x40, 0x0, 0x401, 0x8200, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8004, 0x0, 0x7b, 0x3, 0x2, 0x0, 0xf, 0x0, 0x4d, 0x0, 0x9}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0), 0x4) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000f01000000648c2594f91c24fc60", 0x14}], 0x1, 0x0, 0x0, 0x1400}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff6147, 0x4}, 0x4000, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x0, 0x0, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX, @ANYBLOB="43da2e5f"], 0x48) (async) sendmsg$sock(r5, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x33, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 10.00067769s ago: executing program 6 (id=7771): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000500051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 9.460619177s ago: executing program 6 (id=7774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x29, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000200)={'full', 0x20, 0x1ff, 0x20, 0x64eb}, 0x2f) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r3 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) 9.352894238s ago: executing program 2 (id=7775): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x44b4, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 9.321687338s ago: executing program 6 (id=7776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2"], 0xfdef) 9.079387302s ago: executing program 6 (id=7778): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8932, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, 0x0, 0x2123) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x80) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0xd, &(0x7f0000000000)=r7, 0x8) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x22e, 0x0, &(0x7f0000000500)="b9ff0303000d698cb89e40f008e850b3894a3ebf6b88c3fce5765b445c74772e29d01c39fb68bb6cb40dc228a55ddaae60a05cb6415232f464a3ff75d4bececf0e27a43c377a305b0eb708dd3bb10a2b1a34f57e503c3f00d202d214109893e17931525d89370d34f644cc568593733859243746c8af109a97b7370acab87927415a418e2e1c759fc64a3022e5a32d8e77ba495ef36a6bbb866e50b5573438c9e42d9cd532e0a1eb23a80678aebd220ee98f1ebb0e7e80f6fc85564826ad348a665bbace4e6392f4a5d6d25fc2c89fd4e9b3d86a55861737af6e3663f11e77375a793bd745b96d22456bdc411f31904deb0abf74c280cd5170c08ddacecd645fe49a24ccad40e127e29dceb9eecc34689b8ebba88e5fb2aaecd9775ce99c653113476664e09754490b55abeb2fddae20ffd6644346393b1f57b0b429b2382473ab33c60104a3cbc482c1542bc9321de2a23b98febfd67fbf6b457519fc353ee5e540708d25ea5e47f51a05cdbf2d9865c261b6cd1f6e120854918233147f24afd754d97114e9b6b67c9542b7f8c16dad81cc1a47ce6346b67cf20bc4c51921e7ad9c8af422ab0df980d5fe4a99140b15149965ad2ca7c075517215397fbafe85077bec3edf84956d751290574c7ca69b0da69e9b3e972097440ac4253e23e90f90c029352a7cd3c48ac31d605eb5762d7c3c291f11b27cddeadf0e6bea53ccb6e0a49c7e56ff1ccd5d2d12c2304797b2b14a737d2d4e4b77cbfd3adf42edb81f0128ab1c792f07b6c548b4960476", 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x50) 8.704630327s ago: executing program 34 (id=7677): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)="c07c365787a3", 0x0, 0x4543f02, 0xffffffffffffffff, 0x4}, 0x38) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0xfffe) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.646804117s ago: executing program 2 (id=7780): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @empty, 0x9}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000140)="75d73a70024c05930c6126bccceca7d827c310a828c89783fa5ee343c32e5479df67a9660fc280c5647a322841b767f41cfe48d962e23e1d485b60760f04ca00305922726629a117", 0x48}, {&(0x7f0000000400)="ac7e2d157468ebb6eaee30da06ee7d7d69fa58c6c61f4198b5a2c59cb0d8526713481ee6e79836107ad52035fa57f371c614de4e0947db43ac6aeff868f3a0b167242664318969937a9c0812b8794a8706eedf68c082040e346dc3f995587af7f906cee9ca6d47d579ff0a78e55fe16d96acda3606172ca1d83add4a3693c8ee562085b28a79164e4db9a55334aad34a990d8faf2abb40f83ac9e3ae3c795c00"/173, 0xad}, {&(0x7f0000000280)="2bdcd757f046d9c3d7f9b5ce466a0c027bb5438d", 0x14}, {0x0}, {&(0x7f0000000c40)="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", 0x3c7}, {&(0x7f00000008c0)="ae6755d9", 0x4}], 0x6, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 8.273424742s ago: executing program 2 (id=7783): mkdir(&(0x7f0000000000)='./file0\x00', 0x111) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.high\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x18, 0x12) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r2 = socket$kcm(0x29, 0xa7a1a22a5f4599a1, 0x0) sendmsg$sock(r2, &(0x7f0000000540)={&(0x7f0000000140)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)="ec426261f2fec9ce43c56d53cd46d61efa7f1695a68f5e35ca1ff6043e2b40fd314981288195839ccf9b47254b87dd7d1fa3d7c79def137b00ca59fce42bfa1f773427c1643f5f036f0703f5044401da1ba9ed50cd0667189f7e9564d395b4965613e67d5782af54ffc89dbed875bccbcdee899cc454aa10ea1fc7100856c6ea06adf91ae6b9ddff645c83d945d2cde73255e19f3feab44434621918c056e57bcaff300ed8faa05668b62feac9c3da7d04a1e84b4fc3f578269f7bcaab9d25f5f81d5193ec6597b286b929d7f6d4917bfa525a8ab460978f8379f1fbe5042d4b63866a23f16376fe7ea1", 0xea}, {&(0x7f00000002c0)="17ef91665f3d323684fe34ce87bc5c507445bb977b89048fecf19480917c71d07f239ab686066aad63e5da0d8da2dc599c1cbba3b7335d91b2b5b976f39e856466c1772ef343ed78d98d54d5e63c497e68e7f3decdf94a62baeaee1f5d616906805db9ed", 0x64}, {&(0x7f0000000340)="39ce6b284860aa", 0x7}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="968a79d9d1daef45e00d89", 0xb}], 0x5, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x895}}, @txtime={{0x18, 0x1, 0x3d, 0x5e1b}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3f8000}}], 0x90}, 0x4000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) write$cgroup_subtree(r1, &(0x7f00000005c0)={[{0x2b, 'pids'}, {0x2b, 'net_prio'}, {0x2d, 'cpuset'}, {0x2d, 'blkio'}, {0x2d, 'freezer'}, {0x2d, 'rlimit'}, {0x2b, 'devices'}, {0x2b, 'rdma'}, {0x2b, 'freezer'}, {0x2b, 'blkio'}]}, 0x4f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000029c0)={0xffffffffffffffff, 0x20, &(0x7f0000002980)={&(0x7f0000000980)=""/4096, 0x1000, 0x0, &(0x7f0000001980)=""/4096, 0x1000}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b80)={0x18, 0x8, &(0x7f0000002a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x5, 0x7, 0x4, 0x20, 0x1}]}, &(0x7f0000002a40)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002a80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000002ac0)={0x0, 0xc, 0x8, 0x3e}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002b00)=[0xffffffffffffffff], &(0x7f0000002b40)=[{0x5, 0x4, 0x10, 0x3}, {0x0, 0x2, 0xd, 0x1}], 0x10, 0xe0000, @void, @value}, 0x94) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002c80)=@o_path={&(0x7f0000002c40)='./file0\x00', 0x0, 0x8, r0}, 0x18) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002d40), &(0x7f0000002d80)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000002e00), &(0x7f0000002e40)}, 0x20) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002f00)=@generic={&(0x7f0000002ec0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x9, 0x16, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x5, 0x1, 0x1, 0x6, 0xa, 0x40, 0xfffffffffffffffc}, @exit, @call={0x85, 0x0, 0x0, 0x88}, @call={0x85, 0x0, 0x0, 0x50}, @initr0={0x18, 0x0, 0x0, 0x0, 0x169, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2df92966}, @exit, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f00000007c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x44, '\x00', r4, @cgroup_sock=0x22, r5, 0x8, &(0x7f0000000900)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x9, 0x7, 0x6}, 0x10, r6, r7, 0x8, &(0x7f0000002f40)=[0xffffffffffffffff, r8, r9, r10, r11, r12], &(0x7f0000002f80)=[{0x0, 0x4, 0xc}, {0x2, 0x4, 0xb, 0xc}, {0x5, 0x3, 0xb, 0xb}, {0x0, 0x3, 0x10, 0xb}, {0x0, 0x3, 0xf, 0x6}, {0x3, 0x3, 0x6}, {0x5, 0x1, 0x1, 0x1}, {0x5, 0x5, 0xa, 0x1}], 0x10, 0x7, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0xfffffffffffffffd) r13 = getpid() r14 = perf_event_open(&(0x7f00000031c0)={0x6, 0x80, 0x6, 0xf, 0x9, 0x8c, 0x0, 0xfff, 0x20004, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000003180), 0x8}, 0x20, 0x100000001, 0x6, 0x5, 0x8000, 0x6, 0x7, 0x0, 0x3, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000003100)={0x5, 0x80, 0x7, 0x1, 0x78, 0x4, 0x0, 0x4a8ded68, 0x23000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000030c0), 0x1}, 0x16, 0x8d4, 0x8, 0x1, 0x8, 0x5, 0x401, 0x0, 0xf, 0x0, 0x3}, r13, 0x4, r14, 0x9) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000003240)) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000003280)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) write$cgroup_type(r10, &(0x7f00000032c0), 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003940)={0xffffffffffffffff, 0xe0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000036c0)=[0x0], &(0x7f0000003700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xad, &(0x7f0000003740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003780), &(0x7f00000037c0), 0x8, 0x66, 0x8, 0x8, &(0x7f0000003800)}}, 0x10) 7.796518529s ago: executing program 2 (id=7786): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000070000004404a60007036f001c0000000000000000000000080000001c"], 0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x7, &(0x7f00000014c0)=ANY=[@ANYBLOB="18510000070000000000000003000000553100011000000018000000bc050000000000000500000018000000000000000a0000000bb168b791c7332ecc31cf58153c1efe8abbed10a762a5626356d2"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc8, &(0x7f0000001340)=""/200, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) socketpair(0x2a, 0x4, 0x3a991ff7, &(0x7f00000012c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffff7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r7}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r8}, 0x18) 7.551141041s ago: executing program 3 (id=7787): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) 7.546202582s ago: executing program 5 (id=7788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2"], 0xfdef) 7.483710682s ago: executing program 6 (id=7789): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x3304}, 0x0, 0x0, 0x2000, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc601000050008000900053582c137153e37000c0180fc0b1d00f80b", 0x2e}], 0x1, 0x0, 0xfffffffffffffddf, 0x12}, 0x20008010) recvmsg(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0f, &(0x7f00000001c0), 0x2}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x8, 0x0, 0x39}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000001e000000000000000095002400000000003db9246c80b1d5c590f8b021e45696bc1dd052c2b9df1971359c8f54d399bf7e1ee9157b4e3c1067344f6a9be12b8663c087ca81ffb483b1d74157883a97961568"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r3, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0300"/12], 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x200000000007fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x3, 0xfffffbff, 0x5, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0xff7b) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7.336688844s ago: executing program 3 (id=7790): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x44b4, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 7.144099317s ago: executing program 5 (id=7791): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 7.090501577s ago: executing program 3 (id=7792): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @empty, 0x9}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000140)="75d73a70024c05930c6126bccceca7d827c310a828c89783fa5ee343c32e5479df67a9660fc280c5647a322841b767f41cfe48d962e23e1d485b60760f04ca00305922726629a117", 0x48}, {&(0x7f0000000400)="ac7e2d157468ebb6eaee30da06ee7d7d69fa58c6c61f4198b5a2c59cb0d8526713481ee6e79836107ad52035fa57f371c614de4e0947db43ac6aeff868f3a0b167242664318969937a9c0812b8794a8706eedf68c082040e346dc3f995587af7f906cee9ca6d47d579ff0a78e55fe16d96acda3606172ca1d83add4a3693c8ee562085b28a79164e4db9a55334aad34a990d8faf2abb40f83ac9e3ae3c795c00"/173, 0xad}, {&(0x7f0000000280)="2bdcd757f046d9c3d7f9b5ce466a0c027bb5438d", 0x14}, {0x0}, {&(0x7f0000000c40)="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", 0x3c7}, {&(0x7f00000008c0)="ae6755d9", 0x4}], 0x6, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 6.800683341s ago: executing program 3 (id=7793): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1c176bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f60109af93a09fab1daae4b518d7a5d95a017864487367d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5ce4ba01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe449678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a6a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b535aed87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf31523d753cf27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e72daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981b90d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000000000000000000000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b2647726795617a9d170000000000000000000000000767003cacbcd49d0f7ba330f3b788ad4cf448e89c48c32915b1c356e3814621f166d55edb985cb1c3224652996c492c6249af22aa673ddf67d75325652cc6d74b00df9cc0012bc725b168c3aab1c7f2303ad6d54a612d7f9791a49b582c2b982423d837ac2e74aa1cde817adc1b24f1b2b6b9d0af28522b14b22359f89f836860811dddc56d303b057e6d81b0a87a5c99279e57c4b297919b478fae9526354e15f1d56dfe9334eaf44955ff81bb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x90, &(0x7f0000000000), &(0x7f0000000380)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x50) 6.673059773s ago: executing program 5 (id=7794): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x2, 0x5, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 6.492133555s ago: executing program 3 (id=7795): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffc0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) 6.301910118s ago: executing program 2 (id=7796): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="58d6fc34ae6819e5b5d89266bd562b59b660de5000ade5f21d", 0x19}, {&(0x7f0000002fc0)="0fc0e3705273ccb79eb78c4cc742aaa891ad0fbe15f0b770bba4851da66fa142e311f62a12a9b8d374d258ff8a12cbd912de280555592f7f1b2bd441a81c1da3e0cefb9842b7a45f961f5594014e68bacf193ec193f22fd38929c1b1f92c3c61c46e0b57ff6cfb38b4f230199d84117e56fc8d0160ebdf96cfdf40c9d7a1df399d981a8a4fbdeda27a78f3644da457f25c4ab431e1c9e8310f7f22d04e8435d6c8c0175ad12cd53d022eec2045c84fe5abaf14cf8027a6076b7852a8f11999911e96a2842ccee8a0f5cf13353c5fc63311d3f056b98760e28d09e60ad5c6d946d9e96d59bcdb96b8e424b86dc0e3e28c39bd02604792fbcd48634fdf636f60f76134ee61f1951ef927ffec7dec949e500bb15d8363bc28efd4eccffd5c65d6bfe5276457be1b3de9f42bd19f8cfca5aa596ce993f2d1bee928a25f12ac7f05975197afff2851b2d28d806e2a6842b5f0a191980879ef7e7ba2a0186eda4e8339c0d55489b32715c68659acb933483ee582e3f5b96d5e8a8f20dc666baf834ab319b26f951f3b64ca8ff2cf4590c15fd77bdf2534573c30e78ca6516dbebb59a84429faf9ee4eca4db4c7c5f431068c1b3b018ec1055d96c3d53fcda8cb9489e082a2288d45def9bc7ffad8295a95fa9bfe739cfcaff4acb59ef6e395900a4695394196759ca8a292db319495a72c70f2b16907fadc3e3d886b3a5a3fbb9fcc48157fb980d9d932d9fa4f46773fea8e9cfbd325052f9ecbeb56a7474a99f3c6d84fe9a0fa3424fbc5db493eb84befe688b036278ad1c0b960089c489e9a7c6ea5440fc44f6ca0d57c037fa59dc057c44e74910bfe2b32ea7a8c02a4ae0db75cc5b08401ea7b46a61c322eeddfb185f715e7cf94697a6a98d06a0c765328d48b21f7790e07622531fe6178dbf17e7a5d5c9242b8c5ef4fbb7ff664347761ad643fa5777768ebfc9cc606e13b53bc267529c283ea8dec1d2253777578bf206d68508947598d2d01954bb505596a2ddc12dfdc0fa389792575c99bc0c4afca3ace983318feebb99d96272e925a3039e7fca3dfed73773f84d9b112fe01e21adc0338b2c9c3d826b17c40b6585aa0070a8478f7294e3aa880e19d514cf83890d97bad339e5752d4183fc0bb69dc84a96027d8ab40405a81940688cfc253137f2435bf711d8fe36567799d84c10908827d08a763466f0ce2686e1edf525f090c214f258362f3fc934a2b127978809042ab0867760e0865a7a4357a09022b49448844dc3c4c265285b7538dfc3bab034fcd7ee48ee10d00d9210f5aa1c18b88718312aef44141e017a12149ff648e9cba179d05d03d80f15769773e671e5015a23f6036fe160d9db501e3a8ad242fab075e53ea337e00c6ecb890b5271c7108ee78902c924ca5c3c5ddf005bb6a05547129114a77594d5528ea8422cd7f0019ec929041cdd9e762c609d28e78d7f232e9a6f73f3a418ac935bd7551808301253490eb071a20b79419a13c61982a7553ce8b747920d09a064680cdddb69efe6c8ef0f5601941b6dc022327e2ba6357fa40ef17e62978176c22a3efe4d7df00c5a74fc51d261dc749e51441686e26c99ef39bbe4bf8a967229b5e3681b9c1c21a840983575117083c89a26a11c447bb76382a10f51363d6f7133e175c2a44da457fbe73c2f4533179a0af9d12da475e4cdf35d18640ff406d12011cad4ca4139b5416dd4e8ad228fc37fe86aa6c54fd019a99544705938087084dd24eb42377578092804b63418663ec1eb7f12e030def834bd5226e4a119412815ce669efe26702d669b6c1efc23951c4b18a0408d3bc4062bc52c4b767d37fe85d4904f19613a051f7818694cfb8cbcb082a57daee2f014770c717bdaa30ba8e6ad8215dda408d9c23a8921ebc53a3dca7fb7011cf38538b94d54e8db9f561dcd439e0bb4572d64428c9afec503d1e9ee3a63c328007cf2cc7bd4775576fc9c7b293b4675e5a776f48f1e94ffb3c3bda1ff1eb95456c7aace12f98917289d1902b39d3175b3a9b6dea8112a2473c5f8cdc9c1d344c5cc38765d609645f13e10ecd7d6539506b6d2f5a55e833fcd3b83d149625cc3555475c7e535c9237cfa06d798fac989d4289df7691932ce5053f5cdbce896026c725fe770f2c70425f84fb7858b3ba8c7e7295fac963af2a283634ca5c4af88c9d7fa0dc3af442e119a3c90318a8541e75fca098ba69d1551cd563910a6e339d9d72f43c2bff875bbb705b813046c8e3dca792740213bc81700daa94264327b14b6a9ee79b02df73e43d28ff757b702abbcbe3cc61af35ef80fe336a4d10d3ee2e19ce83630a39b686fb93ef632a3e57b598ba33e2defe0a711006284bbd2aba2ce6ece868c2835641bc08b8d590ea01d45c700cfb714e6e74adf872e59c2b129c2ab25313f92a0e69df4f71b47c1df9f4ac89a58cf3d0ad452822773ca32ed744062c7a52fe50569732eebfcd57e8e7b95ecbb4cf6b65cfc0720a7e3dd7670fd66d99d589f56924f84456b8051264a6a58598c16b625deae20e210e52a012066cb3441c3bc9a41d3d2a52e116005e94e1b45cee660c1d3e18182973706da656b90f51e79d4de9595d6aa7b1462ee58b1d30f33f9f6d86eb47d9274db03454b866287cb4e24d255193f26a90fe15268eb422d355a98bc419c5a9efb2047d4e2d6a1d8736911816096f685c7c6e3fa6e68e80104f0af8daf1815203bd473e186d59fd09824ba0892ec4007adf4aa8986a47c909957b877ed7fa1e640328e75f22555ff1455b882b43cf50813153a1e29de9e0537c03004a672c07c2f5aee6fc25c9207346ec024b3f770cdbb62ba301894fb34e1d63a2fa8c917252e0aa629d54616540fa4c61ddeea0509e44515533a2aa43581be72c3ca5838521f3d53a5fc1692dea6ecbcfc271cbf1dc9e738bf17d749b0d9a056fc578d57a3ee807e336b4db3d33b04bf943edde8591b920080be9e09985e27aca33ef98b945753ba654acb01ca7026c10afe66f435280006ac1d22bfc23461892784d87c8bcc7dbf6a2c40d54fe0d4aeb6cdebc8eac075a599cc3290ab542a0636d33dfd3fa67eba1dd445882bc3b4f92539662ddd434041021f514eb710c960721f93c6f94a123715ae3d5e6b0a5975bfa6215221ed97e99121bee392c52f49178ab4202bacf42268f10b6b764b7873cb6d162c0f72620ec3eb2be84545625ea0cbc507d352674565d2e6f3c9cb7e0e7f93b499a2a2871956471b1d1723b6c9acf529c99c384e07c67cfcd5d976b15113ba585d3f6d570f333546df3d277629c7c0799ee681941a2633583a015609856c55cabc43a0b3ff0caef13a6f2021bb0c80460e904ce918817e1577a6e0ed7e4ee2c34ef724b88a04cf93148de1365cafa92f49151a52012712d8670195e0fbcafb578d9aad3c7398b83796a426419672984f6e5011c7501b055d27bf2538f89bccb9d86854095d02cfa754cc25ca8d57d9a70892a846958c8881e91a05359bc58b5eba7ff92b64a000e05a83b59315c74bf0c04d52257cdc67c387570be6b0b9be7149e7f290fe90d1e91c6076eaf612e3824667d3e64385998afc7079ff6ae19d1bccb5d7fcf0cc1a5f779d2173e5ebef45aae9d530fd0b8bad1a317cec497de9ea21dca1625c21a51b020d99a6b607968ad47c9a5bc6c18fd74e139bf79addcf41474a494bc432bb3e9d2be790392e357cefda5e56edd452c5553a13e63f99f6855fe2d5524c42ac224af95553b148a72b155e34785e761b6271cb7a9e2273bc683d12fc530", 0xa78}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe1d, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 3) 6.214557429s ago: executing program 5 (id=7797): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x101, 0x7}, 0x7606, 0x3ff, 0x1000000, 0x2, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000030000000000000000000029a300000000faf5e7381e63872331f188e9d28204eaa9944dfdd4a4afe9b828dc7133cc43939a3875509f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 6.015695262s ago: executing program 3 (id=7798): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x18, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='!~u&\t0|\t\t') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8924, &(0x7f0000000080)) (fail_nth: 3) 5.334344001s ago: executing program 5 (id=7799): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8932, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, 0x0, 0x2123) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x80) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0xd, &(0x7f0000000000)=r7, 0x8) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x22e, 0x0, &(0x7f0000000500)="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", 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x50) 834.886909ms ago: executing program 5 (id=7800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2"], 0xfdef) 0s ago: executing program 2 (id=7801): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x44b4, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) kernel console output (not intermixed with test programs): sg+0x19a/0x260 [ 955.317840][T21831] ? __x64_sys_sendmsg+0x80/0x80 [ 955.322820][T21831] ? syscall_enter_from_user_mode+0x2e/0x240 [ 955.328821][T21831] ? lockdep_hardirqs_on+0x94/0x130 [ 955.334058][T21831] ? syscall_enter_from_user_mode+0x2e/0x240 [ 955.340078][T21831] do_syscall_64+0x3b/0x80 [ 955.344519][T21831] ? clear_bhb_loop+0x15/0x70 [ 955.349209][T21831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 955.355117][T21831] RIP: 0033:0x7f22a5b18969 [ 955.359543][T21831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 955.379677][T21831] RSP: 002b:00007f22a3980038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.388100][T21831] RAX: ffffffffffffffda RBX: 00007f22a5d3ffa0 RCX: 00007f22a5b18969 [ 955.396075][T21831] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 955.404054][T21831] RBP: 00007f22a3980090 R08: 0000000000000000 R09: 0000000000000000 [ 955.412030][T21831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.420007][T21831] R13: 0000000000000000 R14: 00007f22a5d3ffa0 R15: 00007ffdcc3095c8 [ 955.428031][T21831] [ 955.453723][T21838] sctp: [Deprecated]: syz.2.6326 (pid 21838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 955.453723][T21838] Use struct sctp_sack_info instead [ 955.501293][T21835] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6327'. [ 955.577782][T11597] team0: Port device wlan1 removed [ 955.684868][T21840] netlink: 'syz.6.6329': attribute type 1 has an invalid length. [ 955.742523][T21840] netlink: 'syz.6.6329': attribute type 3 has an invalid length. [ 955.821726][T21840] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6329'. [ 955.841736][T21842] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.6330'. [ 956.024677][T21845] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6331'. [ 959.159632][T11597] device hsr_slave_0 left promiscuous mode [ 959.166855][T21858] netlink: 'syz.1.6336': attribute type 29 has an invalid length. [ 959.242780][T11597] device hsr_slave_1 left promiscuous mode [ 959.280049][T11597] device veth1_vlan left promiscuous mode [ 959.334412][T11597] device veth0_vlan left promiscuous mode [ 959.611459][T21881] sctp: [Deprecated]: syz.6.6343 (pid 21881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 959.611459][T21881] Use struct sctp_sack_info instead [ 959.688337][T11597] team0 (unregistering): Port device geneve1 removed [ 959.809617][T11597] team0 (unregistering): Port device team_slave_1 removed [ 959.830218][T11597] team0 (unregistering): Port device team_slave_0 removed [ 959.848612][T11597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.867243][T11597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.957501][T11597] bond0 (unregistering): Released all slaves [ 959.981925][T21858] netlink: 'syz.1.6336': attribute type 29 has an invalid length. [ 960.009538][T21868] device syzkaller0 entered promiscuous mode [ 960.017223][T21866] netlink: 'syz.3.6339': attribute type 28 has an invalid length. [ 960.137508][T21885] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6345'. [ 960.344608][T21887] netlink: 'syz.5.6347': attribute type 1 has an invalid length. [ 960.354397][T21889] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6346'. [ 960.367790][T21887] netlink: 'syz.5.6347': attribute type 3 has an invalid length. [ 960.434198][T21887] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6347'. [ 962.133403][T21917] netlink: 'syz.2.6358': attribute type 28 has an invalid length. [ 962.200806][T21920] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6359'. [ 962.430280][T21929] sctp: [Deprecated]: syz.2.6361 (pid 21929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 962.430280][T21929] Use struct sctp_sack_info instead [ 963.820776][T21956] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6373'. [ 963.934711][T21953] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6372'. [ 964.211374][T21973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6379'. [ 964.902002][T21988] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6386'. [ 965.239727][T22004] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.6391'. [ 965.526854][T22011] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6393'. [ 966.364540][T22026] sctp: [Deprecated]: syz.6.6398 (pid 22026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 966.364540][T22026] Use struct sctp_sack_info instead [ 966.403993][T22028] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6400'. [ 966.723947][T22044] netlink: 'syz.2.6406': attribute type 28 has an invalid length. [ 967.091305][T22055] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6410'. [ 967.155050][T22054] netlink: 'syz.2.6409': attribute type 39 has an invalid length. [ 967.701832][T22074] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6415'. [ 969.393809][T22083] netlink: 'syz.3.6418': attribute type 2 has an invalid length. [ 969.402952][T22085] netlink: 'syz.2.6419': attribute type 28 has an invalid length. [ 969.637705][T22096] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6423'. [ 969.751559][T22104] sctp: [Deprecated]: syz.6.6422 (pid 22104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 969.751559][T22104] Use struct sctp_sack_info instead [ 969.907286][T22107] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6427'. [ 969.956040][T22111] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6429'. [ 970.076764][T22114] netlink: 'syz.3.6430': attribute type 10 has an invalid length. [ 970.463049][T22122] netlink: 'syz.1.6433': attribute type 28 has an invalid length. [ 971.122901][T22141] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6441'. [ 971.186712][T22142] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6440'. [ 971.254669][T22146] netlink: 'syz.2.6442': attribute type 10 has an invalid length. [ 971.484113][T22150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 971.835015][T22163] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6447'. [ 971.920056][T22166] netlink: 'syz.1.6448': attribute type 28 has an invalid length. [ 972.011946][T22165] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6450'. [ 972.336837][T22177] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6454'. [ 972.525518][T22187] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6457'. [ 972.771530][T22193] netlink: 'syz.1.6461': attribute type 28 has an invalid length. [ 972.835505][T22198] FAULT_INJECTION: forcing a failure. [ 972.835505][T22198] name failslab, interval 1, probability 0, space 0, times 0 [ 972.895059][T22198] CPU: 1 PID: 22198 Comm: syz.2.6464 Not tainted 5.15.180-syzkaller #0 [ 972.903354][T22198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 972.913522][T22198] Call Trace: [ 972.916820][T22198] [ 972.919762][T22198] dump_stack_lvl+0x1e3/0x2d0 [ 972.924469][T22198] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 972.930141][T22198] ? panic+0x860/0x860 [ 972.934232][T22198] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 972.940417][T22198] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 972.946605][T22198] should_fail+0x38a/0x4c0 [ 972.951105][T22198] should_failslab+0x5/0x20 [ 972.955627][T22198] slab_pre_alloc_hook+0x53/0xc0 [ 972.960591][T22198] ? skb_clone+0x1bb/0x350 [ 972.965030][T22198] kmem_cache_alloc+0x3f/0x280 [ 972.969815][T22198] ? read_lock_is_recursive+0x10/0x10 [ 972.975215][T22198] skb_clone+0x1bb/0x350 [ 972.979479][T22198] __netlink_deliver_tap+0x37f/0x770 [ 972.984799][T22198] netlink_deliver_tap+0x16c/0x180 [ 972.989931][T22198] __netlink_sendskb+0x60/0xc0 [ 972.994717][T22198] netlink_dump+0x8cb/0xc80 [ 972.995449][T22206] sctp: [Deprecated]: syz.6.6463 (pid 22206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 972.995449][T22206] Use struct sctp_sack_info instead [ 972.999247][T22198] ? netlink_lookup+0x1d0/0x1d0 [ 973.020523][T22198] ? genl_start+0x144/0x490 [ 973.025059][T22198] ? genl_start+0x2e1/0x490 [ 973.029593][T22198] __netlink_dump_start+0x517/0x6e0 [ 973.034825][T22198] genl_rcv_msg+0xb94/0x14a0 [ 973.039446][T22198] ? genl_bind+0x420/0x420 [ 973.043880][T22198] ? local_bh_enable+0x5/0x20 [ 973.048576][T22198] ? _local_bh_enable+0xa0/0xa0 [ 973.053459][T22198] ? __lock_acquire+0x1295/0x1ff0 [ 973.058509][T22198] ? genl_rcv_msg+0x14a0/0x14a0 [ 973.063380][T22198] ? genl_start+0x490/0x490 [ 973.067904][T22198] ? genl_lock_dumpit+0x90/0x90 [ 973.072789][T22198] ? psample_group_nl_fill+0x490/0x490 [ 973.078286][T22198] netlink_rcv_skb+0x1cf/0x410 [ 973.083072][T22198] ? genl_bind+0x420/0x420 [ 973.087514][T22198] ? netlink_ack+0xb10/0xb10 [ 973.092136][T22198] ? down_read+0x1b3/0x2e0 [ 973.096568][T22198] ? genl_rcv+0x9/0x40 [ 973.100661][T22198] genl_rcv+0x24/0x40 [ 973.104659][T22198] netlink_unicast+0x7c0/0x990 [ 973.109450][T22198] ? netlink_detachskb+0x90/0x90 [ 973.114408][T22198] ? __virt_addr_valid+0x3bb/0x460 [ 973.119540][T22198] ? 0xffffffff81000000 [ 973.123708][T22198] ? __check_object_size+0x300/0x410 [ 973.129011][T22198] ? bpf_lsm_netlink_send+0x5/0x10 [ 973.134152][T22198] netlink_sendmsg+0xa30/0xd60 [ 973.138952][T22198] ? netlink_getsockopt+0x5b0/0x5b0 [ 973.144172][T22198] ? aa_sock_msg_perm+0x91/0x150 [ 973.149141][T22198] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 973.154495][T22198] ? security_socket_sendmsg+0x7d/0xa0 [ 973.159984][T22198] ? netlink_getsockopt+0x5b0/0x5b0 [ 973.165215][T22198] ____sys_sendmsg+0x59e/0x8f0 [ 973.170015][T22198] ? __sys_sendmsg_sock+0x30/0x30 [ 973.175071][T22198] ? import_iovec+0x77/0xa0 [ 973.179606][T22198] ___sys_sendmsg+0x252/0x2e0 [ 973.184310][T22198] ? __sys_sendmsg+0x260/0x260 [ 973.189148][T22198] ? __fdget+0x191/0x220 [ 973.193417][T22198] __se_sys_sendmsg+0x19a/0x260 [ 973.198287][T22198] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 973.204466][T22198] ? __x64_sys_sendmsg+0x80/0x80 [ 973.209437][T22198] ? syscall_enter_from_user_mode+0x37/0x240 [ 973.215441][T22198] ? syscall_enter_from_user_mode+0x2e/0x240 [ 973.221452][T22198] do_syscall_64+0x3b/0x80 [ 973.225894][T22198] ? clear_bhb_loop+0x15/0x70 [ 973.230593][T22198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 973.236507][T22198] RIP: 0033:0x7f516aa9b969 [ 973.240939][T22198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.260564][T22198] RSP: 002b:00007f5168903038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.269012][T22198] RAX: ffffffffffffffda RBX: 00007f516acc2fa0 RCX: 00007f516aa9b969 [ 973.277014][T22198] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 973.285013][T22198] RBP: 00007f5168903090 R08: 0000000000000000 R09: 0000000000000000 [ 973.293011][T22198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 973.301007][T22198] R13: 0000000000000000 R14: 00007f516acc2fa0 R15: 00007ffc3ddca868 [ 973.309024][T22198] [ 973.861083][T22218] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6470'. [ 973.896819][T22227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6473'. [ 973.919573][T22226] device lo entered promiscuous mode [ 973.972973][T22228] netlink: 'syz.5.6472': attribute type 16 has an invalid length. [ 973.986444][T22228] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6472'. [ 974.281298][T22236] netlink: 'syz.2.6477': attribute type 28 has an invalid length. [ 974.639206][T22251] netlink: 'syz.5.6484': attribute type 8 has an invalid length. [ 974.658285][T22251] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6484'. [ 974.678905][T22254] netlink: 'syz.3.6485': attribute type 25 has an invalid length. [ 975.233380][T22283] FAULT_INJECTION: forcing a failure. [ 975.233380][T22283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.263920][T22283] CPU: 0 PID: 22283 Comm: syz.1.6494 Not tainted 5.15.180-syzkaller #0 [ 975.272235][T22283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 975.282334][T22283] Call Trace: [ 975.285647][T22283] [ 975.288609][T22283] dump_stack_lvl+0x1e3/0x2d0 [ 975.293337][T22283] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 975.299006][T22283] ? panic+0x860/0x860 [ 975.303106][T22283] ? trace_call_bpf+0x5b7/0x660 [ 975.308023][T22283] should_fail+0x38a/0x4c0 [ 975.312491][T22283] _copy_from_user+0x2d/0x170 [ 975.317201][T22283] __copy_msghdr_from_user+0xaf/0x7c0 [ 975.322608][T22283] ? perf_trace_run_bpf_submit+0x12c/0x1d0 [ 975.328459][T22283] ? __ia32_sys_shutdown+0x60/0x60 [ 975.333663][T22283] ___sys_sendmsg+0x166/0x2e0 [ 975.338405][T22283] ? __sys_sendmsg+0x260/0x260 [ 975.343364][T22283] ? __fdget+0x191/0x220 [ 975.347647][T22283] __se_sys_sendmsg+0x19a/0x260 [ 975.352535][T22283] ? __x64_sys_sendmsg+0x80/0x80 [ 975.357535][T22283] ? syscall_enter_from_user_mode+0x2e/0x240 [ 975.363543][T22283] ? lockdep_hardirqs_on+0x94/0x130 [ 975.368778][T22283] ? syscall_enter_from_user_mode+0x2e/0x240 [ 975.374795][T22283] do_syscall_64+0x3b/0x80 [ 975.379265][T22283] ? clear_bhb_loop+0x15/0x70 [ 975.383979][T22283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 975.389899][T22283] RIP: 0033:0x7fd2334de969 [ 975.394338][T22283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.413960][T22283] RSP: 002b:00007fd231346038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 975.422409][T22283] RAX: ffffffffffffffda RBX: 00007fd233705fa0 RCX: 00007fd2334de969 [ 975.430409][T22283] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 975.438411][T22283] RBP: 00007fd231346090 R08: 0000000000000000 R09: 0000000000000000 [ 975.446411][T22283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.454405][T22283] R13: 0000000000000000 R14: 00007fd233705fa0 R15: 00007ffdfd4754b8 [ 975.462451][T22283] [ 975.643060][T22280] device syzkaller0 entered promiscuous mode [ 975.675557][T22288] netlink: 'syz.6.6493': attribute type 10 has an invalid length. [ 975.683477][T22288] device bridge_slave_1 left promiscuous mode [ 975.715262][T22288] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.730877][T22288] device bridge_slave_0 left promiscuous mode [ 975.742440][T22288] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.891804][T22293] netlink: 'syz.2.6499': attribute type 10 has an invalid length. [ 975.947407][T22293] batman_adv: batadv0: Adding interface: team0 [ 975.973885][T22293] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.032953][T22293] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 976.499551][T22316] __nla_validate_parse: 6 callbacks suppressed [ 976.499572][T22316] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6510'. [ 976.960816][T22329] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6515'. [ 977.006197][T22332] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6514'. [ 977.367725][T22350] FAULT_INJECTION: forcing a failure. [ 977.367725][T22350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.531922][T22350] CPU: 1 PID: 22350 Comm: syz.3.6524 Not tainted 5.15.180-syzkaller #0 [ 977.540345][T22350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 977.550428][T22350] Call Trace: [ 977.553719][T22350] [ 977.556660][T22350] dump_stack_lvl+0x1e3/0x2d0 [ 977.561367][T22350] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 977.567022][T22350] ? panic+0x860/0x860 [ 977.571118][T22350] ? snprintf+0xd6/0x120 [ 977.575379][T22350] should_fail+0x38a/0x4c0 [ 977.579824][T22350] _copy_to_user+0x2d/0x130 [ 977.584348][T22350] simple_read_from_buffer+0xc6/0x150 [ 977.589746][T22350] proc_fail_nth_read+0x1a3/0x210 [ 977.594795][T22350] ? proc_fault_inject_write+0x390/0x390 [ 977.600455][T22350] ? fsnotify_perm+0x442/0x590 [ 977.605240][T22350] ? proc_fault_inject_write+0x390/0x390 [ 977.610911][T22350] vfs_read+0x2fc/0xe10 [ 977.615097][T22350] ? kernel_read+0x1f0/0x1f0 [ 977.619714][T22350] ? __fget_files+0x413/0x480 [ 977.624419][T22350] ? mutex_lock_nested+0x17/0x20 [ 977.629373][T22350] ? __fdget_pos+0x2cb/0x380 [ 977.633974][T22350] ? ksys_read+0x77/0x2c0 [ 977.638323][T22350] ksys_read+0x1a2/0x2c0 [ 977.642585][T22350] ? print_irqtrace_events+0x210/0x210 [ 977.648074][T22350] ? vfs_write+0xe50/0xe50 [ 977.652513][T22350] ? syscall_enter_from_user_mode+0x2e/0x240 [ 977.658515][T22350] ? lockdep_hardirqs_on+0x94/0x130 [ 977.663735][T22350] ? syscall_enter_from_user_mode+0x2e/0x240 [ 977.669737][T22350] do_syscall_64+0x3b/0x80 [ 977.674176][T22350] ? clear_bhb_loop+0x15/0x70 [ 977.678875][T22350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 977.684790][T22350] RIP: 0033:0x7f9919f1337c [ 977.689229][T22350] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 977.708859][T22350] RSP: 002b:00007f9917d7c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 977.717305][T22350] RAX: ffffffffffffffda RBX: 00007f991a13bfa0 RCX: 00007f9919f1337c [ 977.725306][T22350] RDX: 000000000000000f RSI: 00007f9917d7c0a0 RDI: 0000000000000004 [ 977.733298][T22350] RBP: 00007f9917d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 977.741288][T22350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.749272][T22350] R13: 0000000000000000 R14: 00007f991a13bfa0 R15: 00007fff0a5dbcb8 [ 977.757292][T22350] [ 978.109902][T22359] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6526'. [ 978.281921][T22364] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6529'. [ 978.355285][T22370] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6531'. [ 978.816987][T22392] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6539'. [ 979.228503][T22402] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6542'. [ 979.373227][T22404] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.6545'. [ 979.503315][T22414] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6548'. [ 979.894172][T22428] device veth1_macvtap left promiscuous mode [ 979.999631][T22438] netlink: 'syz.1.6553': attribute type 10 has an invalid length. [ 980.044094][T22438] device bridge_slave_1 left promiscuous mode [ 980.063544][T22438] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.090932][T22438] device bridge_slave_0 left promiscuous mode [ 980.098103][T22438] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.210594][T22428] device veth1_macvtap entered promiscuous mode [ 980.222456][T22428] device macsec0 entered promiscuous mode [ 980.352800][T22435] device syzkaller0 entered promiscuous mode [ 980.381047][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 981.617511][T22496] __nla_validate_parse: 8 callbacks suppressed [ 981.617552][T22496] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6579'. [ 981.873004][T22501] device syzkaller0 entered promiscuous mode [ 982.035257][T22501] netlink: 'syz.2.6581': attribute type 10 has an invalid length. [ 982.043170][T22501] device bridge_slave_1 left promiscuous mode [ 982.065152][T22501] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.081585][T22501] device bridge_slave_0 left promiscuous mode [ 982.089667][T22501] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.516364][T22529] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6591'. [ 983.521958][T22560] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6603'. [ 983.652861][T22565] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6604'. [ 983.780601][T22570] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.6606'. [ 984.106127][T22584] device syzkaller0 entered promiscuous mode [ 984.643537][T22595] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6616'. [ 984.991592][T22604] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6619'. [ 985.242876][T22621] delete_channel: no stack [ 985.590025][T22611] delete_channel: no stack [ 985.693278][T22634] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6628'. [ 985.843312][T22636] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6628'. [ 986.749747][T22659] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.6635'. [ 988.050027][T22684] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.6641'. [ 988.299900][T22692] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6645'. [ 988.967133][T22723] netlink: 'syz.5.6655': attribute type 9 has an invalid length. [ 989.008732][T22721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6657'. [ 989.028206][T22723] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.6655'. [ 989.350071][T22731] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6660'. [ 990.086804][T22748] tap0: tun_chr_ioctl cmd 1074025672 [ 990.093390][T22748] tap0: ignored: set checksum disabled [ 990.949045][T22780] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6675'. [ 991.126100][T22788] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.6678'. [ 992.044623][T22826] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.6693'. [ 992.408728][T22820] device syzkaller0 entered promiscuous mode [ 992.916025][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.922398][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.222009][T22857] netlink: 'syz.3.6703': attribute type 9 has an invalid length. [ 993.241102][T22857] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6703'. [ 993.331336][T22861] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6706'. [ 994.522677][T22890] FAULT_INJECTION: forcing a failure. [ 994.522677][T22890] name failslab, interval 1, probability 0, space 0, times 0 [ 994.549440][T22890] CPU: 1 PID: 22890 Comm: syz.2.6717 Not tainted 5.15.180-syzkaller #0 [ 994.557732][T22890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 994.568042][T22890] Call Trace: [ 994.571352][T22890] [ 994.574299][T22890] dump_stack_lvl+0x1e3/0x2d0 [ 994.579044][T22890] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 994.584706][T22890] ? panic+0x860/0x860 [ 994.588800][T22890] ? nla_put+0x12d/0x1e0 [ 994.593064][T22890] ? skb_trim+0x7e/0x190 [ 994.597332][T22890] ? rtnl_fill_prop_list+0x248/0x310 [ 994.602641][T22890] should_fail+0x38a/0x4c0 [ 994.607099][T22890] should_failslab+0x5/0x20 [ 994.611624][T22890] slab_pre_alloc_hook+0x53/0xc0 [ 994.616592][T22890] __kmalloc_node_track_caller+0x6b/0x390 [ 994.622336][T22890] ? netlink_trim+0x183/0x220 [ 994.627038][T22890] ? netlink_trim+0x183/0x220 [ 994.631740][T22890] pskb_expand_head+0x111/0x1130 [ 994.636715][T22890] netlink_trim+0x183/0x220 [ 994.641250][T22890] netlink_broadcast_filtered+0x72/0x12c0 [ 994.646991][T22890] ? __phys_addr+0xb6/0x170 [ 994.651523][T22890] ? rtmsg_ifinfo_build_skb+0xf7/0x180 [ 994.657010][T22890] nlmsg_notify+0xf7/0x1b0 [ 994.661452][T22890] ? rtmsg_ifinfo+0x8e/0x120 [ 994.666070][T22890] __dev_notify_flags+0xe0/0x3f0 [ 994.671019][T22890] ? __dev_change_flags+0x6e0/0x6e0 [ 994.676233][T22890] ? __dev_change_flags+0x6e0/0x6e0 [ 994.681448][T22890] ? __local_bh_enable_ip+0x164/0x1f0 [ 994.686834][T22890] ? __dev_set_allmulti+0x205/0x3c0 [ 994.692045][T22890] ? _local_bh_enable+0xa0/0xa0 [ 994.696910][T22890] ? do_raw_spin_unlock+0x137/0x8b0 [ 994.702123][T22890] __dev_set_promiscuity+0x194/0x5d0 [ 994.707426][T22890] dev_set_promiscuity+0x4d/0xd0 [ 994.712374][T22890] macsec_dev_stop+0x5b1/0x750 [ 994.717166][T22890] ? macsec_dev_open+0x920/0x920 [ 994.722110][T22890] ? __local_bh_enable_ip+0x164/0x1f0 [ 994.727486][T22890] ? dev_deactivate_many+0xa67/0xbf0 [ 994.732777][T22890] ? _local_bh_enable+0xa0/0xa0 [ 994.737627][T22890] ? do_raw_spin_unlock+0x137/0x8b0 [ 994.742843][T22890] ? dev_deactivate_many+0xbd4/0xbf0 [ 994.748137][T22890] ? macsec_dev_open+0x920/0x920 [ 994.753079][T22890] __dev_close_many+0x204/0x2e0 [ 994.757936][T22890] ? dev_close_many+0x4b0/0x4b0 [ 994.762788][T22890] ? dev_set_rx_mode+0x228/0x2f0 [ 994.767735][T22890] __dev_change_flags+0x2fe/0x6e0 [ 994.772767][T22890] ? rcu_lock_release+0x20/0x20 [ 994.777623][T22890] ? dev_get_flags+0x1c0/0x1c0 [ 994.782400][T22890] dev_change_flags+0x87/0x190 [ 994.787202][T22890] dev_ifsioc+0x147/0x1050 [ 994.791622][T22890] ? dev_ioctl+0x4ff/0xf00 [ 994.796040][T22890] ? dev_ioctl+0xf00/0xf00 [ 994.800464][T22890] ? full_name_hash+0x8f/0xe0 [ 994.805148][T22890] dev_ioctl+0x512/0xf00 [ 994.809394][T22890] sock_do_ioctl+0x27a/0x430 [ 994.813987][T22890] ? sock_show_fdinfo+0xb0/0xb0 [ 994.818853][T22890] sock_ioctl+0x484/0x770 [ 994.823184][T22890] ? sock_poll+0x410/0x410 [ 994.827598][T22890] ? __fget_files+0x413/0x480 [ 994.832284][T22890] ? bpf_lsm_file_ioctl+0x5/0x10 [ 994.837228][T22890] ? security_file_ioctl+0x7d/0xa0 [ 994.842338][T22890] ? sock_poll+0x410/0x410 [ 994.846756][T22890] __se_sys_ioctl+0xf1/0x160 [ 994.851374][T22890] do_syscall_64+0x3b/0x80 [ 994.855879][T22890] ? clear_bhb_loop+0x15/0x70 [ 994.860559][T22890] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 994.866450][T22890] RIP: 0033:0x7f516aa9b969 [ 994.870869][T22890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.890477][T22890] RSP: 002b:00007f5168903038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 994.898911][T22890] RAX: ffffffffffffffda RBX: 00007f516acc2fa0 RCX: 00007f516aa9b969 [ 994.906883][T22890] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000005 [ 994.914867][T22890] RBP: 00007f5168903090 R08: 0000000000000000 R09: 0000000000000000 [ 994.922838][T22890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.930808][T22890] R13: 0000000000000000 R14: 00007f516acc2fa0 R15: 00007ffc3ddca868 [ 994.938797][T22890] [ 994.983483][T22897] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.6720'. [ 995.255112][T22890] device veth1_macvtap left promiscuous mode [ 995.266368][T22890] device macsec0 left promiscuous mode [ 995.328334][T22907] netlink: 'syz.6.6724': attribute type 9 has an invalid length. [ 995.364710][T22907] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.6724'. [ 995.551218][T22915] FAULT_INJECTION: forcing a failure. [ 995.551218][T22915] name failslab, interval 1, probability 0, space 0, times 0 [ 995.583699][T22915] CPU: 1 PID: 22915 Comm: syz.6.6728 Not tainted 5.15.180-syzkaller #0 [ 995.591996][T22915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 995.602080][T22915] Call Trace: [ 995.605381][T22915] [ 995.608324][T22915] dump_stack_lvl+0x1e3/0x2d0 [ 995.613025][T22915] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 995.618675][T22915] ? panic+0x860/0x860 [ 995.622805][T22915] ? __lock_acquire+0x1295/0x1ff0 [ 995.627870][T22915] should_fail+0x38a/0x4c0 [ 995.632317][T22915] should_failslab+0x5/0x20 [ 995.636846][T22915] slab_pre_alloc_hook+0x53/0xc0 [ 995.641813][T22915] ? skb_clone+0x1bb/0x350 [ 995.646254][T22915] kmem_cache_alloc+0x3f/0x280 [ 995.651042][T22915] skb_clone+0x1bb/0x350 [ 995.655300][T22915] __netlink_deliver_tap+0x37f/0x770 [ 995.660618][T22915] netlink_deliver_tap+0x16c/0x180 [ 995.665782][T22915] netlink_unicast+0x792/0x990 [ 995.670580][T22915] ? netlink_detachskb+0x90/0x90 [ 995.675519][T22915] ? __virt_addr_valid+0x3bb/0x460 [ 995.680652][T22915] ? 0xffffffff81000000 [ 995.684845][T22915] ? __check_object_size+0x300/0x410 [ 995.690157][T22915] ? bpf_lsm_netlink_send+0x5/0x10 [ 995.695296][T22915] netlink_sendmsg+0xa30/0xd60 [ 995.700104][T22915] ? netlink_getsockopt+0x5b0/0x5b0 [ 995.705355][T22915] ? aa_sock_msg_perm+0x91/0x150 [ 995.710316][T22915] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 995.715612][T22915] ? security_socket_sendmsg+0x7d/0xa0 [ 995.721113][T22915] ? netlink_getsockopt+0x5b0/0x5b0 [ 995.726331][T22915] ____sys_sendmsg+0x59e/0x8f0 [ 995.731117][T22915] ? __sys_sendmsg_sock+0x30/0x30 [ 995.736163][T22915] ? import_iovec+0x77/0xa0 [ 995.740686][T22915] ___sys_sendmsg+0x252/0x2e0 [ 995.745403][T22915] ? __sys_sendmsg+0x260/0x260 [ 995.750224][T22915] ? __fdget+0x191/0x220 [ 995.754484][T22915] __se_sys_sendmsg+0x19a/0x260 [ 995.759351][T22915] ? __x64_sys_sendmsg+0x80/0x80 [ 995.764314][T22915] ? syscall_enter_from_user_mode+0x2e/0x240 [ 995.770308][T22915] ? lockdep_hardirqs_on+0x94/0x130 [ 995.775523][T22915] ? syscall_enter_from_user_mode+0x2e/0x240 [ 995.781519][T22915] do_syscall_64+0x3b/0x80 [ 995.785951][T22915] ? clear_bhb_loop+0x15/0x70 [ 995.790647][T22915] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 995.796556][T22915] RIP: 0033:0x7fa36bbd0969 [ 995.800989][T22915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.820744][T22915] RSP: 002b:00007fa369a38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 995.829185][T22915] RAX: ffffffffffffffda RBX: 00007fa36bdf7fa0 RCX: 00007fa36bbd0969 [ 995.837170][T22915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 995.845156][T22915] RBP: 00007fa369a38090 R08: 0000000000000000 R09: 0000000000000000 [ 995.853139][T22915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.861120][T22915] R13: 0000000000000000 R14: 00007fa36bdf7fa0 R15: 00007ffdb1f83dc8 [ 995.869124][T22915] [ 995.905757][T22918] netlink: 'syz.3.6730': attribute type 21 has an invalid length. [ 995.914216][T22918] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6730'. [ 995.923405][T22918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6730'. [ 995.945361][T22918] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6730'. [ 996.063909][T22925] FAULT_INJECTION: forcing a failure. [ 996.063909][T22925] name failslab, interval 1, probability 0, space 0, times 0 [ 996.086402][T22925] CPU: 0 PID: 22925 Comm: syz.6.6731 Not tainted 5.15.180-syzkaller #0 [ 996.094700][T22925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 996.104784][T22925] Call Trace: [ 996.108084][T22925] [ 996.111033][T22925] dump_stack_lvl+0x1e3/0x2d0 [ 996.115741][T22925] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 996.121392][T22925] ? panic+0x860/0x860 [ 996.125483][T22925] ? __might_sleep+0xc0/0xc0 [ 996.130105][T22925] should_fail+0x38a/0x4c0 [ 996.134554][T22925] should_failslab+0x5/0x20 [ 996.139073][T22925] slab_pre_alloc_hook+0x53/0xc0 [ 996.144035][T22925] __kmalloc_node_track_caller+0x6b/0x390 [ 996.149780][T22925] ? __ip6_append_data+0x292d/0x3e90 [ 996.155083][T22925] ? kmem_cache_alloc_node+0x154/0x2c0 [ 996.160557][T22925] ? __alloc_skb+0xdd/0x590 [ 996.165080][T22925] ? __ip6_append_data+0x292d/0x3e90 [ 996.170385][T22925] __alloc_skb+0x12c/0x590 [ 996.174832][T22925] __ip6_append_data+0x292d/0x3e90 [ 996.180202][T22925] ? ip6_setup_cork+0x11e0/0x11e0 [ 996.185243][T22925] ? ip6_setup_cork+0xc84/0x11e0 [ 996.190198][T22925] ? __local_bh_enable_ip+0x164/0x1f0 [ 996.195598][T22925] ip6_append_data+0x1cd/0x300 [ 996.200386][T22925] ? inet6_sk+0xd0/0xd0 [ 996.204562][T22925] ? inet6_sk+0xd0/0xd0 [ 996.208741][T22925] ping_v6_sendmsg+0xeff/0x1640 [ 996.213623][T22925] ? tcpv6_net_exit_batch+0x20/0x20 [ 996.218843][T22925] ? __local_bh_enable_ip+0x164/0x1f0 [ 996.224246][T22925] ? __local_bh_enable_ip+0x164/0x1f0 [ 996.229643][T22925] ? inet_sendmsg+0x163/0x310 [ 996.234346][T22925] ? inet_sendmsg+0x163/0x310 [ 996.239039][T22925] ? do_raw_spin_unlock+0x137/0x8b0 [ 996.244265][T22925] ? inet_sendmsg+0x163/0x310 [ 996.248970][T22925] ? inet_send_prepare+0x250/0x250 [ 996.254104][T22925] ____sys_sendmsg+0x59e/0x8f0 [ 996.258901][T22925] ? __sys_sendmsg_sock+0x30/0x30 [ 996.263963][T22925] ? import_iovec+0x77/0xa0 [ 996.268493][T22925] ___sys_sendmsg+0x252/0x2e0 [ 996.273198][T22925] ? __sys_sendmsg+0x260/0x260 [ 996.278033][T22925] ? __fdget+0x191/0x220 [ 996.282305][T22925] __se_sys_sendmsg+0x19a/0x260 [ 996.287177][T22925] ? __x64_sys_sendmsg+0x80/0x80 [ 996.292143][T22925] ? syscall_enter_from_user_mode+0x2e/0x240 [ 996.298142][T22925] ? lockdep_hardirqs_on+0x94/0x130 [ 996.303362][T22925] ? syscall_enter_from_user_mode+0x2e/0x240 [ 996.309368][T22925] do_syscall_64+0x3b/0x80 [ 996.313809][T22925] ? clear_bhb_loop+0x15/0x70 [ 996.318503][T22925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 996.324565][T22925] RIP: 0033:0x7fa36bbd0969 [ 996.329025][T22925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.348660][T22925] RSP: 002b:00007fa369a38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.357109][T22925] RAX: ffffffffffffffda RBX: 00007fa36bdf7fa0 RCX: 00007fa36bbd0969 [ 996.365110][T22925] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 996.373100][T22925] RBP: 00007fa369a38090 R08: 0000000000000000 R09: 0000000000000000 [ 996.381092][T22925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.389098][T22925] R13: 0000000000000000 R14: 00007fa36bdf7fa0 R15: 00007ffdb1f83dc8 [ 996.397119][T22925] [ 996.708715][T22938] netlink: 'syz.3.6737': attribute type 21 has an invalid length. [ 996.712483][T22932] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.6733'. [ 996.827520][T22942] netlink: 'syz.3.6737': attribute type 21 has an invalid length. [ 996.923034][T22942] netlink: 'syz.3.6737': attribute type 2 has an invalid length. [ 996.961477][T22942] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6737'. [ 997.072317][T22945] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6739'. [ 997.192005][T22953] netlink: 'syz.1.6740': attribute type 10 has an invalid length. [ 997.312797][T22953] team0: Port device geneve1 added [ 997.450946][T22966] netlink: 'syz.6.6743': attribute type 21 has an invalid length. [ 997.490319][T22966] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6743'. [ 997.523118][T22966] netlink: 'syz.6.6743': attribute type 5 has an invalid length. [ 997.546664][T22966] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6743'. [ 997.589591][T22970] netlink: 188 bytes leftover after parsing attributes in process `syz.6.6743'. [ 997.623144][T22967] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 997.634239][T22966] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.6743'. [ 997.658168][T22967] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.6744'. [ 997.730741][T22978] netlink: 'syz.2.6747': attribute type 10 has an invalid length. [ 997.767269][T22978] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.809264][T22978] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.856506][T22978] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.895234][T22978] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.959799][T22978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.976705][T22978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.006281][T22984] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6749'. [ 998.023549][T22978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.064156][T22978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.101059][T22978] team0: Port device geneve1 added [ 998.396881][T22990] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6752'. [ 998.682219][T22998] bridge0: port 3(veth0_to_bond) entered blocking state [ 998.716314][T22998] bridge0: port 3(veth0_to_bond) entered disabled state [ 998.752228][T22998] device veth0_to_bond entered promiscuous mode [ 998.789293][T22998] bridge0: port 3(veth0_to_bond) entered blocking state [ 998.797241][T22998] bridge0: port 3(veth0_to_bond) entered forwarding state [ 998.877485][T23000] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6756'. [ 999.076689][T23013] netlink: 1038 bytes leftover after parsing attributes in process `syz.1.6764'. [ 999.219971][T23015] netlink: 'syz.5.6763': attribute type 9 has an invalid length. [ 999.972700][T23042] FAULT_INJECTION: forcing a failure. [ 999.972700][T23042] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.025666][T23042] CPU: 1 PID: 23042 Comm: syz.3.6774 Not tainted 5.15.180-syzkaller #0 [ 1000.033979][T23042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1000.044076][T23042] Call Trace: [ 1000.047390][T23042] [ 1000.050334][T23042] dump_stack_lvl+0x1e3/0x2d0 [ 1000.055039][T23042] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1000.060708][T23042] ? panic+0x860/0x860 [ 1000.064809][T23042] ? __might_sleep+0xc0/0xc0 [ 1000.069418][T23042] ? perf_trace_lock+0x138/0x440 [ 1000.074394][T23042] should_fail+0x38a/0x4c0 [ 1000.078891][T23042] should_failslab+0x5/0x20 [ 1000.083417][T23042] slab_pre_alloc_hook+0x53/0xc0 [ 1000.088385][T23042] __kmalloc+0x6e/0x300 [ 1000.092564][T23042] ? bpf_test_init+0xf8/0x1b0 [ 1000.097291][T23042] bpf_test_init+0xf8/0x1b0 [ 1000.101823][T23042] bpf_prog_test_run_skb+0x268/0x1420 [ 1000.107243][T23042] ? cpu_online+0x70/0x70 [ 1000.111615][T23042] ? cpu_online+0x70/0x70 [ 1000.115969][T23042] bpf_prog_test_run+0x32f/0x3a0 [ 1000.120948][T23042] __sys_bpf+0x3ac/0x670 [ 1000.125236][T23042] ? bpf_link_show_fdinfo+0x300/0x300 [ 1000.130656][T23042] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1000.136667][T23042] ? lockdep_hardirqs_on+0x94/0x130 [ 1000.141897][T23042] __x64_sys_bpf+0x78/0x90 [ 1000.146341][T23042] do_syscall_64+0x3b/0x80 [ 1000.150786][T23042] ? clear_bhb_loop+0x15/0x70 [ 1000.155495][T23042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1000.161421][T23042] RIP: 0033:0x7f9919f14969 [ 1000.165891][T23042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.185608][T23042] RSP: 002b:00007f9917d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1000.194099][T23042] RAX: ffffffffffffffda RBX: 00007f991a13bfa0 RCX: 00007f9919f14969 [ 1000.202129][T23042] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 1000.210126][T23042] RBP: 00007f9917d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.218124][T23042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.226222][T23042] R13: 0000000000000000 R14: 00007f991a13bfa0 R15: 00007fff0a5dbcb8 [ 1000.234412][T23042] [ 1001.851973][T23079] netlink: 'syz.1.6785': attribute type 9 has an invalid length. [ 1002.366090][T23089] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1002.544709][T23089] __nla_validate_parse: 8 callbacks suppressed [ 1002.544731][T23089] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.6791'. [ 1002.622984][T23098] netlink: 67 bytes leftover after parsing attributes in process `syz.2.6803'. [ 1002.641131][T23098] IPv6: NLM_F_CREATE should be specified when creating new route [ 1002.652682][T23098] IPv6: Can't replace route, no match found [ 1002.804517][T23100] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6793'. [ 1003.130110][T23112] netlink: 'syz.6.6798': attribute type 10 has an invalid length. [ 1003.377279][T23112] batman_adv: batadv0: Adding interface: team0 [ 1003.407702][T23112] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.494013][T23112] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1003.511656][T23115] netlink: 'syz.6.6798': attribute type 10 has an invalid length. [ 1003.540860][T23115] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6798'. [ 1003.609045][T23115] device team0 entered promiscuous mode [ 1003.663885][T23115] device team_slave_0 entered promiscuous mode [ 1003.717334][T23115] device team_slave_1 entered promiscuous mode [ 1003.780254][T23115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.794272][T23115] batman_adv: batadv0: Interface activated: team0 [ 1003.801206][T23115] batman_adv: batadv0: Interface deactivated: team0 [ 1003.808523][T23115] batman_adv: batadv0: Removing interface: team0 [ 1003.831896][T23114] netlink: 1038 bytes leftover after parsing attributes in process `syz.2.6797'. [ 1003.860783][T23133] netlink: 'syz.1.6804': attribute type 1 has an invalid length. [ 1004.111560][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1004.186446][T23140] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6807'. [ 1004.579857][T23154] netlink: 'syz.5.6812': attribute type 10 has an invalid length. [ 1004.699480][T23154] device team0 left promiscuous mode [ 1004.716910][T23154] device team_slave_0 left promiscuous mode [ 1004.737238][T23154] device team_slave_1 left promiscuous mode [ 1004.870649][T23154] batman_adv: batadv0: Adding interface: team0 [ 1004.884073][T23154] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.963990][T23154] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1005.194734][T23172] netlink: 1038 bytes leftover after parsing attributes in process `syz.5.6817'. [ 1005.458706][T23181] netlink: 'syz.1.6822': attribute type 9 has an invalid length. [ 1005.544255][T23181] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1005.720066][T23185] netlink: 188 bytes leftover after parsing attributes in process `syz.6.6824'. [ 1006.222334][T23194] netlink: 'syz.2.6827': attribute type 21 has an invalid length. [ 1006.239824][T23194] netlink: 'syz.2.6827': attribute type 20 has an invalid length. [ 1006.298773][T23194] IPv6: NLM_F_CREATE should be specified when creating new route [ 1006.737206][T23216] netlink: 'syz.2.6836': attribute type 9 has an invalid length. [ 1006.746823][T23216] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6836'. [ 1007.617782][T23252] netlink: 'syz.2.6851': attribute type 9 has an invalid length. [ 1007.663711][T23252] __nla_validate_parse: 1 callbacks suppressed [ 1007.663731][T23252] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6851'. [ 1007.875235][T23258] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6855'. [ 1008.047842][T23261] netlink: 'syz.6.6856': attribute type 9 has an invalid length. [ 1008.058281][T23261] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.6856'. [ 1008.360225][T23278] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6861'. [ 1008.384765][T23280] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6862'. [ 1009.005538][T23304] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.6869'. [ 1009.020637][T23303] netlink: 'syz.5.6870': attribute type 9 has an invalid length. [ 1009.047737][T23303] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.6870'. [ 1009.227659][T23314] netlink: 'syz.5.6875': attribute type 19 has an invalid length. [ 1009.310877][T23314] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6875'. [ 1009.373053][T23314] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6875'. [ 1009.466885][T23316] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6876'. [ 1009.527788][T23314] netlink: 'syz.5.6875': attribute type 12 has an invalid length. [ 1009.989017][T23329] device lo entered promiscuous mode [ 1010.177240][T23343] FAULT_INJECTION: forcing a failure. [ 1010.177240][T23343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.194810][T23343] CPU: 1 PID: 23343 Comm: syz.3.6885 Not tainted 5.15.180-syzkaller #0 [ 1010.203129][T23343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1010.213209][T23343] Call Trace: [ 1010.216507][T23343] [ 1010.219457][T23343] dump_stack_lvl+0x1e3/0x2d0 [ 1010.224154][T23343] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1010.229800][T23343] ? panic+0x860/0x860 [ 1010.233881][T23343] ? __check_object_size+0x73/0x410 [ 1010.239089][T23343] ? __virt_addr_valid+0xc3/0x460 [ 1010.244120][T23343] should_fail+0x38a/0x4c0 [ 1010.248574][T23343] _copy_from_user+0x2d/0x170 [ 1010.253256][T23343] bpf_test_init+0x133/0x1b0 [ 1010.257857][T23343] bpf_prog_test_run_skb+0x268/0x1420 [ 1010.263236][T23343] ? print_irqtrace_events+0x210/0x210 [ 1010.268704][T23343] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1010.274871][T23343] ? cpu_online+0x70/0x70 [ 1010.279208][T23343] ? cpu_online+0x70/0x70 [ 1010.283536][T23343] bpf_prog_test_run+0x32f/0x3a0 [ 1010.288483][T23343] __sys_bpf+0x3ac/0x670 [ 1010.292739][T23343] ? bpf_link_show_fdinfo+0x300/0x300 [ 1010.298137][T23343] ? trace_hardirqs_on+0x30/0x80 [ 1010.303101][T23343] ? syscall_enter_from_user_mode+0x37/0x240 [ 1010.309107][T23343] __x64_sys_bpf+0x78/0x90 [ 1010.313529][T23343] do_syscall_64+0x3b/0x80 [ 1010.317957][T23343] ? clear_bhb_loop+0x15/0x70 [ 1010.322635][T23343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1010.328528][T23343] RIP: 0033:0x7f9919f14969 [ 1010.332941][T23343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.352557][T23343] RSP: 002b:00007f9917d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1010.360982][T23343] RAX: ffffffffffffffda RBX: 00007f991a13bfa0 RCX: 00007f9919f14969 [ 1010.368973][T23343] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1010.376945][T23343] RBP: 00007f9917d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.384913][T23343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.392883][T23343] R13: 0000000000000000 R14: 00007f991a13bfa0 R15: 00007fff0a5dbcb8 [ 1010.400873][T23343] [ 1011.981590][T23371] netlink: 'syz.6.6897': attribute type 19 has an invalid length. [ 1012.151170][T23379] netlink: 'syz.3.6901': attribute type 10 has an invalid length. [ 1012.304984][T23379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.536479][T23379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.765005][T23379] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1012.808199][T23391] netlink: 'syz.5.6915': attribute type 3 has an invalid length. [ 1012.816641][T23391] __nla_validate_parse: 5 callbacks suppressed [ 1012.816658][T23391] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6915'. [ 1013.029635][T23401] netlink: 'syz.3.6907': attribute type 3 has an invalid length. [ 1013.039564][T23401] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6907'. [ 1013.072492][T23400] delete_channel: no stack [ 1013.226423][T23410] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.6912'. [ 1013.834619][T23430] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6920'. [ 1013.871709][T23427] netlink: 'syz.2.6919': attribute type 2 has an invalid length. [ 1013.912779][T23427] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6919'. [ 1014.218193][T23442] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.6926'. [ 1014.351457][T23448] netlink: 'syz.6.6929': attribute type 19 has an invalid length. [ 1014.537653][T23448] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.6929'. [ 1014.551725][T23448] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.6929'. [ 1014.570193][T23457] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.6929'. [ 1014.595798][T23456] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6933'. [ 1014.662817][T23448] netlink: 'syz.6.6929': attribute type 12 has an invalid length. [ 1014.712139][T23456] netlink: 'syz.5.6933': attribute type 21 has an invalid length. [ 1014.737393][T23456] netlink: 'syz.5.6933': attribute type 4 has an invalid length. [ 1015.856880][T23489] netlink: 'syz.1.6944': attribute type 10 has an invalid length. [ 1015.916567][T23489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.092140][T23489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.347421][T23489] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1016.779807][T23498] netlink: 'syz.3.6948': attribute type 39 has an invalid length. [ 1016.895657][T23510] netlink: 'syz.6.6951': attribute type 9 has an invalid length. [ 1017.447529][T23504] chnl_net:caif_netlink_parms(): no params data found [ 1017.977756][T23533] validate_nla: 1 callbacks suppressed [ 1017.977795][T23533] netlink: 'syz.2.6959': attribute type 10 has an invalid length. [ 1018.005927][T23533] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.026830][T23533] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.074003][T23533] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.085182][T23533] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.118763][T23550] netlink: 'syz.6.6963': attribute type 9 has an invalid length. [ 1018.133049][T23550] __nla_validate_parse: 7 callbacks suppressed [ 1018.133090][T23550] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.6963'. [ 1018.213538][T23504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.227714][T23504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.245329][T23504] device bridge_slave_0 entered promiscuous mode [ 1018.270193][T23504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.280394][T23504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.300895][T23504] device bridge_slave_1 entered promiscuous mode [ 1018.464702][T18416] syzkaller0: tun_net_xmit 76 [ 1018.469753][T18416] syzkaller0: tun_net_xmit 48 [ 1018.485524][T23553] syzkaller0: create flow: hash 2078515152 index 1 [ 1018.495301][T18418] syzkaller0: tun_net_xmit 76 [ 1018.507547][T23504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.522332][T23504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.579046][T23551] syzkaller0: delete flow: hash 2078515152 index 1 [ 1018.713986][T23504] team0: Port device team_slave_0 added [ 1018.728805][T23564] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.6969'. [ 1018.753949][T18416] Bluetooth: hci2: command 0x0409 tx timeout [ 1018.770196][T23504] team0: Port device team_slave_1 added [ 1018.928459][T23572] netlink: 'syz.6.6974': attribute type 9 has an invalid length. [ 1018.931249][T23575] FAULT_INJECTION: forcing a failure. [ 1018.931249][T23575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.937790][T23572] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.6974'. [ 1018.963842][T23575] CPU: 1 PID: 23575 Comm: syz.1.6975 Not tainted 5.15.180-syzkaller #0 [ 1018.972132][T23575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1018.982196][T23575] Call Trace: [ 1018.985488][T23575] [ 1018.988430][T23575] dump_stack_lvl+0x1e3/0x2d0 [ 1018.993113][T23575] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1018.998798][T23575] ? panic+0x860/0x860 [ 1019.002890][T23575] should_fail+0x38a/0x4c0 [ 1019.007323][T23575] _copy_from_user+0x2d/0x170 [ 1019.012031][T23575] __copy_msghdr_from_user+0xaf/0x7c0 [ 1019.017429][T23575] ? __ia32_sys_shutdown+0x60/0x60 [ 1019.022584][T23575] ___sys_sendmsg+0x166/0x2e0 [ 1019.027410][T23575] ? __sys_sendmsg+0x260/0x260 [ 1019.032244][T23575] ? __fdget+0x191/0x220 [ 1019.036512][T23575] __se_sys_sendmsg+0x19a/0x260 [ 1019.041387][T23575] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1019.047569][T23575] ? __x64_sys_sendmsg+0x80/0x80 [ 1019.052527][T23575] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1019.058733][T23575] do_syscall_64+0x3b/0x80 [ 1019.063174][T23575] ? clear_bhb_loop+0x15/0x70 [ 1019.067879][T23575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1019.073795][T23575] RIP: 0033:0x7fd2334de969 [ 1019.078234][T23575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1019.097859][T23575] RSP: 002b:00007fd231346038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1019.106307][T23575] RAX: ffffffffffffffda RBX: 00007fd233705fa0 RCX: 00007fd2334de969 [ 1019.114298][T23575] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1019.122380][T23575] RBP: 00007fd231346090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.130382][T23575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.138359][T23575] R13: 0000000000000000 R14: 00007fd233705fa0 R15: 00007ffdfd4754b8 [ 1019.146362][T23575] [ 1019.183467][T23576] netlink: 'syz.2.6972': attribute type 39 has an invalid length. [ 1019.206373][T23504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.213357][T23504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.349869][T23504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.368796][T23578] netlink: 'syz.3.6976': attribute type 10 has an invalid length. [ 1019.391349][T23578] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.436898][T23578] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.464230][T23578] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.524262][T23578] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.831629][T23578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.877659][T23578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.910871][T23578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.944300][T23578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.150381][T23578] team0: Port device geneve1 added [ 1020.186989][T23504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.200274][T23504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.263999][T23504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.286906][T23586] netlink: 'syz.6.6977': attribute type 10 has an invalid length. [ 1020.593861][T18418] Bluetooth: hci0: command 0x0406 tx timeout [ 1020.692396][T23586] device team0 left promiscuous mode [ 1020.706152][T23586] device team_slave_0 left promiscuous mode [ 1020.712329][T23586] device team_slave_1 left promiscuous mode [ 1020.785629][T23586] batman_adv: batadv0: Adding interface: team0 [ 1020.809226][T23586] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.841523][T18418] Bluetooth: hci2: command 0x041b tx timeout [ 1020.916397][T23586] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1021.054782][T23600] netlink: 'syz.3.6983': attribute type 10 has an invalid length. [ 1021.074268][T23600] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.093768][T23600] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.117269][T23600] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.144295][T23600] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.171862][T23602] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.6984'. [ 1021.185217][T23504] device hsr_slave_0 entered promiscuous mode [ 1021.208418][T23504] device hsr_slave_1 entered promiscuous mode [ 1021.225300][T23504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1021.233099][T23504] Cannot create hsr debugfs directory [ 1021.394825][T23607] netlink: 'syz.1.6986': attribute type 39 has an invalid length. [ 1021.557508][T23608] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6987'. [ 1021.765449][T23621] netlink: 188 bytes leftover after parsing attributes in process `syz.6.6992'. [ 1021.814411][T23504] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.029221][T23504] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.109505][T23629] netlink: 'syz.6.6993': attribute type 39 has an invalid length. [ 1022.234072][T23504] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.259229][T23634] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.6996'. [ 1022.346067][T23504] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.640297][T23504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1022.690704][T18418] syzkaller0: tun_net_xmit 76 [ 1022.697733][T18418] syzkaller0: tun_net_xmit 48 [ 1022.702730][T23646] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7003'. [ 1022.722899][T23504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1022.730314][T18426] syzkaller0: tun_net_xmit 76 [ 1022.746321][T23504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1022.768989][T23504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1022.832766][T23642] syzkaller0: create flow: hash 2078515152 index 1 [ 1022.904177][T23653] netlink: 'syz.1.7005': attribute type 9 has an invalid length. [ 1022.916619][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 1022.924900][T23651] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7004'. [ 1022.939356][T23641] syzkaller0: delete flow: hash 2078515152 index 1 [ 1022.967485][T23653] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7005'. [ 1023.217868][T23659] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.7008'. [ 1023.222004][T23504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.278330][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1023.293547][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1023.306460][T23504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.450803][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1023.464155][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1023.498791][T21172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.506037][T21172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.606569][T23669] validate_nla: 1 callbacks suppressed [ 1023.606588][T23669] netlink: 'syz.6.7009': attribute type 10 has an invalid length. [ 1023.803509][T23669] team0: Port device geneve1 added [ 1023.841240][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1023.854613][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1023.882017][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1023.895803][T21172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.902979][T21172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.912787][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1023.923041][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1023.932906][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1023.946609][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1023.956318][T21172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1023.990716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1024.010983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1024.020766][T23675] netlink: 'syz.3.7014': attribute type 39 has an invalid length. [ 1024.172567][T23680] netlink: 'syz.1.7016': attribute type 9 has an invalid length. [ 1024.192279][T23504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1024.206095][T23504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1024.227711][T23680] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7016'. [ 1024.228881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1024.262149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1024.294149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1024.325893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1024.369711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1024.404703][T23678] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7015'. [ 1024.544126][T23688] netlink: 'syz.1.7018': attribute type 10 has an invalid length. [ 1024.601793][T23694] netlink: 16222 bytes leftover after parsing attributes in process `syz.6.7020'. [ 1024.697746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1024.716359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1024.745658][T23504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.010189][T18426] Bluetooth: hci2: command 0x0419 tx timeout [ 1025.108722][T23712] netlink: 'syz.3.7028': attribute type 9 has an invalid length. [ 1025.146370][T23712] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7028'. [ 1025.776332][T23726] netlink: 'syz.1.7032': attribute type 3 has an invalid length. [ 1025.841492][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1025.861492][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1025.880503][T23732] FAULT_INJECTION: forcing a failure. [ 1025.880503][T23732] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.943792][T23732] CPU: 1 PID: 23732 Comm: syz.2.7034 Not tainted 5.15.180-syzkaller #0 [ 1025.952179][T23732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1025.962285][T23732] Call Trace: [ 1025.965585][T23732] [ 1025.968528][T23732] dump_stack_lvl+0x1e3/0x2d0 [ 1025.973495][T23732] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1025.979155][T23732] ? panic+0x860/0x860 [ 1025.983397][T23732] ? kasan_check_range+0x1/0x290 [ 1025.988364][T23732] should_fail+0x38a/0x4c0 [ 1025.991541][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1025.992811][T23732] should_failslab+0x5/0x20 [ 1026.004940][T23732] slab_pre_alloc_hook+0x53/0xc0 [ 1026.009999][T23732] __kmalloc+0x6e/0x300 [ 1026.011396][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1026.014165][T23732] ? tomoyo_encode+0x26b/0x530 [ 1026.014199][T23732] tomoyo_encode+0x26b/0x530 [ 1026.014222][T23732] ? sock_free_inode+0x20/0x20 [ 1026.014248][T23732] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 1026.014283][T23732] tomoyo_path_number_perm+0x225/0x810 [ 1026.014313][T23732] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1026.014371][T23732] ? __fget_files+0x413/0x480 [ 1026.056958][T23504] device veth0_vlan entered promiscuous mode [ 1026.057269][T23732] security_file_ioctl+0x6d/0xa0 [ 1026.068169][T23732] __se_sys_ioctl+0x47/0x160 [ 1026.072788][T23732] do_syscall_64+0x3b/0x80 [ 1026.077239][T23732] ? clear_bhb_loop+0x15/0x70 [ 1026.081944][T23732] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1026.083510][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1026.087859][T23732] RIP: 0033:0x7f516aa9b969 [ 1026.087884][T23732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.087903][T23732] RSP: 002b:00007f5168903038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1026.087928][T23732] RAX: ffffffffffffffda RBX: 00007f516acc2fa0 RCX: 00007f516aa9b969 [ 1026.087945][T23732] RDX: 0000200000000080 RSI: 00000000000089b1 RDI: 0000000000000006 [ 1026.087961][T23732] RBP: 00007f5168903090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.116629][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1026.119151][T23732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.145167][T23504] device veth1_vlan entered promiscuous mode [ 1026.151461][T23732] R13: 0000000000000000 R14: 00007f516acc2fa0 R15: 00007ffc3ddca868 [ 1026.151497][T23732] [ 1026.275062][T23732] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1026.307087][T11601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1026.387328][T23744] netlink: 'syz.6.7039': attribute type 9 has an invalid length. [ 1026.415751][T11601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1026.436285][T23744] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.7039'. [ 1026.457733][T11601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1026.668364][T23504] device veth0_macvtap entered promiscuous mode [ 1026.973330][T23504] device veth1_macvtap entered promiscuous mode [ 1027.037388][T23504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.059171][T23504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.074672][T23504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.086384][T23504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.134712][T23504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.146943][T23504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.163107][T23504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.177545][T23504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.208604][T23504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.239319][T23504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.310910][T23504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.363914][T23504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.432722][T23504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.482593][T23504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.511398][T23504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.563747][T23504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.581882][T23504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.619131][T23504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.628807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1027.670722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1027.685234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1027.725299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1027.735387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1027.745654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1027.821826][T23504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.831812][T23504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.841418][T23504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.850652][T23504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.884445][T11617] device hsr_slave_0 left promiscuous mode [ 1027.900062][T11617] device hsr_slave_1 left promiscuous mode [ 1027.926072][T11617] batman_adv: batadv0: Removing interface: team0 [ 1027.955920][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.968049][T11617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.992225][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.019789][T11617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.031706][T11617] device veth1_macvtap left promiscuous mode [ 1028.060254][T11617] device veth0_macvtap left promiscuous mode [ 1028.068092][T23792] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.7055'. [ 1028.072393][T11617] device veth1_vlan left promiscuous mode [ 1028.596823][T11617] team0 (unregistering): Port device team_slave_1 removed [ 1028.619226][T11617] team0 (unregistering): Port device team_slave_0 removed [ 1028.632626][T11617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.652202][T11617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.788278][T23808] netlink: 'syz.3.7061': attribute type 3 has an invalid length. [ 1028.818144][T23808] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.7061'. [ 1028.878769][T11617] bond0 (unregistering): Released all slaves [ 1029.193352][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.239493][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.336227][T11597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1029.372904][T23824] netlink: 16222 bytes leftover after parsing attributes in process `syz.6.7067'. [ 1029.385343][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.399639][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.463107][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1030.338025][T23850] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.7077'. [ 1030.924056][T18418] Bluetooth: hci3: command 0x0406 tx timeout [ 1031.032368][T23879] netlink: 'syz.2.7086': attribute type 3 has an invalid length. [ 1031.068353][T23879] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7086'. [ 1032.261695][T23893] netlink: 'syz.3.7093': attribute type 17 has an invalid length. [ 1032.301896][T23893] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7093'. [ 1032.312191][T23890] netlink: 'syz.6.7091': attribute type 9 has an invalid length. [ 1032.363900][T23890] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.7091'. [ 1032.781328][T23913] netlink: 'syz.6.7100': attribute type 3 has an invalid length. [ 1032.857095][T23913] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.7100'. [ 1033.362075][T23926] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7104'. [ 1033.440900][T23932] netlink: 'syz.1.7103': attribute type 3 has an invalid length. [ 1033.483769][T23929] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7104'. [ 1033.526844][T23934] netlink: 'syz.3.7106': attribute type 3 has an invalid length. [ 1033.535310][T23932] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.7103'. [ 1033.763532][T23941] netlink: 'syz.2.7110': attribute type 9 has an invalid length. [ 1034.194960][T23954] netlink: 'syz.2.7115': attribute type 9 has an invalid length. [ 1034.226846][T23954] __nla_validate_parse: 2 callbacks suppressed [ 1034.226887][T23954] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7115'. [ 1034.384849][T23960] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.7118'. [ 1035.018213][T23974] netlink: 'syz.5.7123': attribute type 9 has an invalid length. [ 1035.046864][T23974] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.7123'. [ 1035.400809][T23985] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7127'. [ 1035.524436][T23992] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.7131'. [ 1035.558187][T23993] netlink: 'syz.1.7130': attribute type 9 has an invalid length. [ 1035.587097][T23993] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7130'. [ 1035.801167][T24002] netlink: 'syz.1.7136': attribute type 9 has an invalid length. [ 1035.875494][T24002] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7136'. [ 1036.355814][T24013] netlink: 'syz.1.7139': attribute type 3 has an invalid length. [ 1036.400868][T24013] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.7139'. [ 1036.497447][T24021] FAULT_INJECTION: forcing a failure. [ 1036.497447][T24021] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.554947][T24021] CPU: 1 PID: 24021 Comm: syz.6.7141 Not tainted 5.15.180-syzkaller #0 [ 1036.563250][T24021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1036.573329][T24021] Call Trace: [ 1036.576629][T24021] [ 1036.579575][T24021] dump_stack_lvl+0x1e3/0x2d0 [ 1036.584975][T24021] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1036.590630][T24021] ? panic+0x860/0x860 [ 1036.594711][T24021] ? __might_sleep+0xc0/0xc0 [ 1036.599311][T24021] should_fail+0x38a/0x4c0 [ 1036.603736][T24021] ? sockfs_init_fs_context+0xa0/0xa0 [ 1036.609108][T24021] should_failslab+0x5/0x20 [ 1036.613618][T24021] slab_pre_alloc_hook+0x53/0xc0 [ 1036.618556][T24021] ? sockfs_init_fs_context+0xa0/0xa0 [ 1036.623926][T24021] ? sock_alloc_inode+0x17/0xb0 [ 1036.628812][T24021] kmem_cache_alloc+0x3f/0x280 [ 1036.633580][T24021] ? sockfs_init_fs_context+0xa0/0xa0 [ 1036.638959][T24021] sock_alloc_inode+0x17/0xb0 [ 1036.643636][T24021] ? sockfs_init_fs_context+0xa0/0xa0 [ 1036.649015][T24021] new_inode_pseudo+0x60/0x210 [ 1036.653786][T24021] __sock_create+0x11f/0x8f0 [ 1036.658389][T24021] __sys_socketpair+0x335/0x700 [ 1036.663245][T24021] ? __ia32_sys_socket+0x80/0x80 [ 1036.668230][T24021] ? vtime_user_exit+0x2d1/0x400 [ 1036.673180][T24021] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1036.679168][T24021] __x64_sys_socketpair+0x97/0xb0 [ 1036.684204][T24021] do_syscall_64+0x3b/0x80 [ 1036.688628][T24021] ? clear_bhb_loop+0x15/0x70 [ 1036.693309][T24021] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1036.699230][T24021] RIP: 0033:0x7fa36bbd0969 [ 1036.703670][T24021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.723279][T24021] RSP: 002b:00007fa369a38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1036.731699][T24021] RAX: ffffffffffffffda RBX: 00007fa36bdf7fa0 RCX: 00007fa36bbd0969 [ 1036.739678][T24021] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000010 [ 1036.747650][T24021] RBP: 00007fa369a38090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.755641][T24021] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1036.763611][T24021] R13: 0000000000000000 R14: 00007fa36bdf7fa0 R15: 00007ffdb1f83dc8 [ 1036.771615][T24021] [ 1036.789118][T24024] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7143'. [ 1036.949093][T24032] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.7145'. [ 1036.955392][T24031] netlink: 'syz.2.7147': attribute type 2 has an invalid length. [ 1037.001755][T24034] netlink: 'syz.1.7149': attribute type 9 has an invalid length. [ 1037.027055][T24031] netlink: 'syz.2.7147': attribute type 9 has an invalid length. [ 1037.171668][T24031] netlink: 'syz.2.7147': attribute type 2 has an invalid length. [ 1037.193885][T24021] socket: no more sockets [ 1037.983169][T24065] netlink: 'syz.3.7161': attribute type 9 has an invalid length. [ 1038.242998][T24072] FAULT_INJECTION: forcing a failure. [ 1038.242998][T24072] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.390990][T24072] CPU: 0 PID: 24072 Comm: syz.6.7164 Not tainted 5.15.180-syzkaller #0 [ 1038.399314][T24072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1038.409411][T24072] Call Trace: [ 1038.412722][T24072] [ 1038.415682][T24072] dump_stack_lvl+0x1e3/0x2d0 [ 1038.420402][T24072] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1038.426069][T24072] ? panic+0x860/0x860 [ 1038.430174][T24072] ? __might_sleep+0xc0/0xc0 [ 1038.434989][T24072] should_fail+0x38a/0x4c0 [ 1038.439458][T24072] should_failslab+0x5/0x20 [ 1038.443998][T24072] slab_pre_alloc_hook+0x53/0xc0 [ 1038.449070][T24072] __kmalloc+0x6e/0x300 [ 1038.453255][T24072] ? tomoyo_realpath_from_path+0xd8/0x5e0 [ 1038.459022][T24072] tomoyo_realpath_from_path+0xd8/0x5e0 [ 1038.464632][T24072] tomoyo_path_number_perm+0x225/0x810 [ 1038.470152][T24072] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1038.475747][T24072] ? __fget_files+0x413/0x480 [ 1038.480498][T24072] security_file_ioctl+0x6d/0xa0 [ 1038.485486][T24072] __se_sys_ioctl+0x47/0x160 [ 1038.490132][T24072] do_syscall_64+0x3b/0x80 [ 1038.494596][T24072] ? clear_bhb_loop+0x15/0x70 [ 1038.499317][T24072] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1038.505248][T24072] RIP: 0033:0x7fa36bbd0969 [ 1038.509719][T24072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.529390][T24072] RSP: 002b:00007fa369a38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.537851][T24072] RAX: ffffffffffffffda RBX: 00007fa36bdf7fa0 RCX: 00007fa36bbd0969 [ 1038.545872][T24072] RDX: 000000110e22fff7 RSI: 00000000c004743e RDI: 0000000000000006 [ 1038.553883][T24072] RBP: 00007fa369a38090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.561885][T24072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.569887][T24072] R13: 0000000000000000 R14: 00007fa36bdf7fa0 R15: 00007ffdb1f83dc8 [ 1038.577929][T24072] [ 1038.883831][T24072] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1039.358548][T24100] validate_nla: 2 callbacks suppressed [ 1039.358566][T24100] netlink: 'syz.2.7173': attribute type 3 has an invalid length. [ 1039.445867][T24100] __nla_validate_parse: 7 callbacks suppressed [ 1039.445885][T24100] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7173'. [ 1039.523099][T24109] FAULT_INJECTION: forcing a failure. [ 1039.523099][T24109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.573907][T24109] CPU: 0 PID: 24109 Comm: syz.1.7180 Not tainted 5.15.180-syzkaller #0 [ 1039.582218][T24109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1039.592309][T24109] Call Trace: [ 1039.595615][T24109] [ 1039.598570][T24109] dump_stack_lvl+0x1e3/0x2d0 [ 1039.603289][T24109] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1039.608955][T24109] ? panic+0x860/0x860 [ 1039.613047][T24109] should_fail+0x38a/0x4c0 [ 1039.617592][T24109] _copy_from_user+0x2d/0x170 [ 1039.622327][T24109] __copy_msghdr_from_user+0xaf/0x7c0 [ 1039.627739][T24109] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 1039.633502][T24109] ? __ia32_sys_shutdown+0x60/0x60 [ 1039.638675][T24109] ___sys_sendmsg+0x166/0x2e0 [ 1039.643396][T24109] ? __sys_sendmsg+0x260/0x260 [ 1039.648284][T24109] ? __fdget+0x191/0x220 [ 1039.652573][T24109] __se_sys_sendmsg+0x19a/0x260 [ 1039.657457][T24109] ? __x64_sys_sendmsg+0x80/0x80 [ 1039.662443][T24109] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1039.668452][T24109] ? lockdep_hardirqs_on+0x94/0x130 [ 1039.673685][T24109] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1039.679700][T24109] do_syscall_64+0x3b/0x80 [ 1039.684146][T24109] ? clear_bhb_loop+0x15/0x70 [ 1039.688852][T24109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1039.694774][T24109] RIP: 0033:0x7fd2334de969 [ 1039.699221][T24109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.718953][T24109] RSP: 002b:00007fd231346038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.727406][T24109] RAX: ffffffffffffffda RBX: 00007fd233705fa0 RCX: 00007fd2334de969 [ 1039.735396][T24109] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1039.743382][T24109] RBP: 00007fd231346090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.751371][T24109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.759358][T24109] R13: 0000000000000000 R14: 00007fd233705fa0 R15: 00007ffdfd4754b8 [ 1039.767421][T24109] [ 1040.487159][T24133] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.7186'. [ 1040.821624][T24135] syz.3.7188[24135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1040.821730][T24135] syz.3.7188[24135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1041.073855][T12367] Bluetooth: hci4: command 0x0406 tx timeout [ 1041.239733][T24153] netlink: 'syz.5.7193': attribute type 3 has an invalid length. [ 1041.251664][T24160] netlink: 'syz.6.7196': attribute type 9 has an invalid length. [ 1041.259548][T24153] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.7193'. [ 1041.354661][T24160] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.7196'. [ 1041.478072][T24167] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.7200'. [ 1041.579450][T24169] netlink: 'syz.3.7201': attribute type 39 has an invalid length. [ 1041.660873][T24173] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.7213'. [ 1042.352200][T24189] netlink: 'syz.6.7205': attribute type 10 has an invalid length. [ 1042.759440][T24205] netlink: 'syz.3.7214': attribute type 9 has an invalid length. [ 1042.764103][T24204] netlink: 'syz.6.7212': attribute type 3 has an invalid length. [ 1042.785817][T24204] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7212'. [ 1042.822429][T24197] netlink: 'syz.2.7210': attribute type 3 has an invalid length. [ 1042.834846][T24205] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7214'. [ 1042.846958][T24197] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7210'. [ 1043.014849][T24213] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.7217'. [ 1043.592585][T24227] netlink: 'syz.3.7224': attribute type 3 has an invalid length. [ 1043.854589][T24237] netlink: 'syz.1.7227': attribute type 9 has an invalid length. [ 1044.133680][T24233] device syzkaller0 entered promiscuous mode [ 1044.663420][T24260] FAULT_INJECTION: forcing a failure. [ 1044.663420][T24260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.685706][T24260] CPU: 0 PID: 24260 Comm: syz.5.7236 Not tainted 5.15.180-syzkaller #0 [ 1044.694018][T24260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1044.704113][T24260] Call Trace: [ 1044.707424][T24260] [ 1044.710387][T24260] dump_stack_lvl+0x1e3/0x2d0 [ 1044.715112][T24260] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1044.720903][T24260] ? panic+0x860/0x860 [ 1044.725011][T24260] should_fail+0x38a/0x4c0 [ 1044.729591][T24260] _copy_from_user+0x2d/0x170 [ 1044.734296][T24260] __sys_bpf+0x1d5/0x670 [ 1044.738728][T24260] ? bpf_link_show_fdinfo+0x300/0x300 [ 1044.744515][T24260] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1044.750556][T24260] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1044.756579][T24260] ? lockdep_hardirqs_on+0x94/0x130 [ 1044.761823][T24260] __x64_sys_bpf+0x78/0x90 [ 1044.766270][T24260] do_syscall_64+0x3b/0x80 [ 1044.770695][T24260] ? clear_bhb_loop+0x15/0x70 [ 1044.775379][T24260] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1044.781294][T24260] RIP: 0033:0x7fe3e26b6969 [ 1044.785713][T24260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.805357][T24260] RSP: 002b:00007fe3e051e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1044.813784][T24260] RAX: ffffffffffffffda RBX: 00007fe3e28ddfa0 RCX: 00007fe3e26b6969 [ 1044.821780][T24260] RDX: 0000000000000020 RSI: 00002000000008c0 RDI: 0000000000000002 [ 1044.829759][T24260] RBP: 00007fe3e051e090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.837739][T24260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.845716][T24260] R13: 0000000000000000 R14: 00007fe3e28ddfa0 R15: 00007fffd8d62dd8 [ 1044.853714][T24260] [ 1044.998628][T24269] FAULT_INJECTION: forcing a failure. [ 1044.998628][T24269] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.011341][T24269] CPU: 0 PID: 24269 Comm: syz.3.7240 Not tainted 5.15.180-syzkaller #0 [ 1045.019603][T24269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1045.029673][T24269] Call Trace: [ 1045.032962][T24269] [ 1045.035902][T24269] dump_stack_lvl+0x1e3/0x2d0 [ 1045.040607][T24269] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1045.046265][T24269] ? panic+0x860/0x860 [ 1045.050384][T24269] should_fail+0x38a/0x4c0 [ 1045.054832][T24269] should_failslab+0x5/0x20 [ 1045.059352][T24269] slab_pre_alloc_hook+0x53/0xc0 [ 1045.064309][T24269] ? skb_clone+0x1bb/0x350 [ 1045.068741][T24269] kmem_cache_alloc+0x3f/0x280 [ 1045.073525][T24269] ? __lock_acquire+0x1ff0/0x1ff0 [ 1045.078576][T24269] skb_clone+0x1bb/0x350 [ 1045.082843][T24269] pfkey_broadcast_one+0x99/0x320 [ 1045.087899][T24269] pfkey_broadcast+0x384/0x3b0 [ 1045.092745][T24269] dump_sp+0x29e/0x4a0 [ 1045.096849][T24269] xfrm_policy_walk+0x210/0x690 [ 1045.101729][T24269] ? pfkey_dump_sp_done+0x50/0x50 [ 1045.106776][T24269] pfkey_do_dump+0x5b/0x3f0 [ 1045.111296][T24269] ? pfkey_spddump+0x171/0x250 [ 1045.116097][T24269] pfkey_sendmsg+0xb5d/0xfd0 [ 1045.120724][T24269] ? pfkey_release+0x330/0x330 [ 1045.125533][T24269] ? aa_sock_msg_perm+0x91/0x150 [ 1045.130493][T24269] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1045.135795][T24269] ? security_socket_sendmsg+0x7d/0xa0 [ 1045.141278][T24269] ? pfkey_release+0x330/0x330 [ 1045.146060][T24269] ____sys_sendmsg+0x59e/0x8f0 [ 1045.150866][T24269] ? __sys_sendmsg_sock+0x30/0x30 [ 1045.155936][T24269] ? import_iovec+0x77/0xa0 [ 1045.160466][T24269] ___sys_sendmsg+0x252/0x2e0 [ 1045.165173][T24269] ? __sys_sendmsg+0x260/0x260 [ 1045.170026][T24269] ? __fdget+0x191/0x220 [ 1045.174290][T24269] __se_sys_sendmsg+0x19a/0x260 [ 1045.179159][T24269] ? __x64_sys_sendmsg+0x80/0x80 [ 1045.184129][T24269] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1045.190129][T24269] ? lockdep_hardirqs_on+0x94/0x130 [ 1045.195355][T24269] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1045.201357][T24269] do_syscall_64+0x3b/0x80 [ 1045.205790][T24269] ? clear_bhb_loop+0x15/0x70 [ 1045.210487][T24269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1045.216399][T24269] RIP: 0033:0x7f9919f14969 [ 1045.220833][T24269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1045.240457][T24269] RSP: 002b:00007f9917d7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1045.248897][T24269] RAX: ffffffffffffffda RBX: 00007f991a13bfa0 RCX: 00007f9919f14969 [ 1045.256884][T24269] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000005 [ 1045.264871][T24269] RBP: 00007f9917d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.272867][T24269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1045.280891][T24269] R13: 0000000000000000 R14: 00007f991a13bfa0 R15: 00007fff0a5dbcb8 [ 1045.288923][T24269] [ 1045.357389][T24270] netlink: 'syz.1.7239': attribute type 9 has an invalid length. [ 1045.374528][T24270] __nla_validate_parse: 3 callbacks suppressed [ 1045.374570][T24270] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7239'. [ 1045.498683][T24277] netlink: 16198 bytes leftover after parsing attributes in process `syz.5.7242'. [ 1045.885118][T24292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7250'. [ 1045.913931][T24292] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7250'. [ 1046.827386][T24317] netlink: 'syz.1.7257': attribute type 9 has an invalid length. [ 1046.856700][T24317] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1046.957132][T24324] netlink: 16198 bytes leftover after parsing attributes in process `syz.3.7260'. [ 1047.517937][T24335] netlink: 'syz.1.7266': attribute type 3 has an invalid length. [ 1047.533495][T24335] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.7266'. [ 1047.756377][T24355] netlink: 'syz.5.7273': attribute type 9 has an invalid length. [ 1047.817753][T24355] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.7273'. [ 1047.991042][T24363] netlink: 16198 bytes leftover after parsing attributes in process `syz.3.7277'. [ 1048.031415][T24368] netlink: 'syz.1.7279': attribute type 10 has an invalid length. [ 1048.205760][T24368] batman_adv: batadv0: Adding interface: team0 [ 1048.211987][T24368] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.300396][T24374] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7280'. [ 1048.343738][T24368] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1048.377593][T24369] netlink: 'syz.1.7279': attribute type 10 has an invalid length. [ 1048.397771][T24372] netlink: 'syz.1.7279': attribute type 10 has an invalid length. [ 1048.426477][T24372] device team0 entered promiscuous mode [ 1048.452823][T24372] device team_slave_0 entered promiscuous mode [ 1048.459928][T24372] device team_slave_1 entered promiscuous mode [ 1048.477054][T24372] device geneve1 entered promiscuous mode [ 1048.514660][T24372] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.532352][T24372] batman_adv: batadv0: Interface activated: team0 [ 1048.552714][T24372] batman_adv: batadv0: Interface deactivated: team0 [ 1048.581927][T24372] batman_adv: batadv0: Removing interface: team0 [ 1048.978486][T24394] netlink: 'syz.2.7288': attribute type 9 has an invalid length. [ 1049.065993][T24395] netlink: 'syz.1.7286': attribute type 2 has an invalid length. [ 1049.157436][T24403] netlink: 'syz.6.7285': attribute type 3 has an invalid length. [ 1050.465999][T24436] __nla_validate_parse: 8 callbacks suppressed [ 1050.466021][T24436] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7304'. [ 1050.591799][T24442] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7307'. [ 1050.822432][T24449] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7319'. [ 1051.361553][T24465] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7315'. [ 1051.428566][T24466] validate_nla: 2 callbacks suppressed [ 1051.428605][T24466] netlink: 'syz.2.7314': attribute type 9 has an invalid length. [ 1051.453720][T24466] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7314'. [ 1051.778999][T24481] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.7323'. [ 1052.916657][T24512] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7332'. [ 1053.199069][T24517] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.7338'. [ 1053.271022][T24523] netlink: 'syz.6.7340': attribute type 10 has an invalid length. [ 1054.402456][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.408852][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.577955][T24546] netlink: 'syz.1.7346': attribute type 3 has an invalid length. [ 1054.593888][T24546] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.7346'. [ 1055.019841][T24553] netlink: 'syz.2.7348': attribute type 3 has an invalid length. [ 1055.052551][T24553] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7348'. [ 1055.509942][T24568] netlink: 'syz.2.7357': attribute type 10 has an invalid length. [ 1055.741821][T24576] __nla_validate_parse: 2 callbacks suppressed [ 1055.741845][T24576] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.7359'. [ 1055.940788][T24576] netlink: 'syz.5.7359': attribute type 10 has an invalid length. [ 1056.257782][T24576] team0: Device ipvlan1 failed to register rx_handler [ 1056.469470][T24578] netlink: 'syz.3.7360': attribute type 3 has an invalid length. [ 1056.495383][T24578] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.7360'. [ 1056.764304][T24600] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.7369'. [ 1057.616219][T24623] FAULT_INJECTION: forcing a failure. [ 1057.616219][T24623] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.684491][T24623] CPU: 1 PID: 24623 Comm: syz.3.7378 Not tainted 5.15.180-syzkaller #0 [ 1057.692797][T24623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1057.702876][T24623] Call Trace: [ 1057.706176][T24623] [ 1057.709127][T24623] dump_stack_lvl+0x1e3/0x2d0 [ 1057.713842][T24623] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1057.719511][T24623] ? panic+0x860/0x860 [ 1057.723620][T24623] ? __lock_acquire+0x1295/0x1ff0 [ 1057.728707][T24623] should_fail+0x38a/0x4c0 [ 1057.733164][T24623] should_failslab+0x5/0x20 [ 1057.737697][T24623] slab_pre_alloc_hook+0x53/0xc0 [ 1057.742670][T24623] ? skb_clone+0x1bb/0x350 [ 1057.747152][T24623] kmem_cache_alloc+0x3f/0x280 [ 1057.751956][T24623] skb_clone+0x1bb/0x350 [ 1057.756233][T24623] __netlink_deliver_tap+0x37f/0x770 [ 1057.761588][T24623] netlink_deliver_tap+0x16c/0x180 [ 1057.766728][T24623] netlink_unicast+0x792/0x990 [ 1057.771537][T24623] ? netlink_detachskb+0x90/0x90 [ 1057.776512][T24623] ? __virt_addr_valid+0x3bb/0x460 [ 1057.781766][T24623] ? 0xffffffff81000000 [ 1057.785974][T24623] ? __check_object_size+0x300/0x410 [ 1057.791287][T24623] ? bpf_lsm_netlink_send+0x5/0x10 [ 1057.796431][T24623] netlink_sendmsg+0xa30/0xd60 [ 1057.801247][T24623] ? netlink_getsockopt+0x5b0/0x5b0 [ 1057.806477][T24623] ? aa_sock_msg_perm+0x91/0x150 [ 1057.811490][T24623] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1057.816815][T24623] ? security_socket_sendmsg+0x7d/0xa0 [ 1057.822297][T24623] ? netlink_getsockopt+0x5b0/0x5b0 [ 1057.827533][T24623] ____sys_sendmsg+0x59e/0x8f0 [ 1057.832392][T24623] ? __sys_sendmsg_sock+0x30/0x30 [ 1057.837463][T24623] ? import_iovec+0x77/0xa0 [ 1057.842004][T24623] ___sys_sendmsg+0x252/0x2e0 [ 1057.846728][T24623] ? __sys_sendmsg+0x260/0x260 [ 1057.851621][T24623] ? __fdget+0x191/0x220 [ 1057.855895][T24623] __se_sys_sendmsg+0x19a/0x260 [ 1057.860784][T24623] ? __x64_sys_sendmsg+0x80/0x80 [ 1057.865770][T24623] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1057.871775][T24623] ? lockdep_hardirqs_on+0x94/0x130 [ 1057.877004][T24623] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1057.883019][T24623] do_syscall_64+0x3b/0x80 [ 1057.887466][T24623] ? clear_bhb_loop+0x15/0x70 [ 1057.892189][T24623] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1057.898124][T24623] RIP: 0033:0x7f9919f14969 [ 1057.902581][T24623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.922252][T24623] RSP: 002b:00007f9917d7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1057.930711][T24623] RAX: ffffffffffffffda RBX: 00007f991a13bfa0 RCX: 00007f9919f14969 [ 1057.938714][T24623] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1057.946713][T24623] RBP: 00007f9917d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.954711][T24623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.962799][T24623] R13: 0000000000000000 R14: 00007f991a13bfa0 R15: 00007fff0a5dbcb8 [ 1057.970834][T24623] [ 1058.003333][T24622] netlink: 'syz.5.7376': attribute type 3 has an invalid length. [ 1058.129922][T24629] netlink: 'syz.1.7379': attribute type 3 has an invalid length. [ 1058.143693][T24622] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.7376'. [ 1058.163683][T24629] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.7379'. [ 1058.173989][T24623] netlink: 'syz.3.7378': attribute type 21 has an invalid length. [ 1058.406898][T24641] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.7385'. [ 1058.821003][T24654] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7391'. [ 1059.268359][T24671] netlink: 'syz.1.7396': attribute type 3 has an invalid length. [ 1059.277883][T24671] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.7396'. [ 1059.396910][T24680] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.7400'. [ 1059.666639][T24690] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7405'. [ 1060.296964][T24714] netlink: 'syz.2.7414': attribute type 3 has an invalid length. [ 1060.953208][T24737] __nla_validate_parse: 4 callbacks suppressed [ 1060.953230][T24737] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7422'. [ 1061.000345][T24740] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7424'. [ 1061.259129][T24746] netlink: 'syz.5.7426': attribute type 33 has an invalid length. [ 1061.273898][T24746] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7426'. [ 1061.561034][T18457] Bluetooth: hci1: command 0x0406 tx timeout [ 1061.770244][T24754] netlink: 'syz.5.7428': attribute type 3 has an invalid length. [ 1061.782242][T24754] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.7428'. [ 1062.213514][T24778] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7435'. [ 1063.111817][T24822] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7452'. [ 1063.179278][T24807] netlink: 'syz.6.7448': attribute type 3 has an invalid length. [ 1063.272988][T24807] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.7448'. [ 1063.582505][T24831] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.7455'. [ 1064.469925][T24864] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.7469'. [ 1064.481643][T24862] netlink: 'syz.5.7466': attribute type 3 has an invalid length. [ 1064.554237][T24862] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.7466'. [ 1064.636989][T24870] FAULT_INJECTION: forcing a failure. [ 1064.636989][T24870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.793710][T24870] CPU: 1 PID: 24870 Comm: syz.3.7471 Not tainted 5.15.180-syzkaller #0 [ 1064.802116][T24870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1064.812194][T24870] Call Trace: [ 1064.815490][T24870] [ 1064.818436][T24870] dump_stack_lvl+0x1e3/0x2d0 [ 1064.823154][T24870] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1064.828819][T24870] ? panic+0x860/0x860 [ 1064.832923][T24870] ? snprintf+0xd6/0x120 [ 1064.837195][T24870] should_fail+0x38a/0x4c0 [ 1064.841645][T24870] _copy_to_user+0x2d/0x130 [ 1064.846177][T24870] simple_read_from_buffer+0xc6/0x150 [ 1064.851578][T24870] proc_fail_nth_read+0x1a3/0x210 [ 1064.856631][T24870] ? proc_fault_inject_write+0x390/0x390 [ 1064.862294][T24870] ? fsnotify_perm+0x442/0x590 [ 1064.867075][T24870] ? proc_fault_inject_write+0x390/0x390 [ 1064.872757][T24870] vfs_read+0x2fc/0xe10 [ 1064.876958][T24870] ? kernel_read+0x1f0/0x1f0 [ 1064.881580][T24870] ? __fget_files+0x413/0x480 [ 1064.886294][T24870] ? mutex_lock_nested+0x17/0x20 [ 1064.891251][T24870] ? __fdget_pos+0x2cb/0x380 [ 1064.895857][T24870] ? ksys_read+0x77/0x2c0 [ 1064.900210][T24870] ksys_read+0x1a2/0x2c0 [ 1064.904477][T24870] ? print_irqtrace_events+0x210/0x210 [ 1064.909968][T24870] ? vfs_write+0xe50/0xe50 [ 1064.914406][T24870] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1064.920411][T24870] ? lockdep_hardirqs_on+0x94/0x130 [ 1064.925679][T24870] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1064.931691][T24870] do_syscall_64+0x3b/0x80 [ 1064.936138][T24870] ? clear_bhb_loop+0x15/0x70 [ 1064.940845][T24870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1064.946762][T24870] RIP: 0033:0x7f9919f1337c [ 1064.951203][T24870] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1064.970830][T24870] RSP: 002b:00007f9917d7c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1064.979279][T24870] RAX: ffffffffffffffda RBX: 00007f991a13bfa0 RCX: 00007f9919f1337c [ 1064.987273][T24870] RDX: 000000000000000f RSI: 00007f9917d7c0a0 RDI: 0000000000000005 [ 1064.995264][T24870] RBP: 00007f9917d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.003255][T24870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.011246][T24870] R13: 0000000000000000 R14: 00007f991a13bfa0 R15: 00007fff0a5dbcb8 [ 1065.019260][T24870] [ 1068.418286][T24900] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.7483'. [ 1068.712049][T24911] netlink: 'syz.1.7486': attribute type 3 has an invalid length. [ 1068.737679][T24911] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7486'. [ 1069.252584][T24940] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.7498'. [ 1070.016756][T24959] netlink: 'syz.3.7505': attribute type 3 has an invalid length. [ 1070.027007][T24959] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.7505'. [ 1070.991249][T24985] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7515'. [ 1071.478171][T25010] netlink: 'syz.5.7519': attribute type 3 has an invalid length. [ 1071.486760][T25010] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.7519'. [ 1071.545354][T25015] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7523'. [ 1071.830980][T25025] netlink: 'syz.2.7525': attribute type 3 has an invalid length. [ 1071.852774][T25025] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1071.900968][T25018] netlink: 'syz.1.7522': attribute type 9 has an invalid length. [ 1071.935312][T25018] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7522'. [ 1072.721347][T25042] netlink: 'syz.6.7531': attribute type 21 has an invalid length. [ 1072.742900][T25042] netlink: 'syz.6.7531': attribute type 1 has an invalid length. [ 1073.539323][T25054] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7536'. [ 1075.107198][T25118] netlink: 'syz.5.7561': attribute type 3 has an invalid length. [ 1075.213893][T25118] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7561'. [ 1076.112210][T25153] netlink: 'syz.2.7578': attribute type 28 has an invalid length. [ 1076.131837][T25158] FAULT_INJECTION: forcing a failure. [ 1076.131837][T25158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.188901][T25154] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.7579'. [ 1076.194406][T25158] CPU: 1 PID: 25158 Comm: syz.3.7580 Not tainted 5.15.180-syzkaller #0 [ 1076.206413][T25158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1076.216497][T25158] Call Trace: [ 1076.219809][T25158] [ 1076.222763][T25158] dump_stack_lvl+0x1e3/0x2d0 [ 1076.227475][T25158] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1076.233146][T25158] ? panic+0x860/0x860 [ 1076.237217][T25158] ? validate_chain+0x112/0x5930 [ 1076.242154][T25158] ? validate_chain+0x112/0x5930 [ 1076.247094][T25158] should_fail+0x38a/0x4c0 [ 1076.251677][T25158] _copy_from_user+0x2d/0x170 [ 1076.256371][T25158] __copy_msghdr_from_user+0xaf/0x7c0 [ 1076.261757][T25158] ? __ia32_sys_shutdown+0x60/0x60 [ 1076.266908][T25158] ___sys_sendmsg+0x166/0x2e0 [ 1076.271615][T25158] ? __sys_sendmsg+0x260/0x260 [ 1076.276419][T25158] ? __fdget+0x191/0x220 [ 1076.280664][T25158] __se_sys_sendmsg+0x19a/0x260 [ 1076.285517][T25158] ? __x64_sys_sendmsg+0x80/0x80 [ 1076.290478][T25158] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1076.296459][T25158] ? lockdep_hardirqs_on+0x94/0x130 [ 1076.301659][T25158] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1076.307645][T25158] do_syscall_64+0x3b/0x80 [ 1076.312059][T25158] ? clear_bhb_loop+0x15/0x70 [ 1076.316879][T25158] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1076.322831][T25158] RIP: 0033:0x7f9919f14969 [ 1076.327264][T25158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1076.346877][T25158] RSP: 002b:00007f9917d7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.355299][T25158] RAX: ffffffffffffffda RBX: 00007f991a13bfa0 RCX: 00007f9919f14969 [ 1076.363271][T25158] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1076.371239][T25158] RBP: 00007f9917d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.379210][T25158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.387180][T25158] R13: 0000000000000000 R14: 00007f991a13bfa0 R15: 00007fff0a5dbcb8 [ 1076.395163][T25158] [ 1076.477018][T25162] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.7583'. [ 1076.603111][T25160] netlink: 'syz.1.7582': attribute type 3 has an invalid length. [ 1076.614468][T25160] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7582'. [ 1076.628005][T25167] netlink: 'syz.6.7586': attribute type 28 has an invalid length. [ 1077.534833][T25204] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.7600'. [ 1077.854465][T25217] netlink: 'syz.6.7601': attribute type 3 has an invalid length. [ 1077.871128][T25217] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.7601'. [ 1077.899880][T25212] device syzkaller0 entered promiscuous mode [ 1078.276574][T25231] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.7607'. [ 1078.587881][ T3546] udevd[3546]: worker [17731] terminated by signal 33 (Unknown signal 33) [ 1078.660213][ T3546] udevd[3546]: worker [17731] failed while handling '/devices/virtual/block/loop5' [ 1079.308222][T25271] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.7621'. [ 1080.561777][T25308] device macsec0 entered promiscuous mode [ 1081.238139][T25322] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.7643'. [ 1081.420750][T25326] FAULT_INJECTION: forcing a failure. [ 1081.420750][T25326] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.461959][T25328] netlink: 'syz.3.7646': attribute type 39 has an invalid length. [ 1081.479523][T25326] CPU: 1 PID: 25326 Comm: syz.5.7645 Not tainted 5.15.180-syzkaller #0 [ 1081.487828][T25326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1081.497898][T25326] Call Trace: [ 1081.501267][T25326] [ 1081.504203][T25326] dump_stack_lvl+0x1e3/0x2d0 [ 1081.508892][T25326] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1081.514530][T25326] ? panic+0x860/0x860 [ 1081.518628][T25326] should_fail+0x38a/0x4c0 [ 1081.523069][T25326] should_failslab+0x5/0x20 [ 1081.527571][T25326] slab_pre_alloc_hook+0x53/0xc0 [ 1081.532522][T25326] __kmalloc+0x6e/0x300 [ 1081.536677][T25326] ? bpf_prog_bind_map+0x3fb/0x610 [ 1081.541796][T25326] bpf_prog_bind_map+0x3fb/0x610 [ 1081.546738][T25326] __sys_bpf+0x2d0/0x670 [ 1081.551000][T25326] ? bpf_link_show_fdinfo+0x300/0x300 [ 1081.556387][T25326] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1081.562373][T25326] ? lockdep_hardirqs_on+0x94/0x130 [ 1081.567573][T25326] __x64_sys_bpf+0x78/0x90 [ 1081.571992][T25326] do_syscall_64+0x3b/0x80 [ 1081.576410][T25326] ? clear_bhb_loop+0x15/0x70 [ 1081.581090][T25326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1081.586982][T25326] RIP: 0033:0x7fe3e26b6969 [ 1081.591394][T25326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.611001][T25326] RSP: 002b:00007fe3e051e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1081.619417][T25326] RAX: ffffffffffffffda RBX: 00007fe3e28ddfa0 RCX: 00007fe3e26b6969 [ 1081.627399][T25326] RDX: 000000000000000c RSI: 0000200000000040 RDI: 0000000000000023 [ 1081.635380][T25326] RBP: 00007fe3e051e090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.643358][T25326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.651347][T25326] R13: 0000000000000000 R14: 00007fe3e28ddfa0 R15: 00007fffd8d62dd8 [ 1081.659338][T25326] [ 1082.354306][T25367] FAULT_INJECTION: forcing a failure. [ 1082.354306][T25367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.369496][T25365] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.7661'. [ 1082.381901][T25367] CPU: 0 PID: 25367 Comm: syz.6.7662 Not tainted 5.15.180-syzkaller #0 [ 1082.390189][T25367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1082.400279][T25367] Call Trace: [ 1082.403583][T25367] [ 1082.406541][T25367] dump_stack_lvl+0x1e3/0x2d0 [ 1082.411263][T25367] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1082.416943][T25367] ? panic+0x860/0x860 [ 1082.421052][T25367] ? __lock_acquire+0x1ff0/0x1ff0 [ 1082.426171][T25367] should_fail+0x38a/0x4c0 [ 1082.430636][T25367] _copy_from_iter+0x243/0xe90 [ 1082.435464][T25367] ? copy_mc_pipe_to_iter+0x760/0x760 [ 1082.440872][T25367] ? tracing_gen_ctx_irq_test+0xf1/0x140 [ 1082.446551][T25367] ? perf_trace_buf_update+0xb9/0x220 [ 1082.451986][T25367] packet_sendmsg+0x35b9/0x5ea0 [ 1082.456887][T25367] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 1082.462643][T25367] ? aa_sk_perm+0xa30/0xa30 [ 1082.467215][T25367] ? __might_sleep+0xc0/0xc0 [ 1082.471877][T25367] ? aa_sk_perm+0x8fc/0xa30 [ 1082.476431][T25367] ? packet_getsockopt+0xed0/0xed0 [ 1082.481601][T25367] ? aa_sock_msg_perm+0x91/0x150 [ 1082.486576][T25367] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1082.491910][T25367] ? security_socket_sendmsg+0x7d/0xa0 [ 1082.497399][T25367] ? packet_getsockopt+0xed0/0xed0 [ 1082.502549][T25367] ____sys_sendmsg+0x59e/0x8f0 [ 1082.507365][T25367] ? __sys_sendmsg_sock+0x30/0x30 [ 1082.512437][T25367] ? import_iovec+0x77/0xa0 [ 1082.516979][T25367] ___sys_sendmsg+0x252/0x2e0 [ 1082.521700][T25367] ? __sys_sendmsg+0x260/0x260 [ 1082.526586][T25367] ? __fdget+0x191/0x220 [ 1082.530867][T25367] __se_sys_sendmsg+0x19a/0x260 [ 1082.535747][T25367] ? __x64_sys_sendmsg+0x80/0x80 [ 1082.540743][T25367] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1082.546764][T25367] ? lockdep_hardirqs_on+0x94/0x130 [ 1082.552006][T25367] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1082.558025][T25367] do_syscall_64+0x3b/0x80 [ 1082.562472][T25367] ? clear_bhb_loop+0x15/0x70 [ 1082.567185][T25367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1082.573109][T25367] RIP: 0033:0x7fa36bbd0969 [ 1082.577555][T25367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.597193][T25367] RSP: 002b:00007fa369a38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.605647][T25367] RAX: ffffffffffffffda RBX: 00007fa36bdf7fa0 RCX: 00007fa36bbd0969 [ 1082.613652][T25367] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1082.621695][T25367] RBP: 00007fa369a38090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.629698][T25367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.637712][T25367] R13: 0000000000000000 R14: 00007fa36bdf7fa0 R15: 00007ffdb1f83dc8 [ 1082.645746][T25367] [ 1082.716412][T25372] syz.1.7663[25372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1082.716564][T25372] syz.1.7663[25372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1082.858779][T25378] syz.3.7666[25378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1082.858920][T25378] syz.3.7666[25378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1082.909022][T25378] FAULT_INJECTION: forcing a failure. [ 1082.909022][T25378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.979450][T25378] CPU: 0 PID: 25378 Comm: syz.3.7666 Not tainted 5.15.180-syzkaller #0 [ 1082.987759][T25378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1082.997859][T25378] Call Trace: [ 1083.001149][T25378] [ 1083.004080][T25378] dump_stack_lvl+0x1e3/0x2d0 [ 1083.008771][T25378] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1083.014435][T25378] ? panic+0x860/0x860 [ 1083.018549][T25378] should_fail+0x38a/0x4c0 [ 1083.022977][T25378] _copy_from_user+0x2d/0x170 [ 1083.027659][T25378] __sys_bpf+0x1d5/0x670 [ 1083.031909][T25378] ? bpf_link_show_fdinfo+0x300/0x300 [ 1083.037296][T25378] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1083.043282][T25378] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1083.049261][T25378] ? lockdep_hardirqs_on+0x94/0x130 [ 1083.054725][T25378] __x64_sys_bpf+0x78/0x90 [ 1083.059152][T25378] do_syscall_64+0x3b/0x80 [ 1083.063575][T25378] ? clear_bhb_loop+0x15/0x70 [ 1083.068261][T25378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1083.074157][T25378] RIP: 0033:0x7f9919f14969 [ 1083.078574][T25378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.098183][T25378] RSP: 002b:00007f9917d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1083.106644][T25378] RAX: ffffffffffffffda RBX: 00007f991a13bfa0 RCX: 00007f9919f14969 [ 1083.114720][T25378] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 1083.122718][T25378] RBP: 00007f9917d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.130707][T25378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.138693][T25378] R13: 0000000000000000 R14: 00007f991a13bfa0 R15: 00007fff0a5dbcb8 [ 1083.146721][T25378] [ 1083.173573][T25375] netlink: 'syz.2.7664': attribute type 39 has an invalid length. [ 1083.478696][T25388] netlink: 'syz.5.7669': attribute type 10 has an invalid length. [ 1083.486919][T25388] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7669'. [ 1084.478909][T25414] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.7678'. [ 1085.012509][T25430] IPv6: : Disabled Multicast RS [ 1085.464507][T25448] netlink: 'syz.2.7688': attribute type 29 has an invalid length. [ 1085.522048][T25448] netlink: 'syz.2.7688': attribute type 29 has an invalid length. [ 1085.599025][T25448] netlink: 'syz.2.7688': attribute type 29 has an invalid length. [ 1085.868963][T25456] netlink: 'syz.6.7691': attribute type 3 has an invalid length. [ 1085.901812][T25456] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.7691'. [ 1088.394520][T25468] netlink: 'syz.6.7696': attribute type 10 has an invalid length. [ 1089.526226][T25492] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.7704'. [ 1089.732114][T25496] netlink: 'syz.5.7706': attribute type 21 has an invalid length. [ 1089.757889][T25496] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7706'. [ 1089.833177][T25496] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7706'. [ 1089.925408][T25501] netlink: 'syz.6.7707': attribute type 3 has an invalid length. [ 1090.083444][T25501] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.7707'. [ 1090.400632][T25510] netlink: 'syz.3.7719': attribute type 21 has an invalid length. [ 1090.426321][T25510] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7719'. [ 1090.500628][T25510] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7719'. [ 1090.786052][T25520] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.7711'. [ 1091.676028][T25541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7718'. [ 1091.913701][T25546] netlink: 'syz.5.7720': attribute type 3 has an invalid length. [ 1091.944986][T25546] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.7720'. [ 1093.235875][T25569] netlink: 'syz.5.7728': attribute type 4 has an invalid length. [ 1093.306654][T25569] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7728'. [ 1093.849722][T25589] netlink: 'syz.6.7735': attribute type 3 has an invalid length. [ 1094.184927][T25596] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1094.693729][T25609] netlink: 'syz.3.7744': attribute type 2 has an invalid length. [ 1094.766733][T25609] netlink: 'syz.3.7744': attribute type 8 has an invalid length. [ 1094.819919][T25609] __nla_validate_parse: 1 callbacks suppressed [ 1094.819943][T25609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7744'. [ 1095.611345][T25633] netlink: 'syz.5.7751': attribute type 3 has an invalid length. [ 1095.733619][T25633] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.7751'. [ 1097.136870][T25671] netlink: 'syz.6.7766': attribute type 3 has an invalid length. [ 1097.202553][T25671] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.7766'. [ 1097.691167][T25679] syz.3.7768[25679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1097.691272][T25679] syz.3.7768[25679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1097.854038][T25679] FAULT_INJECTION: forcing a failure. [ 1097.854038][T25679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.998415][T25690] syz.5.7770[25690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1097.998532][T25690] syz.5.7770[25690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1098.011581][T25679] CPU: 1 PID: 25679 Comm: syz.3.7768 Not tainted 5.15.180-syzkaller #0 [ 1098.031227][T25679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1098.041310][T25679] Call Trace: [ 1098.044613][T25679] [ 1098.047567][T25679] dump_stack_lvl+0x1e3/0x2d0 [ 1098.052292][T25679] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1098.057947][T25679] ? panic+0x860/0x860 [ 1098.062057][T25679] should_fail+0x38a/0x4c0 [ 1098.065026][T25689] netlink: 'syz.6.7771': attribute type 10 has an invalid length. [ 1098.066500][T25679] _copy_from_user+0x2d/0x170 [ 1098.078970][T25679] __sys_bpf+0x1d5/0x670 [ 1098.083242][T25679] ? bpf_link_show_fdinfo+0x300/0x300 [ 1098.088670][T25679] __x64_sys_bpf+0x78/0x90 [ 1098.093115][T25679] do_syscall_64+0x3b/0x80 [ 1098.097553][T25679] ? clear_bhb_loop+0x15/0x70 [ 1098.102261][T25679] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1098.108173][T25679] RIP: 0033:0x7f9919f14969 [ 1098.112614][T25679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.132285][T25679] RSP: 002b:00007f9917d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1098.140736][T25679] RAX: ffffffffffffffda RBX: 00007f991a13bfa0 RCX: 00007f9919f14969 [ 1098.148741][T25679] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 1098.153669][T25689] netlink: 210880 bytes leftover after parsing attributes in process `syz.6.7771'. [ 1098.156732][T25679] RBP: 00007f9917d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.173988][T25679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.181988][T25679] R13: 0000000000000000 R14: 00007f991a13bfa0 R15: 00007fff0a5dbcb8 [ 1098.190022][T25679] [ 1098.954947][T25705] netlink: 'syz.5.7777': attribute type 3 has an invalid length. [ 1099.035093][T25705] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7777'. [ 1100.896807][T25728] chnl_net:caif_netlink_parms(): no params data found [ 1100.935241][T25743] netlink: 'syz.6.7789': attribute type 3 has an invalid length. [ 1100.943018][T25743] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.7789'. [ 1101.674478][T25728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.690363][T25728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.800672][T25728] device bridge_slave_0 entered promiscuous mode [ 1101.911647][T25728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.955141][T25768] FAULT_INJECTION: forcing a failure. [ 1101.955141][T25768] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.993843][T25728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.066334][T25728] device bridge_slave_1 entered promiscuous mode [ 1102.195065][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 1103.093765][T25768] CPU: 0 PID: 25768 Comm: syz.2.7796 Not tainted 5.15.180-syzkaller #0 [ 1103.102072][T25768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1103.112153][T25768] Call Trace: [ 1103.115445][T25768] [ 1103.118389][T25768] dump_stack_lvl+0x1e3/0x2d0 [ 1103.123120][T25768] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1103.128776][T25768] ? panic+0x860/0x860 [ 1103.132880][T25768] ? __might_sleep+0xc0/0xc0 [ 1103.137497][T25768] ? netlink_insert+0xf11/0x1350 [ 1103.142473][T25768] should_fail+0x38a/0x4c0 [ 1103.146953][T25768] should_failslab+0x5/0x20 [ 1103.151473][T25768] slab_pre_alloc_hook+0x53/0xc0 [ 1103.156431][T25768] kmem_cache_alloc_node+0x49/0x2c0 [ 1103.161647][T25768] ? __alloc_skb+0xdd/0x590 [ 1103.166172][T25768] __alloc_skb+0xdd/0x590 [ 1103.170525][T25768] netlink_sendmsg+0x6f8/0xd60 [ 1103.175431][T25768] ? netlink_getsockopt+0x5b0/0x5b0 [ 1103.180657][T25768] ? aa_sock_msg_perm+0x91/0x150 [ 1103.185615][T25768] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1103.190918][T25768] ? security_socket_sendmsg+0x7d/0xa0 [ 1103.196395][T25768] ? netlink_getsockopt+0x5b0/0x5b0 [ 1103.201628][T25768] ____sys_sendmsg+0x59e/0x8f0 [ 1103.206568][T25768] ? __sys_sendmsg_sock+0x30/0x30 [ 1103.211627][T25768] ? import_iovec+0x77/0xa0 [ 1103.216156][T25768] ___sys_sendmsg+0x252/0x2e0 [ 1103.220871][T25768] ? __sys_sendmsg+0x260/0x260 [ 1103.225822][T25768] ? __fdget+0x191/0x220 [ 1103.230089][T25768] __se_sys_sendmsg+0x19a/0x260 [ 1103.234959][T25768] ? __x64_sys_sendmsg+0x80/0x80 [ 1103.239928][T25768] ? rcu_is_watching+0x11/0xa0 [ 1103.244717][T25768] ? syscall_enter_from_user_mode+0x14b/0x240 [ 1103.250807][T25768] do_syscall_64+0x3b/0x80 [ 1103.255238][T25768] ? clear_bhb_loop+0x15/0x70 [ 1103.259971][T25768] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1103.265895][T25768] RIP: 0033:0x7f516aa9b969 [ 1103.270327][T25768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.289946][T25768] RSP: 002b:00007f51688e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1103.298381][T25768] RAX: ffffffffffffffda RBX: 00007f516acc3080 RCX: 00007f516aa9b969 [ 1103.306365][T25768] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1103.314350][T25768] RBP: 00007f51688e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.322340][T25768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.330336][T25768] R13: 0000000000000000 R14: 00007f516acc3080 R15: 00007ffc3ddca868 [ 1103.338343][T25768] [ 1104.284221][T12363] Bluetooth: hci5: command 0x041b tx timeout [ 1104.562403][T25728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.864336][T25728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.442214][T18457] Bluetooth: hci5: command 0x040f tx timeout [ 1106.949372][T25728] team0: Port device team_slave_0 added [ 1107.976925][T25728] team0: Port device team_slave_1 added [ 1108.369478][ T9] ------------[ cut here ]------------ [ 1108.375562][ T9] no supported rates for sta (null) (0xffffffff, band 1) in rate_mask 0x0 with flags 0x0 [ 1108.386325][ T9] WARNING: CPU: 1 PID: 9 at net/mac80211/rate.c:376 __rate_control_send_low+0x653/0x890 [ 1108.396151][ T9] Modules linked in: [ 1108.400065][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.180-syzkaller #0 [ 1108.408181][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1108.418289][ T9] Workqueue: phy56 ieee80211_scan_work [ 1108.423831][ T9] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 1108.430097][ T9] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 80 b2 b8 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 6d 60 7d f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 1108.449763][ T9] RSP: 0018:ffffc90000ce7408 EFLAGS: 00010246 [ 1108.455902][ T9] RAX: 2b173e22e799c200 RBX: 0000000000000008 RCX: ffff88813ff90000 [ 1108.463933][ T9] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 1108.471928][ T9] RBP: ffff88807ce79ca8 R08: ffffffff8166728c R09: fffff5200019cdc1 [ 1108.479971][ T9] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1108.488003][ T9] R13: 0000000000000008 R14: 0000000000000000 R15: 00000000ffffffff [ 1108.496027][ T9] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1108.505006][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.511612][ T9] CR2: 0000555587784808 CR3: 0000000078976000 CR4: 00000000003506e0 [ 1108.519641][ T9] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1108.527754][ T9] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1108.535776][ T9] Call Trace: [ 1108.539068][ T9] [ 1108.542029][ T9] rate_control_send_low+0x1a8/0x770 [ 1108.547405][ T9] rate_control_get_rate+0x20a/0x5d0 [ 1108.552738][ T9] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 1108.558489][ T9] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 1108.564551][ T9] invoke_tx_handlers_late+0xb2/0x17f0 [ 1108.570050][ T9] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 1108.575929][ T9] ieee80211_tx+0x2df/0x460 [ 1108.580467][ T9] ? ieee80211_skb_resize+0x640/0x640 [ 1108.585912][ T9] ? ieee80211_set_qos_hdr+0x1ca/0x520 [ 1108.591414][ T9] ? ieee80211_xmit+0x355/0x470 [ 1108.596327][ T9] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 1108.602162][ T9] ieee80211_scan_state_send_probe+0x557/0x8f0 [ 1108.608400][ T9] ieee80211_scan_work+0x62b/0x1d00 [ 1108.613680][ T9] ? print_irqtrace_events+0x210/0x210 [ 1108.619160][ T9] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1108.625108][ T9] ? ieee80211_can_scan+0x200/0x200 [ 1108.630364][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 1108.635632][ T9] process_one_work+0x8a1/0x10c0 [ 1108.640614][ T9] ? worker_detach_from_pool+0x260/0x260 [ 1108.646312][ T9] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1108.651881][ T9] ? kthread_data+0x4e/0xc0 [ 1108.656455][ T9] ? wq_worker_running+0x97/0x170 [ 1108.661510][ T9] worker_thread+0xaca/0x1280 [ 1108.666292][ T9] kthread+0x3f6/0x4f0 [ 1108.670382][ T9] ? rcu_lock_release+0x20/0x20 [ 1108.675285][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1108.679896][ T9] ret_from_fork+0x1f/0x30 [ 1108.684397][ T9] [ 1108.687449][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1108.694830][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 5.15.180-syzkaller #0 [ 1108.702919][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1108.713093][ T9] Workqueue: phy56 ieee80211_scan_work [ 1108.718586][ T9] Call Trace: [ 1108.721879][ T9] [ 1108.724821][ T9] dump_stack_lvl+0x1e3/0x2d0 [ 1108.729619][ T9] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1108.735274][ T9] ? panic+0x860/0x860 [ 1108.739371][ T9] ? __rate_control_send_low+0x5b0/0x890 [ 1108.745027][ T9] ? __rate_control_send_low+0x5b0/0x890 [ 1108.750681][ T9] panic+0x318/0x860 [ 1108.754605][ T9] ? __warn+0x16a/0x300 [ 1108.758783][ T9] ? fb_is_primary_device+0xd0/0xd0 [ 1108.764017][ T9] ? ret_from_fork+0x1f/0x30 [ 1108.768633][ T9] ? __rate_control_send_low+0x653/0x890 [ 1108.774294][ T9] __warn+0x2b2/0x300 [ 1108.778301][ T9] ? __rate_control_send_low+0x653/0x890 [ 1108.783957][ T9] report_bug+0x1b7/0x2e0 [ 1108.788314][ T9] handle_bug+0x3d/0x70 [ 1108.792487][ T9] exc_invalid_op+0x16/0x40 [ 1108.797013][ T9] asm_exc_invalid_op+0x16/0x20 [ 1108.801888][ T9] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 1108.808160][ T9] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 80 b2 b8 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 6d 60 7d f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 1108.827783][ T9] RSP: 0018:ffffc90000ce7408 EFLAGS: 00010246 [ 1108.833875][ T9] RAX: 2b173e22e799c200 RBX: 0000000000000008 RCX: ffff88813ff90000 [ 1108.841872][ T9] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 1108.849865][ T9] RBP: ffff88807ce79ca8 R08: ffffffff8166728c R09: fffff5200019cdc1 [ 1108.857855][ T9] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1108.865843][ T9] R13: 0000000000000008 R14: 0000000000000000 R15: 00000000ffffffff [ 1108.873842][ T9] ? __wake_up_klogd+0xcc/0x100 [ 1108.878727][ T9] ? __rate_control_send_low+0x653/0x890 [ 1108.884403][ T9] rate_control_send_low+0x1a8/0x770 [ 1108.889719][ T9] rate_control_get_rate+0x20a/0x5d0 [ 1108.895041][ T9] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 1108.900722][ T9] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 1108.906749][ T9] invoke_tx_handlers_late+0xb2/0x17f0 [ 1108.912250][ T9] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 1108.918095][ T9] ieee80211_tx+0x2df/0x460 [ 1108.922628][ T9] ? ieee80211_skb_resize+0x640/0x640 [ 1108.928040][ T9] ? ieee80211_set_qos_hdr+0x1ca/0x520 [ 1108.933528][ T9] ? ieee80211_xmit+0x355/0x470 [ 1108.938408][ T9] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 1108.944243][ T9] ieee80211_scan_state_send_probe+0x557/0x8f0 [ 1108.950469][ T9] ieee80211_scan_work+0x62b/0x1d00 [ 1108.955719][ T9] ? print_irqtrace_events+0x210/0x210 [ 1108.961200][ T9] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1108.967132][ T9] ? ieee80211_can_scan+0x200/0x200 [ 1108.972350][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 1108.977581][ T9] process_one_work+0x8a1/0x10c0 [ 1108.982560][ T9] ? worker_detach_from_pool+0x260/0x260 [ 1108.988220][ T9] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1108.993787][ T9] ? kthread_data+0x4e/0xc0 [ 1108.998314][ T9] ? wq_worker_running+0x97/0x170 [ 1109.003366][ T9] worker_thread+0xaca/0x1280 [ 1109.008103][ T9] kthread+0x3f6/0x4f0 [ 1109.012188][ T9] ? rcu_lock_release+0x20/0x20 [ 1109.017056][ T9] ? kthread_blkcg+0xd0/0xd0 [ 1109.021666][ T9] ret_from_fork+0x1f/0x30 [ 1109.026123][ T9] [ 1109.029365][ T9] Kernel Offset: disabled [ 1109.033942][ T9] Rebooting in 86400 seconds..